CWE-284 (2634) CWE-79 (1821) CWE-416 (1297) CWE-862 (1175) CWE-89 (1097) CWE-22 (1024) CWE-125 (884) CWE-200 (847) CWE-306 (838) CWE-122 (831) CWE-20 (798) CWE-78 (710) CWE-918 (689) CWE-787 (681) CWE-94 (641) CWE-863 (617) CWE-74 (600) CWE-639 (543) CWE-400 (530) CWE-119 (503) CWE-269 (501) CWE-502 (470) CWE-770 (440) CWE-287 (432) CWE-121 (407) CWE-77 (373) CWE-190 (368) CWE-362 (323) CWE-352 (276) CWE-285 (243)

CWE-281

8 CVEs View on MITRE →
CVE Severity CVSS EPSS Published Description Flags
CVE-2026-23556 critical 9.4 0.0014 2026-07-09 When oxenstored is tearing a domain down, the node data is cleaned up but the usage counts are leake
CVE-2026-40767 high 7.5 0.0029 2026-06-15 Unauthenticated Broken Access Control in wpForo Forum < 3.0.2 versions.
CVE-2026-44947 medium 6.9 0.0039 2026-06-30 A missing clean-up in the legacy Project Role Template Binding (PRTB) reconciler in Rancher version
CVE-2026-35350 medium 6.6 0.0013 2026-04-22 The cp utility in uutils coreutils fails to properly handle setuid and setgid bits when ownership pr
CVE-2026-58494 medium 6.5 0.0017 2026-07-08 Wasmtime is a runtime for WebAssembly. Prior to 24.0.11, 36.0.12, 45.0.3, and 46.0.1, wasmtime-wasi
CVE-2026-35361 medium 4.4 0.0014 2026-04-22 The mknod utility in uutils coreutils fails to handle security labels atomically by creating device
CVE-2026-35351 medium 4.2 0.0013 2026-04-22 The mv utility in uutils coreutils fails to preserve file ownership during moves across different fi
CVE-2026-4360 low 2.0 0.0048 2026-06-30 In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardl