CWE-291: CWE-291

Total CVEs

Critical

High

9.2

Avg CVSS

Yearly Trend

2026

2025

2024

2023

Top Affected Vendors

1 Vasion 1

2 Level1 1

3 Yokogawa 1

4 Dji 1

All CWE-291 CVEs (5)

CVE-2025-66602

9.8

This vulnerability in Yokogawa's FAST/TOOLS allows web servers to be accessed directly by IP address, making them susceptible to automated scanning an...

Feb 9, 2026

CVE-2022-46415

9.1

CVE-2022-46415 is a denial-of-service vulnerability in DJI Spark drones where attackers can exhaust the DHCP IP address pool, preventing legitimate de...

Mar 27, 2023

CVE-2024-23309

9.0

The LevelOne WBR-6012 router has an authentication bypass vulnerability where attackers can spoof IP addresses to gain unauthorized access to the web ...

Oct 30, 2024

CVE-2025-34202

8.8

This vulnerability exposes Docker container networks in Vasion Print (formerly PrinterLogic) deployments, allowing attackers on the same network segme...

Sep 19, 2025

CVE-2025-59101

N/A

This vulnerability allows attackers to bypass authentication in Dormakaba Access Manager by spoofing the IP address of a previously authenticated user...

Jan 26, 2026

About CWE-291 (CWE-291)

Our database tracks 5 CVEs classified as CWE-291, with 3 rated critical and 1 rated high severity. The average CVSS score for CWE-291 vulnerabilities is 9.2.

External reference: View CWE-291 on MITRE CWE →

Monitor CWE-291 Vulnerabilities

Get alerted when new CWE-291 CVEs affect your infrastructure.

Start Monitoring Free