CWE-799

CVEs per yearBy the year they were published

1. 20181
2. 20201
3. 20217
4. 20233
5. 202417
6. 202524
7. 202645

Newest CVEs

• CVE-2026-124575

  SiteServer SSCMS Admin-Login CAPTCHA LoginController.Submit.cs LoginController.Submit excessive authentication

  SiteServer · SSCMS

  Medium6.3
• CVE-2026-122049

  Campcodes Bitcoin Wallet System ForgotPasswordController.php random_int excessive authentication

  Campcodes · Bitcoin Wallet System

  Medium6.3
• CVE-2026-121535

  miroslavpejic85 MiroTalk P2P Room Action server.js checkPassword excessive authentication

  miroslavpejic85 · MiroTalk P2P

  Medium6.3
• CVE-2024-5617

  Account Lock Bypass via User Store Synchronization in Multiple WSO2 Products Allows Brute Force Attacks

  WSO2 · WSO2 API Manager

  Medium4.8
• CVE-2026-63399

  Coop: Unauthenticated org provisioning via GraphQL Mutation.createOrg

  roostorg · coop

  Medium6.9
• CVE-2026-116123

  NocoDB signup validatePassword excessive authentication

  NocoDB

  Medium6.3
• CVE-2026-116007

  YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification SmsCodeServiceImpl.java SmsCodeServiceImpl.validateSmsCode0 excessive authentication

  YunaiV · ruoyi-vue-pro

  Medium6.3
• CVE-2026-115480

  baserCMS: Public Web API mail-form submission bypasses image CAPTCHA

  baserproject · basercms

  Medium5.3
• CVE-2026-115359

  OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Role-Based Rate Limit Quota Bypass via Request Parsing

  openbao · openbao

  Medium6.3
• CVE-2026-96364

  Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171

  Drupal · Webform

  Medium5.3

Vendors it comes up for most

1. IBM5
2. nextcloud5
3. openclaw4
4. Drupal2
5. ScriptAndTools2
6. Westermo2
7. mtons2
8. ASUS1
9. Arraytics1
10. Beetel1