Skip to content
OpenAdvisories

Weakness (CWE)

CWE-501: Trust Boundary Violation

Class Draft

The product mixes trusted and untrusted data in the same data structure or structured message.

Source: MITRE CWE-501

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-44091

    Creation of a new configuration by posting a malicious ID to MQTT

    An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss.

    Phoenix Contact CHARX SEC-3150 CHARX SEC-3050 CHARX SEC-3100 ICS / OT
  • Critical 9.1
    CVE-2026-48746

    vLLM: OpenAI auth bypass

    vLLM is an inference and serving engine for large language models (LLMs). From 0.3.0 until 0.22.0, a vulnerability in ASGI web servers and starlette's trust on those web servers enables an authentication bypass of the OpenAI API AuthenticationMiddleware. It a…

    vLLM vLLM vllm PyPI
  • Critical 9.6
    CVE-2026-4687

    Sandbox escape due to incorrect boundary conditions in the Telemetry component

    Sandbox escape due to incorrect boundary conditions in the Telemetry component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi