Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-15643 |
critical | 9.2 | 0.0039 | 2026-07-14 | AWS HealthLake MCP Server (awslabs.healthlake-mcp-server) is a Model Context Protocol server that en | |
CVE-2026-65057 |
critical | 9.2 | 0.0031 | 2026-07-21 | Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows unauthenticat | |
CVE-2026-65317 |
critical | 9.2 | 0.0061 | 2026-07-21 | Verba RAG application version 2.1.3 contains a server-side request forgery vulnerability combined wi | |
CVE-2026-65318 |
critical | 9.2 | 0.0055 | 2026-07-21 | Verba RAG application version 2.1.3 contains an unauthenticated server-side request forgery vulnerab | |
CVE-2026-53983 |
critical | 9.2 | 0.0057 | 2026-08-06 | Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery vulnerab | |
CVE-2026-75856 |
critical | 9.2 | 0.0050 | 2026-08-18 | CodeWhale before 0.8.64 contains a server-side request forgery bypass vulnerability in DNS pinning l | |
CVE-2026-85614 |
critical | 9.2 | 0.0026 | 2026-09-04 | OpenPanel before 2.3.0 contains an unauthenticated server-side request forgery vulnerability in the | |
CVE-2026-111663 |
critical | 9.2 | 0.0037 | 2026-10-16 | Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticat | |
CVE-2026-114493 |
critical | 9.2 | 0.0038 | 2026-10-21 | LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/ | |
CVE-2024-25181 |
critical | 9.1 | 0.0029 | 2025-12-29 | A critical vulnerability has been identified in givanz VvvebJs 1.7.2, which allows both Server-Side | |
CVE-2025-66844 |
critical | 9.1 | 0.0029 | 2025-12-15 | In grav <1.7.49.5, a SSRF (Server-Side Request Forgery) vector may be triggered via Twig templates w | |
CVE-2026-9006 |
critical | 9.1 | 0.0039 | 2026-06-22 | IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) wi | |
CVE-2026-48203 |
critical | 9.1 | 0.0060 | 2026-07-06 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), | |
CVE-2026-48205 |
critical | 9.1 | 0.0060 | 2026-07-06 | Improper Input Validation, Server-Side Request Forgery (SSRF) vulnerability in Apache Camel DNS comp | |
CVE-2026-17552 |
critical | 9.1 | 0.0054 | 2026-07-27 | Plack::App::Prerender versions before 0.3.0 for Perl can proxy to an arbitrary host via unvalidated | |
CVE-2026-69223 |
critical | 9.1 | 0.0078 | 2026-08-11 | Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects A | |
CVE-2026-13603 |
critical | 9.0 | 0.0041 | 2026-07-01 | The payment integration pretix-oppwa provides support for the payment providers VR Payment, Hobex, | |
CVE-2026-5921 |
high | 8.9 | 0.0042 | 2026-04-21 | A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that a | |
CVE-2026-50189 |
high | 8.9 | 0.0049 | 2026-06-24 | Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, Appsmith | |
CVE-2026-53727 |
high | 8.9 | 0.0051 | 2026-07-17 | css_parser is a Ruby CSS parser. From 2.2.0 until 3.0.0, CssParser::Parser#read_remote_file in lib/c | |
CVE-2026-115729 |
high | 8.9 | 0.0029 | 2026-10-23 | @pdfme/common from 5.5.10 before 6.2.6 contains a server-side request forgery vulnerability that all | |
CVE-2026-76351 |
high | 8.8 | 0.0042 | 2026-08-19 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway ve | |
CVE-2026-116176 |
high | 8.8 | 0.0032 | 2026-10-25 | vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery vulnerability that allows API c | |
CVE-2026-70326 |
high | 8.8 | 0.0078 | 2026-08-11 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to e | |
CVE-2026-70324 |
high | 8.8 | 0.0094 | 2026-08-11 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to e | |
CVE-2026-18353 |
high | 8.8 | 0.0030 | 2026-07-30 | PIA's `POST /v1/upload/sbom` endpoint accepts a Bearer JWT and checks its **unverified** `iss` claim | |
CVE-2026-69078 |
high | 8.8 | 0.0041 | 2026-08-03 | CTI-Transmute is affected by a server-side request forgery vulnerability in the evaluation report PD | |
CVE-2026-62857 |
high | 8.8 | 0.0042 | 2026-08-06 | Fedify is a TypeScript library for building federated server apps powered by ActivityPub. From versi | |
CVE-2026-13739 |
high | 8.8 | 0.0048 | 2026-08-11 | A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) | |
CVE-2026-65941 |
high | 8.8 | 0.0068 | 2026-08-12 | In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network a | |
CVE-2026-43897 |
high | 8.7 | 0.0065 | 2026-05-11 | Link Preview JS extracts web links information. Prior to 4.0.1, the library did not check for IPv6 l | |
CVE-2026-46391 |
high | 8.7 | 0.0046 | 2026-06-05 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 9.0.1 and p | |
CVE-2026-54729 |
high | 8.7 | 0.0048 | 2026-07-31 | DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. | |
CVE-2026-15307 |
high | 8.7 | 0.0113 | 2026-08-04 | An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups | |
CVE-2026-47659 |
high | 8.7 | 0.0062 | 2026-08-07 | Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health da | |
CVE-2026-47660 |
high | 8.7 | 0.0054 | 2026-08-07 | Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health da | |
CVE-2026-47662 |
high | 8.7 | 0.0041 | 2026-08-07 | Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health da | |
CVE-2026-73160 |
high | 8.7 | 0.0041 | 2026-08-11 | Affected versions of cti-transmute contain an SSRF vulnerability in the /fetch_misp_event and /misp_ | |
CVE-2026-46382 |
high | 8.7 | 0.0042 | 2026-08-13 | The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior t | |
CVE-2026-49478 |
high | 8.7 | 0.0028 | 2026-08-13 | Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) | |
CVE-2026-85612 |
high | 8.7 | 0.0041 | 2026-09-04 | OpenPanel before 2.3.0 contains an unauthenticated server-side request forgery vulnerability in the | |
CVE-2023-54402 |
high | 8.7 | 0.0045 | 2026-09-30 | iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allow | |
CVE-2026-19678 |
high | 8.7 | 0.0039 | 2026-10-23 | A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version 11 | |
CVE-2026-13303 |
high | 8.7 | — | 2026-10-29 | HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side request forgery in the Va | |
CVE-2026-118660 |
high | 8.6 | 0.0040 | 2026-10-28 | Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Prio | |
CVE-2026-61572 |
high | 8.6 | 0.0025 | 2026-10-28 | AVideo is a video-sharing Platform. Before the initial remediation attempt in 8.1.0, `url_get_conten | |
CVE-2026-66800 |
high | 8.6 | 0.0097 | 2026-08-20 | Server-side request forgery (ssrf) in Azure Data Factory allows an unauthorized attacker to disclose | |
CVE-2026-22742 |
high | 8.6 | 0.0036 | 2026-03-27 | Spring AI's spring-ai-bedrock-converse contains a Server-Side Request Forgery (SSRF) vulnerability i | |
CVE-2026-33752 |
high | 8.6 | 0.0046 | 2026-04-06 | curl_cffi is the a Python binding for curl. Prior to 0.15.0, curl_cffi does not restrict requests to | |
CVE-2026-5052 |
high | 8.6 | 0.0034 | 2026-04-17 | Vault’s PKI engine’s ACME validation did not reject local targets when issuing http-01 and tls-alpn- |