CWE-636— Not Failing Securely ('Failing Open')
When the product encounters an error condition or failure, its design requires it to fall back to a state that is less secure than other options that are available, such as selecting the weakest encryption algorithm or using the most permissive access control restrictions.— MITRE CWE catalog
69 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-636page 2 of 2
- CVE-2026-107735MEDIUMCVSS 5.4EG 5.42026-10-08
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, InitializePolicies() starts the sumatrapdfrestrict.ini path with gPolicyRestrictions set to Perm::All and only ORs permission bits, so the INI file never revokes permis…
- CVE-2026-53852MEDIUMCVSS 5.4EG 5.42026-06-16
OpenClaw before 2026.4.25 contains a scope containment bypass vulnerability in device re-pairing that allows authenticated operators to restore broader scopes than intended by submitting empty-scope re-pairing requests. Attackers can explo…
- CVE-2026-100304MEDIUMCVSS 5.3EG 5.32026-09-25
TDuck survey form 6.0 contains an information disclosure vulnerability in FormAuthUtils.hasPermission that fails open when a form does not exist, allowing authenticated users to access deleted form submissions. Attackers can read orphaned …
- CVE-2026-88831MEDIUMCVSS 5.3EG 5.32026-09-23
BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the rule matches no clients.
- CVE-2026-46482MEDIUMCVSS 5.3EG 5.32026-08-18
### Impact The registration component does not validate the text-based _Security Question_ CAPTCHA correctly, allowing attackers to bypass the challenge via a specially crafted value. [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N](https:…
- CVE-2026-53837MEDIUMCVSS 5.3EG 5.32026-06-12
OpenClaw before 2026.5.6 contains an improper access control vulnerability in Mattermost event handlers that fails to validate channel type metadata. Attackers can bypass intended DM policy decisions by sending crafted Mattermost events mi…
- CVE-2026-40249MEDIUMCVSS 5.3EG 5.32026-04-16
free5GC is an open-source implementation of the 5G core network. In versions 4.2.1 and below of the UDR service, the PUT handler for updating Policy Data notification subscriptions at /nudr-dr/v2/policy-data/subs-to-notify/{subsId} does no…
- CVE-2026-27448MEDIUMCVSS 5.3EG 5.32026-03-17
pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to `set_tlsext_servername_callback` raised an unhandled exception, this would result in a connect…
- CVE-2023-22943MEDIUMCVSS 4.8EG 5.32023-02-14
In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connec…
- CVE-2025-41760MEDIUMCVSS 4.9EG 4.92026-03-09
An administrator may attempt to block all traffic by configuring a pass filter with an empty table. However, in UBR, an empty list does not enforce any restrictions and allows all network traffic to pass unfiltered.
- CVE-2025-41759MEDIUMCVSS 4.9EG 4.92026-03-09
An administrator may attempt to block all networks by specifying "\*" or "all" as the network identifier. However, these values are not supported and do not trigger any validation error. Instead, they are silently interpreted as network 0 …
- CVE-2026-41377MEDIUMCVSS 4.6EG 4.62026-04-28
OpenClaw before 2026.3.31 contains a fail-open vulnerability in the plugin installation flow where security scan failures do not block installation. Attackers can exploit scan failures to install untrusted plugins when operators proceed de…
- CVE-2026-86120MEDIUMCVSS 4.3EG 4.32026-09-05
APITable through 1.13.0-beta.1 contains an incorrect authorization vulnerability in NodePermissionGuard that fails to enforce node-level access control when permission lookups throw exceptions. Attackers with valid Fusion API tokens can wr…
- CVE-2025-21210MEDIUMCVSS 4.2EG 4.22025-01-14
Windows BitLocker Information Disclosure Vulnerability
- CVE-2026-45781LOWCVSS 3.5EG 3.52026-05-14
The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.9, OCI ownership validation skips label-match check when upstream OCI registry returns HTTP 429, letting any authenticated pu…
- CVE-2026-32970LOWCVSS 3.3EG 3.32026-03-31
OpenClaw before 2026.3.11 contains a credential fallback vulnerability where unavailable local gateway.auth.token and gateway.auth.password SecretRefs are treated as unset, allowing fallback to remote credentials in local mode. Attackers c…
- CVE-2026-49318LOWCVSS 2.4EG 2.42026-05-29
Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the PIN entry screen. The Infotainment uses presence of Wireles…
- CVE-2026-49317LOWCVSS 2.4EG 2.42026-05-29
Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the PIN entry screen. The Infotainment uses presence of Wireles…
- CVE-2026-82744LOWCVSS 2.1EG 2.12026-09-01
Not Failing Securely (Failing Open) vulnerability in ash-project ash skips an Ash.Reactor change when the guard controlling it raises, so a change meant to run does not. An Ash.Reactor change step can be gated by where validations that de…
Map vulnerabilities like CWE-636 to your infrastructure
EchelonGraph correlates every CVE — across CWE-636 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →