CVE-2022-26281
BigAnt Server v5.6.06 was discovered to contain an incorrect access control issue.
CVSS
7.5
High
EPSS
0.9%
p56
KEV
—
Exploit Today
17
0-100
Published: Apr 5, 2022 · Last modified: Jul 9, 2026 · CWE-311 · CWE-732
0.9%EPSS · 30 days1.1%
2026-06-302026-07-16
BigAnt Server v5.6.06 was discovered to contain an incorrect access control issue.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-344867.5 HIG97.4%
——29Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor.
This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116.
Users are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fix the issue.2dCVE-2021-341107.8 HIG63.4%
——19WinWaste.NET version 1.0.6183.16475 has incorrect permissions, allowing a local unprivileged user to replace the executable with a malicious file that will be executed with "LocalSystem" privileges.8dCVE-2017-176778.8 HIG60.4%
——18BMC Remedy 9.1SP3 is affected by authenticated code execution. Authenticated users that have the right to create reports can use BIRT templates to run code.8dCVE-2023-317487.8 HIG53.4%
——16Insecure permissions in MobileTrans v4.0.11 allows attackers to escalate privileges to local admin via replacing the executable file.8dCVE-2023-390049.8 CRI51.9%
——16Insecure permissions in the configuration directory (/conf/) of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allow attackers to access sensitive information (e.g., hashed root password) which could lead to privilege escalation.8dCVE-2021-406496.5 MED51.6%
——15In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the HttpOnly flag set.8d