CWE-1357 · 9 records

Reliance on Insufficiently Trustworthy Component

CVEs in this class

9 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2024-3313No exploit	SUBNET PowerSYSTEM Server and Substation Server Reliance on Insufficiently Trustworthy Componentsubnet solutions · powersystem server · CWE-1357	High8.6	—	0.2%	Apr 9, 2024
34Monitor	CVE-2024-28042No exploit	SUBNET PowerSYSTEM Center Reliance on Insufficiently Trustworthy Componentsubnet · powersystem center · CWE-1357	High8.6	—	0.2%	May 15, 2024
34Monitor	CVE-2024-26024No exploit	SUBNET Substation Server Reliance on Insufficiently Trustworthy Componentsubnet · substation server · CWE-1357	High8.6	—	0.2%	May 28, 2024
32Monitor	CVE-2026-47619No exploit	NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system failure.nvidia · dynamo · CWE-1357 Pre-auth	High8.1	—	0.7%	Aug 4, 2026
32Monitor	CVE-2026-85469No exploit	Quay-builder-qemu: quay-builder-qemu: release workflow uses third-party action pinned to mutable @master with registry credentials in scopered hat · red hat quay 3 · CWE-1357 RCE	High8.0	—	0.5%	Sep 16, 2026
30Monitor	CVE-2026-75569No exploit	Mce-operator-bundle: all github actions pinned by mutable tag, not commit shared hat · multicluster engine for kubernetes 2.1 · CWE-1357 RCE	High7.7	—	0.5%	Aug 19, 2026
28Monitor	CVE-2025-32800No exploit	Conda-build vulnerable to supply chain attack vector due to pyproject.toml referring to dependencies not present in PyPIanaconda · conda-build · CWE-1357 Pre-auth	High7.2	—	0.6%	Jun 16, 2025
26Monitor	CVE-2026-67275No exploit	Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability.dell · powerprotect one · CWE-1357 Pre-auth	Medium6.5	—	0.3%	Aug 26, 2026
17Monitor	CVE-2026-66783No exploit	Submariner-operator: release workflow consumes same-org composite action via mutable @devel branch refred hat · red hat advanced cluster management for kubernetes 2.17 · CWE-1357 RCE	Medium4.4	—	0.3%	Aug 18, 2026

CVE-2024-3313
34Monitor
SUBNET PowerSYSTEM Server and Substation Server Reliance on Insufficiently Trustworthy Component
HighCVSS 8.6No exploitEPSS 0%
subnet solutions · powersystem serverApr 9, 2024
CVE-2024-28042
34Monitor
SUBNET PowerSYSTEM Center Reliance on Insufficiently Trustworthy Component
HighCVSS 8.6No exploitEPSS 0%
subnet · powersystem centerMay 15, 2024
CVE-2024-26024
34Monitor
SUBNET Substation Server Reliance on Insufficiently Trustworthy Component
HighCVSS 8.6No exploitEPSS 0%
subnet · substation serverMay 28, 2024
CVE-2026-47619
32Monitor
NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system failure.
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
nvidia · dynamoAug 4, 2026
CVE-2026-85469
32Monitor
Quay-builder-qemu: quay-builder-qemu: release workflow uses third-party action pinned to mutable @master with registry credentials in scope
HighCVSS 8.0No exploitEPSS 0%
- RCE
red hat · red hat quay 3Sep 16, 2026
CVE-2026-75569
30Monitor
Mce-operator-bundle: all github actions pinned by mutable tag, not commit sha
HighCVSS 7.7No exploitEPSS 0%
- RCE
red hat · multicluster engine for kubernetes 2.1Aug 19, 2026
CVE-2025-32800
28Monitor
Conda-build vulnerable to supply chain attack vector due to pyproject.toml referring to dependencies not present in PyPI
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
anaconda · conda-buildJun 16, 2025
CVE-2026-67275
26Monitor
Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability.
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
dell · powerprotect oneAug 26, 2026
CVE-2026-66783
17Monitor
Submariner-operator: release workflow consumes same-org composite action via mutable @devel branch ref
MediumCVSS 4.4No exploitEPSS 0%
- RCE
red hat · red hat advanced cluster management for kubernetes 2.17Aug 18, 2026

All vulnerability classes