Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-46386 |
critical | 9.9 | 0.0049 | 2026-06-26 | OpenProject is open-source, web-based project management software. Prior to , the official openproje | |
CVE-2026-42072 |
critical | 9.8 | 0.0044 | 2026-05-08 | Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, grap | |
CVE-2026-3144 |
critical | 9.8 | 0.0041 | 2026-07-08 | IBM API Connect 12.1.0.0 through 12.1.0.3 uses default credentials which could allow an attacker to | |
CVE-2026-68503 |
critical | 9.8 | 0.0075 | 2026-07-30 | LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.15 | |
CVE-2026-112296 |
critical | 9.3 | 0.0042 | 2026-10-19 | FlyCms through commit edfdf724 contains a default credentials vulnerability that allows unauthentica | |
CVE-2026-58453 |
critical | 9.3 | 0.0190 | 2026-07-01 | JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a hard-coded credential | |
CVE-2026-58466 |
critical | 9.3 | 0.0080 | 2026-07-02 | AutoBangumi before 3.2.8 contains a hard-coded default credentials vulnerability that allows unauthe | |
CVE-2026-41939 |
critical | 9.3 | 0.0110 | 2026-07-29 | Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildF | |
CVE-2026-111693 |
critical | 9.3 | 0.0050 | 2026-10-16 | DataBuff ai-apm-web through 0.1.10 contains a hard-coded default credentials vulnerability that allo | |
CVE-2026-7428 |
critical | 9.2 | 0.0024 | 2026-05-12 | Prior to 2025-11-03, well-intended users of Terraform or REST API for Google Cloud AlloyDB for Postg | |
CVE-2026-44761 |
critical | 9.1 | 0.0050 | 2026-07-14 | SAP Commerce Cloud could retain a sample OAuth2 client with publicly documented sample credentials o | |
CVE-2026-7365 |
high | 7.8 | 0.0012 | 2026-05-27 | IBM Operations Analytics - Log Analysis and IBM SmartCloud Analytics - Log Analysis uses default pa | |
CVE-2026-32652 |
high | 7.8 | 0.0010 | 2026-06-17 | Dell AIOps Collector versions prior to 1.18.3 contain a "Use of Default Credentials" vulnerability. | |
CVE-2026-19741 |
high | 7.5 | 0.0017 | 2026-10-23 | Zephyr's OpenThread integration defined CONFIG_OPENTHREAD_JOINER_PSKD with default "J01NME" in modul | |
CVE-2026-55457 |
high | 7.4 | 0.0027 | 2026-10-23 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browse | |
CVE-2026-77056 |
high | 7.1 | 0.0036 | 2026-10-26 | boneIO black_debian_images ships with a Mosquitto MQTT broker that uses the same default credentials | |
CVE-2026-44273 |
medium | 4.4 | 0.0015 | 2026-06-22 | Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain a Use of Default Credentials v |