Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2637)
CWE-79 (1878)
CWE-416 (1378)
CWE-862 (1212)
CWE-89 (1111)
CWE-22 (1031)
CWE-125 (930)
CWE-306 (855)
CWE-200 (854)
CWE-122 (832)
CWE-20 (801)
CWE-787 (728)
CWE-78 (720)
CWE-918 (698)
CWE-863 (654)
CWE-94 (647)
CWE-74 (603)
CWE-639 (567)
CWE-400 (535)
CWE-119 (504)
CWE-269 (502)
CWE-502 (476)
CWE-770 (449)
CWE-287 (442)
CWE-121 (410)
CWE-190 (380)
CWE-77 (375)
CWE-362 (374)
CWE-476 (302)
CWE-352 (285)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-6886 |
critical | 9.3 | 0.0045 | 2026-04-23 | Borg SPM 2007 (Sales Ended in 2008) developed by BorG Technology Corporation has a Authentication By | |
CVE-2026-110475 |
critical | 9.3 | 0.0048 | 2026-10-26 | This vulnerability exists in the CreditNirvana Collections Platform due to improper authentication a | |
CVE-2026-55040 |
critical | 9.1 | 0.6954 | 2026-07-14 | Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attac | KEV 5 PoC |
CVE-2026-96940 |
high | 8.8 | 0.0275 | 2026-10-02 | Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges | 1 PoC |
CVE-2026-10714 |
high | 8.8 | 0.0015 | 2026-07-14 | A security issue exists within FactoryTalk® Services Platform (FTSP), allowing an attacker to bypass | |
CVE-2026-62895 |
high | 8.8 | 0.0080 | 2026-09-08 | Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker t | |
CVE-2026-115967 |
high | 8.8 | 0.0035 | 2026-10-29 | Weak Authentication vulnerability in Hamid Alinia Login with phone number login-with-phone-number al | |
CVE-2026-4828 |
high | 8.2 | 0.0026 | 2026-04-01 | Improper authentication in the OAuth login functionality in Devolutions Server 2026.1.11 and earlier | |
CVE-2026-4924 |
high | 8.2 | 0.0033 | 2026-04-01 | Improper authentication in the two-factor authentication (2FA) feature in Devolutions Server 2026. | |
CVE-2026-69802 |
high | 8.1 | 0.0063 | 2026-10-13 | Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to e | |
CVE-2026-83674 |
high | 8.1 | 0.0071 | 2026-10-13 | Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker | |
CVE-2026-0204 |
high | 8.0 | 0.0038 | 2026-04-29 | A vulnerability in the access control mechanism of SonicOS may allow certain management interface fu | |
CVE-2026-83840 |
high | 7.8 | 0.0043 | 2026-10-13 | Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges l | |
CVE-2026-83586 |
high | 7.8 | 0.0032 | 2026-10-13 | Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authoriz | |
CVE-2026-85376 |
high | 7.8 | 0.0028 | 2026-10-13 | Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate pri | |
CVE-2026-88101 |
high | 7.8 | 0.0021 | 2026-10-13 | Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate | |
CVE-2026-40417 |
high | 7.8 | 0.0027 | 2026-05-12 | Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges | |
CVE-2026-50756 |
high | 7.5 | 0.0051 | 2026-07-21 | An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive informat | |
CVE-2026-59554 |
high | 7.5 | 0.0043 | 2026-07-23 | Unauthenticated Broken Authentication in Ziina <= 1.2.21 versions. | |
CVE-2026-83511 |
high | 7.4 | 0.0065 | 2026-10-13 | Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker | |
CVE-2026-85922 |
high | 7.4 | 0.0061 | 2026-10-13 | Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature | |
CVE-2025-30414 |
high | 7.1 | 0.0021 | 2026-10-28 | Local privilege escalation due to improper authentication. The following products are affected: Acro | |
CVE-2026-85328 |
high | 7.0 | 0.0022 | 2026-10-13 | Weak authentication in Windows Projected File System allows an authorized attacker to elevate privil | |
CVE-2026-85323 |
medium | 6.8 | 0.0048 | 2026-10-13 | Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to per | |
CVE-2026-70005 |
medium | 5.9 | 0.0063 | 2026-10-13 | Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker | |
CVE-2026-69982 |
medium | 5.9 | 0.0065 | 2026-10-13 | Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker | |
CVE-2026-59135 |
medium | 5.5 | 0.0035 | 2026-08-11 | Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose | |
CVE-2026-83657 |
medium | 5.5 | 0.0027 | 2026-10-13 | Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perfo | |
CVE-2026-83681 |
medium | 5.5 | 0.0034 | 2026-10-13 | Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locall | |
CVE-2026-85939 |
medium | 5.3 | 0.0037 | 2026-10-13 | Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature ove | |
CVE-2026-57352 |
medium | 4.8 | 0.0026 | 2026-07-02 | Unauthenticated Broken Authentication in ALD – Dropshipping and Fulfillment for AliExpress and WooCo |