CWE-613

707 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 72High 208Medium 348Low 79Not scored 0

CVEs per yearBy the year they were published

CVE-2026-123598
Hickory DNS 0.25.0 through 0.26.0-alpha.1 DNSSEC Bogus Answer Cache Poisoning
hickory-dns · hickory-dns
Medium6.3
CVE-2026-123597
Hickory DNS DNSSEC Validation Cache Poisoning via Transient DS-Fetch Errors
hickory-dns · hickory-dns
Medium6.3
CVE-2026-123528
Vikunja before 2.7.1 Insufficient Session Expiration via HTTP Token Middleware
go-vikunja · vikunja
High7.6
CVE-2026-123493
Vikunja from 2.4.0 before 2.7.1 Authentication Bypass via Bot API Tokens
go-vikunja · vikunja
Medium5.3
CVE-2026-66986
HCL AION is affected by multiple security vulnerabilities.
HCL Software · HCL AION
Low3.3
CVE-2026-84155
Session Token Remains Valid After Logout in Multi-Worker Deployments
Ericsson · CodeChecker
Medium5.3
CVE-2026-82907
Apache OFBiz: externalLoginKey honoured pre-auth, reusable and unbound
Apache Software Foundation · Apache OFBiz
Critical9.8
CVE-2026-54375
VitaFit Android < 2.8.1.0 Long-Lived Session Token Exposure
Shenzhen Shine Industrial Co., Ltd. · VitaFit
High8.6
CVE-2026-121735
blueprintUE Self-Hosted Edition before 4.3.4 Non-Expiring Account Confirmation Tokens
blueprintue · blueprintue-self-hosted-edition
Medium6.3
CVE-2024-9517
Improper Token Renewal in Refresh Token Grant in Multiple WSO2 Products Allows Unauthorized Access to Blocked Accounts
WSO2 · WSO2 API Manager
Medium4.9