CWE-527 · 4 records

Exposure of Version-Control Repository to an Unauthorized Control Sphere

CVEs in this class

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
36Monitor	CVE-2026-84149No exploit	Information Disclosure Vulnerability in Manacle Technologies ERP Systemmanacle technologies · multi-tenant erp system · CWE-527 Pre-auth	Critical9.2	—	0.5%	Sep 1, 2026
34Monitor	CVE-2026-109326No exploit	Grav before 2.1.7 Information Disclosure via Nested .git Directoriesgetgrav · grav · CWE-527 Pre-auth	High8.7	—	0.3%	Oct 12, 2026
32Monitor	CVE-2021-21423Proof of concept	Exposure of Version-Control Repository to an Unauthorized Control Sphere in projenprojen project · projen · CWE-527	High8.1	—	1.3%	Apr 6, 2021
26Monitor	CVE-2022-20931No exploit	Cisco Touch 10 Device Downgrade Attack Vulnerabilitycisco · telepresence collaboration endpoint · CWE-527 Pre-auth	Medium6.5	—	0.2%	Nov 15, 2024

CVE-2026-84149
36Monitor
Information Disclosure Vulnerability in Manacle Technologies ERP System
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
manacle technologies · multi-tenant erp systemSep 1, 2026
CVE-2026-109326
34Monitor
Grav before 2.1.7 Information Disclosure via Nested .git Directories
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
getgrav · gravOct 12, 2026
CVE-2021-21423
32Monitor
Exposure of Version-Control Repository to an Unauthorized Control Sphere in projen
HighCVSS 8.1Proof of conceptEPSS 1%
projen project · projenApr 6, 2021
CVE-2022-20931
26Monitor
Cisco Touch 10 Device Downgrade Attack Vulnerability
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
cisco · telepresence collaboration endpointNov 15, 2024