cwe-1188
Safeguard articles tagged "cwe-1188" — guides, analysis, and best practices for software supply chain and application security.
6 articles
CVE-2020-13927: Apache Airflow's Experimental API Authentication Bypass
CVE-2020-13927 affects Apache Airflow's Experimental API and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-01-18.
CVE-2022-24706: Apache CouchDB Insecure Default Initialization of Resource Vulnerability
CVE-2022-24706 affects Apache CouchDB and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-08-25.
CVE-2023-6448: Unitronics Vision PLC and HMI Insecure Default Password Vulnerability
CVE-2023-6448 affects Unitronics Vision PLC and HMI and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2023-12-11.
CVE-2023-27524: Apache Superset Insecure Default Initialization of Resource Vulnerability
CVE-2023-27524 affects Apache Superset and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-01-08.
CVE-2025-48927: TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability
CVE-2025-48927 affects TeleMessage TM SGNL and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-07-01.
Target (2013): How an HVAC Vendor Became the Path to 40 Million Cards
A factual retrospective on the 2013 Target breach, in which attackers used credentials stolen from a third-party refrigeration contractor to reach the retail network and deploy point-of-sale malware.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.