Skip to content
Noroxi

CWE-350 · 28 records

Reliance on Reverse DNS Resolution for a Security-Critical Action

CVEs in this class

28 records

  • CVE-2021-22884
    41Plan

    Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to DNS rebinding attacks as the whitelist includes “localhost6”.

    HighCVSS 7.5No exploitEPSS 36%

    nodejs · node.jsMar 3, 2021

  • CVE-2026-1490
    39Monitor

    Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.71 - Authorization Bypass via Reverse DNS (PTR record) Spoofing to Unauthenticated Arbitrary Plugin Insta

    CriticalCVSS 9.8No exploitEPSS 1%

    cleantalk · spam protection, honeypot, anti-spam by cleantalkFeb 15, 2026

  • CVE-2018-7160
    38Monitor

    The Node.js inspector, in 6.x and later is vulnerable to a DNS rebinding attack which could be exploited to perform remote code execution.

    HighCVSS 8.8No exploitEPSS 9%

    nodejs · node.jsMay 17, 2018

  • CVE-2026-61568
    38Monitor

    @zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport

    CriticalCVSS 9.6No exploitEPSS 0%

    zereight · gitlab-mcpSep 15, 2026

  • CVE-2021-34561
    35Monitor

    A vulnerability in WirelessHART-Gateway <= 3.0.8 allows to bypass any IP or firewall based access restrictions through DNS rebinding

    HighCVSS 8.8No exploitEPSS 0%

    pepperl-fuchs · wha-gw-f2d2-0-as-z2-eth firmwareAug 31, 2021

  • CVE-2023-52235
    35Monitor

    SpaceX Starlink Wi-Fi router GEN 2 before 2023.53.0 and Starlink Dish before 07dd2798-ff15-4722-a9ee-de28928aed34 allow CSRF (e.g., for a re

    HighCVSS 8.8Proof of conceptEPSS 0%

    Apr 5, 2024

  • CVE-2026-56709
    34Monitor

    Grav before 3.9.2 Host Header Injection via sendInvitationEmail

    HighCVSS 8.7No exploitEPSS 0%

    getgrav · gravAug 25, 2026

  • CVE-2026-55526
    34Monitor

    PraisonAI: SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`)

    HighCVSS 8.5No exploitEPSS 0%

    mervinpraison · praisonaiAug 25, 2026

  • CVE-2017-0902
    33Monitor

    RubyGems version 2.6.12 and earlier is vulnerable to a DNS hijacking vulnerability that allows a MITM attacker to force the RubyGems client

    HighCVSS 8.1No exploitEPSS 4%

    rubygems · rubygemsAug 31, 2017

  • CVE-2025-8036
    32Monitor

    DNS rebinding circumvents CORS

    HighCVSS 8.1No exploitEPSS 0%

    mozilla · firefoxJul 22, 2025

  • CVE-2026-97875
    32Monitor

    DNS rebinding vulnerability in rojo serve HTTP API

    HighCVSS 8.1No exploitEPSS 0%

    rojo-rbx · rojoSep 25, 2026

  • CVE-2026-55391
    30Monitor

    datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding

    HighCVSS 7.5No exploitEPSS 0%

    koxudaxi · datamodel-code-generatorJul 28, 2026

  • CVE-2026-33002
    30Monitor

    Jenkins 2.442 through 2.554 (both inclusive), LTS 2.426.3 through LTS 2.541.2 (both inclusive) performs origin validation of requests made t

    HighCVSS 7.5No exploitEPSS 0%

    jenkins · jenkinsMar 18, 2026

  • CVE-2026-28271
    26Monitor

    Kiteworks Core is vulnerable to Server-Side Request Forgery (SSRF)

    MediumCVSS 6.5No exploitEPSS 0%

    accellion · kiteworksFeb 27, 2026

  • CVE-2025-59956
    26Monitor

    AgentAPI exposed user chat history via a DNS rebinding attack

    MediumCVSS 6.5No exploitEPSS 0%

    coder · agentapiSep 30, 2025

  • CVE-2026-53708
    26Monitor

    ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)

    MediumCVSS 6.6No exploitEPSS 0%

    ibm · mcp-context-forgeSep 14, 2026

  • CVE-2024-42364
    26Monitor

    homepage DNS rebinding vulnerability (GHSL-2024-096)

    MediumCVSS 6.5No exploitEPSS 0%

    gethomepage · homepageAug 23, 2024

  • CVE-2025-61430
    26Monitor

    Improper handling of DNS over TCP in Simple DNS Plus v9 allows a remote attacker with querying access to the DNS server to cause the server

    MediumCVSS 6.5No exploitEPSS 0%

    Oct 24, 2025

  • CVE-2026-36604
    26Monitor

    Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 does not validate the HTTP Host header, enabling DNS rebinding attacks.

    MediumCVSS 6.5No exploitEPSS 0%

    Jun 3, 2026

  • CVE-2026-61743
    25Monitor

    Chartbrew: DNS Rebinding SSRF Bypass in Outbound Request Validation

    MediumCVSS 6.3No exploitEPSS 0%

    chartbrew · chartbrewSep 21, 2026

  • CVE-2020-11091
    23Monitor

    Weave Net clusters susceptible to MitM attacks via IPv6 rogue router advertisements

    MediumCVSS 5.8No exploitEPSS 0%

    weave · weave netJun 3, 2020

  • CVE-2026-75514
    23Monitor

    BunkerWeb: rDNS bypass via missing forward-confirmation (FCrDNS) in blacklist, greylist, and antibot

    MediumCVSS 5.9No exploitEPSS 0%

    bunkerity · bunkerwebAug 20, 2026

  • CVE-2023-32020
    22Monitor

    Windows DNS Spoofing Vulnerability

    MediumCVSS 5.6No exploitEPSS 0%

    microsoft · windows server 2008Jun 13, 2023

  • CVE-2022-22364
    21Monitor

    IBM Cognos Controller security bypass

    MediumCVSS 5.3No exploitEPSS 0%

    ibm · cognos controllerMay 3, 2024

  • CVE-2024-53275
    21Monitor

    GHSL-2024-091: DNS rebinding attack in home-gallery

    MediumCVSS 5.3No exploitEPSS 0%

    xemle · home-galleryDec 23, 2024

All vulnerability classes