Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-294

309 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

All 309 in the listAtom feed of new CVEsWhat CWE-294 is, at MITRE (opens in a new tab)
Published CVEs
309
Last 12 months
125
Critical
50
Known exploited
1

Critical 50High 143Medium 105Low 11Not scored 0

CVEs per yearBy the year they were published

  1. 20031
  2. 20174
  3. 201810
  4. 201911
  5. 202022
  6. 202115
  7. 202239
  8. 202330
  9. 202429
  10. 202526
  11. 2026122

Known exploitedNewest addition to KEV first

  • CVE-2023-23397

    Microsoft Outlook Elevation of Privilege Vulnerability

    Microsoft · Microsoft Office LTSC 2021

    ExploitedCritical9.8

Newest CVEs

  • CVE-2026-82907

    Apache OFBiz: externalLoginKey honoured pre-auth, reusable and unbound

    Apache Software Foundation · Apache OFBiz

    Critical9.8
  • CVE-2026-102894

    GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeover

    gpustack · gpustack

    Critical9.1
  • CVE-2026-122220

    WPO365 LOGIN before 45.2 SAML Replay Protection Bypass

    wpo365 · WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN)

    Critical9.1
  • CVE-2026-121640

    WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions

    WatchGuard · AuthPoint Authentication Gateway

    Critical9.1
  • CVE-2026-104381

    Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service

    WatchGuard · Fireware OS

    Medium6.0
  • CVE-2026-41020

    Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authentication traffic to replay…

    Eaton · easyE4

    High7.5
  • CVE-2026-117470

    WebAuthn assertion replay permits second-factor bypass in Psono Server

    esaqa GmbH · Psono

    Medium6.5
  • CVE-2026-116825

    YesWiki from 4.6.2 before 4.7.0 HTTP Signature Replay via ActivityPub Inbox

    YesWiki · yeswiki

    High8.3
  • CVE-2026-89209

    A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 11 compatible) (All versions < V4.2.4),…

    Siemens · Mendix SAML (Mendix 10 compatible)

    High7.6
  • CVE-2026-116201

    Snipe-IT before 8.5.0 SAML Assertion Replay via Race Condition

    grokability · snipe-it

    High8.7

Vendors it comes up for most

  1. Apache Software Foundation10
  2. Microsoft7
  3. Siemens7
  4. OpenClaw5
  5. Red Hat4
  6. Dell3
  7. Drupal3
  8. HCL Software3
  9. Huawei3
  10. IBM3