CWE-1287
170 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 170
- Last 12 months
- 74
- Critical
- 13
- Known exploited
- 1
Critical 13High 66Medium 80Low 10Not scored 1
CVEs per yearBy the year they were published
- 20213
- 20227
- 20238
- 202423
- 202568
- 202661
Known exploitedNewest addition to KEV first
- CVE-2024-4879
Jelly Template Injection Vulnerability in ServiceNow UI Macros
ServiceNow · Now Platform
ExploitedCritical9.3
Newest CVEs
- CVE-2026-110985
Apache Kafka: Broker silently skips JWT signature verification for SASL/OAUTHBEARER when the JWKS endpoint URL is not configured
Apache Software Foundation · Apache Kafka
Not scored - CVE-2026-90458
OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's Redfish service.
OpenStack · Ironic
Medium5.4 - CVE-2026-115383
Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via Tag Imports
bytecodealliance · wasmtime
Medium5.9 - CVE-2026-114509
Laravel TokenGuard authentication bypass through non-string API credentials
laravel · framework
Critical9.2 - CVE-2026-110857
GitPython before 3.2.0 Command Execution via ls_remote ext:: URLs
gitpython-developers · GitPython
High7.7 - CVE-2026-97801
.NET Framework Tampering Vulnerability
Microsoft · Microsoft .NET Framework 3.5
High7.5 - CVE-2026-96044
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Microsoft · Microsoft SharePoint Server Subscription Edition
High8.8 - CVE-2026-78016
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Validation of Specified Type of Input vulnerability. A low…
Dell · Secure Connect Gateway (SCG) Policy Manager
Low3.1 - CVE-2026-107723
fast-jwt : Silent claim-validator bypass when JWT payload is a JSON array
nearform · fast-jwt
High8.1 - CVE-2026-102714
ICMPv6 option validation accepts a trailing byte residue, sending the Router Advertisement, Neighbor Solicitation, Neighbor Advertisement and Redirect option walkers past the packet or into a permanent loop
Eclipse Foundation · Eclipse ThreadX NetX Duo
High7.1