CWE-284 (2632) CWE-79 (1807) CWE-416 (1283) CWE-862 (1172) CWE-89 (1092) CWE-22 (1018) CWE-125 (869) CWE-200 (844) CWE-306 (834) CWE-122 (828) CWE-20 (791) CWE-78 (703) CWE-918 (686) CWE-787 (681) CWE-94 (637) CWE-863 (613) CWE-74 (600) CWE-639 (535) CWE-400 (516) CWE-269 (501) CWE-119 (494) CWE-502 (467) CWE-770 (435) CWE-287 (427) CWE-121 (404) CWE-77 (372) CWE-190 (365) CWE-362 (321) CWE-352 (274) CWE-285 (242)

CWE-639

535 CVEs View on MITRE →
CVE Severity CVSS EPSS Published Description Flags
CVE-2026-113596 low 2.3 0.0035 2026-10-20 Webstudio before 0.256.0 contains a missing authorization vulnerability that allows authenticated us
CVE-2026-116186 low 2.3 0.0021 2026-10-25 OpenRemote core (openremote-manager) before 1.31.0 does not perform realm or gateway-descendant auth
CVE-2026-119048 low 2.3 — 2026-10-29 JeeSite 5.11.0 through 5.19.1 contains an insecure direct object reference vulnerability in the AI C
CVE-2026-6571 low 2.1 0.0027 2026-04-19 A weakness has been identified in kodcloud KodExplorer up to 4.52. Affected by this vulnerability is
CVE-2026-6583 low 2.1 0.0030 2026-04-19 A vulnerability has been found in TransformerOptimus SuperAGI up to 0.0.14. This affects the functio
CVE-2026-6584 low 2.1 0.0030 2026-04-20 A vulnerability was found in TransformerOptimus SuperAGI up to 0.0.14. This vulnerability affects th
CVE-2026-6585 low 2.1 0.0030 2026-04-20 A vulnerability was determined in TransformerOptimus SuperAGI up to 0.0.14. This issue affects the f
CVE-2026-6586 low 2.1 0.0027 2026-04-20 A vulnerability was identified in TransformerOptimus SuperAGI up to 0.0.14. Impacted is the function
CVE-2026-6612 low 2.1 0.0031 2026-04-20 A vulnerability was determined in TransformerOptimus SuperAGI up to 0.0.14. This impacts the functio
CVE-2026-6613 low 2.1 0.0022 2026-04-20 A vulnerability was identified in TransformerOptimus SuperAGI up to 0.0.14. Affected is the function
CVE-2026-6614 low 2.1 0.0022 2026-04-20 A security flaw has been discovered in TransformerOptimus SuperAGI up to 0.0.14. Affected by this vu
CVE-2026-7144 low 2.1 0.0022 2026-04-27 A security flaw has been discovered in 1000 Projects Portfolio Management System MCA 1.0. This impac
CVE-2026-7502 low 2.1 0.0026 2026-04-30 A security vulnerability has been detected in LinkStackOrg LinkStack up to 4.8.6. The affected eleme
CVE-2026-7510 low 2.1 0.0028 2026-04-30 A vulnerability was determined in OWAP DefectDojo up to 2.55.4. Affected by this vulnerability is an
CVE-2026-7782 low 2.1 0.0021 2026-05-04 A vulnerability was detected in CodeCanyon Perfex CRM up to 3.4.1. This affects the function Clients
CVE-2026-13549 low 2.1 0.0051 2026-06-29 A security flaw has been discovered in CodeAstro Complaint Management System 1.0. The affected eleme
CVE-2026-14608 low 2.1 0.0037 2026-07-03 A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI Pr
CVE-2026-15191 low 2.1 0.0038 2026-07-09 A flaw has been found in mettle sendportal up to 3.0.1. This vulnerability affects unknown code of t
CVE-2026-16075 low 2.1 0.0037 2026-07-18 A flaw has been found in AstrBotDevs AstrBot up to 4.25.5. This vulnerability affects the function O
CVE-2026-16214 low 2.1 0.0038 2026-07-19 A vulnerability was identified in geex-arts django-jet up to 1.0.8. This affects an unknown function
CVE-2026-16217 low 2.1 0.0038 2026-07-19 A security vulnerability has been detected in guohongze adminset up to 0.61. Affected by this vulner
CVE-2026-16450 low 2.1 0.0037 2026-07-21 A vulnerability was identified in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cea
CVE-2026-18631 low 2.1 0.0040 2026-08-03 A vulnerability was identified in jeequan jeepay up to 3.2.9. This vulnerability affects the functio
CVE-2026-18722 low 2.1 0.0037 2026-08-04 A vulnerability was found in diaowen DWSurvey up to 6.14.0. Impacted is the function in DwDeisgnSurv
CVE-2026-116184 low 2.1 0.0024 2026-10-25 OpenRemote before 1.31.0 contains an authorization bypass vulnerability that allows realm admins to
CVE-2026-6570 low 2.0 0.0030 2026-04-19 A security flaw has been discovered in kodcloud KodExplorer up to 4.52. Affected is the function ini
CVE-2026-4958 low 1.3 0.0040 2026-03-27 A vulnerability has been found in OpenBMB XAgent 1.0.0. This affects the function ReplayServer.on_co
CVE-2026-13534 low 1.3 0.0032 2026-06-29 A vulnerability was detected in CherryHQ cherry-studio up to 1.9.7. This affects the function sha256
CVE-2026-17531 low 1.3 0.0032 2026-07-27 A weakness has been identified in unitedbyai droidclaw up to 0.5.3. Affected by this issue is some u
CVE-2026-55611 none — 0.0029 2026-06-24 AnythingLLM is an application that turns pieces of content into context that any LLM can use as refe
CVE-2026-39526 — — 0.0023 2026-04-08 Authorization Bypass Through User-Controlled Key vulnerability in wpstream WpStream wpstream allows
CVE-2026-40737 — — 0.0021 2026-04-15 Authorization Bypass Through User-Controlled Key vulnerability in VillaTheme COMPE compe-woo-compare
CVE-2026-40784 — — 0.0017 2026-04-15 Authorization Bypass Through User-Controlled Key vulnerability in Mahmudul Hasan Arif FluentBoards f
CVE-2026-3605 — — 0.0038 2026-04-17 An authenticated user with access to a kvv2 path through a policy containing a glob may be able to d
CVE-2026-40981 — — 0.0043 2026-05-07 When using Google Secrets Manager as a backend for the Spring Cloud Config server a client can craft