Skip to content
OpenAdvisories

Weakness (CWE)

CWE-489: Active Debug Code

Base Draft

The product is released with debugging code still enabled or active.

How to prevent it (1 mitigation)

  1. Build and Compilation, Distribution

    Remove debug code before deploying the application.

Source: MITRE CWE-489

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.0
    CVE-2026-65893 Public exploit

    Arbitrary Code Execution Vulnerability in CP PLUS EZ-P21 IP Camera

    This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with physical access could exploit this vulnerability by placing arbitrary code on removable media and triggering their execution throu…

    CP-Plus EZ-P21 IP Camera
  • Medium 5.3
    CVE-2026-32662 Public exploit

    Gardyn Cloud API Active Debug Code

    Development and test API endpoints are present that mirror production functionality.

    Gardyn Cloud API
  • Critical 9.8
    CVE-2024-9644 Public exploit

    Four-Faith F3x36 bapply.cgi Auth Bypass

    The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to an authentication bypass vulnerability in the administrative web server. Authentication is not enforced on some administrative functionality when using the "bapply.cgi" endpoint instead of the…

    Four-Faith F3x36
  • Medium 6.7
    CVE-2021-3972 Public exploit

    A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS …

    Lenovo Notebook BIOS
  • Unscored —
    CVE-2017-5259 Public exploit EPSS 33%

    In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root-privilege administration web…

    Cambium Networks cnPilot