Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2605)
CWE-79 (1759)
CWE-416 (1278)
CWE-862 (1115)
CWE-89 (1087)
CWE-22 (1001)
CWE-125 (857)
CWE-200 (835)
CWE-306 (829)
CWE-122 (821)
CWE-20 (783)
CWE-78 (695)
CWE-918 (679)
CWE-787 (672)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (527)
CWE-400 (509)
CWE-269 (499)
CWE-119 (493)
CWE-770 (426)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (370)
CWE-190 (359)
CWE-362 (319)
CWE-352 (269)
CWE-285 (238)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-65145 |
critical | 10.0 | 0.0053 | 2026-10-27 | NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentica | |
CVE-2026-63508 |
critical | 10.0 | 0.0080 | 2026-08-06 | Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthori | |
CVE-2026-83938 |
critical | 10.0 | 0.0071 | 2026-10-22 | Missing authentication for critical function in Azure Kubernetes Configuration Service allows an una | |
CVE-2026-4370 |
critical | 10.0 | 0.0038 | 2026-04-01 | A vulnerability was identified in Juju from version 3.2.0 until 3.6.19 and from version 4.0 until 4. | |
CVE-2026-45087 |
critical | 10.0 | 0.0873 | 2026-05-27 | Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, whe | |
CVE-2026-35292 |
critical | 10.0 | 0.0048 | 2026-06-17 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supp | |
CVE-2026-35301 |
critical | 10.0 | 0.0048 | 2026-06-17 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supp | |
CVE-2026-46778 |
critical | 10.0 | 0.0047 | 2026-06-17 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon | |
CVE-2026-46781 |
critical | 10.0 | 0.0047 | 2026-06-17 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon | |
CVE-2026-46798 |
critical | 10.0 | 0.0048 | 2026-06-17 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente | |
CVE-2026-46800 |
critical | 10.0 | 0.0048 | 2026-06-17 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente | |
CVE-2026-46803 |
critical | 10.0 | 0.0047 | 2026-06-17 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Securit | |
CVE-2026-46846 |
critical | 10.0 | 0.0036 | 2026-06-17 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Securit | |
CVE-2026-49257 |
critical | 10.0 | 0.0062 | 2026-06-18 | mcp-pinot is a Python-based Model Context Protocol (MCP) server for interacting with Apache Pinot. I | |
CVE-2026-59726 |
critical | 10.0 | 0.0302 | 2026-07-09 | Ruflo is an agent meta-harness for Claude Code and Codex. Prior to 3.16.3, ruflo's default docker-co | |
CVE-2026-10577 |
critical | 10.0 | 0.0041 | 2026-07-14 | A security issue exists within the 1715-AENTR EtherNet/IP Adapter. The affected product exposes a ne | |
CVE-2026-46339 |
critical | 10.0 | 0.0276 | 2026-07-15 | 9Router is an AI router & token saver. From 0.4.30 until 0.4.37, 9Router's src/proxy.js middleware d | |
CVE-2026-47056 |
critical | 10.0 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Ser | |
CVE-2026-60217 |
critical | 10.0 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor | |
CVE-2026-60360 |
critical | 10.0 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Co | |
CVE-2026-60379 |
critical | 10.0 | 0.0051 | 2026-07-21 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa | |
CVE-2026-60389 |
critical | 10.0 | 0.0051 | 2026-07-21 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa | |
CVE-2026-60644 |
critical | 10.0 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Co | |
CVE-2026-60366 |
critical | 10.0 | 0.0055 | 2026-07-22 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (componen | |
CVE-2026-64812 |
critical | 10.0 | 0.0048 | 2026-07-23 | In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Devel | |
CVE-2026-56163 |
critical | 10.0 | 0.0090 | 2026-07-24 | Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unautho | |
CVE-2026-58115 |
critical | 10.0 | 0.0095 | 2026-08-11 | A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < | |
CVE-2026-85889 |
critical | 10.0 | 0.0067 | 2026-09-17 | Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to | |
CVE-2026-105944 |
critical | 10.0 | 0.0070 | 2026-10-21 | Apache Pulsar Manager is a web console for administering Apache Pulsar clusters. It has its own user | |
CVE-2026-42864 |
critical | 9.9 | 0.0027 | 2026-05-11 | FireFighter is an incident management application. Prior to 0.0.54, the POST /api/v2/firefighter/rai | |
CVE-2026-46933 |
critical | 9.9 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Inte | |
CVE-2026-46964 |
critical | 9.9 | 0.0040 | 2026-06-17 | Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work | |
CVE-2026-60206 |
critical | 9.9 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). | |
CVE-2026-60361 |
critical | 9.9 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Co | |
CVE-2026-60458 |
critical | 9.9 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon | |
CVE-2026-60461 |
critical | 9.9 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon | |
CVE-2026-60531 |
critical | 9.9 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (componen | |
CVE-2026-60537 |
critical | 9.9 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MF | |
CVE-2026-60627 |
critical | 9.9 | 0.0043 | 2026-07-21 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Install | |
CVE-2026-60711 |
critical | 9.9 | 0.0043 | 2026-07-21 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C | |
CVE-2026-61146 |
critical | 9.9 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-61239 |
critical | 9.9 | 0.0037 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft | |
CVE-2026-60720 |
critical | 9.9 | 0.0043 | 2026-08-18 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Leg | |
CVE-2026-102649 |
critical | 9.9 | 0.0046 | 2026-10-26 | Burrito is a Terraform Automation Collaboration Software (TACoS) Kubernetes operator. Prior to 0.13. | |
CVE-2026-15706 |
critical | 9.8 | 0.0064 | 2026-08-20 | Missing authentication for critical function vulnerability in Baylan Measuring Instruments Industry | |
CVE-2026-91323 |
critical | 9.8 | 0.0050 | 2026-10-20 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). | |
CVE-2026-91491 |
critical | 9.8 | 0.0035 | 2026-10-20 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (componen | |
CVE-2026-57116 |
critical | 9.8 | 0.0027 | 2026-10-23 | PraisonAI is a multi-agent teams system. From version 4.2.1 to before version 4.6.59, PraisonAI's Ag | |
CVE-2026-18450 |
critical | 9.8 | 0.0040 | 2026-10-27 | The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attac | |
CVE-2026-82116 |
critical | 9.8 | 0.0061 | 2026-10-27 | Missing Authentication for Critical Function Vulnerability in HiRDB. This issue affects HiRDB Serv |