Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-42368 |
critical | 9.9 | 0.0036 | 2026-05-04 | A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/ | |
CVE-2026-33519 |
critical | 9.8 | 0.0031 | 2026-04-21 | An incorrect authorization vulnerability exists in Esri Portal for ArcGIS 11.4, 11.5 and 12.0 on Win | |
CVE-2026-22337 |
critical | 9.8 | 0.0032 | 2026-04-27 | Incorrect Privilege Assignment vulnerability in Directorist Directorist Social Login allows Privileg | |
CVE-2026-42731 |
critical | 9.8 | 0.0033 | 2026-05-27 | Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-ot | |
CVE-2026-42758 |
critical | 9.8 | 0.0032 | 2026-05-27 | Incorrect Privilege Assignment vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ign | |
CVE-2026-49060 |
critical | 9.8 | 0.0184 | 2026-06-11 | Incorrect Privilege Assignment vulnerability in Hippoo Mobile App for WooCommerce allows Privilege E | |
CVE-2026-34901 |
critical | 9.8 | 0.0032 | 2026-06-15 | Unauthenticated Privilege Escalation in iControlWP <= 5.5.3 versions. | |
CVE-2026-39583 |
critical | 9.8 | 0.0036 | 2026-06-15 | Unauthenticated Privilege Escalation in Datalogics Ecommerce Delivery <= 2.6.62 versions. | |
CVE-2026-27395 |
critical | 9.8 | 0.0034 | 2026-06-17 | Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions. | |
CVE-2026-49058 |
critical | 9.8 | 0.0032 | 2026-06-17 | Unauthenticated Privilege Escalation in LoginPress Pro <= 6.2.2 versions. | |
CVE-2026-54807 |
critical | 9.8 | 0.0034 | 2026-06-17 | Unauthenticated Privilege Escalation in Registration Form for WooCommerce <= 1.0.9 versions. | |
CVE-2026-56030 |
critical | 9.8 | 0.0048 | 2026-06-26 | Unauthenticated Privilege Escalation in Paytium <= 5.0.2 versions. | |
CVE-2026-56033 |
critical | 9.8 | 0.0048 | 2026-06-26 | Unauthenticated Privilege Escalation in Dokan Pro <= 5.0.4 versions. | |
CVE-2026-57692 |
critical | 9.8 | 0.0053 | 2026-07-01 | Incorrect Privilege Assignment vulnerability in LCweb PrivateContent allows Privilege Escalation. T | |
CVE-2026-57813 |
critical | 9.8 | 0.0048 | 2026-07-13 | Incorrect Privilege Assignment vulnerability in properfraction MailOptin mailoptin allows Privilege | |
CVE-2026-59540 |
critical | 9.8 | 0.0048 | 2026-07-23 | Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.6 versions. | |
CVE-2026-61951 |
critical | 9.8 | 0.0048 | 2026-07-23 | Unauthenticated Privilege Escalation in TrueBooker <= 1.2.3 versions. | |
CVE-2026-65507 |
critical | 9.8 | 0.0048 | 2026-08-06 | Unauthenticated Privilege Escalation in AIWU <= 1.5.6 versions. | |
CVE-2026-66662 |
critical | 9.8 | 0.0055 | 2026-08-06 | Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps <= 3.29.10 versions. | |
CVE-2026-66424 |
critical | 9.8 | 0.0048 | 2026-08-13 | Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.7 versions. | |
CVE-2026-50562 |
critical | 9.3 | 0.0021 | 2026-07-15 | FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040ae0eb87390c | |
CVE-2026-64639 |
critical | 9.3 | 0.0055 | 2026-08-12 | Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low | |
CVE-2026-77055 |
critical | 9.3 | 0.0009 | 2026-10-26 | boneIO black_debian_images gives the boneio service account excessive privileges, including full pas | |
CVE-2026-10059 |
critical | 9.1 | 0.0064 | 2026-08-05 | A flaw was found in the Multicluster Engine for Kubernetes ClusterCurator controller. A tenant admin | |
CVE-2024-32507 |
high | 8.8 | 0.0046 | 2024-05-17 | Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phon | |
CVE-2026-112407 |
high | 8.8 | 0.0046 | 2026-10-20 | Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1 | |
CVE-2026-57144 |
high | 8.8 | 0.0021 | 2026-10-23 | PraisonAI is a multi-agent teams system. From version 4.5.110 to before version 4.6.61, praisonai.sa | |
CVE-2025-59580 |
high | 8.8 | 0.0039 | 2025-10-22 | Incorrect Privilege Assignment vulnerability in GoodLayers Goodlayers Core goodlayers-core allows Pr | |
CVE-2025-62034 |
high | 8.8 | 0.0035 | 2025-11-06 | Incorrect Privilege Assignment vulnerability in uxper Togo togo.This issue affects Togo: from n/a th | |
CVE-2026-5141 |
high | 8.8 | 0.0023 | 2026-04-29 | Improper Privilege Management, Improper Access Control, Incorrect privilege assignment vulnerability | |
CVE-2026-43000 |
high | 8.8 | 0.0033 | 2026-05-28 | An issue was discovered in OpenStack Keystone before 29.0.2. When combined with an application crede | |
CVE-2026-45830 |
high | 8.8 | 0.0034 | 2026-06-12 | A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows | |
CVE-2026-49111 |
high | 8.8 | 0.0024 | 2026-06-15 | Incorrect Privilege Assignment vulnerability in ThemeGrill Masteriyo - LMS allows Privilege Escalati | |
CVE-2026-39579 |
high | 8.8 | 0.0028 | 2026-06-15 | Contributor Privilege Escalation in B Blocks <= 2.0.31 versions. | |
CVE-2026-48889 |
high | 8.8 | 0.0041 | 2026-06-15 | Subscriber Privilege Escalation in Amelia <= 2.3 versions. | |
CVE-2026-49780 |
high | 8.8 | 0.0028 | 2026-06-15 | Customer Privilege Escalation in Dokan <= 5.0.2 versions. | |
CVE-2026-54805 |
high | 8.8 | 0.0038 | 2026-06-17 | Subscriber Privilege Escalation in Falang multilanguage <= 1.4.2 versions. | |
CVE-2026-56008 |
high | 8.8 | 0.0042 | 2026-06-26 | Contributor Privilege Escalation in Fusion Builder <= 3.15.4 versions. | |
CVE-2026-56010 |
high | 8.8 | 0.0042 | 2026-06-26 | Subscriber Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions. | |
CVE-2026-57386 |
high | 8.8 | 0.0042 | 2026-07-13 | Incorrect Privilege Assignment vulnerability in Kodezen LLC aBlocks ablocks allows Privilege Escalat | |
CVE-2026-57410 |
high | 8.8 | 0.0042 | 2026-07-13 | Incorrect Privilege Assignment vulnerability in MailerPress Team MailerPress mailerpress allows Priv | |
CVE-2026-21824 |
high | 8.8 | 0.0042 | 2026-07-20 | HCL Commerce contains an privilege escalation vulnerability that could allow denial of service, disc | |
CVE-2026-59541 |
high | 8.8 | 0.0042 | 2026-07-23 | Subscriber Privilege Escalation in WP BASE Booking <= 6.3.1 versions. | |
CVE-2026-17626 |
high | 8.8 | 0.0042 | 2026-08-05 | IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow an authenticated attacker to read, modify | |
CVE-2026-28111 |
high | 8.8 | 0.0042 | 2026-08-06 | Contributor Privilege Escalation in Forminator <= 1.56.0 versions. | |
CVE-2026-28161 |
high | 8.8 | 0.0042 | 2026-08-13 | Subscriber Privilege Escalation in Service Finder Booking <= 6.2 versions. | |
CVE-2026-28191 |
high | 8.8 | 0.0042 | 2026-08-18 | Incorrect Privilege Assignment vulnerability in ThemeOne The Grid allows Privilege Escalation. This | |
CVE-2026-112242 |
high | 8.8 | 0.0033 | 2026-10-22 | Incorrect Privilege Assignment vulnerability in Cozmoslabs Profile Builder profile-builder allows Pr | |
CVE-2026-118082 |
high | 8.8 | — | 2026-10-29 | Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions. | |
CVE-2026-27668 |
high | 8.7 | 0.0026 | 2026-04-14 | A vulnerability has been identified in RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) (All |