Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1853)
CWE-416 (1298)
CWE-862 (1187)
CWE-89 (1098)
CWE-22 (1025)
CWE-125 (884)
CWE-200 (847)
CWE-306 (839)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (688)
CWE-863 (644)
CWE-94 (642)
CWE-74 (601)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (472)
CWE-770 (443)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (371)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-48814 |
critical | 9.1 | 0.0044 | 2026-06-17 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. In versions 5.7.1 and earlier, the MCP | |
CVE-2026-54061 |
critical | 9.1 | 0.0047 | 2026-07-08 | Dgraph is an open source distributed GraphQL database. Prior to version 25.3.5, Dgraph Alpha exposes | |
CVE-2026-58319 |
critical | 9.1 | 0.0075 | 2026-07-14 | Certain Apache Doris FE HTTP REST administrative APIs were accessible without proper authentication. | |
CVE-2026-47040 |
critical | 9.1 | 0.0049 | 2026-07-21 | Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions th | |
CVE-2026-61130 |
critical | 9.1 | 0.0049 | 2026-07-21 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Applicat | |
CVE-2026-61155 |
critical | 9.1 | 0.0049 | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (com | |
CVE-2026-61171 |
critical | 9.1 | 0.0043 | 2026-07-21 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The su | |
CVE-2026-62325 |
critical | 9.1 | 0.0043 | 2026-07-28 | goshs is a feature-rich single-binary file server for red teamers and developers. From 2.1.3 until 2 | |
CVE-2026-60591 |
critical | 9.1 | 0.0045 | 2026-08-18 | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (c | |
CVE-2026-70977 |
critical | 9.1 | 0.0045 | 2026-08-18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-70979 |
critical | 9.1 | 0.0045 | 2026-08-18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-71015 |
critical | 9.1 | 0.0043 | 2026-08-18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2025-70516 |
critical | 9.1 | 0.0033 | 2026-10-07 | The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authenticati | |
CVE-2026-101590 |
critical | 9.1 | 0.0042 | 2026-10-20 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-se | |
CVE-2026-91265 |
critical | 9.1 | 0.0042 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterpr | |
CVE-2026-91305 |
critical | 9.1 | 0.0042 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Install | |
CVE-2026-97406 |
critical | 9.1 | 0.0022 | 2026-10-20 | XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly i | |
CVE-2026-60424 |
critical | 9.0 | 0.0039 | 2026-07-21 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Co | |
CVE-2026-61201 |
critical | 9.0 | 0.0039 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise CRM Common Objects product of Oracle PeopleSoft (componen | |
CVE-2026-48989 |
high | 8.9 | 0.0040 | 2026-06-17 | Windows-MCP is an open-source project that integrates AI agents with Windows. In versions prior to 0 | |
CVE-2026-70580 |
high | 8.8 | 0.0034 | 2026-10-13 | Missing authentication for critical function in Windows Credential Guard allows an authorized attack | |
CVE-2026-87313 |
high | 8.8 | 0.0039 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interop | |
CVE-2026-91239 |
high | 8.8 | 0.0039 | 2026-10-20 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). | |
CVE-2026-91270 |
high | 8.8 | 0.0039 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitor | |
CVE-2026-91295 |
high | 8.8 | 0.0039 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterpr | |
CVE-2026-91310 |
high | 8.8 | 0.0029 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Install | |
CVE-2026-64921 |
high | 8.8 | 0.0094 | 2026-08-11 | Missing authentication for critical function in Microsoft Office SharePoint allows an authorized att | |
CVE-2026-50444 |
high | 8.8 | 0.0078 | 2026-07-14 | Missing authentication for critical function in Windows Server Update Service allows an authorized a | |
CVE-2026-57969 |
high | 8.8 | 0.0078 | 2026-07-14 | Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to el | |
CVE-2026-83928 |
high | 8.8 | 0.0056 | 2026-10-13 | Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthor | |
CVE-2026-26944 |
high | 8.8 | 0.0054 | 2026-04-20 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through | |
CVE-2026-41473 |
high | 8.8 | 0.0079 | 2026-04-24 | CyberPanel versions prior to 2.4.5 contain an authentication bypass vulnerability in the AI Scanner | |
CVE-2026-22924 |
high | 8.8 | 0.0030 | 2026-05-12 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected applicati | |
CVE-2026-42289 |
high | 8.8 | 0.0015 | 2026-05-12 | ChurchCRM is an open-source church management system. Prior to 7.3.2, UserEditor.php processes user | |
CVE-2026-0647 |
high | 8.8 | 0.0043 | 2026-06-16 | An improper authentication security issue exists within the 1794-AENTR adapter's embedded web server | |
CVE-2026-35265 |
high | 8.8 | 0.0044 | 2026-06-17 | Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Security). Su | |
CVE-2026-35267 |
high | 8.8 | 0.0044 | 2026-06-17 | Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServic | |
CVE-2026-35299 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supp | |
CVE-2026-35303 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supp | |
CVE-2026-46780 |
high | 8.8 | 0.0040 | 2026-06-17 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core | |
CVE-2026-46903 |
high | 8.8 | 0.0040 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Busines | |
CVE-2026-46916 |
high | 8.8 | 0.0031 | 2026-06-17 | Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business S | |
CVE-2026-46921 |
high | 8.8 | 0.0040 | 2026-06-17 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C | |
CVE-2026-46928 |
high | 8.8 | 0.0031 | 2026-06-17 | Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Interna | |
CVE-2026-46929 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Plan | |
CVE-2026-46937 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Upd | |
CVE-2026-46940 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Plan | |
CVE-2026-46942 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Process Manufacturing Process Planning product of Oracle E-Business Suit | |
CVE-2026-46951 |
high | 8.8 | 0.0041 | 2026-06-17 | Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operatio | |
CVE-2026-46952 |
high | 8.8 | 0.0040 | 2026-06-17 | Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operatio |