The vulnerability of the OpenSSH cryptographic protection mechanism, which stems from the use of an unprotected alternative channel, allows attackers to compromise data integrity.

The vulnerability of the OpenSSH cryptographic protection lies in the use of an unprotected alternative channel. Exploiting this vulnerability could allow a attacker to compromise the integrity of data...

The vulnerability of the `merge_sched_in()` function in the kernel/events/core.c module, which manages kernel events in Linux operating systems, allows a hacker to cause a service failure.

The vulnerability of the mergeschedin function in the kernel/events/core.c module, which manages kernel events in Linux operating systems, is related to the use of an unprotected alternative channel. Exploiting this vulnerability could allow an attacker to cause a service failure...

PYSEC-2026-2422 ComfyUI-Manager has an Unprotected Alternate Channel (CWE-420)

Impact An Unprotected Alternate Channel CWE-420 vulnerability was discovered in ComfyUI-Manager versions prior to 3.38. Vulnerability Details In affected versions, ComfyUI-Manager stored its configuration in the user/default/ComfyUI-Manager/ directory, which was accessible via ComfyUI's web APIs...

ComfyUI-Manager has an Unprotected Alternate Channel (CWE-420)

ImpactAn Unprotected Alternate Channel CWE-420 vulnerability was discovered in ComfyUI-Manager versions prior to 3.38. Vulnerability DetailsIn affected versions, ComfyUI-Manager stored its configuration in the user/default/ComfyUI-Manager/ directory, which was accessible via ComfyUI's web APIs...

ROS-20260626-73-0019

The vulnerability of the Swarm Mode mode of the dockerd daemon, a software tool for creating containerized systems like Moby and the Mirantis Container Runtime environment, is related to the use of an unprotected alternative channel. Exploiting this vulnerability allows an attacker to compromise...

ROS-20260626-73-0017

The vulnerability of the Swarm Mode mode of the dockerd daemon, a software tool for creating containerized systems like Moby and the Mirantis Container Runtime environment, is related to the use of an unprotected alternative channel. Exploiting this vulnerability allows an attacker to compromise...

Exploit for Unprotected Alternate Channel in Rockwellautomation Allen-Bradley_Stratix_5200_Firmware

Cisco R...

GHSA-95PQ-HR8P-F5G7 ComfyUI-Manager has an Unprotected Alternate Channel (CWE-420)

Impact An Unprotected Alternate Channel CWE-420 vulnerability was discovered in ComfyUI-Manager versions prior to 3.38. Vulnerability Details In affected versions, ComfyUI-Manager stored its configuration in the user/default/ComfyUI-Manager/ directory, which was accessible via ComfyUI's web APIs...

The vulnerability of the RoundCube Webmail email client, related to the use of an unprotected alternative channel, allows attackers to gain unauthorized access to protected information.

The vulnerability of the RoundCube Webmail email client is related to the use of an unprotected alternative communication channel. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the package manager for Kubernetes Helm, related to the use of an unprotected alternative channel, allows a attacker to expose protected information.

The vulnerability of the package manager for Kubernetes Helm is related to the use of an unprotected alternative channel. Exploiting this vulnerability could allow a attacker to expose protected information...

K000156604: BIG-IP httpd access control vulnerability CVE-2026-40435

Security Advisory Description When configured, IP-based access restrictions for httpd do not cover all endpoints, which may allow connections from blocked addresses. CVE-2026-40435 Impact This vulnerability allows an attacker to connect to the BIG-IP control plane HTTP services; however, the...

CVE-2026-25916: Unprotected Alternate Channel

Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is used, does not block SVG feImage...

Exploit for Unprotected Alternate Channel in Crushftp

C...

The vulnerability of the MCP-server Framelink Figma MCP Server lies in the use of an unprotected alternative channel, allowing attackers to execute arbitrary commands.

The vulnerability of the MCP-server Framelink Figma MCP Server is related to the use of an unprotected alternative channel. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

The vulnerability of software for centralized monitoring and management in environments with a large number of devices, Lenovo XClarity Orchestrator (LXCO), arises from the use of an unprotected alternative channel. This allows a malicious actor to gain unauthorized access to internal functions or data.

The vulnerability of software for centralized monitoring and management in environments with a large number of devices relates to the use of an unprotected alternative channel. Exploiting this vulnerability can allow an attacker to gain unauthorized access to internal functions or data...

EUVD-2021-19738

Malware in sbrugna...

EUVD-2022-30426

Malicious code in bioql PyPI...

EUVD-2024-27366

Malicious code in bioql PyPI...

CrushFTP Unprotected Alternate Channel Vulnerability

CrushFTP contains an unprotected alternate channel vulnerability. When the DMZ proxy feature is not used, mishandles AS2 validation and consequently allows remote attackers to obtain admin access via HTTPS...

The vulnerability of the web interface of the cross-platform FTP server CrushFTP allows a hacker to execute arbitrary code with elevated privileges.

The vulnerability of the cross-platform FTP server CrushFTP lies in the use of an unprotected alternative channel. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with elevated privileges by replacing the administrative user with the default user...