Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2633)
CWE-79 (1817)
CWE-416 (1289)
CWE-862 (1174)
CWE-89 (1095)
CWE-22 (1022)
CWE-125 (878)
CWE-200 (846)
CWE-306 (837)
CWE-122 (829)
CWE-20 (793)
CWE-78 (708)
CWE-918 (688)
CWE-787 (681)
CWE-94 (639)
CWE-863 (617)
CWE-74 (600)
CWE-639 (538)
CWE-400 (521)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (438)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (366)
CWE-362 (322)
CWE-352 (275)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-56185 |
medium | 6.5 | 0.0084 | 2026-07-14 | Improper authentication in Windows Admin Center allows an authorized attacker to disclose informatio | |
CVE-2023-28325 |
medium | 6.5 | 0.0039 | 2023-05-11 | An improper authorization vulnerability exists in Rocket.Chat <6.0 that could allow a hacker to mani | |
CVE-2026-34500 |
medium | 6.5 | 0.0045 | 2026-04-09 | CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled a | |
CVE-2026-41081 |
medium | 6.5 | 0.0029 | 2026-04-27 | Improper Handling of TLS Client Authentication Failure Leading to Anonymous Principal Assignment in | |
CVE-2026-35261 |
medium | 6.5 | 0.0027 | 2026-06-17 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic | |
CVE-2026-13208 |
medium | 6.5 | 0.0013 | 2026-06-24 | A flaw was found in KubeVirt's virt-handler domain notify server. The gRPC handlers for HandleDomain | |
CVE-2026-55955 |
medium | 6.5 | 0.0044 | 2026-06-29 | Improper Authentication vulnerability in Apache Tomcat allowed a replay attack against the Encryptio | |
CVE-2026-63238 |
medium | 6.5 | 0.0034 | 2026-07-29 | An authentication bypass vulnerability in Koollab LMS allowed an unauthenticated attacker to take ov | |
CVE-2026-8508 |
medium | 6.5 | 0.0032 | 2026-08-04 | An improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S firm | |
CVE-2026-17488 |
medium | 6.5 | 0.0024 | 2026-10-16 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrict | |
CVE-2026-88928 |
medium | 6.5 | 0.0014 | 2026-10-29 | The PAYCOMET for WooCommerce WordPress plugin before 5.46 does not verify the cryptographic signatur | |
CVE-2026-56353 |
medium | 6.3 | 0.0033 | 2026-07-15 | n8n contains an authentication bypass in the Chat Trigger node when configured with n8n User Auth (a | |
CVE-2026-115996 |
medium | 6.3 | 0.0023 | 2026-10-24 | A vulnerability was detected in Unitree Robotics Unitree Go2 up to 1.1.13/1.1.14.1/1.1.15.1. This af | |
CVE-2026-32072 |
medium | 6.2 | 0.0029 | 2026-04-14 | Improper authentication in Windows Active Directory allows an unauthorized attacker to perform spoof | |
CVE-2026-57183 |
medium | 6.1 | 0.0030 | 2026-10-15 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, checkApiAuth() in src/m | |
CVE-2023-27535 |
medium | 5.9 | 0.0180 | 2023-03-30 | An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature | |
CVE-2023-27536 |
medium | 5.9 | 0.0176 | 2023-03-30 | An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which c | |
CVE-2026-27856 |
medium | 5.9 | 0.0040 | 2026-03-27 | Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attac | |
CVE-2026-15087 |
medium | 5.9 | 0.0031 | 2026-07-10 | vulnerability in Drupal Clean RESTful allows . This issue affects Clean RESTful versions: *.*. | |
CVE-2026-72917 |
medium | 5.9 | 0.0035 | 2026-08-10 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as refe | |
CVE-2026-65329 |
medium | 5.9 | 0.0024 | 2026-08-17 | An authentication issue was addressed with improved state management. This issue is fixed in iOS 26. | |
CVE-2026-82332 |
medium | 5.7 | 0.0012 | 2026-10-27 | An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authenti | |
CVE-2026-7679 |
medium | 5.5 | 0.0042 | 2026-05-03 | A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This impacts the function g | |
CVE-2026-7710 |
medium | 5.5 | 0.0040 | 2026-05-04 | A security flaw has been discovered in YunaiV yudao-cloud up to 3.8.0. This affects the function doF | |
CVE-2026-116604 |
medium | 5.5 | 0.0057 | 2026-10-27 | A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected eleme | |
CVE-2026-0589 |
medium | 5.5 | 0.0057 | 2026-01-05 | A vulnerability was found in code-projects Online Product Reservation System 1.0. Impacted is an unk | |
CVE-2026-4959 |
medium | 5.5 | 0.0045 | 2026-03-27 | A vulnerability was found in OpenBMB XAgent 1.0.0. This impacts the function check_user of the file | |
CVE-2026-6126 |
medium | 5.5 | 0.0040 | 2026-04-12 | A weakness has been identified in zhayujie chatgpt-on-wechat CowAgent 2.0.4. The affected element is | |
CVE-2026-6129 |
medium | 5.5 | 0.0039 | 2026-04-12 | A vulnerability was detected in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4. This affects an unk | |
CVE-2026-6577 |
medium | 5.5 | 0.0039 | 2026-04-19 | A vulnerability was identified in liangliangyy DjangoBlog up to 2.1.0.0. The impacted element is an | |
CVE-2026-6579 |
medium | 5.5 | 0.0043 | 2026-04-19 | A weakness has been identified in liangliangyy DjangoBlog up to 2.1.0.0. This impacts an unknown fun | |
CVE-2026-6582 |
medium | 5.5 | 0.0039 | 2026-04-19 | A flaw has been found in TransformerOptimus SuperAGI up to 0.0.14. Affected by this issue is the fun | |
CVE-2026-6635 |
medium | 5.5 | 0.0047 | 2026-04-20 | A security vulnerability has been detected in rowboatlabs rowboat up to 0.1.67. This impacts the fun | |
CVE-2026-7022 |
medium | 5.5 | 0.0038 | 2026-04-26 | A security vulnerability has been detected in SmythOS sre up to 0.0.15. Affected is the function Age | |
CVE-2026-7042 |
medium | 5.5 | 0.0038 | 2026-04-26 | A flaw has been found in 666ghj MiroFish up to 0.1.2. This affects the function create_app of the fi | |
CVE-2026-7630 |
medium | 5.5 | 0.0043 | 2026-05-02 | A vulnerability has been found in innocommerce InnoShop up to 0.7.8. The affected element is the fun | |
CVE-2026-7714 |
medium | 5.5 | 0.0046 | 2026-05-04 | A flaw has been found in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by this issue is | |
CVE-2026-7722 |
medium | 5.5 | 0.0045 | 2026-05-04 | A vulnerability was detected in PrefectHQ prefect up to 3.6.21. This impacts the function endswith o | |
CVE-2026-7723 |
medium | 5.5 | 0.0042 | 2026-05-04 | A flaw has been found in PrefectHQ prefect up to 3.6.13. Affected is an unknown function of the file | |
CVE-2026-8031 |
medium | 5.5 | 0.0039 | 2026-05-06 | A vulnerability was detected in PicoTronica e-Clinic Healthcare System ECHS 5.7. The affected elemen | |
CVE-2026-8321 |
medium | 5.5 | 0.0041 | 2026-05-11 | A vulnerability was detected in inkeep agents 0.58.14. This vulnerability affects the function creat | |
CVE-2026-8737 |
medium | 5.5 | 0.0040 | 2026-05-17 | A weakness has been identified in Sanluan PublicCMS 5.202506.d. This issue affects the function exec | |
CVE-2026-12773 |
medium | 5.5 | 0.0102 | 2026-06-21 | A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyA | |
CVE-2026-12795 |
medium | 5.5 | 0.0080 | 2026-06-21 | A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects the function json.dumps | |
CVE-2026-13546 |
medium | 5.5 | 0.0065 | 2026-06-29 | A vulnerability was found in Feehi CMS up to 2.1.1. This vulnerability affects unknown code of the f | |
CVE-2026-14622 |
medium | 5.5 | 0.0069 | 2026-07-04 | A vulnerability was found in jairiidriss restaurant-website-php-mysql up to 521428b5b612449df0cf4a5d | |
CVE-2026-14714 |
medium | 5.5 | 0.0078 | 2026-07-05 | A weakness has been identified in zhayujie chatgpt-on-wechat CowAgent 2.1.0. This issue affects the | |
CVE-2026-15192 |
medium | 5.5 | 0.0076 | 2026-07-09 | A vulnerability has been found in mettle sendportal up to 3.0.1. This issue affects the function sen | |
CVE-2026-15557 |
medium | 5.5 | 0.0069 | 2026-07-13 | A weakness has been identified in waooAI waoowaoo up to 0.4.1. Affected by this vulnerability is the | |
CVE-2026-16083 |
medium | 5.5 | 0.0072 | 2026-07-18 | A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. This affects the function webhoo |