CWE-284 (2634) CWE-79 (1821) CWE-416 (1298) CWE-862 (1175) CWE-89 (1097) CWE-22 (1024) CWE-125 (884) CWE-200 (847) CWE-306 (838) CWE-122 (831) CWE-20 (798) CWE-78 (710) CWE-918 (689) CWE-787 (686) CWE-94 (641) CWE-863 (617) CWE-74 (600) CWE-639 (543) CWE-400 (530) CWE-119 (503) CWE-269 (501) CWE-502 (470) CWE-770 (440) CWE-287 (432) CWE-121 (408) CWE-77 (373) CWE-190 (370) CWE-362 (323) CWE-352 (276) CWE-285 (243)

CWE-288

116 CVEs View on MITRE →
CVE Severity CVSS EPSS Published Description Flags
CVE-2026-20459 medium 5.3 0.0026 2026-07-01 In Modem, there is a possible system crash due to improper input validation. This could lead to remo
CVE-2026-20460 medium 5.3 0.0026 2026-07-01 In Modem, there is a possible information disclosure due to improper input validation. This could le
CVE-2026-96387 low 3.8 0.0027 2026-10-22 Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Stop administrator
CVE-2026-16198 low 2.9 0.0063 2026-07-19 A vulnerability was detected in Sipeed PicoClaw up to 0.2.9. The impacted element is an unknown func
CVE-2025-14714 low 0.9 0.0014 2025-12-15 An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python)
CVE-2023-20269 — — 0.2662 — Cisco Adaptive Security Appliance and Firepower Threat Defense contain an unauthorized access vulner KEV
CVE-2024-55591 — — 0.9435 — Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an una KEV
CVE-2025-24472 — — 0.0723 — Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that allows a remote KEV
CVE-2025-57819 — — 0.9521 — Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user KEV
CVE-2026-23760 — — 0.9643 — SmarterTools SmarterMail contains an authentication bypass using an alternate path or channel vulner KEV
CVE-2026-20079 — — 0.8847 — Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewa KEV
CVE-2026-3605 — — 0.0038 2026-04-17 An authenticated user with access to a kvv2 path through a policy containing a glob may be able to d
CVE-2026-40022 — — 0.0094 2026-04-27 When authentication is enabled on the Apache Camel embedded HTTP server or embedded management serve
CVE-2026-44574 — — 0.0064 2026-05-13 Next.js is a React framework for building full-stack web applications. From 15.4.0 to before 15.5.16
CVE-2026-44575 — — 0.0159 2026-05-13 Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.16
CVE-2026-45109 — — 0.0060 2026-05-13 Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.18