Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2633)
CWE-79 (1817)
CWE-416 (1289)
CWE-862 (1174)
CWE-89 (1095)
CWE-22 (1022)
CWE-125 (878)
CWE-200 (846)
CWE-306 (837)
CWE-122 (829)
CWE-20 (793)
CWE-78 (708)
CWE-918 (688)
CWE-787 (681)
CWE-94 (639)
CWE-863 (617)
CWE-74 (600)
CWE-639 (538)
CWE-400 (521)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (438)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (366)
CWE-362 (322)
CWE-352 (275)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-56162 |
critical | 10.0 | 0.0090 | 2026-08-06 | Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges | |
CVE-2026-56191 |
critical | 10.0 | 0.0090 | 2026-07-24 | Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tamp | |
CVE-2026-62825 |
critical | 10.0 | 0.0092 | 2026-07-24 | Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges ove | |
CVE-2026-97785 |
critical | 10.0 | 0.0065 | 2026-10-22 | Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over | |
CVE-2026-41679 |
critical | 10.0 | 0.3167 | 2026-04-23 | Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business. | |
CVE-2026-41070 |
critical | 10.0 | 0.0044 | 2026-05-08 | openvpn-auth-oauth2 is a plugin/management interface client for OpenVPN server to handle an OIDC bas | |
CVE-2026-42869 |
critical | 10.0 | 0.0056 | 2026-05-11 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations nee | |
CVE-2026-20182 |
critical | 10.0 | 0.9182 | 2026-05-14 | Cisco Catalyst SD-WAN Controller & Manager contain an authentication bypass vulnerability that allow | KEV |
CVE-2026-45480 |
critical | 10.0 | 0.0090 | 2026-06-19 | Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privile | |
CVE-2026-49869 |
critical | 10.0 | 0.0209 | 2026-06-26 | Kestra OSS contains an OS command injection vulnerability that could allow an unauthenticated remote | KEV |
CVE-2026-57216 |
critical | 10.0 | 0.0050 | 2026-07-10 | RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, AMQP 0-9- | |
CVE-2026-59500 |
critical | 10.0 | 0.0050 | 2026-08-13 | : Improper Authentication vulnerability in Priority Portal Generator addon to Priority ERP (develope | |
CVE-2026-84295 |
critical | 10.0 | — | 2026-10-29 | Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 o | |
CVE-2026-60333 |
critical | 9.9 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic | |
CVE-2026-60568 |
critical | 9.9 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime | |
CVE-2026-91222 |
critical | 9.9 | 0.0045 | 2026-10-20 | Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (c | |
CVE-2026-16656 |
critical | 9.8 | 0.0072 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to gain root privileges | |
CVE-2026-17000 |
critical | 9.8 | 0.0077 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-17142 |
critical | 9.8 | 0.0092 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary com | |
CVE-2026-91323 |
critical | 9.8 | 0.0050 | 2026-10-20 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). | |
CVE-2026-91491 |
critical | 9.8 | 0.0035 | 2026-10-20 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (componen | |
CVE-2026-92885 |
critical | 9.8 | 0.0037 | 2026-10-27 | The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account T | |
CVE-2026-106013 |
critical | 9.8 | 0.0055 | 2026-10-28 | The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Soc | |
CVE-2026-86400 |
critical | 9.8 | 0.0090 | 2026-10-28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release version | |
CVE-2026-109516 |
critical | 9.8 | 0.0057 | 2026-10-29 | The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to Authentication Bypass lead | |
CVE-2023-29129 |
critical | 9.8 | 0.0089 | 2023-06-13 | A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.3 < | |
CVE-2026-34072 |
critical | 9.8 | 0.0046 | 2026-04-01 | Cr*nMaster (cronmaster) is a Cronjob management UI with human readable syntax, live logging and log | |
CVE-2026-4101 |
critical | 9.8 | 0.0037 | 2026-04-01 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10 | |
CVE-2026-46389 |
critical | 9.8 | 0.0034 | 2026-06-05 | UDS Identity Config builds the Keycloak configuration image (realm, plugins, theme, truststore, JARs | |
CVE-2026-48114 |
critical | 9.8 | 0.0037 | 2026-06-15 | Metacat is data repository software that helps researchers preserve, share, and discover data. Versi | |
CVE-2026-46859 |
critical | 9.8 | 0.0051 | 2026-06-17 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The su | |
CVE-2026-46890 |
critical | 9.8 | 0.0048 | 2026-06-17 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). S | |
CVE-2026-46919 |
critical | 9.8 | 0.0036 | 2026-06-17 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C | |
CVE-2026-7664 |
critical | 9.8 | 0.0050 | 2026-06-22 | IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to access protected MCP p | |
CVE-2026-53483 |
critical | 9.8 | 0.0063 | 2026-07-07 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through | |
CVE-2026-9695 |
critical | 9.8 | 0.0061 | 2026-07-08 | An Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2 | |
CVE-2026-47865 |
critical | 9.8 | 0.0061 | 2026-07-18 | VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with netw | |
CVE-2026-12341 |
critical | 9.8 | 0.0040 | 2026-07-20 | This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attacker unautho | |
CVE-2026-60328 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic | |
CVE-2026-61065 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic | |
CVE-2026-61129 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: ATG Portals). | |
CVE-2026-61131 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Applicat | |
CVE-2026-61154 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (com | |
CVE-2026-61178 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply | |
CVE-2026-61183 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply | |
CVE-2026-61233 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (c | |
CVE-2026-60367 |
critical | 9.8 | 0.0055 | 2026-07-22 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (componen | |
CVE-2026-10697 |
critical | 9.8 | 0.0060 | 2026-07-23 | Improper Authentication vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transf | |
CVE-2026-28323 |
critical | 9.8 | 0.0103 | 2026-07-30 | SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This | |
CVE-2026-63456 |
critical | 9.8 | 0.0080 | 2026-08-04 | Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow |