CWE-1288

CVEs per yearBy the year they were published

1. 20211
2. 20221
3. 20234
4. 20248
5. 20255
6. 202620

Known exploitedNewest addition to KEV first

• CVE-2026-31431

  crypto: algif_aead - Revert to operating out-of-place

  Linux · Linux

  ExploitedHigh7.8

Newest CVEs

• CVE-2026-89317

  JwtVerifierImpl.Verify does not enforce the JWS `crit` header (RFC 7515 §4.1.11)

  Eclipse Foundation · Eclipse KeyPont - GOSE

  Medium6.3
• CVE-2026-94200

  TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in ssl

  Erlang · OTP

  High8.2
• CVE-2026-102047

  Junos OS and Junos OS Evolved: An attacker causes l2cpd denial of service when MVRP is used

  Juniper Networks · Junos OS

  High7.1
• CVE-2026-101951

  Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash if a malformed MCAST-TREE NLRI is received and readvertised

  Juniper Networks · Junos OS

  High8.7
• CVE-2026-56744

  `@bsv/wallet-toolbox` / `-client` / `-mobile` don't verify storage-supplied recipient output scripts against caller-requested outputs in createAction (can redirect payments when using remote storage)

  bsv-blockchain · @bsv/wallet-toolbox

  High8.7
• CVE-2026-69793

  Windows TCP/IP Security Feature Bypass Vulnerability

  Microsoft · Windows 10 Version 1607

  High7.5
• CVE-2026-18238

  OOBR in rpcap client in libpcap before 1.10.7

  The Tcpdump Group · libpcap

  Medium5.0
• CVE-2026-18794

  OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwrite

  CalcProgrammer1 · OpenRGB

  High8.8
• CVE-2026-73219

  CVAT: Denial of service with regards to automatic annotation

  cvat-ai · cvat

  Medium5.3
• CVE-2026-18209

  Keycloak-services: keycloak-services: oidc redirect_uri fragment bypass in http parameter pollution check

  Red Hat · Red Hat build of Keycloak 26.6

  Low3.4

Vendors it comes up for most

1. Red Hat5
2. Linux4
3. Juniper Networks3
4. JetBrains2
5. Microsoft2
6. Wago2
7. AWS1
8. BlackBerry1
9. CalcProgrammer11
10. Dell1