Excessive Reliance on Global Variables

The code is structured in a way that relies too much on using or setting global variables throughout various points in the code, instead of preserving the associated information in a narrower, more local context.

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-32841 1Edimax 1Gs 5008pl Firmware Jun 17, 2026 Mar 17, 2026 9.2 CRITICAL· v4 8.1 HIGH· v3 N/A· v2 Edimax GS-5008PL firmware versions 1.00.54 and prior contain an authentication bypass vulnerability that allows unauthenticated attackers to access the management interface. Attackers can exploit the global authenticatio...Show more Edimax GS-5008PL firmware versions 1.00.54 and prior contain an authentication bypass vulnerability that allows unauthenticated attackers to access the management interface. Attackers can exploit the global authentication flag mechanism to gain administrative access without credentials after any user authenticates, enabling unauthorized password changes, firmware uploads, and configuration modifications.Show less
CVE-2024-47827 2Argo Workflows Project Argoproj 2Argo Workflows Argo Workflows Jun 17, 2026 Oct 28, 2024 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Due to a race condition in a global variable in 3.6.0-rc1, the argo workflows controller can be made to cra...Show more Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Due to a race condition in a global variable in 3.6.0-rc1, the argo workflows controller can be made to crash on-command by any user with access to execute a workflow. This vulnerability is fixed in 3.6.0-rc2.Show less
CVE-2022-2642 1Hornerautomation 1Rcc972 Firmware Jun 17, 2026 Dec 2, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 Horner Automation’s RCC 972 firmware version 15.40 contains global variables. This could allow an attacker to read out sensitive values and variable keys from the device.