Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-61099 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon | |
CVE-2026-61110 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: ADPatch) | |
CVE-2026-61121 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). S | |
CVE-2026-61127 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Communications Service Catalog and Design product of Oracle Communicatio | |
CVE-2026-61149 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-61168 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The su | |
CVE-2026-61179 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply | |
CVE-2026-61180 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply | |
CVE-2026-61243 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft | |
CVE-2026-61311 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Oper | |
CVE-2026-61320 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Internal Operati | |
CVE-2026-61322 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the TeleSales product of Oracle E-Business Suite (component: Internal Operations). | |
CVE-2026-62447 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LO | |
CVE-2026-62464 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operatio | |
CVE-2026-62476 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Int | |
CVE-2026-62478 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: | |
CVE-2026-62496 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Yard Management product of Oracle E-Business Suite (component: Internal | |
CVE-2026-62498 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Intern | |
CVE-2026-62534 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: We | |
CVE-2026-66014 |
high | 8.8 | 0.0064 | 2026-07-27 | JFrog Artifactory contains an authentication handling weakness in internal request processing that, | |
CVE-2026-72533 |
high | 8.8 | 0.0056 | 2026-08-11 | An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privi | |
CVE-2026-70922 |
high | 8.8 | 0.0043 | 2026-08-18 | Vulnerability in the Oracle Financial Services Enterprise Case Management product of Oracle Financia | |
CVE-2026-21582 |
high | 8.8 | 0.0046 | 2026-08-18 | This High severity BASM (Broken Authentication & Session Management) vulnerability known as CVE-2026 | |
CVE-2026-50191 |
high | 8.8 | 0.0047 | 2026-08-18 | 4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards is vulnerabl | |
CVE-2026-105949 |
high | 8.8 | 0.0033 | 2026-10-20 | Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs | |
CVE-2026-91213 |
high | 8.8 | 0.0045 | 2026-10-20 | Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (c | |
CVE-2026-105210 |
high | 8.8 | 0.0024 | 2026-10-04 | ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a missing authentication flaw in the hosted | |
CVE-2026-83426 |
high | 8.7 | 0.0031 | 2026-10-20 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic | |
CVE-2026-8621 |
high | 8.7 | 0.0036 | 2026-05-14 | Crabbox prior to v0.12.0 contains an authentication bypass vulnerability that allows non-admin share | |
CVE-2026-58399 |
high | 8.7 | 0.0097 | 2026-07-01 | @acastellon/auth is an authentication control system for microservices. Versions prior to 2.3.0 appe | |
CVE-2026-22099 |
high | 8.7 | 0.0030 | 2026-07-13 | The charging station does not require authentication for Bluetooth commands to perform actions. The | |
CVE-2026-49852 |
high | 8.7 | 0.0017 | 2026-07-17 | joserfc is a Python library that provides an implementation of several JSON Object Signing and Encry | |
CVE-2026-58075 |
high | 8.7 | 0.0042 | 2026-08-04 | A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which ca | |
CVE-2026-112775 |
high | 8.7 | 0.0040 | 2026-10-19 | Craft CMS from 5.0.0 before 5.11.0 contains an authentication bypass vulnerability that allows attac | |
CVE-2026-93489 |
high | 8.7 | 0.0023 | 2026-10-23 | Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP | |
CVE-2026-105212 |
high | 8.7 | 0.0032 | 2026-10-04 | ZITADEL 3.x before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Logi | |
CVE-2026-53591 |
high | 8.6 | 0.0027 | 2026-07-20 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version | |
CVE-2026-60327 |
high | 8.6 | 0.0041 | 2026-07-21 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic | |
CVE-2026-56837 |
high | 8.6 | 0.0019 | 2026-10-23 | PraisonAI is a multi-agent teams system. From version 4.6.56 to before version 4.6.59, PraisonAI's L | |
CVE-2026-54320 |
high | 8.4 | 0.0035 | 2026-06-23 | Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent wor | |
CVE-2026-103779 |
high | 8.3 | 0.0047 | 2026-10-28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release version | |
CVE-2026-56675 |
high | 8.3 | 0.0050 | 2026-07-10 | 9Router is an AI router & token saver. Prior to 0.5.2, 9router treats loopback requests as trusted a | |
CVE-2026-16686 |
high | 8.2 | 0.0050 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to access NFS-exported f | |
CVE-2026-50338 |
high | 8.2 | 0.0052 | 2026-07-14 | Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges ove | 1 PoC |
CVE-2026-34531 |
high | 8.2 | 0.0034 | 2026-04-01 | Flask-HTTPAuth provides Basic, Digest and Token HTTP authentication for Flask routes. Prior to versi | |
CVE-2026-46485 |
high | 8.2 | 0.0038 | 2026-07-15 | Dashy is a self-hostable personal dashboard. Prior to 4.0.8, Dashy deployments using OIDC can allow | |
CVE-2026-60615 |
high | 8.2 | 0.0035 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (compone | |
CVE-2026-72922 |
high | 8.2 | 0.0048 | 2026-08-11 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificia | |
CVE-2026-73337 |
high | 8.2 | 0.0046 | 2026-08-18 | Joomla! Core - [20260807] - MFA Authentication Bypass in Joomla 4.0.0-5.4.7 and 6.0.0-6.1.2 - Insuff | |
CVE-2026-16857 |
high | 8.2 | 0.0060 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to manipulate network tr |