Skip to content
Noroxi

CWE-1327 · 28 records

Binding to an Unrestricted IP Address

CVEs in this class

28 records

  • CVE-2024-47176
    60This week

    cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source

    MediumCVSS 5.3WeaponizedEPSS 50%

    openprinting · cups-browsedSep 26, 2024

  • CVE-2026-82456
    41Plan

    argocd-mcp 0.8.0 Authentication Bypass via Unauthenticated HTTP

    CriticalCVSS 10.0Proof of conceptEPSS 2%

    argoproj-labs · argocd-mcpAug 29, 2026

  • CVE-2026-20212
    39Monitor

    Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    cisco · cisco nx-os softwareSep 2, 2026

  • CVE-2026-24015
    39Monitor

    Apache IoTDB: Insecure Default Configuration Vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    apache · iotdbMar 9, 2026

  • CVE-2026-92559
    39Monitor

    IBM App Connect Enterprise is vulnerable to a credential exposure

    CriticalCVSS 9.8No exploitEPSS 0%

    ibm · app connect enterpriseOct 20, 2026

  • CVE-2026-112346
    37Monitor

    OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE

    CriticalCVSS 9.3No exploitEPSS 1%

    openhands · openhands software agent sdkOct 26, 2026

  • CVE-2025-61934
    37Monitor

    AutomationDirect Productivity Suite Binding to an Unrestricted IP Address CWE-1327

    CriticalCVSS 9.3No exploitEPSS 0%

    automationdirect · productivity suiteOct 23, 2025

  • CVE-2026-0481
    36Monitor

    Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized ch

    CriticalCVSS 9.2No exploitEPSS 0%

    amd · amd instinct™ mi210May 15, 2026

  • CVE-2026-59177
    35Monitor

    ESPHome Device Builder allows unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces

    HighCVSS 8.8Proof of conceptEPSS 1%

    esphome · device-builderOct 28, 2026

  • CVE-2026-42503
    35Monitor

    Accidental binding to INADDR_ANY might lead to RCE in golang.org/x/tools/gopls

    HighCVSS 8.8No exploitEPSS 0%

    golang · goplsMay 6, 2026

  • CVE-2026-75021
    32Monitor

    fastify-cli vulnerable to remote code execution via ignored explicit Inspector bind address

    HighCVSS 8.1No exploitEPSS 0%

    fastify-cli · fastify-cliSep 8, 2026

  • CVE-2026-47873
    32Monitor

    Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces

    HighCVSS 8.0No exploitEPSS 0%

    broadcom · spring toolsJul 30, 2026

  • CVE-2023-1968
    31Monitor

    Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address.

    HighCVSS 7.5No exploitEPSS 1%

    illumina · iscan firmwareApr 28, 2023

  • CVE-2023-41742
    30Monitor

    Excessive attack surface due to binding to an unrestricted IP address.

    HighCVSS 7.5No exploitEPSS 0%

    acronis · agentAug 31, 2023

  • CVE-2026-119249
    30Monitor

    A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found in WiFiman Desktop to

    HighCVSS 7.5No exploitEPSS 0%

    ubiquiti inc · wifiman desktop for macosOct 29, 2026

  • CVE-2025-55322
    29Monitor

    OmniParser Remote Code Execution Vulnerability

    HighCVSS 7.3No exploitEPSS 0%

    microsoft · omniparserSep 24, 2025

  • CVE-2026-108760
    28Monitor

    LlamaFarm through 0.0.34 Unauthenticated API Exposed on All Interfaces

    HighCVSS 7.2No exploitEPSS 0%

    llama-farm · llamafarmOct 11, 2026

  • CVE-2025-11538
    27Monitor

    Keycloak-server: debug default bind address

    MediumCVSS 6.8No exploitEPSS 0%

    keycloak · keycloakNov 13, 2025

  • CVE-2026-21528
    26Monitor

    Azure IoT Explorer Information Disclosure Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    microsoft · azure iot explorerFeb 10, 2026

  • CVE-2026-28395
    25Monitor

    OpenClaw 2026.1.14-1 < 2026.2.12 - Unintended Public Binding of Chrome Extension Relay via Wildcard cdpUrl

    MediumCVSS 6.3No exploitEPSS 0%

    openclaw · openclawMar 5, 2026

  • CVE-2023-5398
    23Monitor

    Server receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service.

    MediumCVSS 5.9No exploitEPSS 0%

    honeywell · experion serverApr 17, 2024

  • CVE-2024-36105
    21Monitor

    dbt allows Binding to an Unrestricted IP Address via socketsocket

    MediumCVSS 5.3No exploitEPSS 0%

    dbt-labs · dbt-coreMay 27, 2024

  • CVE-2026-100868
    21Monitor

    Penpot before 2.18.0 Unauthenticated WebSocket Access via MCP Bridge

    MediumCVSS 5.3No exploitEPSS 0%

    penpot · penpotSep 27, 2026

  • CVE-2026-16713
    21Monitor

    IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution

    MediumCVSS 5.3No exploitEPSS 0%

    ibm · documentation offlineAug 13, 2026

  • CVE-2024-49384
    17Monitor

    Excessive attack surface in acep-collector service due to binding to an unrestricted IP address.

    MediumCVSS 4.3No exploitEPSS 0%

    acronis · cyber protectOct 15, 2024

All vulnerability classes