Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2633)
CWE-79 (1817)
CWE-416 (1289)
CWE-862 (1174)
CWE-89 (1095)
CWE-22 (1022)
CWE-125 (878)
CWE-200 (846)
CWE-306 (837)
CWE-122 (829)
CWE-20 (793)
CWE-78 (708)
CWE-918 (688)
CWE-787 (681)
CWE-94 (639)
CWE-863 (617)
CWE-74 (600)
CWE-639 (538)
CWE-400 (521)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (438)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (366)
CWE-362 (322)
CWE-352 (275)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-89010 |
critical | 9.3 | 0.0317 | 2026-09-11 | WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an unauthenticat | |
CVE-2026-112900 |
critical | 9.2 | 0.0130 | 2026-10-19 | Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument inject | |
CVE-2026-58455 |
critical | 9.2 | 0.0804 | 2026-07-02 | Dockwatch through 0.6.567 contains an unauthenticated OS command injection vulnerability that allows | |
CVE-2026-59800 |
critical | 9.2 | 0.0208 | 2026-07-07 | 9Router before 0.4.44 contains an OS command injection vulnerability in the unauthenticated POST /ap | |
CVE-2026-58479 |
critical | 9.2 | 0.0440 | 2026-07-14 | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a command injection vulnerabil | |
CVE-2026-63304 |
critical | 9.2 | 0.0173 | 2026-07-16 | AVideo through 29.0 contains an OS command injection vulnerability in plugin/API/standAlone/function | |
CVE-2026-63305 |
critical | 9.2 | 0.0177 | 2026-07-16 | AVideo through 29.0 contains an OS command injection vulnerability in the ffmpeg.json.php endpoint w | |
CVE-2026-73414 |
critical | 9.2 | 0.0089 | 2026-08-12 | Shescape is a simple shell escape library for JavaScript. Prior to 2.1.14 and 3.0.1, getEscapeFuncti | |
CVE-2026-53790 |
critical | 9.2 | 0.0063 | 2026-08-13 | rsync before 3.5.0 contains multiple command and argument injection vulnerabilities that allow attac | |
CVE-2026-110447 |
critical | 9.2 | 0.7331 | 2026-10-14 | Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains a | KEV |
CVE-2024-51092 |
critical | 9.1 | 0.0718 | 2026-05-08 | LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection | |
CVE-2024-4457 |
critical | 9.1 | 0.0042 | 2026-10-18 | The Management Console fails to properly validate input related to the configuration of JDBC user st | |
CVE-2026-33568 |
critical | 9.1 | 0.0104 | 2026-10-20 | A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X200 | |
CVE-2026-40627 |
critical | 9.1 | 0.0104 | 2026-10-20 | An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totoli | |
CVE-2026-67074 |
critical | 9.1 | 0.0046 | 2026-10-28 | HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to exec | |
CVE-2026-44194 |
critical | 9.1 | 0.0567 | 2026-05-13 | OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, an authenticated Remote | |
CVE-2026-22313 |
critical | 9.1 | 0.0092 | 2026-06-16 | The device has a webserver that exposes a REST API authenticated with a token on the management netw | |
CVE-2026-20266 |
critical | 9.1 | 0.0063 | 2026-06-17 | In Splunk AI Toolkit versions below 5.7.4, a user who holds the "admin" Splunk role could execute ar | |
CVE-2026-12486 |
critical | 9.1 | 0.0270 | 2026-06-24 | Multiple OS command injection vulnerabilities exist in the libNetSetObj.so functionality of GeoVisio | |
CVE-2026-12849 |
critical | 9.1 | 0.0270 | 2026-06-24 | Multiple OS command injection vulnerabilities exist in the libNetSetObj.so functionality of GeoVisio | |
CVE-2026-12850 |
critical | 9.1 | 0.0270 | 2026-06-24 | Multiple OS command injection vulnerabilities exist in the libNetSetObj.so functionality of GeoVisio | |
CVE-2026-12851 |
critical | 9.1 | 0.0270 | 2026-06-24 | Multiple OS command injection vulnerabilities exist in the libNetSetObj.so functionality of GeoVisio | |
CVE-2026-56688 |
critical | 9.1 | 0.0200 | 2026-07-10 | Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special E | |
CVE-2026-10131 |
critical | 9.1 | 0.0139 | 2026-10-20 | An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (v | |
CVE-2026-10135 |
critical | 9.1 | 0.0139 | 2026-10-20 | A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOT | |
CVE-2026-10138 |
critical | 9.1 | 0.0145 | 2026-10-20 | A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version | |
CVE-2026-35499 |
critical | 9.1 | 0.0129 | 2026-10-20 | An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink | |
CVE-2026-9814 |
critical | 9.1 | 0.0160 | 2026-10-20 | An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R ( | |
CVE-2026-45750 |
critical | 9.0 | 0.0029 | 2026-06-05 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capa | |
CVE-2026-41880 |
critical | 9.0 | 0.0133 | 2026-07-10 | R-SOFT DMS is vulnerable to OS Command Injection in the Optical Character Recognition (OCR) module. | |
CVE-2026-90865 |
critical | 9.0 | — | 2026-10-29 | An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 | |
CVE-2026-33765 |
high | 8.9 | 0.0130 | 2026-03-27 | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tra | |
CVE-2026-5850 |
high | 8.9 | 0.1510 | 2026-04-09 | A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function s | |
CVE-2026-5851 |
high | 8.9 | 0.1337 | 2026-04-09 | A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This impacts the funct | |
CVE-2026-5852 |
high | 8.9 | 0.1351 | 2026-04-09 | A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. Affected is the function se | |
CVE-2026-5853 |
high | 8.9 | 0.1351 | 2026-04-09 | A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by thi | |
CVE-2026-5854 |
high | 8.9 | 0.1661 | 2026-04-09 | A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this issue is the | |
CVE-2026-5975 |
high | 8.9 | 0.0180 | 2026-04-09 | A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. The impacted element is the | |
CVE-2026-5976 |
high | 8.9 | 0.0180 | 2026-04-09 | A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This affects the funct | |
CVE-2026-5977 |
high | 8.9 | 0.0211 | 2026-04-09 | A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. This impacts the function s | |
CVE-2026-5978 |
high | 8.9 | 0.0177 | 2026-04-09 | A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected is the | |
CVE-2026-5993 |
high | 8.9 | 0.0180 | 2026-04-10 | A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This vulnerability affects | |
CVE-2026-5994 |
high | 8.9 | 0.0180 | 2026-04-10 | A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This issue affects the | |
CVE-2026-5995 |
high | 8.9 | 0.0182 | 2026-04-10 | A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. Impacted is the function se | |
CVE-2026-5996 |
high | 8.9 | 0.0182 | 2026-04-10 | A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. The affected el | |
CVE-2026-5997 |
high | 8.9 | 0.0180 | 2026-04-10 | A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The impacted element is the f | |
CVE-2026-6025 |
high | 8.9 | 0.0300 | 2026-04-10 | A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function s | |
CVE-2026-6026 |
high | 8.9 | 0.0298 | 2026-04-10 | A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This vulnerability aff | |
CVE-2026-6027 |
high | 8.9 | 0.0250 | 2026-04-10 | A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. This issue affects the func | |
CVE-2026-6028 |
high | 8.9 | 0.0298 | 2026-04-10 | A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Impacted is the |