CWE-284 (2614) CWE-79 (1799) CWE-416 (1282) CWE-862 (1168) CWE-89 (1090) CWE-22 (1018) CWE-125 (867) CWE-200 (840) CWE-306 (832) CWE-122 (826) CWE-20 (789) CWE-78 (701) CWE-918 (685) CWE-787 (677) CWE-94 (637) CWE-863 (603) CWE-74 (600) CWE-639 (534) CWE-400 (513) CWE-269 (499) CWE-119 (494) CWE-502 (467) CWE-770 (432) CWE-287 (424) CWE-121 (404) CWE-77 (372) CWE-190 (362) CWE-362 (321) CWE-352 (271) CWE-285 (241)

CWE-1391

10 CVEs View on MITRE →
CVE Severity CVSS EPSS Published Description Flags
CVE-2026-39920 critical 9.3 0.0054 2026-04-24 BridgeHead FileStore versions prior to 24A (released in early 2024) expose the Apache Axis2 administ
CVE-2026-8076 critical 9.3 0.0032 2026-05-08 Weak credentials in the CashDro 3 web administration panel, version 24.01.00.26, where the platform
CVE-2026-44351 critical 9.1 0.0025 2026-05-13 fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.2.4, a critical authenticatio
CVE-2026-45363 critical 9.1 0.0036 2026-07-14 ruby-jwt is a Ruby implementation of the RFC 7519 OAuth JSON Web Token standard. Prior to 2.10.3 and
CVE-2026-114616 critical 9.1 0.0021 2026-10-22 Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.1, Authlib's
CVE-2026-35089 high 8.7 0.0059 2026-05-27 In Slican telephone exchanges secure key is generated in a predictable manner using properties of th
CVE-2026-49852 high 8.7 0.0017 2026-07-17 joserfc is a Python library that provides an implementation of several JSON Object Signing and Encry
CVE-2026-23853 high 8.4 0.0016 2026-04-17 Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions
CVE-2026-4377 medium 6.0 0.0014 2026-05-28 Dlink DWR-X1820 router uses weak default password generated from its IMEI number and does not requir
CVE-2026-57473 medium 5.8 0.0023 2026-06-26 A vulnerability exists in the netclient and factory services of Reolink Home Hub (versions prior to