Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-602

186 published CVEs are weaknesses of this kind, as the records or NVD name it.

All 186 in the listAtom feed of new CVEsWhat CWE-602 is, at MITRE (opens in a new tab)
Published CVEs
186
Last 12 months
102
Critical
19
Known exploited
0

Critical 19High 54Medium 105Low 8Not scored 0

CVEs per yearBy the year they were published

  1. 20142
  2. 20171
  3. 20181
  4. 20203
  5. 20213
  6. 20227
  7. 202311
  8. 202418
  9. 202545
  10. 202695

Newest CVEs

  • CVE-2026-112369

    Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026

    IBM · Process Mining

    Medium4.3
  • CVE-2026-122148

    In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass vulnerability. An attacker with administrator…

    Yealink · MeetingBoard Pro

    High8.2
  • CVE-2026-119746

    ProSoft ICX35 Login Lockout Bypass via Client-Side Cookies

    ProSoft Technology · X35-HWC-A

    High8.2
  • CVE-2026-89293

    Missing server-side authorization in Eclipse Mnestix Browser admin server actions allows unauthenticated configuration tampering

    Eclipse Foundation · Eclipse Mnestix

    High8.8
  • CVE-2026-117554

    Admidio before 5.0.17 Event Guest Restriction Bypass via events_function.php

    admidio · admidio

    Medium5.3
  • CVE-2026-116605

    SourceCodester Online Food Ordering System order.php client-side enforcement of server-side security

    SourceCodester · Online Food Ordering System

    Medium6.9
  • CVE-2026-110314

    WebSocket frames keep reaching the WebSock after a server-initiated close in Bandit

    mtrudel · bandit

    Medium6.3
  • CVE-2026-89206

    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for…

    Siemens · RUGGEDCOM CROSSBOW

    Medium5.3
  • CVE-2026-89205

    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for…

    Siemens · RUGGEDCOM CROSSBOW

    Medium5.3
  • CVE-2026-13138

    Improper Authorization in Divasoft Software's Biletiva Ticketing Platform

    Divasoft Software and E-Commerce Inc. · Biletiva Ticketing Platform

    High8.6

Vendors it comes up for most

  1. Google44
  2. IBM17
  3. Siemens7
  4. Cisco6
  5. Dell6
  6. Fortinet5
  7. Ivanti3
  8. Accuenergy2
  9. Cognex2
  10. Gallagher2