CWE-696
60 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 60Published CVEs60 of them scored
- 42Last 12 monthspublished in the last year
- 1Critical19 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-13721
Folder authorization bypass in the Git Sync provisioning files API
Grafana · Grafana Enterprise
Medium6.5 - CVE-2026-121291
Security Advisory 0222
Arista Networks · EOS
High8.3 - CVE-2026-63027
Incorrect behavior order in the get_tcb_level_by_svn for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of…
Intel(R) TDX Migration Trust Domain (MigTD)
Medium5.3 - CVE-2026-112186
In Eclipse Kura versions 5.4.0 through 5.6.2, the Service Listing V1 REST API read the JSON body of every request into memory, with no limit on its size. The…
Eclipse Foundation · Eclipse Kura
High8.7 - CVE-2026-123612
rustls 0.23.44 and 0.23.45 ECH Rejection Application Data Disclosure
rustls · rustls
Medium4.6 - CVE-2026-123584
Hickory-DNS 0.26.0 before 0.26.2 UDP Client Denial of Service via Spoofed Responses
hickory-dns · hickory-dns
High8.2 - CVE-2026-82898
Apache Wicket: A cross-origin listener invocation stopped by a login wall is replayed after the user signs in
Apache Software Foundation · Apache Wicket
Low2.1 - CVE-2026-65219
Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability
SMCI · MBD-X12SPI
High7.4 - CVE-2026-114145
GitPython validates a submodule's ".git" path only after cloning into it (RCE)
gitpython-developers · GitPython
High7.5 - CVE-2026-73535
Gitea second-factor bypass through OpenID identity linking
Gitea · Gitea
High8.8