Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-41431 |
high | 8.0 | 0.0020 | 2026-05-11 | Zen is a firefox-based browser. Prior to 1.19.9b, Zen Browser ships a Mozilla Application Resource ( | |
CVE-2026-69650 |
high | 7.8 | 0.0025 | 2026-10-13 | Improper verification of cryptographic signature in Windows Key Distribution Center allows an author | |
CVE-2026-97799 |
high | 7.8 | 0.0032 | 2026-10-13 | Improper verification of cryptographic signature in Windows Audio Service allows an authorized attac | |
CVE-2026-116189 |
high | 7.7 | 0.0014 | 2026-10-25 | rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfupdate that | |
CVE-2026-32144 |
high | 7.6 | 0.0020 | 2026-04-07 | Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_ocsp module) allows O | |
CVE-2026-58085 |
high | 7.5 | 0.0032 | 2026-08-19 | After dispatching a decrypt operation to OCF and receiving the result, the wg(4) driver failed to ch | |
CVE-2026-87696 |
high | 7.5 | 0.0042 | 2026-10-13 | Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized a | |
CVE-2026-118040 |
high | 7.5 | 0.0009 | 2026-10-28 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verificat | |
CVE-2026-62918 |
high | 7.5 | 0.0050 | 2026-08-06 | Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker | |
CVE-2026-9793 |
high | 7.5 | 0.0016 | 2026-05-28 | A flaw was found in Keycloak. When a JSON Web Encryption (JWE) encrypted request object is submitted | |
CVE-2026-48815 |
high | 7.5 | 0.0017 | 2026-07-14 | sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 4.1.1, th | |
CVE-2026-49834 |
high | 7.5 | 0.0018 | 2026-07-17 | sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.0, a verifier config | |
CVE-2026-13089 |
high | 7.5 | 0.0037 | 2026-07-22 | OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token | |
CVE-2026-18089 |
high | 7.5 | 0.0023 | 2026-08-03 | Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass by verifying responses aga | |
CVE-2026-18568 |
high | 7.5 | 0.0032 | 2026-08-03 | XML::Sig versions from 0.29 before 0.72 for Perl allow signature verification bypass because verify | |
CVE-2026-68757 |
high | 7.5 | 0.0027 | 2026-08-12 | A user with access to a valid SAML response may impersonate another user under specific conditions. | |
CVE-2026-57098 |
high | 7.5 | 0.0064 | 2026-09-08 | Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attack | |
CVE-2026-33923 |
high | 7.5 | — | 2026-10-29 | A signature verification vulnerability was discovered in the update installation functionality due t | |
CVE-2026-87102 |
high | 7.4 | 0.0022 | 2026-10-28 | Sensitive information disclosure and manipulation due to improper token validation. The following pr | |
CVE-2026-87103 |
high | 7.4 | 0.0022 | 2026-10-28 | Sensitive information disclosure and manipulation due to improper token validation. The following pr | |
CVE-2026-0392 |
high | 7.3 | 0.0009 | 2026-08-03 | eParakstītājs 3.0 for Windows before version 1.10.0 retrieves and executes its automatic updates ove | |
CVE-2026-0234 |
high | 7.2 | 0.0023 | 2026-04-13 | An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex | |
CVE-2026-0265 |
high | 7.2 | 0.0105 | 2026-05-13 | An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthentic | |
CVE-2026-9779 |
high | 7.2 | 0.0068 | 2026-06-24 | ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Exec | |
CVE-2026-68759 |
high | 7.2 | 0.0033 | 2026-08-12 | A holder of a valid integration credential may impersonate other users under specific conditions. | |
CVE-2026-58262 |
high | 7.1 | 0.0016 | 2026-08-07 | Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, header signat | |
CVE-2026-115374 |
high | 7.1 | 0.0018 | 2026-10-22 | Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a signature verification flaw in its built- | |
CVE-2026-6966 |
high | 7.0 | 0.0028 | 2026-04-24 | Improper verification of cryptographic signature uniqueness in delegated role validation in awslabs/ | |
CVE-2026-106078 |
medium | 6.9 | 0.0026 | 2026-10-27 | A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged | |
CVE-2026-24032 |
medium | 6.9 | 0.0025 | 2026-04-14 | A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC). The affected ap | |
CVE-2026-44720 |
medium | 6.9 | 0.0021 | 2026-05-27 | OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0.4, a crit | |
CVE-2026-34068 |
medium | 6.8 | 0.0020 | 2026-04-22 | nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementation. Prio | |
CVE-2026-10723 |
medium | 6.8 | 0.0027 | 2026-07-22 | BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge | |
CVE-2026-16742 |
medium | 6.7 | 0.0006 | 2026-08-10 | systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a loc | |
CVE-2026-50634 |
medium | 6.5 | 0.0028 | 2026-06-12 | A vulnerability in Apache CXF's JwsJsonContainerRequestFilter can be exploited to cause CXF to proce | |
CVE-2026-42743 |
medium | 6.5 | 0.0014 | 2026-06-15 | Unauthenticated Broken Authentication in Masteriyo - LMS <= 2.1.8 versions. | |
CVE-2026-13305 |
medium | 6.4 | 0.0017 | 2026-07-29 | Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arb | |
CVE-2026-5588 |
medium | 6.3 | 0.0078 | 2026-04-15 | Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. B | |
CVE-2026-89317 |
medium | 6.3 | 0.0015 | 2026-10-23 | gose parsed the JWS `crit` header into `JwsHeader.Crit` and then never read it. RFC 7515 §4.1.11 req | |
CVE-2026-87101 |
medium | 6.2 | 0.0010 | 2026-10-28 | Sensitive information disclosure due to improper token validation. The following products are affect | |
CVE-2026-17872 |
medium | 6.1 | 0.0008 | 2026-07-30 | Cryptographic Flaw in WebAppInstalls in Google Chrome on Android prior to 151.0.7922.72 allowed a lo | |
CVE-2026-87879 |
medium | 5.9 | 0.0022 | 2026-10-28 | Sensitive information disclosure due to improper token validation. The following products are affect | |
CVE-2026-50721 |
medium | 5.9 | 0.0039 | 2026-07-02 | Libreswan, via the function RSA_authenticate_hash_signature_raw_rsa(), did not correctly verify the | |
CVE-2026-50722 |
medium | 5.9 | 0.0035 | 2026-07-02 | Libreswan, via the function RSA_authenticate_hash_signature_pkcs1_1_5_rsa(), did not correctly verif | |
CVE-2026-66776 |
medium | 5.9 | 0.0020 | 2026-08-11 | SAP Approuter does not consistently enforce integrity verification on certain session-related reques | |
CVE-2026-118768 |
medium | 5.9 | — | 2026-10-29 | Botan is a C++ cryptography library. From 1.11.34 until 3.13.0, the botan ocsp_check command request | |
CVE-2026-83798 |
medium | 5.5 | 0.0024 | 2026-10-13 | Improper verification of cryptographic signature in Windows Update Stack allows an authorized attack | |
CVE-2026-70071 |
medium | 5.5 | 0.0026 | 2026-10-13 | Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perf | |
CVE-2026-91814 |
medium | 5.5 | 0.0017 | 2026-09-23 | A signature validation vulnerability exists in Foxit PDF Editor/Reader’s handling of incrementally u | |
CVE-2026-48523 |
medium | 5.4 | 0.0013 | 2026-05-28 | PyJWT is a JSON Web Token implementation in Python. From 2.9.0 to 2.12.1, there is a verifier-side a |