CWE-140

CVEs per yearBy the year they were published

1. 20234
2. 20244
3. 20256
4. 20268

Newest CVEs

• CVE-2026-124028

  mistral.rs before 0.9.5 Tool Call Injection via mistralrs-core Output Parsers

  EricLBuehler · mistral.rs

  Low2.3
• CVE-2026-104047

  Sssd: sssd: information disclosure via query injection in entra id lookups

  Red Hat · Red Hat Enterprise Linux 10

  Medium5.3
• CVE-2026-47162

  Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name

  vim · vim

  High7.3
• CVE-2026-6322

  fast-uri vulnerable to host confusion via percent-encoded authority delimiters

  fast-uri · fast-uri

  High7.5
• CVE-2026-33457

  Potential livestatus injection in prediction graph page

  Checkmk GmbH · Checkmk

  Medium5.3
• CVE-2026-33456

  Potential livestatus injection in notification test

  Checkmk GmbH · Checkmk

  Medium5.1
• CVE-2026-33455

  Livestatus injection in monitoring quicksearch

  Checkmk GmbH · Checkmk

  Medium5.3
• CVE-2026-21691

  iccDEV has Type Confusion in CIccTag:IsTypeCompressed()

  InternationalColorConsortium · iccDEV

  Medium5.4
• CVE-2025-52989

  Junos OS and Junos OS Evolved: Annotate configuration command can be used to change the configuration

  Juniper Networks · Junos OS

  Medium6.8
• CVE-2025-32918

  Livestatus injection in autocomplete endpoint

  Checkmk GmbH · Checkmk

  Medium5.3

Vendors it comes up for most

1. Checkmk GmbH9
2. Cesanta2
3. EricLBuehler1
4. InternationalColorConsortium1
5. Juniper Networks1
6. Nagvis1
7. OctoPrint1
8. Red Hat1
9. asterisk1
10. fast-uri1