CWE-489

CVEs per yearBy the year they were published

1. 20171
2. 20181
3. 20205
4. 20215
5. 202216
6. 202312
7. 202415
8. 202517
9. 202634

Newest CVEs

• CVE-2026-123993

  Hisense VIDAA Smart TV Unauthenticated WebDriver Remote Access

  Hisense · VIDAA

  High8.7
• CVE-2026-120637

  CGI versions before 5.00 for Perl take request parameters from the process command line arguments for an unrecognised REQUEST_METHOD

  CGI

  Not scored
• CVE-2026-115727

  AgenticSeek before commit 409840c RCE via Exposed Werkzeug Debugger in llm_server

  Fosowl · AgenticSeek

  Critical9.2
• CVE-2026-15575

  Sensitive Information Disclosure Due to Enabled Debug Mode in Production in SFM Software's Costifier

  SFM Software Technologies Inc. · Costifier

  Medium5.3
• CVE-2026-83550

  Postgres-exporter: net/http/pprof exposed on metrics listener

  Red Hat · Multicluster Global Hub

  High7.1
• CVE-2026-100102

  RCE via exposed JDWP debug agent in P4Search

  Perforce · P4 (Helix Core)

  Critical9.5
• CVE-2026-102628

  Cadmos LTI exposure of sensitive information via debug mode

  Eummena · Cadmos LTI

  Critical9.2
• CVE-2026-13313

  An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP request, to bypass security mechanisms…

  ASUS · Router

  High8.9
• CVE-2026-103475

  yii2-starter-kit through 4.2.0 Debug and Gii Module Exposure

  yii2-starter-kit · yii2-starter-kit

  Critical9.3
• CVE-2026-100295

  Active debug code in Anjvision YSSD-RTMP-H5

  Anjvision · YSSD-RTMP-H5

  Medium5.3

Vendors it comes up for most

1. InHand Networks6
2. Lenovo5
3. Cisco4
4. Siemens3
5. ABB2
6. Acer2
7. ECOVACS ROBOTICS2
8. Four-Faith2
9. Google2
10. Mitsubishi Electric Corporation2