CWE-924
39 published CVEs are weaknesses of this kind, as the records or NVD name it.
- Published CVEs
- 39
- Last 12 months
- 9
- Critical
- 4
- Known exploited
- 0
Critical 4High 15Medium 16Low 4Not scored 0
CVEs per yearBy the year they were published
- 20182
- 20202
- 20213
- 20223
- 20239
- 20248
- 20253
- 20269
Newest CVEs
- CVE-2026-85104
Brain stimulation parameters can be modified via Bluetooth in Sooma
Sooma · Sooma tDCS Home Therapy
Medium5.3 - CVE-2026-48106
Arc Enterprise cluster replication accepts unauthenticated MsgReplicateSync messages, enabling cluster-wide data injection from any TLS-trusted peer
Basekick-Labs · arc
High8.3 - CVE-2026-68554
Coturn: STUN attributes after MESSAGE-INTEGRITY are processed, letting on-path attackers modify authenticated TURN requests
coturn · coturn
Low2.3 - CVE-2026-14681
PostgreSQL improper enforcement of GSSAPI encryption when coupled with SSL
PostgreSQL
Medium4.2 - CVE-2026-13584
Information tampering and Denial-of-service (DoS) vulnerability in CC-Link IE TSN communication protocol
Mitsubishi Electric Corporation · MELSEC MX Controller MX-R model MXR300-16
High7.1 - CVE-2026-54891
Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl
Erlang · OTP
Medium6.3 - CVE-2026-12576
DVP80ES3 Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability
deltaww · DVP80ES3
High7.5 - CVE-2019-25719
Dräger Infinity M540 VG4.1.1 Spoofing and DoS via Network Message Handling
Dräger · Infinity Acute Care System
High8.8 - CVE-2026-39827
Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh
golang.org/x/crypto · golang.org/x/crypto/ssh
Medium6.5 - CVE-2025-29628
A Gardyn Azure IoT Hub connection string is downloaded over an insecure HTTP connection in Gardyn Home Kit firmware before master.619, Home Kit Mobile…
Gardyn · Home Kit Firmware
Critical9.4