CWE-338

CVEs per yearBy the year they were published

1. 20093
2. 20141
3. 20175
4. 201817
5. 201912
6. 20205
7. 202115
8. 202214
9. 202314
10. 202419
11. 202542
12. 202683

Newest CVEs

• CVE-2026-17393

  Multiple Vulnerabilities in IBM API Connect

  IBM · API Connect

  Medium5.1
• CVE-2026-17386

  Multiple Vulnerabilities in IBM API Connect

  IBM · API Connect

  High8.1
• CVE-2026-121553

  Cotonti through 1.0.0 Predictable Validation Tokens via md5(microtime())

  cotonti · cotonti

  Medium6.3
• CVE-2026-118986

  CallBackery versions before 0.62.0 for Perl allow session cookie forgery via a signing secret generated with rand()

  CallBackery

  High7.5
• CVE-2026-102813

  Administrator Password Reset Through the Verification-Code Interface in TP-Link RE305

  TP-Link Systems Inc. · RE305 v3

  Medium6.1
• CVE-2026-19742

  IPv6 stable and temporary interface identifiers derived from a non-cryptographic PRNG secret key

  zephyrproject · zephyr

  Low3.7
• CVE-2026-112240

  Broken Access Control in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form)

  TYPO3 · Extension "TYPO3 Fluid-Form by coding.ms"

  Medium6.3
• CVE-2026-112041

  diem-project diem dmString.php random weak prng

  diem-project · diem

  Medium6.3
• CVE-2026-107612

  World-accessible IPC shared memory with predictable name in TightVNC Server

  GlavSoft · TightVNC

  High7.8
• CVE-2026-107283

  AsyncHttpClient: Digest authentication cnonce generated with a non-cryptographic random source

  AsyncHttpClient · async-http-client

  Low3.7

Vendors it comes up for most

1. IBM4
2. Qualcomm, Inc.4
3. Apache Software Foundation3
4. TOKUHIROM3
5. Fortinet2
6. Fortra2
7. GRYPHON2
8. HAYAJO2
9. Jenkins Project2
10. MIK2