CWE-340
63 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.
- 63Published CVEs61 of them scored
- 43Last 12 monthspublished in the last year
- 12Critical16 more rated high
- 1Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2026-118527
Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with…
Ivanti · Connect Secure
ExploitedMedium4.3