CWE-15

CVEs per yearBy the year they were published

1. 20213
2. 20222
3. 20238
4. 20249
5. 202522
6. 202650

Newest CVEs

• CVE-2026-13292

  IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability

  IBM · MQ

  High8.8
• CVE-2026-121614

  Docker Sandboxes host Git executes repository-controlled programs

  Docker · Docker Sandboxes

  High7.1
• CVE-2026-121427

  AzuraCast through 0.23.8 Config Injection via frontend_config.custom_config

  AzuraCast · AzuraCast

  High8.7
• CVE-2025-68403

  Inadequate Steps to Confirm Vulnerability in QuRouter

  QNAP Systems Inc. · QuRouter

  Medium4.6
• CVE-2026-110845

  n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log Operation

  n8n-io · n8n

  High7.7
• CVE-2026-96188

  Microsoft PowerToys Elevation of Privilege Vulnerability

  Microsoft · Microsoft PowerToys

  High7.3
• CVE-2026-73027

  Windows Setup Files Cleanup Elevation of Privilege Vulnerability

  Microsoft · Windows 10 Version 1607

  High7.8
• CVE-2026-96218

  Windows Update Stack Tampering Vulnerability

  Microsoft · Windows 10 Version 1809

  Medium5.5
• CVE-2026-107818

  MariaDB: environment injection via wsrep bootstrap in the mariadb.service file

  MariaDB · server

  High8.4
• CVE-2026-107503

  In Eclipse Ditto versions 3.6.0 to 3.8.13 and 3.9.0 to 3.9.7, the Ditto Explorer UI loads its complete environment configuration, including the Ditto API URI…

  Eclipse Ditto · Ditto Explorer UI

  High7.1

Vendors it comes up for most

1. Wavlink12
2. OpenClaw5
3. ABB3
4. Huawei3
5. Microsoft3
6. IBM2
7. OpenAI2
8. Red Hat2
9. SAP_SE2
10. TP-Link Systems Inc.2