CWE-300

CVEs per yearBy the year they were published

1. 20091
2. 20177
3. 20186
4. 20196
5. 20203
6. 20216
7. 20222
8. 20234
9. 20245
10. 202511
11. 202610

Newest CVEs

• CVE-2026-116789

  FreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS server

  signalwire · freeswitch

  High7.4
• CVE-2026-97866

  Zhonglun CloudPOS Automatic Update Program.cs channel accessible

  Zhonglun · CloudPOS

  Medium6.3
• CVE-2026-76715

  Unauthenticated Man-in-the-Middle Attach Leads to Remote Code Execution Vulnerability in HPE Networking Analytics and Location Engine (ALE)

  Hewlett Packard Enterprise (HPE) · ALE

  High7.1
• CVE-2026-84197

  In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and of its predecessor…

  Eclipse Foundation · Eclipse Ditto

  Critical9.2
• CVE-2026-74232

  Zbtlink MQWrt yunmgrd Cloud C2 Implant

  Zbtlink · L3_V2_8

  Critical9.3
• CVE-2025-29419

  CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack.

  Product not named

  High7.1
• CVE-2026-12991

  Multiple vulnerabilities in Ghost Robotics' Vision 60

  Ghost Robotics · Vision 60

  High8.7
• CVE-2026-23812

  Security Boundary Bypass via Routing Node Impersonation

  Hewlett Packard Enterprise (HPE) · HPE Aruba Networking Wireless Operating Systems (AOS-8 & AOS-10)

  Medium4.3
• CVE-2026-23811

  Unauthorized Bi-Directional Traffic Interception via L2/L3 Manipulation

  Hewlett Packard Enterprise (HPE) · HPE Aruba Networking Wireless Operating Systems (AOS-8 & AOS-10)

  Medium4.3
• CVE-2026-23810

  Cross-BSSID GTK Re-encryption and Traffic Injection

  Hewlett Packard Enterprise (HPE) · HPE Aruba Networking Wireless Operating Systems (AOS-8 & AOS-10)

  Medium4.3

Vendors it comes up for most

1. Hewlett Packard Enterprise (HPE)4
2. Juniper Networks4
3. IBM3
4. Red Hat3
5. Red Hat, Inc.3
6. Fortinet2
7. Samba2
8. Siemens2
9. Apple1
10. Cisco1