CWE-276 - Incorrect Default Permissions

CWE Weakness

Threat entity extracted from intelligence sources

Frequency

3

occurrences

First Seen

July 27, 2026

Last Seen

September 2, 2026

Overview

Recent Events

Related Clusters (2)

Critical Remote Code Execution Vulnerability in NoteGen (CVE-2026-17497)

Jul 27·2 sources

Critical Vulnerabilities in Rockwell Automation Tool Expose Systems to Attacks

Sep 2·2 sources

Related Articles (3)

Security Advisories

www.rockwellautomation.com·Sep 2

Rockwell Automation Redundancy Module Configuration Tool

cvefeed high severity News Jul 26, 2026 CVE-2026-17497 - NoteGen arbitrary OS command execution via Tauri shell:allow-execute for bash/python A remote code execution vulnerability in NoteGen before version 0.32.0 caused by overly permissive Tauri shell plugin execute capabilities, allowing webview JavaScript to run attacker-controlled OS commands. Read more

cvefeed.io·Jul 27

Related Entities

Remote Code Execution Zero-day Exploit Denial of Service Malware Rockwell Automation United States CVE-2026-9634 CVE-2026-9633 CVE-2025-12768 CVE-2026-12661 CVE-2026-12663 CVE-2026-16675