Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2630)
CWE-79 (1805)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (612)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (426)
CWE-121 (404)
CWE-77 (372)
CWE-190 (364)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-16498 |
critical | 10.0 | 0.0046 | 2026-07-28 | The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse issue | |
CVE-2026-16326 |
critical | 10.0 | 0.0054 | 2026-07-29 | In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not properly isolate session state in stateless | |
CVE-2026-115419 |
high | 8.6 | 0.0043 | 2026-10-22 | The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Ag | |
CVE-2026-114637 |
high | 7.0 | 0.0028 | 2026-10-22 | Traefik from v3.2.0 before v3.7.14 contains an authentication bypass vulnerability in the experiment | |
CVE-2026-54497 |
medium | 6.8 | 0.0033 | 2026-07-17 | view_component is a framework for building reusable, testable, and encapsulated view components in R | |
CVE-2026-34391 |
medium | 6.6 | 0.0017 | 2026-03-27 | Fleet is open source device management software. Prior to 4.81.1, a vulnerability in Fleet's Windows | |
CVE-2026-46416 |
medium | 6.3 | 0.0032 | 2026-05-27 | Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0. | |
CVE-2026-54311 |
medium | 6.0 | 0.0039 | 2026-06-23 | n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, an authenticated use | |
CVE-2026-71850 |
medium | 4.8 | 0.0027 | 2026-08-07 | Hono is a Web application framework that provides support for any JavaScript runtime. From 3.8.0 to | |
CVE-2026-14621 |
low | 1.3 | 0.0037 | 2026-07-04 | A vulnerability has been found in FederatedAI FATE up to 2.2.0. This affects the function QueuePushR | |
CVE-2026-112921 |
— | — | 0.0023 | 2026-10-21 | Robots::Validate versions from 0.4.3 before 0.4.10 for Perl report clients as imposter robots when U |