CWE-494
261 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 4 of them as exploited in the wild.
- Published CVEs
- 261
- Last 12 months
- 97
- Critical
- 44
- Known exploited
- 4
Critical 44High 152Medium 53Low 12Not scored 0
CVEs per yearBy the year they were published
- 20082
- 20141
- 20175
- 20185
- 201917
- 202030
- 202110
- 202222
- 202329
- 202416
- 202538
- 202684
Known exploitedNewest addition to KEV first
- CVE-2026-3502
TrueConf Client Update Integrity Verification Bypass
TrueConf · TrueConf Client
ExploitedHigh7.8 - CVE-2025-15556
Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification
notepad-plus-plus · notepad-plus-plus
ExploitedHigh7.7 - CVE-2022-40799
Data Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated attacker to execute OS level commands on the device.
Product not named
ExploitedHigh8.8 - CVE-2021-44168
A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local authenticated…
Fortinet · Fortinet FortiOS
ExploitedLow3.3
Newest CVEs
- CVE-2026-123508
Vikunja before 2.7.1 Supply Chain Risk via Unpinned xgo Release Toolchain
go-vikunja · vikunja
Low2.0 - CVE-2026-104657
Missing Integrity Verification in Progress Software Fiddler Download & Setup Skill
Progress Software · Fiddler Download & Setup Skill
High7.5 - CVE-2026-121750
nvm install --offline installs a cached tarball that previously failed checksum verification
nvm-sh · nvm
Low2.1 - CVE-2026-110022
Signed plug-in validation bypass
Phoenix Contact · PLCnext Engineer
High8.6 - CVE-2026-92092
Openshift-ansible: openshift-ansible: installer container downloads and executes remote inventory script without integrity verification
Red Hat · Red Hat OpenShift Container Platform 4
High7.4 - CVE-2026-113957
An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pull by digest, so…
Apple · container
Medium5.6 - CVE-2026-55981
Firmware verification vulnerability
Creative Labs · Creative Sound Blaster Katana V2, V2X, SE
Critical9.6 - CVE-2026-113717
virtualenv: Pip seeding with download omits wheel digest verification
pypa · virtualenv
Low2.3 - CVE-2026-105036
EnergizeLab Firmware Updates Downloaded over HTTP Without Integrity Checks
EnergizeLab · Robot firmware (mode 104000)
High7.5 - CVE-2026-93649
In the Eclipse Adoptium website (adoptium.net), in every deployment built from commit 0b24ea1 (2025-06-18) up to the fix in commit cbb53cf (2026-09-24), the…
Eclipse Foundation · Adoptium Temurin
High7.5