CWE-520 · 5 records

.NET Misconfiguration: Use of Impersonation

CVEs in this class

5 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2019-25608No exploit	Iperius Backup 6.1.0 Privilege Escalation via Backup Jobiperius · iperius backup · CWE-520 RCE Local privilege escalation	High8.6	—	0.1%	Mar 22, 2026
32Monitor	CVE-2026-13444No exploit	Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently autlangflow · langflow · CWE-520 RCE Path traversal	High8.1	—	0.4%	Jul 30, 2026
30Monitor	CVE-2024-46943No exploit	An issue was discovered in OpenDaylight Authentication, Authorization and Accounting (AAA) through 0.19.3.opendaylight · authentication\, authorization and accounting · CWE-520 Pre-auth	High7.5	—	0.6%	Sep 15, 2024
29Monitor	CVE-2026-2450No exploit	.NET misconfiguration: use of impersonation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a Privileupkeeper solutions · upkeeper instant privilege access · CWE-520	High7.4	—	0.3%	Apr 14, 2026
28Monitor	CVE-2026-13442No exploit	Langflow is affected by NET Misconfiguration: Use of Impersonation due to multiple unauthenticated and insufficiently authorized API endpointslangflow · langflow · CWE-520	High7.1	—	0.3%	Jul 28, 2026

CVE-2019-25608
34Monitor
Iperius Backup 6.1.0 Privilege Escalation via Backup Job
HighCVSS 8.6No exploitEPSS 0%
- RCE
- Local privilege escalation
iperius · iperius backupMar 22, 2026
CVE-2026-13444
32Monitor
Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently aut
HighCVSS 8.1No exploitEPSS 0%
- RCE
- Path traversal
langflow · langflowJul 30, 2026
CVE-2024-46943
30Monitor
An issue was discovered in OpenDaylight Authentication, Authorization and Accounting (AAA) through 0.19.3.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
opendaylight · authentication\, authorization and accountingSep 15, 2024
CVE-2026-2450
29Monitor
.NET misconfiguration: use of impersonation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a Privile
HighCVSS 7.4No exploitEPSS 0%
upkeeper solutions · upkeeper instant privilege accessApr 14, 2026
CVE-2026-13442
28Monitor
Langflow is affected by NET Misconfiguration: Use of Impersonation due to multiple unauthenticated and insufficiently authorized API endpoints
HighCVSS 7.1No exploitEPSS 0%
langflow · langflowJul 28, 2026