Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2613)
CWE-79 (1799)
CWE-416 (1282)
CWE-862 (1165)
CWE-89 (1090)
CWE-22 (1012)
CWE-125 (862)
CWE-200 (839)
CWE-306 (831)
CWE-122 (824)
CWE-20 (786)
CWE-78 (699)
CWE-918 (684)
CWE-787 (674)
CWE-94 (636)
CWE-863 (602)
CWE-74 (599)
CWE-639 (533)
CWE-400 (512)
CWE-269 (499)
CWE-119 (494)
CWE-502 (466)
CWE-770 (430)
CWE-287 (421)
CWE-121 (403)
CWE-77 (371)
CWE-190 (361)
CWE-362 (320)
CWE-352 (271)
CWE-285 (241)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-86384 |
critical | 9.8 | 0.0047 | 2026-10-28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release version | |
CVE-2026-47410 |
critical | 9.8 | 0.0045 | 2026-07-21 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior | |
CVE-2026-16504 |
critical | 9.8 | 0.0048 | 2026-07-31 | Deployment of the VPS.org one-click Zulip template deploys a hardcoded application signing key, a de | |
CVE-2026-117564 |
critical | 9.3 | 0.0060 | 2026-10-27 | nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated | |
CVE-2026-46395 |
critical | 9.3 | 0.0029 | 2026-06-05 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, the `h | |
CVE-2026-56271 |
critical | 9.3 | 0.0066 | 2026-07-12 | Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak hardcoded default JWT secrets | |
CVE-2026-62241 |
critical | 9.3 | 0.0067 | 2026-07-17 | clawvet self-hosted API server (apps/api) before 0.7.5 hard-codes a fallback JWT secret ('clawvet-de | |
CVE-2026-54363 |
critical | 9.3 | 0.0069 | 2026-07-30 | CentreStack before 17.5 contains a hardcoded cryptographic key vulnerability that allows unauthentic | |
CVE-2026-116747 |
critical | 9.2 | 0.0062 | 2026-10-26 | Kener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that allows unauthenticate | |
CVE-2026-35019 |
critical | 9.2 | 0.0081 | 2026-06-23 | NetComm NF20MESH routers running firmware R6B031 and earlier contain an authentication bypass vulner | |
CVE-2026-5426 |
critical | 9.1 | 0.0101 | 2026-04-16 | Hard-coded ASP.NET/IIS machineKey value in Digital Knowledge KnowledgeDeliver deployments prior to F | |
CVE-2026-18753 |
critical | 9.1 | 0.0044 | 2026-08-04 | The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web serve | |
CVE-2026-18754 |
critical | 9.1 | 0.0044 | 2026-08-04 | The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web serve | |
CVE-2026-14804 |
critical | 9.1 | 0.0040 | 2026-08-04 | Use of hard-coded cryptographic key vulnerability in Bilin Software and Informatics Consultancy Inc. | |
CVE-2026-54218 |
high | 8.8 | 0.0046 | 2026-08-07 | Use of hard-coded cryptographic key vulnerability in Tobit Laboratories AG TeamDavid's Webbox. For u | |
CVE-2026-111633 |
high | 8.8 | 0.0044 | 2026-10-16 | ZKEACMS through 4.4 contains an authentication bypass vulnerability that allows unauthenticated atta | |
CVE-2026-76298 |
high | 8.8 | 0.0035 | 2026-10-21 | In Splunk Enterprise versions below 10.4.4 and 10.2.8, a user who does not hold the "admin" or "powe | |
CVE-2025-62839 |
high | 8.7 | 0.0024 | 2026-10-29 | An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup | |
CVE-2025-62841 |
high | 8.7 | 0.0024 | 2026-10-29 | An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup | |
CVE-2026-42518 |
high | 8.7 | 0.0022 | 2026-04-29 | This vulnerability exists in e-Sushrut due to disclosure of sensitive information and hardcoded AES | |
CVE-2026-9220 |
high | 8.7 | 0.0039 | 2026-06-26 | Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior encrypts requests bet | |
CVE-2026-110474 |
high | 8.7 | 0.0037 | 2026-10-26 | This vulnerability exists in the CreditNirvana Agentic AI Call Centre application due to hardcoded s | |
CVE-2026-33362 |
high | 8.6 | 0.0024 | 2026-05-11 | In Meari IoT SDK builds embedded in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and white | |
CVE-2026-112345 |
high | 8.6 | 0.0024 | 2026-10-26 | TTLock Android application before v9.8.260718 and associated smart-lock firmware contain a hardcoded | |
CVE-2026-6787 |
high | 8.5 | 0.0011 | 2026-05-06 | Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of | |
CVE-2026-63423 |
high | 8.5 | 0.0015 | 2026-08-13 | During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessori | |
CVE-2026-71456 |
high | 8.5 | 0.0010 | 2026-10-26 | Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Paddi | |
CVE-2026-82891 |
high | 8.1 | 0.0050 | 2026-10-20 | IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive inform | |
CVE-2026-66763 |
high | 7.9 | 0.0020 | 2026-08-11 | SAP BusinessObjects Business Intelligence Platform stores certain sensitive credentials associated w | |
CVE-2026-111460 |
high | 7.7 | 0.0030 | 2026-10-27 | A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain c | |
CVE-2026-32324 |
high | 7.7 | 0.0009 | 2026-04-17 | Anviz CX7 Firmware is vulnerable because the application embeds reusable certificate/key material, | |
CVE-2026-33266 |
high | 7.5 | 0.0030 | 2026-04-09 | Use of Hard-coded Cryptographic Key vulnerability in Apache OpenMeetings. The remember-me cookie en | |
CVE-2026-13184 |
high | 7.5 | 0.0031 | 2026-07-22 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, when Telerik.Upload.ConfigurationHashKey is | |
CVE-2026-50091 |
high | 7.4 | 0.0029 | 2026-06-12 | Aqara Home Android (com.lumiunited.aqarahome) 6.0.0 (and white-label clients embedding the same libl | |
CVE-2026-54833 |
high | 7.4 | 0.0032 | 2026-06-26 | Unauthenticated Backdoor in Enable CORS <= 2.0.3 versions. | |
CVE-2025-40946 |
high | 7.2 | 0.0019 | 2026-05-12 | A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 | |
CVE-2026-34022 |
high | 7.1 | 0.0012 | 2026-06-15 | The Wertheim SafeController Family 65000, Controller 65000 - AssemblyVersion 6.11.8130.22319, uses w | |
CVE-2026-57262 |
high | 7.0 | 0.0015 | 2026-08-11 | A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). Affected products use | |
CVE-2026-100413 |
high | 7.0 | 0.0042 | 2026-10-14 | SeaweedFS is a distributed storage system for files and blobs. From 4.0.388 until 4.41, the SFTP Hel | |
CVE-2026-102812 |
medium | 6.9 | 0.0012 | 2026-10-27 | A hard-coded cryptographic key vulnerability exists in the user-configuration backup mechanism of TP | |
CVE-2026-32958 |
medium | 6.9 | 0.0023 | 2026-04-20 | SD-330AC and AMC Manager provided by silex technology, Inc. use a hard-coded cryptographic key. An a | |
CVE-2026-25107 |
medium | 6.9 | 0.0012 | 2026-05-13 | ELECOM wireless LAN access point devices use a hard-coded cryptographic key when creating backups of | |
CVE-2014-125135 |
medium | 6.9 | — | 2026-10-26 | A security vulnerability has been detected in OctoPrint 1.0.0/1.1.0. Affected is an unknown function | |
CVE-2026-34029 |
medium | 6.8 | 0.0012 | 2026-06-15 | The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains a hard-coded cryptog | |
CVE-2026-14932 |
medium | 6.5 | 0.0035 | 2026-07-22 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, the obsolete RadChart component's ChartImage | |
CVE-2026-49008 |
medium | 6.5 | 0.0030 | 2026-08-07 | By accessing unencrypted information in the device firmware, an attacker can obtain credentials rela | |
CVE-2026-76258 |
medium | 6.5 | 0.0034 | 2026-08-19 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway ve | |
CVE-2026-18330 |
medium | 6.1 | 0.0033 | 2026-09-03 | A hard-coded cryptographic key vulnerability exists in TP-Link RE305 V3 and Archer C7 V5. The same R | |
CVE-2026-89052 |
medium | 5.9 | 0.0024 | 2026-10-21 | A hardcoded cryptographic key management vulnerability exists in Archer C6 due to the use of a unive | |
CVE-2026-39810 |
medium | 5.5 | 0.0010 | 2026-04-14 | A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 m |