CWE-1394

CVEs per yearBy the year they were published

1. 20246
2. 20256
3. 202614

Newest CVEs

• CVE-2026-121818

  About Time Technologies｜Herowatch Go - Security Misconfiguration

  About Time Technologies · Herowatch Go

  High8.5
• CVE-2026-120442

  ape-volo-admin before 3.6.1 Hardcoded JWT Signing Key Authentication Bypass

  xianhc · ape-volo-admin

  Critical9.3
• CVE-2026-119660

  MuseBot before 2.0.0 Authentication Bypass via Hard-Coded Session Key

  yincongcyincong · MuseBot

  Critical9.3
• CVE-2026-92777

  A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections…

  Lenovo · Idea Tab Pro (TB373FU)

  Medium5.4
• CVE-2026-111367

  BillionMail through 4.9 Forgeable JWTs via Default Signing Key

  aaPanel · BillionMail

  Medium6.9
• CVE-2020-37281

  Gravitee API Management through 4.12.22 Default JWT Secret Authentication Bypass

  Gravitee · Gravitee API Management

  Critical9.2
• CVE-2026-72895

  A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC227G / IPC277G /…

  Siemens · SIMATIC IPC BX-21A

  High8.4
• CVE-2026-107177

  Express Gateway through 1.16.11 Hardcoded Default cipherKey Exposes OAuth Tokens

  ExpressGateway · express-gateway

  High7.4
• CVE-2026-75870

  Punk versions before 0.18 for Perl allow session cookie forgery via an empty default HMAC key when a session is declared without a secret

  Punk

  Critical9.1
• CVE-2026-54887

  DTLS server cookie bypass during startup window due to empty initial cookie secret

  Erlang · OTP

  Medium6.3

Vendors it comes up for most

1. Sprecher Automation2
2. About Time Technologies1
3. AlayaCare1
4. Baicells1
5. Baxter1
6. Cosmote Greece1
7. Docusnap1
8. Erlang1
9. ExpressGateway1
10. Fortinet1