CWE-204

CVEs per yearBy the year they were published

1. 20181
2. 20201
3. 20214
4. 20228
5. 202317
6. 202430
7. 202554
8. 2026102

Newest CVEs

• CVE-2026-124432

  phpMyFAQ before 4.1.11 and 4.2.0-beta.3 Account Enumeration via WebAuthn prepare-login

  thorsten · phpMyFAQ

  Medium6.9
• CVE-2026-123517

  Vikunja before 2.7.1 Information Disclosure via Team Self-Removal Endpoint

  go-vikunja · vikunja

  High7.1
• CVE-2026-17202

  Multiple Vulnerabilities in IBM API Connect

  IBM · API Connect

  Medium5.3
• CVE-2026-100362

  SuiteCRM: V8 OAuth2 Username Enumeration

  SuiteCRM · SuiteCRM

  Medium6.9
• CVE-2026-85286

  HomeBox: Timing Side-Channel in Login Endpoint Allows User Enumeration via Bcrypt Hashing Delay

  sysadminsmedia · homebox

  Low3.7
• CVE-2026-97702

  Open edX: Support "manage_course_team" REST API omits the `require_support_permission` gate its sibling support views enforce

  openedx · openedx-platform

  Medium5.3
• CVE-2026-122139

  blueprintUE Self-Hosted Edition before 4.3.3 Account Enumeration via Password Reset

  blueprintue · blueprintue-self-hosted-edition

  Medium6.9
• CVE-2026-119700

  WPGraphQL before 2.24.2 Object Existence Disclosure via Media and Comment Mutations

  WPGraphQL · WPGraphQL

  Medium6.9
• CVE-2026-100164

  User Enumeration in Rolantis Information Technologies' Agentis

  Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. · Agentis

  High7.5
• CVE-2026-49442

  Cacti: User Enumeration via Error Messages

  Cacti · cacti

  Medium5.3

Vendors it comes up for most

1. IBM15
2. Siemens5
3. SAP_SE4
4. SICK AG4
5. MB connect line3
6. Red Hat3
7. Checkmk GmbH2
8. ChurchCRM2
9. Cisco2
10. D-Link2