Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1327: Binding to an Unrestricted IP Address

Base Incomplete

The product assigns the address 0.0.0.0 for a database server, a cloud service/instance, or any computing resource that communicates remotely.

How to prevent it (2 mitigations)

  1. System Configuration

    Assign IP addresses that are not 0.0.0.0.

  2. System Configuration

    Unwanted connections to the configured server may be denied through a firewall or other packet filtering measures.

Source: MITRE CWE-1327

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-100868

    Penpot before 2.18.0 Unauthenticated WebSocket Access via MCP Bridge

    Penpot before 2.18.0 binds the MCP server plugin WebSocket bridge to all network interfaces without authentication in single-user mode. Unauthenticated attackers on adjacent networks can connect to the WebSocket port to impersonate the Penpot browser plugin, …

    penpot penpot @penpot/mcp
  • Medium 4.3
    CVE-2026-16713

    IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution

    IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address.

    IBM Documentation Offline
  • Medium 6.5
    CVE-2026-28395

    OpenClaw 2026.1.14-1 < 2026.2.12 - Unintended Public Binding of Chrome Extension Relay via Wildcard cdpUrl

    OpenClaw version 2026.1.14-1 prior to 2026.2.12 contains an improper network binding vulnerability in the Chrome extension (must be installed and enabled) relay server that treats wildcard hosts as loopback addresses, allowing the relay HTTP/WS server to bind…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-21528

    Azure IoT Explorer Information Disclosure Vulnerability

    Binding to an unrestricted ip address in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.

    Microsoft Azure IoT Explorer
  • Medium 6.8
    CVE-2025-11538

    Keycloak-server: debug default bind address

    A vulnerability exists in Keycloak's server distribution where enabling debug mode (--debug <port>) insecurely defaults to binding the Java Debug Wire Protocol (JDWP) port to all network interfaces (0.0.0.0). This exposes the debug port to the local network, …

    Red Hat Keycloak Red Hat build of Keycloak 26.4 Keycloak Maven
  • Medium 5.3
    CVE-2024-47176 Public exploit EPSS 51%

    cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source

    CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. `cups-browsed` binds to `INADDR_ANY:631`, causing it to trus…

    OpenPrinting cups-browsed cups-filters cups-filters Debian Ubuntu
  • Medium 5.3
    CVE-2024-36105

    dbt allows Binding to an Unrestricted IP Address via socketsocket

    dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications. Prior to versions 1.6.15, 1.7.15, and 1.8.1, Binding to `INADDR_ANY (0.0.0.0)` or `IN6ADDR_ANY (::)` exposes an applica…

    dbt-labs dbt-core dbt-core PyPI
  • Medium 5.9
    CVE-2023-5398

    Server receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service. S…

    Honeywell Experion Server ICS / OT
  • Medium 4.3
    CVE-2023-41742

    Excessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Age…

    Acronis Acronis Cyber Protect 15 Acronis Agent