Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-26164 |
high | 7.5 | 0.0080 | 2026-05-07 | Improper neutralization of special elements used in a command ('command injection') in M365 Copilot | |
CVE-2026-42334 |
high | 7.5 | 0.0027 | 2026-05-14 | Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to | |
CVE-2026-7160 |
high | 7.4 | 0.0327 | 2026-04-27 | A vulnerability was determined in Tenda HG3 2.0. This vulnerability affects the function formTracert | |
CVE-2026-7548 |
high | 7.4 | 0.0149 | 2026-05-01 | A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910. This affects the function su | |
CVE-2026-15481 |
high | 7.4 | 0.0289 | 2026-07-12 | A security flaw has been discovered in Trendnet TEW-635BRM up to 1.00.03. This vulnerability affects | |
CVE-2026-18598 |
high | 7.4 | 0.0321 | 2026-08-03 | A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function | |
CVE-2026-18600 |
high | 7.4 | 0.0321 | 2026-08-03 | A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. This affects the function network.s | |
CVE-2026-18787 |
high | 7.4 | 0.0321 | 2026-08-04 | A vulnerability was identified in GL.iNet AX1800 up to 4.8.3. The affected element is the function r | |
CVE-2026-19346 |
high | 7.4 | 0.0273 | 2026-08-09 | A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCe | |
CVE-2026-7833 |
high | 7.3 | 0.0316 | 2026-05-05 | A weakness has been identified in EFM ipTIME C200 up to 1.092. This vulnerability affects the functi | |
CVE-2026-18599 |
high | 7.3 | 0.0444 | 2026-08-03 | A flaw has been found in GL.iNet GL-MT3000 up to 4.4.5. The impacted element is the function logread | |
CVE-2026-69097 |
high | 7.3 | 0.0027 | 2026-08-03 | GitPython before 3.1.53 fails to properly escape section names in git config files, allowing attacke | |
CVE-2026-18811 |
high | 7.3 | 0.0358 | 2026-08-04 | A vulnerability was detected in H3C NX15 V100R017. The affected element is the function Add of the f | |
CVE-2026-18812 |
high | 7.3 | 0.0358 | 2026-08-04 | A flaw has been found in H3C NX15 V100R017. The impacted element is the function esps.ipv6.wan of th | |
CVE-2026-18813 |
high | 7.3 | 0.0358 | 2026-08-04 | A vulnerability has been found in H3C NX15 V100R017. This affects the function delete of the file /a | |
CVE-2026-18814 |
high | 7.3 | 0.0358 | 2026-08-04 | A vulnerability was found in H3C NX15 V100R017. This impacts the function reload.reload_config of th | |
CVE-2026-18902 |
high | 7.3 | 0.0382 | 2026-08-05 | A vulnerability was detected in H3C NX15 V100R017. Affected by this vulnerability is the function es | |
CVE-2026-54453 |
high | 7.2 | 0.0044 | 2026-10-28 | OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and h | |
CVE-2026-44246 |
high | 7.2 | 0.0029 | 2026-05-12 | nnU-Net is a semantic segmentation framework that automatically adapts its pipeline to a dataset. Pr | |
CVE-2026-7039 |
high | 7.1 | 0.0065 | 2026-04-26 | A security vulnerability has been detected in tufantunc ssh-mcp up to 1.5.0. The affected element is | |
CVE-2026-58213 |
high | 7.1 | 0.0044 | 2026-07-08 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Pr | |
CVE-2026-57209 |
high | 7.0 | 0.0034 | 2026-10-23 | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to versio | |
CVE-2026-114243 |
medium | 6.9 | 0.0033 | 2026-10-21 | A security flaw has been discovered in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e | |
CVE-2026-114255 |
medium | 6.9 | 0.0027 | 2026-10-21 | A security flaw has been discovered in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df | |
CVE-2026-114256 |
medium | 6.9 | 0.0027 | 2026-10-21 | A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f | |
CVE-2026-114258 |
medium | 6.9 | 0.0034 | 2026-10-21 | A vulnerability was detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f54 | |
CVE-2026-114440 |
medium | 6.9 | 0.0034 | 2026-10-21 | A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part o | |
CVE-2026-114577 |
medium | 6.9 | 0.0034 | 2026-10-22 | A vulnerability was found in oretnom23 php-travel-agency-system. This vulnerability affects unknown | |
CVE-2026-117515 |
medium | 6.9 | 0.0041 | 2026-10-27 | A security flaw has been discovered in oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae | |
CVE-2026-5147 |
medium | 6.9 | 0.0035 | 2026-03-30 | A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This affects an unknown par | |
CVE-2026-7002 |
medium | 6.9 | 0.0025 | 2026-04-25 | A vulnerability was determined in KLiK SocialMediaWebsite up to 1.0.1. This vulnerability affects un | |
CVE-2026-7727 |
medium | 6.9 | 0.0026 | 2026-05-04 | A vulnerability was determined in Shandong Hoteam Software PDM Product Data Management System up to | |
CVE-2026-14649 |
medium | 6.9 | 0.0032 | 2026-07-04 | A vulnerability was detected in code-projects Online Voting System 1.0. Impacted is the function tes | |
CVE-2026-14747 |
medium | 6.9 | 0.0032 | 2026-07-05 | A vulnerability was detected in code-projects Real State Services 1.0. Affected by this vulnerabilit | |
CVE-2026-15498 |
medium | 6.9 | 0.0041 | 2026-07-12 | A vulnerability was identified in sergomanov SmartHomeAdatum up to cf495353d81b680675eb8d9aa14a318aa | |
CVE-2026-19263 |
medium | 6.9 | 0.0164 | 2026-08-08 | A vulnerability was found in INQUIRELAB mcp-bridge-api up to b30a82aa1d1d1139e0de846c41c8aadee6e0611 | |
CVE-2026-115999 |
medium | 6.9 | 0.0026 | 2026-10-25 | A vulnerability has been found in mansi-k Restaurant_IMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694. A | |
CVE-2026-116049 |
medium | 6.9 | 0.0025 | 2026-10-25 | A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae35 | |
CVE-2026-116060 |
medium | 6.9 | 0.0027 | 2026-10-25 | A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This affects an u | |
CVE-2026-116253 |
medium | 6.9 | 0.0049 | 2026-10-26 | A vulnerability was determined in DedeCMS 5.7.118. This vulnerability affects the function common.in | |
CVE-2026-1089 |
medium | 6.5 | 0.0023 | 2026-04-21 | User‑Controlled HTTP Header in Fortra's GoAnywhere MFT prior to version 7.10.0 allows attackers to t | |
CVE-2026-41885 |
medium | 6.5 | 0.0022 | 2026-05-08 | i18next-locize-backend is a simple i18next backend for locize.com which can be used in Node.js, in t | |
CVE-2026-49097 |
medium | 6.5 | 0.0067 | 2026-07-06 | Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstrea | |
CVE-2026-49452 |
medium | 6.5 | 0.0037 | 2026-08-18 | WeasyPrint helps web developers to create PDF documents. Prior to 69.0, WeasyPrint embeds unescaped | |
CVE-2026-35515 |
medium | 6.3 | 0.0023 | 2026-04-07 | Nest is a framework for building scalable Node.js server-side applications. Prior to 11.1.18, SseStr | |
CVE-2026-7669 |
medium | 6.3 | 0.0037 | 2026-05-02 | A vulnerability was detected in sgl-project SGLang up to 0.5.9. Impacted is the function get_tokeniz | |
CVE-2026-20220 |
medium | 6.3 | 0.0025 | 2026-06-17 | A vulnerability in the web-based management interface of Cisco Crosswork Network Controller could al | |
CVE-2026-44455 |
medium | 6.1 | 0.0014 | 2026-05-13 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12. | |
CVE-2026-54728 |
medium | 6.1 | 0.0038 | 2026-07-16 | bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). Prior to BunkerWeb 1 | |
CVE-2023-26142 |
medium | 6.1 | 0.0052 | 2023-09-12 | All versions of the package crow are vulnerable to HTTP Response Splitting when untrusted user input |