CWE-525
39 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 39Published CVEs39 of them scored
- 18Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-114542
Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242
Drupal · Simple OAuth (OAuth2) & OpenID Connect
Medium5.4 - CVE-2026-114546
Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-245
Drupal · Media Alias Display
Low3.7 - CVE-2026-114548
ImageAPI Optimize WebP - Moderately critical - Information disclosure - SA-CONTRIB-2026-247
Drupal · ImageAPI Optimize WebP
Low3.7 - CVE-2026-118550
AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-270
Drupal · AI (Artificial Intelligence)
Medium5.9 - CVE-2026-118571
Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-292
Drupal · Media Alias Display
Medium5.9 - CVE-2026-87940
Key auth - Moderately critical - Access bypass - SA-CONTRIB-2026-138
Drupal · Key auth
Medium5.4 - CVE-2026-96369
Webform - Less critical - Access bypass - SA-CONTRIB-2026-165
Drupal · Webform
Low3.1 - CVE-2026-4405
IBM Concert Software Use of Web Browser Cache Containing Sensitive Information
IBM · Concert
Medium4.0 - CVE-2026-13697
undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives
undici · undici
High7.4 - CVE-2024-23571
HCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate caching policy specifying the extent to which the page and its…
HCLSoftware · Aftermarket EPC
Medium4.3