CWE-284 (2634) CWE-79 (1821) CWE-416 (1297) CWE-862 (1175) CWE-89 (1097) CWE-22 (1024) CWE-125 (884) CWE-200 (847) CWE-306 (838) CWE-122 (831) CWE-20 (798) CWE-78 (710) CWE-918 (689) CWE-787 (681) CWE-94 (641) CWE-863 (617) CWE-74 (600) CWE-639 (543) CWE-400 (530) CWE-119 (503) CWE-269 (501) CWE-502 (470) CWE-770 (440) CWE-287 (432) CWE-121 (407) CWE-77 (373) CWE-190 (368) CWE-362 (323) CWE-352 (276) CWE-285 (243)

CWE-349

9 CVEs View on MITRE →
CVE Severity CVSS EPSS Published Description Flags
CVE-2026-41120 critical 9.8 0.0039 2026-06-25 Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untru
CVE-2026-112256 critical 9.2 — 2026-10-29 Acceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanced Authent
CVE-2026-32162 high 8.4 0.0192 2026-04-14 Acceptance of extraneous untrusted data with trusted data in Windows COM allows an unauthorized atta
CVE-2026-33612 high 7.5 0.0015 2026-06-25 A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to
CVE-2026-19033 medium 6.5 0.0024 2026-09-16 For a secondary zone with transfers restricted by TSIG, `named` may start to serve the data provided
CVE-2026-44572 medium 5.9 0.0028 2026-05-13 Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16
CVE-2026-78301 medium 5.8 0.0021 2026-09-16 A malformed zone may contain an NS or DNAME node above its origin, which `named` treats as a zone cu
CVE-2026-50252 medium 5.7 0.0017 2026-07-22 In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized and intended
CVE-2026-54625 medium 4.8 0.0018 2026-08-20 django CMS is a content management system powered by Django. Prior to 5.0.8 and in 5.1.0a1, the djan