CWE-454 External Initialization of Trusted Variables or Data Stores
baseThe product initializes critical internal variables or data stores using inputs that can be modified by untrusted actors.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (7)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-1719US | critical9.8 | — | ||
Global variable extraction in bitrix/modules/main/tools.php in Bitrix24 22.0.300 allows unauthenticated remote attackers to (1) enumerate attachments on the server and (2) execute… | ||||
| CVE-2019-14744US | high7.8 | — | ||
In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so,… | ||||
| CVE-2025-36244US | medium5.5 | — | ||
IBM AIX 7.2, 7.3, IBM VIOS 3.1, and 4.1, when configured to use Kerberos network authentication, could allow a local user to write to files on the system with root privileges due t… | ||||
| CVE-2026-54003US | — | — | ||
Kirby is an open-source content management system. Prior to 4.9.4 and from 5.4.4, Kirby sites with no configured user accounts that run on publicly accessible servers behind a reve… | ||||
| CVE-2026-48980US | — | — | ||
pam_usb provides hardware authentication for Linux using removable media. In versions prior to 0.9.2, getenv() environment variables XRDP_SESSION, DISPLAY and TMUX allow environme… | ||||
| CVE-2026-44995US | — | — | ||
OpenClaw before 2026.4.20 contains an improper environment variable validation vulnerability in MCP stdio server configuration that allows attackers to execute arbitrary code. Mali… | ||||
| CVE-2026-26148US | — | — | ||
External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally. | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan