Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2633)
CWE-79 (1819)
CWE-416 (1289)
CWE-862 (1174)
CWE-89 (1095)
CWE-22 (1022)
CWE-125 (879)
CWE-200 (846)
CWE-306 (837)
CWE-122 (829)
CWE-20 (795)
CWE-78 (708)
CWE-918 (688)
CWE-787 (681)
CWE-94 (639)
CWE-863 (617)
CWE-74 (600)
CWE-639 (539)
CWE-400 (526)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (439)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (322)
CWE-352 (275)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-41873 |
critical | 9.8 | 0.0044 | 2026-04-28 | ** UNSUPPORTED WHEN ASSIGNED ** Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response | |
CVE-2026-11541 |
critical | 9.8 | 0.0042 | 2026-06-30 | IBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebSphere Application Se | |
CVE-2026-88092 |
critical | 9.4 | 0.0093 | 2026-10-13 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core all | |
CVE-2026-111809 |
critical | 9.3 | 0.0022 | 2026-10-21 | Apache Traffic Server allows request smuggling via HEAD requests that carry Content-Length or Transf | |
CVE-2026-63382 |
critical | 9.2 | 0.0078 | 2026-08-20 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, the libevent evhttp pars | |
CVE-2026-63385 |
critical | 9.2 | 0.0055 | 2026-08-20 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has two HTTP pa | |
CVE-2026-111816 |
critical | 9.2 | 0.0031 | 2026-10-21 | Apache Traffic Server forwarded a malformed 302 response that should have been rejected as a parse e | |
CVE-2025-31699 |
critical | 9.1 | 0.0035 | 2026-10-21 | Apache Traffic Server can return an origin connection to the shared pool while the origin is still w | |
CVE-2026-118264 |
critical | 9.1 | 0.0043 | 2026-10-28 | Echo is a Go web framework. From 4.0.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware selects a raw | |
CVE-2026-70188 |
critical | 9.1 | 0.0094 | 2026-10-13 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core all | |
CVE-2026-28367 |
critical | 9.1 | 0.0072 | 2026-03-27 | A flaw was found in Undertow. A remote attacker can exploit this vulnerability by sending `\r\r\r` a | |
CVE-2026-28368 |
critical | 9.1 | 0.0073 | 2026-03-27 | A flaw was found in Undertow. This vulnerability allows a remote attacker to construct specially cra | |
CVE-2026-28369 |
critical | 9.1 | 0.0069 | 2026-03-27 | A flaw was found in Undertow. When Undertow receives an HTTP request where the first header line sta | |
CVE-2026-2332 |
critical | 9.1 | 0.0131 | 2026-04-14 | In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are u | |
CVE-2026-42584 |
critical | 9.1 | 0.0084 | 2026-05-13 | Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1. | |
CVE-2026-27690 |
critical | 9.1 | 0.0068 | 2026-07-14 | Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could s | |
CVE-2026-9190 |
critical | 9.1 | 0.0074 | 2026-08-05 | An HTTP request smuggling vulnerability in the HTTP App Server of Progress MarkLogic Server before 1 | |
CVE-2026-33805 |
critical | 9.0 | 0.0044 | 2026-04-15 | @fastify/reply-from v12.6.1 and earlier and @fastify/http-proxy v11.4.3 and earlier process the clie | |
CVE-2026-102479 |
high | 8.7 | 0.0034 | 2026-10-14 | In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP/1.x de | |
CVE-2026-13762 |
high | 7.9 | 0.0063 | 2026-06-29 | Inconsistent interpretation of HTTP/2 requests in Amazon CloudFront with AWS WAF enabled might allow | |
CVE-2026-13763 |
high | 7.9 | 0.0068 | 2026-06-29 | Inconsistent interpretation of HTTP/2 requests in AWS Application Load Balancer with AWS WAF enabled | |
CVE-2026-50197 |
high | 7.8 | 0.0051 | 2026-07-17 | Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.26.10, zalando/skipp | |
CVE-2026-112212 |
high | 7.5 | 0.0019 | 2026-10-22 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.3.6, 19.4 | |
CVE-2026-24880 |
high | 7.5 | 0.0070 | 2026-04-09 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Ap | |
CVE-2026-40562 |
high | 7.5 | 0.0032 | 2026-05-06 | Gazelle versions through 0.49 for Perl allows HTTP Request Smuggling via Improper Header Precedence. | |
CVE-2026-42585 |
high | 7.5 | 0.0027 | 2026-05-13 | Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1. | |
CVE-2026-48743 |
high | 7.5 | 0.0030 | 2026-06-26 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35 | |
CVE-2026-11806 |
high | 7.5 | 0.0047 | 2026-06-30 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 is affected by an arbitrary fil | |
CVE-2026-65370 |
high | 7.5 | 0.0034 | 2026-08-12 | ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding which could result in request s | |
CVE-2026-73495 |
high | 7.4 | 0.0048 | 2026-08-12 | blaze is a Scala library for building asynchronous pipelines, with a focus on network IO. Prior to 0 | |
CVE-2025-55702 |
high | 7.0 | 0.0032 | 2026-10-21 | When a client sends a POST with Expect: 100-continue and the origin answers before reading the body, | |
CVE-2026-67182 |
medium | 6.9 | 0.0063 | 2026-07-28 | Rouille 0.3.3 through 3.6.2 contains an HTTP request smuggling vulnerability that allows remote atta | |
CVE-2026-24033 |
medium | 6.9 | 0.0057 | 2026-07-29 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Ap | |
CVE-2026-42580 |
medium | 6.5 | 0.0038 | 2026-05-13 | Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1. | |
CVE-2026-15396 |
medium | 6.5 | 0.0037 | 2026-09-14 | IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0. | |
CVE-2026-15634 |
medium | 6.5 | 0.0037 | 2026-09-14 | IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0. | |
CVE-2026-111750 |
medium | 6.3 | 0.0038 | 2026-10-19 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the | |
CVE-2026-34525 |
medium | 6.3 | 0.0030 | 2026-04-01 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.1 | |
CVE-2026-39805 |
medium | 6.3 | 0.0063 | 2026-05-01 | Inconsistent Interpretation of HTTP Requests vulnerability in mtrudel bandit allows HTTP request smu | |
CVE-2026-58055 |
medium | 6.3 | 0.0025 | 2026-06-28 | nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Cont | |
CVE-2026-12606 |
medium | 6.3 | 0.0030 | 2026-07-14 | Eclipse Grizzly in versions before 5.0.2, cannot properly parse the trailer section in malformed tra | |
CVE-2026-59249 |
medium | 6.3 | 0.0052 | 2026-07-16 | Inconsistent interpretation of HTTP requests (HTTP response smuggling) vulnerability in elixir-mint | |
CVE-2026-67181 |
medium | 6.3 | 0.0041 | 2026-07-28 | Rouille 0.3.3 through 3.6.2 contains an HTTP request smuggling vulnerability that allows remote atta | |
CVE-2026-58153 |
medium | 6.3 | 0.0064 | 2026-07-29 | Apache Traffic Server forwards HTTP/2 origin trailers to HTTP/1 clients without proper chunked frami | |
CVE-2026-69243 |
medium | 6.3 | 0.0044 | 2026-08-03 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the | |
CVE-2026-63379 |
medium | 6.3 | 0.0071 | 2026-08-20 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent processes chunk | |
CVE-2026-114216 |
medium | 6.3 | 0.0060 | 2026-10-26 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in th | |
CVE-2026-100724 |
medium | 6.3 | 0.0034 | 2026-09-27 | http4k (Maven package org.http4k:http4k-core) before 6.49.0.0, 5.42.0.0 and 4.51.0.0 uses substring | |
CVE-2026-73051 |
medium | 6.3 | 0.0057 | 2026-08-14 | actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 pa | |
CVE-2026-72587 |
medium | 6.1 | 0.0032 | 2026-08-10 | A cache poisoning vulnerability in CoreBunch/Instatic through 0.0.14 allows an unauthenticated remot |