Falhas do tipo CWE-494

210 resultados

Elevação de privilégio

A aplicação não valida corretamente permissões ou contexto de segurança, permitindo que um usuário com privilégios baixos execute ações reservadas a administradores ou usuários com acesso mais elevado. É perigoso porque quebra o modelo de controle de acesso e expõe funcionalidades críticas.

Exemplo

Um usuário comum consegue acessar a API de administração porque o servidor valida apenas a presença de um token válido, ignorando o campo de 'role' contido nele; ou um programa SUID não revoga permissões root antes de executar código fornecido pelo usuário, permitindo leitura de arquivos sensíveis.

Como mitigar

Implemente verificação rigorosa de permissões em toda ação sensível (autorização não apenas autenticação), use listas de controle de acesso (ACL) explícitas, aplique princípio do menor privilégio e audite chamadas privilegiadas. Teste com usuários em papéis baixos para confirmar bloqueios.

CVE-2026-63696CRITICALDell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Download of Code Without Integrity Check vulnerability. A high privilEPSS 0.3%CVE-2025-31355HIGHA firmware update vulnerability exists in the Firmware Signature Validation functionality of Tenda AC6 V5.0 V02.03.01.110. A specially craftEPSS 0.3%CVE-2025-30199HIGHECOVACS Vacuum and Base Station accept unsigned firmwareEPSS 0.3%CVE-2026-55698HIGHpnpm: Project env lockfile can short-circuit package-manager resolution and execute lockfile-selected pnpm bytesEPSS 0.3%CVE-2026-113717LOWvirtualenv: Pip seeding with download omits wheel digest verificationEPSS 0.3%CVE-2026-92128HIGHJenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier downloads a JAR file specified by URL twice, confirming the approval of theEPSS 0.3%CVE-2023-47353HIGHAn issue in the com.oneed.dvr.service.DownloadFirmwareService component of IMOU GO v1.0.11 allows attackers to force the download of arbitraEPSS 0.3%CVE-2023-5630MEDIUM A CWE-494: Download of Code Without Integrity Check vulnerability exists that could allow a privileged user to install an untrusted firmwEPSS 0.3%CVE-2020-7817MEDIUMMyBrowserPlus downloads the files needed to run the program through the setup file (Setup.inf). At this time, there is a vulnerability in doEPSS 0.3%CVE-2026-96455HIGHReachy Mini daemon allows unauthenticated remote code execution through the app installation endpointEPSS 0.3%CVE-2022-37908MEDIUMAn authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers. Successful exploitation can compromEPSS 0.3%CVE-2024-28878CRITICALIOSIX IO-1020 Micro ELD Download of Code Without Integrity CheckEPSS 0.3%CVE-2026-79963HIGHDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Download of Code WEPSS 0.3%CVE-2024-39348HIGHDownload of code without integrity check vulnerability in AirPrint functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1EPSS 0.3%CVE-2026-53970HIGHZeroBrew version 0.3.1 and prior Missing Checksum Verification RCE via shim.rbEPSS 0.3%CVE-2023-41921CRITICALDownload of Code Without Integrity Check in Kiloview P1/P2 devicesEPSS 0.3%CVE-2025-55582MEDIUMD-Link DCS-825L firmware v1.08.01 contains a vulnerability in the watchdog script `mydlink-watch-dog.sh`, which blindly respawns binaries suEPSS 0.3%CVE-2024-33118HIGHLuckyFrameWeb v3.5.2 was discovered to contain an arbitrary read vulnerability via the fileDownload method in class com.luckyframe.project.cEPSS 0.2%CVE-2026-9037CRITICALDownload of code without integrity check in XCharge C6EPSS 0.2%CVE-2026-57910CRITICALWatchGuard Agent improper authentication allows unauthenticated remote code executionEPSS 0.2%