CWE-642: CWE-642

Total CVEs

Critical

High

6.3

Avg CVSS

Yearly Trend

2025

2024

Top Affected Vendors

1 Gitlab 1

2 Keyfactor 1

All CWE-642 CVEs (4)

CVE-2025-49090

7.1

This vulnerability in the Matrix specification before version 1.16 allows attackers to manipulate room state resolution, potentially enabling unauthor...

Oct 2, 2025

CVE-2024-22387

6.8

This vulnerability allows authenticated users of Gallagher Controller 6000/7000 diagnostic web interfaces to modify device I/O connections, potentiall...

Jul 11, 2024

CVE-2024-8754

6.4

This vulnerability allows attackers to squat on GitLab accounts by linking arbitrary unclaimed provider identities when JWT authentication is configur...

Sep 12, 2024

CVE-2025-26787

4.7

A logic error in Keyfactor SignServer container startup resets certificate access controls to 'allowany' on every restart instead of only initial setu...

Dec 22, 2025

About CWE-642 (CWE-642)

Our database tracks 4 CVEs classified as CWE-642, with 0 rated critical and 1 rated high severity. The average CVSS score for CWE-642 vulnerabilities is 6.3.

External reference: View CWE-642 on MITRE CWE →

Monitor CWE-642 Vulnerabilities

Get alerted when new CWE-642 CVEs affect your infrastructure.

Start Monitoring Free