Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-14499 |
high | 8.8 | 0.0066 | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.1 Langflow could allow an authenticated user to execute arbitrar | |
CVE-2026-3821 |
high | 8.8 | 0.0064 | 2026-07-22 | Supermicro (SMC) SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. | |
CVE-2026-22622 |
high | 8.8 | 0.0055 | 2026-07-30 | Improper input validation in one of the session management interface of Eaton's Tripp Lite series PA | |
CVE-2026-70374 |
high | 8.8 | 0.0187 | 2026-08-05 | HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerability (CWE-78) in the media upl | |
CVE-2026-70375 |
high | 8.8 | 0.0187 | 2026-08-05 | HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerability (CWE-78) in the Git deplo | |
CVE-2026-71243 |
high | 8.8 | 0.0052 | 2026-08-05 | The backmeup npm package assembles shell command strings by directly concatenating its option values | |
CVE-2026-13477 |
high | 8.8 | 0.0049 | 2026-08-05 | IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 could allow an aut | |
CVE-2026-17623 |
high | 8.8 | 0.0079 | 2026-08-05 | IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitra | |
CVE-2026-72573 |
high | 8.8 | 0.0157 | 2026-08-10 | An OS command injection vulnerability in 4xmen/pm2panel (all versions) allows an authenticated remot | |
CVE-2026-72551 |
high | 8.8 | 0.0101 | 2026-08-11 | A remote code execution vulnerability in Apioo Fusio 8.8.3 allows authenticated users with the Devel | |
CVE-2026-72556 |
high | 8.8 | 0.0101 | 2026-08-11 | A remote code execution vulnerability in ZoneMinder 1.39.17 allows any authenticated user to execute | |
CVE-2026-73222 |
high | 8.8 | 0.0032 | 2026-08-11 | Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the | |
CVE-2026-11325 |
high | 8.8 | 0.0068 | 2026-08-12 | Description Cloudflare was recently notified by external researchers of vulnerabilities in this a | |
CVE-2026-18683 |
high | 8.8 | 0.0066 | 2026-08-12 | IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to privilege escalation via Navigator for i. An authentic | |
CVE-2026-16856 |
high | 8.8 | 0.0050 | 2026-08-12 | IBM i 7.6, and 7.5 could allow a local attacker to gain elevated privileges due to improper neutrali | |
CVE-2026-16906 |
high | 8.8 | 0.0079 | 2026-08-12 | IBM i 7.6, and 7.5 could allow a remote authenticated attacker to execute arbitrary commands with el | |
CVE-2026-17417 |
high | 8.8 | 0.0079 | 2026-08-12 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary comman | |
CVE-2026-17642 |
high | 8.8 | 0.0079 | 2026-08-12 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary comman | |
CVE-2026-68518 |
high | 8.8 | 0.0017 | 2026-08-17 | Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, _sanitize_mustache_ | |
CVE-2026-62982 |
high | 8.8 | 0.0020 | 2026-08-17 | Glances is an open-source system cross-platform monitoring tool. From 4.5.2 until 4.5.6, _sanitize_m | |
CVE-2026-52876 |
high | 8.8 | 0.0020 | 2026-08-18 | Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to v | |
CVE-2026-16842 |
high | 8.8 | 0.0050 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary com | |
CVE-2026-16844 |
high | 8.8 | 0.0050 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary com | |
CVE-2026-16848 |
high | 8.8 | 0.0050 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary com | |
CVE-2026-16865 |
high | 8.8 | 0.0190 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-16932 |
high | 8.8 | 0.0019 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary comm | |
CVE-2026-18264 |
high | 8.8 | 0.0227 | 2026-08-20 | NoMachine getstat Command Injection Remote Code Execution Vulnerability. This vulnerability allows r | |
CVE-2026-18824 |
high | 8.8 | 0.0063 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute | |
CVE-2026-57117 |
high | 8.8 | 0.0040 | 2026-10-23 | PraisonAI is a multi-agent teams system. From version 4.6.10 to before version 4.6.59, LocalManagedA | |
CVE-2026-52356 |
high | 8.8 | 0.0194 | 2026-10-23 | An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L | |
CVE-2026-107326 |
high | 8.8 | — | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitra | |
CVE-2024-58287 |
high | 8.7 | 0.0342 | 2025-12-11 | reNgine 2.2.0 contains a command injection vulnerability in the nmap_cmd parameter of scan engine co | |
CVE-2024-58294 |
high | 8.7 | 0.0357 | 2025-12-11 | FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allo | |
CVE-2026-102814 |
high | 8.7 | 0.0036 | 2026-10-27 | An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP v2 uses a | |
CVE-2026-112351 |
high | 8.7 | 0.0268 | 2026-10-27 | Sunhillo SureLine before 9.1.5 contains an OS command injection vulnerability in the networkDiag.cgi | |
CVE-2026-118477 |
high | 8.7 | 0.0111 | 2026-10-28 | The ei_git_repo_url parameter in the Git remote configuration endpoint of KaliFast is vulnerable to | |
CVE-2026-3692 |
high | 8.7 | 0.0042 | 2026-04-02 | In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an authenticated low-pr | |
CVE-2026-34791 |
high | 8.7 | 0.0127 | 2026-04-02 | Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands | |
CVE-2026-5967 |
high | 8.7 | 0.0037 | 2026-04-20 | ThreatSonar Anti-Ransomware developed by TeamT5 has an Privilege Escalation vulnerability. Authentic | |
CVE-2026-41036 |
high | 8.7 | 0.0045 | 2026-04-21 | This vulnerability exists in Quantum Networks router due to inadequate sanitization of user-supplied | |
CVE-2026-33277 |
high | 8.7 | 0.0132 | 2026-04-27 | An OS command Injection issue exists in LogonTracer prior to v2.0.0. An arbitrary OS command may be | |
CVE-2026-7551 |
high | 8.7 | 0.0065 | 2026-04-30 | HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command that a | |
CVE-2026-42271 |
high | 8.7 | 0.9144 | 2026-05-08 | BerriAI LiteLLM contains a command injection vulnerability that could allow any authenticated user, | KEV |
CVE-2026-7816 |
high | 8.7 | 0.0144 | 2026-05-11 | OS command injection (CWE-78) vulnerability in pgAdmin 4 Import/Export query export. User-supplied | |
CVE-2026-6281 |
high | 8.7 | 0.0044 | 2026-05-13 | A potential vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allo | |
CVE-2026-8654 |
high | 8.7 | 0.0023 | 2026-05-15 | Improper input validation in Delphix Continuous Data connectors allows an authenticated user to exec | |
CVE-2026-46746 |
high | 8.7 | 0.0043 | 2026-06-09 | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The application | |
CVE-2026-45172 |
high | 8.7 | 0.0055 | 2026-06-11 | Due to incomplete input validation in Idira Privileged Session Manager for SSH (PSMP) versions prior | |
CVE-2026-35018 |
high | 8.7 | 0.0127 | 2026-06-23 | NetComm NF20MESH routers running firmware R6B031 and earlier contain an authenticated remote code ex | |
CVE-2026-32833 |
high | 8.7 | 0.0242 | 2026-06-26 | Cudy LT300 3.0 running firmware prior to version 2.5.12 contains an OS command injection vulnerabili |