CWE-488
61 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 61Published CVEs58 of them scored
- 43Last 12 monthspublished in the last year
- 6Critical22 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-125325
pgEdge RAG Server shared keyword index leaked results between concurrent unauthenticated requests
pgEdge · pgedge-rag-server
Medium5.9 - CVE-2026-97888
Apache TomEE: Caller identity leaks across requests in embedded HTTP server
Apache Software Foundation · Apache TomEE
Not scored - CVE-2026-111242
Apache TomEE: Privilege escalation via leaked MicroProfile JWT run-as identity
Apache Software Foundation · Apache TomEE
Not scored - CVE-2026-111245
Apache TomEE: Privilege escalation via WS-Security caller identity leaking between requests
Apache Software Foundation · Apache TomEE
Not scored - CVE-2026-122233
FrankenPHP before 1.13.4 Cross-Request Response Header Leak in Worker Mode
php · frankenphp
Medium6.3 - CVE-2026-121966
Traefik before 2.11.60 and 3.7.16 ForwardAuth NTLM/Negotiate Identity Leak
traefik · traefik
High7.0 - CVE-2026-120634
CGI::Carp versions before 5.00 for Perl leak warnings across requests in persistent environments via the warningsToBrowser buffer
CGI
Medium6.5 - CVE-2026-115419
Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server
AWS · strands-agents
High8.6 - CVE-2026-114637
Traefik v3.2.0 before v3.7.14 FastProxy NTLM/Negotiate Connection Pool Identity Leak
traefik · traefik
High7.0 - CVE-2026-112921
Robots::Validate versions from 0.4.3 before 0.4.10 for Perl report clients as imposter robots when User-Agent matcher state carries over from a previous request
Robots-Validate
High7.3