CWE-390
31 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 31Published CVEs31 of them scored
- 19Last 12 monthspublished in the last year
- 6Critical7 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-62275
Detection of error condition without action in the MigTD's vmcall_raw transport for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor…
Intel(R) TDX Migration Trust Domain (MigTD)
Medium5.6 - CVE-2026-102280
Sandboxie-Plus: Sandbox containment bypass
sandboxie-plus · Sandboxie
Medium6.9 - CVE-2026-122192
Guest access to Firecracker process memory after a failed memory discard
AWS · firecracker
High7.1 - CVE-2026-114137
Django REST framework: TokenProxy.delete() reports success and revokes nothing
encode · django-rest-framework
High7.4 - CVE-2026-111823
Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.
Mage · mage-ai
Critical9.8 - CVE-2026-107275
@fastify/jwt vulnerable to missing token expiration when temporal options cannot be parsed
@fastify/jwt · @fastify/jwt
Medium6.8 - CVE-2026-104480
Improper MLS Welcome roster validation in Discord libdave allows unauthorized group membership
Discord · libdave
Critical9.4 - CVE-2026-104002
Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)
AWS · powertools-lambda-python
Medium6.0 - CVE-2026-85716
AsyncHttpClient: SCRAM and Digest mutual-authentication responses are not verified
AsyncHttpClient · async-http-client
Low3.7 - CVE-2026-29810
CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic.
CyberPanel · CyberPanel
Medium4.3