CWE-15: External Control of System or Configuration Setting
One or more system settings or configuration elements can be externally controlled by a user.
A kind of CWE-642 External Control of Critical State Data.
From the CWE List. © The MITRE Corporation.
Newest
- ibm mq IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability 8.8 High
- docker sandboxes Docker Sandboxes host Git executes repository-controlled programs 7.1 High
- azuracast AzuraCast through 0.23.8 Config Injection via frontend_config.custom_config 8.7 High
- qnap systems inc. qurouter Inadequate Steps to Confirm Vulnerability in QuRouter 4.6 Medium
- n8n-io n8n n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log Operation 7.7 High
- microsoft powertoys Microsoft PowerToys Elevation of Privilege Vulnerability 7.3 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Setup Files Cleanup Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 more Windows Update Stack Tampering Vulnerability 5.5 Medium
- devolutions server, mariadb +1 more MariaDB: environment injection via wsrep bootstrap in the mariadb.service file 8.4 High
- eclipse ditto ditto explorer ui Unvalidated environments URL allows OAuth authorization code + PKCE verifier theft and account... 7.1 High
- brocade fabric os, broadcom fabric operating system +1 more A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI)... 7.3 High
- legcord Legcord 1.1.0 through 1.3.0 Chromium Switch Injection via settings.setConfig 9.1 Critical
- the wikimedia foundation mediawiki centralauth extension MergeAccount PHP object injection via session-key substitution 7.2 High
- netbox-community devicetype-library NetBox Device Type Library: PR-controllable upstream clone URL (NETBOX_DT_LIBRARY_URL) enables SSRF and test-data substitution from CI 5.3 Medium
- mistralai mistral-vibe An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command... 10.0 Critical
- autodesk fusion Man-in-the-Middle (MITM) Vulnerability in Autodesk Fusion Desktop 8.6 High
- google cloud gemini cli Arbitrary Code Execution in Gemini CLI via Untrusted Local .env Files Overriding GEMINI_CLI_HOME 7.7 High
- openai codex cli, codex desktop, codex desktop (microsoft store package) +2 more OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS... 7.3 High
- openai codex desktop, codex desktop (microsoft store package) +1 more OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree... 9.8 Critical
- ibm db2 mirror for i IBM Db2 Mirror for i is affected by multiple vulnerabilities 8.3 High
- eclipse foundation theia, the eclipse foundation eclipse theia +1 more In Eclipse Theia versions up to and including 1.69.0, opening a folder starts source control... 8.4 High
- flarum framework, sangoma freepbx +1 more FreePBX: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup 8.6 High
- hcl software icontrol HCL iControl is affected by multiple security vulnerabilities. 5.1 Medium
- lissy93 dashy Dash: Users can write to config despire permissions (OIDC tested) 8.2 High
- sap se crm (webclient ui) Security misconfiguration in SAP CRM (WebClient UI) 4.1 Medium
- q00 ouroboros Ouroboros: Untrusted project .env can still reach RCE via omitted execution-routing keys (Incomplete fix of CVE-2026-47211) 8.4 High
- netgear cbr750, cbr750 firmware, ex6120 +67 more +69 more Certain NETGEAR devices allow administrators to tamper with system 4.3 Medium
- haxtheweb haxcms-nodejs, haxcms-php +1 more Authenticated Remote Code Execution via File Overwrite 9.4 Critical
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +7 more +9 more Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection 8.8 High
- dräger infinity delta, draeger delta xl firmware, infinity delta firmware +3 more +5 more Dräger Infinity Delta/Kappa Patient Monitor DoS via Malformed Network Packet 7.1 High
- apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +4 more +6 more Apache CXF: Incomplete fix for CVE-2025-48913 (Untrusted JMS configuration can lead to RCE) 7.5 High
- traefik, red hat openshift dev spaces 3.29, openshift gitops +2 more Traefik: Gateway API TraefikService backend accepts rest@internal, allowing unauthorized exposure of the REST provider despite providers.rest.insecure=false 6.4 Medium
- hahwul dalfox Dalfox: Unauthenticated Remote Code Execution via `found-action` in Dalfox Server Mode 10.0 Critical
- pi-hole Pi-hole: Local privilege escalation via config-controlled path in root-executed service hooks 8.8 High
- ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 more An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1... 7.2 High
- openclaw OpenClaw 2026.4.5 through 2026.4.19 - MiniMax API Host Override via Workspace dotenv 4.1 Medium
- rclone, red hat openshift api for data protection, advanced cluster management for kubernetes 2 +2 more Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution 9.2 Critical
- openclaw OpenClaw < 2026.4.9 - Environment Variable Injection via Workspace .env File 7.0 High
- palo alto networks cortex xdr agent Cortex XDR Agent: Local Administrator can disable the agent on Windows 4.0 Medium
- acronis true image, true image oem +1 more Local privilege escalation due to improper handling of environment variables. The following... 7.8 High
- vmware spring cloud gateway SSL bundle configuration silently bypassed in Spring Cloud Gateway 7.5 High
- tp-link systems inc. ax53 v1.0, tp-link archer ax53 firmware +1 more Arbitrary File Reading Vulnerability in dnsmasq Module in TP-Link AX53 6.8 Medium
- tp-link systems inc. ax53 v1.0, tp-link archer ax53 firmware +1 more Arbitrary File Reading Vulnerability in OpenVPN Module in TP-Link AX53 6.8 Medium
- openclaw OpenClaw < 2026.3.24 - Environment Variable Injection via Workspace Config in CLI Backend 8.5 High
- openclaw OpenClaw < 2026.3.31 - Environment Variable Override of Plugin Trust Root 8.5 High
- openclaw OpenClaw < 2026.3.31 - Arbitrary Hook Code Execution via OPENCLAW_BUNDLED_HOOKS_DIR Environment Variable Override 8.5 High
- openclaw OpenClaw < 2026.3.28 - Environment Variable Injection via CWD .env File 8.5 High
- openclaw OpenClaw < 2026.3.22 - Environment Variable Override Bypass via Inconsistent Sanitization 7.7 High
-
openclawnpm OpenClaw's `system.run` env override filtering allowed dangerous helper-command pivots 6.3 Medium - apich-organization rssn RSSN has Arbitrary Code Execution via Unvalidated JIT Instruction Generation in C-FFI Interface 9.4 Critical
- Show olderLoading…