Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-1286

109 published CVEs are weaknesses of this kind, as the records or NVD name it.

Published CVEs
109
Last 12 months
57
Critical
4
Known exploited
0

Critical 4High 57Medium 42Low 4Not scored 2

CVEs per yearBy the year they were published

  1. 20201
  2. 20213
  3. 20224
  4. 20237
  5. 202416
  6. 202523
  7. 202655

Newest CVEs

  • CVE-2026-33958

    Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.

    Samsung Semiconductor · Exynos 1080

    Not scored
  • CVE-2026-48179

    In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service

    Samsung Semiconductor · Exynos 1080

    Not scored
  • CVE-2026-20595

    In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…

    MediaTek, Inc. · MediaTek chipset

    Medium6.7
  • CVE-2026-111107

    Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service

    WatchGuard · Fireware OS

    High8.7
  • CVE-2026-110675

    Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys under allow_barekey in decode_hv

    Cpanel-JSON-XS

    High8.1
  • CVE-2026-110759

    Text::CSV_XS versions before 1.65 for Perl return a 0xFF byte that is not in the input for an empty last field followed by a lone CR in parse

    Text-CSV_XS

    Critical9.8
  • CVE-2026-105660

    Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in Bandit

    mtrudel · bandit

    Medium6.9
  • CVE-2026-102084

    Junos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remote Code Execution

    Juniper Networks · Junos OS

    Critical9.2
  • CVE-2026-67418

    RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers

    rabbitmq · rabbitmq-server

    Medium5.3
  • CVE-2026-83728

    Windows Hyper-V Spoofing Vulnerability

    Microsoft · Windows 10 Version 1607

    High8.8

Vendors it comes up for most

  1. Juniper Networks12
  2. Axis Communications AB6
  3. Qualcomm, Inc.5
  4. Bosch Rexroth AG4
  5. Nozomi Networks4
  6. Red Hat4
  7. Dräger3
  8. Eclipse Foundation3
  9. IBM3
  10. M-Files Corporation3