CWE-460

CVEs per yearBy the year they were published

1. 20183
2. 20191
3. 20201
4. 20211
5. 20222
6. 20233
7. 20243
8. 20253
9. 202612

Newest CVEs

• CVE-2026-123558

  Zebra before 7.0.0 Checkpoint Sync Denial of Service via Cancelled Verifier Rewind

  ZcashFoundation · zebra

  High8.7
• CVE-2026-111103

  HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in Bandit

  mtrudel · bandit

  High8.2
• CVE-2026-112326

  Improper Cleanup on Thrown Exception in GitLab

  GitLab · GitLab

  Low3.1
• CVE-2026-96273

  Ghidra before 12.1.4 Denial of Service via Unreleased Lock in OptionsDB

  NationalSecurityAgency · ghidra

  Medium6.8
• CVE-2026-93710

  Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a route that a dying hook refused when the exception handler halts the response in compile_hooks

  Dancer2

  High7.5
• CVE-2026-86748

  Snipe-IT before 8.7.0 Database Wipe via Invalid Backup Archive

  grokability · snipe-it

  Medium6.9
• CVE-2026-61387

  In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error, the…

  Eclipse Foundation · Eclipse Milo

  Medium6.9
• CVE-2026-48524

  PyJWT: PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)

  jpadilla · pyjwt

  Low3.7
• CVE-2026-40583

  UltraDAG: SmartOp Vote Path Triggers Fatal Supply Invariant Halt

  UltraDAGcom · core

  High8.8
• CVE-2026-33481

  Syft improper temporary file cleanup

  anchore · syft

  Medium5.3

Vendors it comes up for most

1. Cisco3
2. EVerest1
3. Eclipse Foundation1
4. FireEye1
5. GitLab1
6. HashiCorp1
7. Linux Kernel1
8. NationalSecurityAgency1
9. Philips1
10. UltraDAGcom1