CWE-1357: Reliance on Insufficiently Trustworthy Component
Filter
The product is built from multiple separate components, but it uses a component that is not sufficiently trusted to meet expectations for security, reliability, updateability, and maintainability.
What the weakness is: CWE-1357 at MITRE. All weaknesses
Ask an AI about CWE-1357
Show the prompt
Explain CWE-1357: Reliance on Insufficiently Trustworthy Component and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1357.html and https://cve.bz/cve/cwe/1357?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 10.0CVE-2026-55675EPSS 0.4%
The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb0415b44e65dbbde9f220, .github/workflows/trigger-pr-build.yml records an untrusted fork commit in the pr_info artifact, …
- 8.0CVE-2026-85469EPSS 0.5%
A flaw was found in quay-builder-qemu. A remote attacker could exploit this by compromising the upstream `Noelware/docker-manifest-action` used in the release workflow, which is pinned to a mutable branch. This allows the attacker to injec…
- 6.5CVE-2026-67275EPSS 0.3%
Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Cache poi…
- 7.7CVE-2026-75569EPSS 0.6%
A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or signature verification. This allows a malicious actor with writ…
- 4.4CVE-2026-66783EPSS 0.4%
A flaw was found in the `submariner-operator` component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability allows a cluster administrator, or any user with permissions to modify the Submariner Custom Resource (CR), t…
- 8.1CVE-2026-47619EPSS 0.8%
NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system failure. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and informatio…
- 7.2CVE-2025-32800EPSS 0.6%
Conda-build contains commands and tools to build conda packages. Prior to version 25.3.0, the pyproject.toml lists conda-index as a Python dependency. This package is not published in PyPI. An attacker could claim this namespace and upload…
- 8.6CVE-2024-26024EPSS 0.2%
SUBNET Solutions Inc. has identified vulnerabilities in third-party components used in Substation Server.
- 8.6CVE-2024-28042EPSS 0.2%
SUBNET Solutions Inc. has identified vulnerabilities in third-party components used in PowerSYSTEM Center.
- 8.6CVE-2024-3313EPSS 0.3%
SUBNET Solutions Inc. has identified vulnerabilities in third-party components used in PowerSYSTEM Server 2021 and Substation Server 2021.