CWE-394
18 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.
- 18Published CVEs18 of them scored
- 6Last 12 monthspublished in the last year
- 2Critical7 more rated high
- 1Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2026-123158
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to…
OpenBSD · OpenSSH
ExploitedHigh8.1