Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-82116 |
critical | 9.8 | 0.0061 | 2026-10-27 | Missing Authentication for Critical Function Vulnerability in HiRDB. This issue affects HiRDB Serv | |
CVE-2026-103409 |
critical | 9.8 | 0.0035 | 2026-10-28 | A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Route | |
CVE-2026-77900 |
critical | 9.8 | 0.0072 | 2026-10-08 | Missing authentication for critical function in Azure App Service allows an unauthorized attacker to | |
CVE-2024-26011 |
critical | 9.8 | 0.0060 | 2024-11-12 | A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through | |
CVE-2026-34072 |
critical | 9.8 | 0.0046 | 2026-04-01 | Cr*nMaster (cronmaster) is a Cronjob management UI with human readable syntax, live logging and log | |
CVE-2026-35546 |
critical | 9.8 | 0.0059 | 2026-04-17 | Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads. This causes crafted arch | |
CVE-2026-40050 |
critical | 9.8 | 0.0060 | 2026-04-21 | CrowdStrike has released security updates to address a critical unauthenticated path traversal vulne | |
CVE-2026-40884 |
critical | 9.8 | 0.0048 | 2026-04-21 | goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.6, goshs contains an SFTP authenticat | |
CVE-2026-34275 |
critical | 9.8 | 0.0038 | 2026-04-21 | Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component | |
CVE-2026-42221 |
critical | 9.8 | 0.0134 | 2026-05-04 | Nginx UI is a web user interface for the Nginx web server. From version 2.0.0 to before version 2.3. | |
CVE-2026-42222 |
critical | 9.8 | 0.0034 | 2026-05-04 | Nginx UI is a web user interface for the Nginx web server. In version 2.3.5, an unauthenticated boot | |
CVE-2026-7415 |
critical | 9.8 | 0.0054 | 2026-05-07 | The MQTT broker embedded in Yarbo firmware v2.3.9 is configured to allow anonymous connections with | |
CVE-2026-8364 |
critical | 9.8 | 0.0038 | 2026-05-27 | Gladinet Triofox Cloud Server Agent Access Service (GladServerAgentService.exe) listens on TCP port | |
CVE-2026-45083 |
critical | 9.8 | 0.0041 | 2026-05-27 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browse | |
CVE-2026-50085 |
critical | 9.8 | 0.0041 | 2026-06-12 | The Aqara Board service (op-test.aqara.com) accepts arbitrary MQTT command payloads, and forwards th | |
CVE-2026-35278 |
critical | 9.8 | 0.0064 | 2026-06-17 | Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: P | |
CVE-2026-35286 |
critical | 9.8 | 0.0048 | 2026-06-17 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-35293 |
critical | 9.8 | 0.0048 | 2026-06-17 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente | |
CVE-2026-35296 |
critical | 9.8 | 0.0048 | 2026-06-17 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente | |
CVE-2026-35304 |
critical | 9.8 | 0.0047 | 2026-06-17 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor | |
CVE-2026-46783 |
critical | 9.8 | 0.0048 | 2026-06-17 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core | |
CVE-2026-46799 |
critical | 9.8 | 0.0047 | 2026-06-17 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente | |
CVE-2026-46801 |
critical | 9.8 | 0.0048 | 2026-06-17 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente | |
CVE-2026-46807 |
critical | 9.8 | 0.0052 | 2026-06-17 | Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI) | |
CVE-2026-46813 |
critical | 9.8 | 0.0047 | 2026-06-17 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-46845 |
critical | 9.8 | 0.0047 | 2026-06-17 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Securit | |
CVE-2026-46879 |
critical | 9.8 | 0.0048 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterpr | |
CVE-2026-46890 |
critical | 9.8 | 0.0048 | 2026-06-17 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). S | |
CVE-2026-46902 |
critical | 9.8 | 0.0047 | 2026-06-17 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite ( | |
CVE-2026-46904 |
critical | 9.8 | 0.0047 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterpr | |
CVE-2026-46905 |
critical | 9.8 | 0.0048 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Run | |
CVE-2026-46909 |
critical | 9.8 | 0.0048 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterpr | |
CVE-2026-46919 |
critical | 9.8 | 0.0036 | 2026-06-17 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C | |
CVE-2026-50242 |
critical | 9.8 | 0.0061 | 2026-06-19 | In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 20 | |
CVE-2026-4767 |
critical | 9.8 | 0.0061 | 2026-07-02 | Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. WAF-ASP allow | |
CVE-2026-62422 |
critical | 9.8 | 0.0061 | 2026-07-14 | In JetBrains YouTrack before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.14843 | |
CVE-2026-9202 |
critical | 9.8 | 0.0050 | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited user acco | |
CVE-2026-9103 |
critical | 9.8 | 0.0321 | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unauthorized access due | |
CVE-2026-8505 |
critical | 9.8 | 0.0072 | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.0 has a vulnerability in Langflow's webhook authentication logic | |
CVE-2026-47391 |
critical | 9.8 | 0.0150 | 2026-07-21 | PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's first-party A2A server | |
CVE-2026-47393 |
critical | 9.8 | 0.0058 | 2026-07-21 | PraisonAI is a multi-agent teams system. CVE-2026-44338 (GHSA-6rmh-7xcm-cpxj) documents that Praison | |
CVE-2026-47396 |
critical | 9.8 | 0.0043 | 2026-07-21 | PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's call server exposes a | |
CVE-2026-47036 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval | |
CVE-2026-60197 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor | |
CVE-2026-60198 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). | |
CVE-2026-60199 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). | |
CVE-2026-60200 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). | |
CVE-2026-60202 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). | |
CVE-2026-60204 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). | |
CVE-2026-60205 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). |