CWE-183
58 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 58Published CVEs58 of them scored
- 43Last 12 monthspublished in the last year
- 2Critical21 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-16478
Arbitrary Package Installation in TÜBİTAK BİLGEM's pardus-nvidia-installer
TÜBİTAK BİLGEM Software Technologies Research Institute · pardus-nvidia-installer
High7.0 - CVE-2026-117570
nmap-mcp through commit 3636afa Permissive NSE Script Allowlist in scan_vulnerabilities
Vorota-ai · nmap-mcp
Medium4.8 - CVE-2026-115915
vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE
vllm-project · vllm
High8.1 - CVE-2026-116339
iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist
iFlytek · astron-agent
Medium6.9 - CVE-2026-113786
pypdf: Unvalidated JPEG image data loading
py-pdf · pypdf
Low2.3 - CVE-2026-96229
.NET Information Disclosure Vulnerability
Microsoft · .NET 10.0 runtime
Medium6.5 - CVE-2026-89106
Cross Site Scripting (XSS) vulnerability in SAPUI5
SAP_SE · SAPUI5
Medium4.4 - CVE-2026-106510
Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml
backstage · backstage
High7.7 - CVE-2026-103687
rhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklist
rhukster · dom-sanitizer
Medium6.9 - CVE-2026-12974
Security Policy Bypass in Forcepoint Security Engine (NGFW)
Forcepoint · Forcepoint Security Engine (NGFW)
High7.9