Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2633)
CWE-79 (1817)
CWE-416 (1289)
CWE-862 (1174)
CWE-89 (1095)
CWE-22 (1022)
CWE-125 (878)
CWE-200 (846)
CWE-306 (837)
CWE-122 (829)
CWE-20 (793)
CWE-78 (708)
CWE-918 (688)
CWE-787 (681)
CWE-94 (639)
CWE-863 (617)
CWE-74 (600)
CWE-639 (538)
CWE-400 (521)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (438)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (366)
CWE-362 (322)
CWE-352 (275)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-39506 |
— | — | 0.0016 | 2026-04-08 | Missing Authorization vulnerability in Jordy Meow AI Engine (Pro) ai-engine-pro allows Exploiting In | |
CVE-2026-40728 |
— | — | 0.0014 | 2026-04-15 | Missing Authorization vulnerability in BlockArt Magazine Blocks magazine-blocks allows Exploiting In | |
CVE-2026-40729 |
— | — | 0.0014 | 2026-04-15 | Missing Authorization vulnerability in bPlugins 3D viewer – Embed 3D Models 3d-viewer allows Exploit | |
CVE-2026-40730 |
— | — | 0.0019 | 2026-04-15 | Missing Authorization vulnerability in ThemeGrill ThemeGrill Demo Importer themegrill-demo-importer | |
CVE-2026-40740 |
— | — | 0.0018 | 2026-04-15 | Missing Authorization vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configu | |
CVE-2026-40742 |
— | — | 0.0019 | 2026-04-15 | Missing Authorization vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Explo | |
CVE-2026-40763 |
— | — | 0.0018 | 2026-04-15 | Missing Authorization vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows | |
CVE-2026-40786 |
— | — | 0.0014 | 2026-04-15 | Missing Authorization vulnerability in Long Watch Studio MyRewards woorewards allows Exploiting Inco | |
CVE-2026-84869 |
— | — | 0.0092 | — | ConnectWise ScreenConnect contains both an improper privilege management and missing authorization v | KEV |
CVE-2026-43689 |
— | — | 0.0021 | 2026-09-14 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and | |
CVE-2026-43696 |
— | — | 0.0029 | 2026-09-14 | An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS | |
CVE-2026-43789 |
— | — | 0.0035 | 2026-09-14 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Gol | |
CVE-2026-65342 |
— | — | 0.0031 | 2026-09-14 | A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate | |
CVE-2026-65381 |
— | — | 0.0035 | 2026-09-14 | A validation issue existed in the entitlement verification. This issue was addressed with improved v | |
CVE-2026-84514 |
— | — | 0.0014 | 2026-09-14 | This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gat | |
CVE-2026-84551 |
— | — | 0.0014 | 2026-09-14 | A logic issue was addressed with improved validation. This issue is fixed in iOS 27 and iPadOS 27, m | |
CVE-2026-84569 |
— | — | 0.0014 | 2026-09-14 | An access issue was addressed with additional sandbox restrictions on the system pasteboards. This i | |
CVE-2026-84580 |
— | — | 0.0015 | 2026-09-14 | The issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Seq | |
CVE-2026-84629 |
— | — | 0.0042 | 2026-09-14 | This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27 and iPadO | |
CVE-2026-86897 |
— | — | 0.0015 | 2026-09-14 | This issue was addressed with additional entitlement checks. This issue is fixed in Safari 27, iOS 2 | |
CVE-2026-86907 |
— | — | 0.0013 | 2026-10-20 | An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS | |
CVE-2026-86955 |
— | — | 0.0014 | 2026-10-20 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 a | |
CVE-2026-96391 |
— | — | 0.0018 | 2026-10-22 | Missing Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affe | |
CVE-2026-114487 |
— | — | 0.0013 | 2026-10-22 | Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 throug |