cwe-287
Safeguard articles tagged "cwe-287" — guides, analysis, and best practices for software supply chain and application security.
48 articles
CVE-2026-20182: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
CVE-2026-20182 affects Cisco Catalyst SD-WAN and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-05-14.
CVE-2022-0492: Linux Kernel Improper Authentication Vulnerability
CVE-2022-0492 affects Linux Kernel and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-06-02.
CVE-2026-50751: Check Point Security Gateway Improper Authentication Vulnerability
CVE-2026-50751 affects Check Point Security Gateway and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-06-08.
CVE-2026-46817: Oracle E-Business Suite Improper Privilege Management Vulnerability
CVE-2026-46817 affects Oracle E-Business Suite and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-07-15.
CVE-2026-16232: Check Point SmartConsole Improper Authentication Vulnerability
CVE-2026-16232 affects Check Point SmartConsole and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-07-22.
CVE-2026-65400: Apple macOS Improper Authentication Vulnerability
CVE-2026-65400 affects Apple macOS and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-08-18.
CVE-2023-49105: ownCloud Improper Authentication Vulnerability
CVE-2023-49105 affects ownCloud ownCloud and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-08-27.
CVE-2026-82329: JFrog Artifactory Improper Authentication Vulnerability
CVE-2026-82329 affects JFrog Artifactory and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-09-02.
CVE-2026-49869: Kestra OSS OS Command Injection Vulnerability
CVE-2026-49869 affects Kestra Kestra OSS and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-09-02.
CVE-2026-59822: BerriAI LiteLLM Improper Authentication Vulnerability
CVE-2026-59822 affects BerriAI LiteLLM and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-09-02.
CVE-2026-42018: JFrog Artifactory Improper Authentication Vulnerability
CVE-2026-42018 affects JFrog Artifactory and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-09-11.
Colonial Pipeline (2021): A Single Compromised VPN Password
A factual retrospective on the May 2021 Colonial Pipeline ransomware attack, traced to a single compromised VPN account password with no multi-factor authentication, and its effect on U.S. critical infrastructure fuel supply.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.