CWE-1108 · 3 records
Excessive Reliance on Global Variables
CVEs in this class
3 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
37Monitor | CVE-2024-45337Proof of concept | Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/cryptogolang.org/x/crypto · golang.org/x/crypto/ssh · CWE-1108 | Critical9.1 | — | 3.1% | Dec 11, 2024 |
36Monitor | CVE-2026-32841No exploit | Edimax GS-5008PL <= 1.00.54 Global Authentication State Across All Clientsedimax · gs-5008pl firmware · CWE-1108 | Critical9.2 | — | 0.6% | Mar 17, 2026 |
30Monitor | CVE-2022-2642No exploit | Horner Automation’s RCC 972 firmware version 15.40 contains global variables.hornerautomation · rcc972 firmware · CWE-1108 | High7.5 | — | 0.6% | Dec 2, 2022 |
- CVE-2024-4533737Monitor
Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto
CriticalCVSS 9.1Proof of conceptEPSS 3%golang.org/x/crypto · golang.org/x/crypto/sshDec 11, 2024
- CVE-2026-3284136Monitor
Edimax GS-5008PL <= 1.00.54 Global Authentication State Across All Clients
CriticalCVSS 9.2No exploitEPSS 0%edimax · gs-5008pl firmwareMar 17, 2026
- CVE-2022-264230Monitor
Horner Automation’s RCC 972 firmware version 15.40 contains global variables.
HighCVSS 7.5No exploitEPSS 0%hornerautomation · rcc972 firmwareDec 2, 2022