CWE-84
22 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.
- 22Published CVEs22 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 1Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2026-96654
Plex Media Server URL injection
Plex · Media Server
ExploitedMedium6.9