Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-48930 |
critical | 9.8 | 0.0032 | 2026-06-26 | A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authorit | |
CVE-2026-54408 |
critical | 9.8 | 0.0057 | 2026-07-02 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability | |
CVE-2026-20896 |
critical | 9.8 | 0.0276 | 2026-07-03 | Gitea Docker image versions up to and including 1.26.2 use REVERSE_PROXY_TRUSTED_PROXIES=* by defaul | |
CVE-2026-26292 |
critical | 9.8 | 0.0065 | 2026-07-03 | Gitea versions before 1.25.5 do not use the migration HTTP transport for LFS push and sync mirror op | |
CVE-2026-58422 |
critical | 9.8 | 0.0043 | 2026-07-03 | Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts | |
CVE-2026-24014 |
critical | 9.8 | 0.0069 | 2026-07-06 | Apache IoTDB DataNode’s internal RPC interface for creating Trigger instances uses the uploaded Trig | |
CVE-2026-48204 |
critical | 9.8 | 0.0073 | 2026-07-06 | Improper Input Validation, Improper Access Control vulnerability in Apache Camel in Camel Mongodb Gr | |
CVE-2026-14960 |
critical | 9.8 | 0.0046 | 2026-07-15 | Pegatron `Tdelo64.sys` improperly exposes privileged hardware access functionality through the `\\.\ | |
CVE-2026-16387 |
critical | 9.8 | 0.0028 | 2026-07-21 | Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153, Firef | |
CVE-2026-16407 |
critical | 9.8 | 0.0051 | 2026-07-21 | Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 | |
CVE-2026-47396 |
critical | 9.8 | 0.0043 | 2026-07-21 | PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's call server exposes a | |
CVE-2026-35290 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3. | |
CVE-2026-46876 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3. | |
CVE-2026-46924 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3. | |
CVE-2026-46982 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications (component: | |
CVE-2026-46983 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications (component: | |
CVE-2026-46994 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c | |
CVE-2026-60173 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Securit | |
CVE-2026-60221 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor | |
CVE-2026-60224 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor | |
CVE-2026-60225 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor | |
CVE-2026-60226 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor | |
CVE-2026-60227 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor | |
CVE-2026-60269 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor | |
CVE-2026-60279 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor | |
CVE-2026-60363 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Apache Plugi | |
CVE-2026-60541 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Sch | |
CVE-2026-60555 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente | |
CVE-2026-60880 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal | |
CVE-2026-60999 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Ser | |
CVE-2026-61131 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Applicat | |
CVE-2026-61140 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente | |
CVE-2026-61145 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-61161 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-61167 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The su | |
CVE-2026-61233 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (c | |
CVE-2026-61245 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of Oracle PeopleSoft (co | |
CVE-2026-64796 |
critical | 9.8 | 0.0051 | 2026-07-22 | Joomla Extension - regularlabs.com - various code injection vectors in Sourcerer extension - Free di | |
CVE-2026-60372 |
critical | 9.8 | 0.0055 | 2026-07-22 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (componen | |
CVE-2026-15704 |
critical | 9.8 | 0.0046 | 2026-07-24 | In Eclipse BaSyx Go Components versions up to and including 1.0.0, ABAC-enabled deployments are vuln | |
CVE-2026-43779 |
critical | 9.8 | 0.0054 | 2026-07-27 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, | |
CVE-2026-64702 |
critical | 9.8 | 0.0054 | 2026-07-27 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Seq | |
CVE-2026-64738 |
critical | 9.8 | 0.0056 | 2026-07-27 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.10 a | |
CVE-2026-60727 |
critical | 9.8 | 0.0051 | 2026-08-18 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Leg | |
CVE-2026-60821 |
critical | 9.8 | 0.0051 | 2026-08-18 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Busi | |
CVE-2026-60921 |
critical | 9.8 | 0.0051 | 2026-08-18 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon | |
CVE-2026-60946 |
critical | 9.8 | 0.0051 | 2026-08-18 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon | |
CVE-2026-60947 |
critical | 9.8 | 0.0051 | 2026-08-18 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon | |
CVE-2026-60958 |
critical | 9.8 | 0.0051 | 2026-08-18 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon | |
CVE-2026-60970 |
critical | 9.8 | 0.0051 | 2026-08-18 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon |