CVE
CVE-1999-0526
- First Reported
- Oct 20, 2026
- Latest Reported
- Oct 20, 2026
CVE Enrichment
- CVSS
- 10.0 HIGH
- EPSS
- 20.82%
- EPSS Percentile
- 97.53%
- CISA KEV
- Not listed
Description
An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server.
Technical Details
- CVSS Version
- 2.0
- CNA / NVD Source
- cve@mitre.org
- Published
- 01-Jul-1997 11:00
- Last Modified
- 17-Jun-2026 04:48
- EPSS Date
- 2026-10-20
CVSS Vector
AV:N /
AC:L /
Au:N /
C:C /
I:C /
A:C
Affected Products / Versions
- x.org / x11
Version / affected range: 7.1_1.1.0
cpe:2.3:a:x.org:x11:7.1_1.1.0:*:*:*:*:*:*:*
References
Last enrichment sync: 21-Oct-2026 04:10
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (1)
- | **CVE-1999-0526** | X Server Info Disclosure | 6.35M | 26 years old. Primarily reconnaissance, but volume indicates large number of exposed legacy systems | GreyNoise Report Highlights Edge Targeting, Fresh Attack Infrastructure and LLM Scanning
CVE (7)
Malware (1)
Threat Actors (2)
MITRE ATT&CK (5)
Vendors (10)
Products (5)
Tools (1)
Countries (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.