CWE-183

CVEs per yearBy the year they were published

1. 20202
2. 20212
3. 20221
4. 20233
5. 20244
6. 20253
7. 202642

Newest CVEs

• CVE-2026-117570

  nmap-mcp through commit 3636afa Permissive NSE Script Allowlist in scan_vulnerabilities

  Vorota-ai · nmap-mcp

  Medium4.8
• CVE-2026-115915

  vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE

  vllm-project · vllm

  High8.1
• CVE-2026-116339

  iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist

  iFlytek · astron-agent

  Medium6.9
• CVE-2026-113786

  pypdf: Unvalidated JPEG image data loading

  py-pdf · pypdf

  Low2.3
• CVE-2026-96229

  .NET Information Disclosure Vulnerability

  Microsoft · .NET 10.0 runtime

  Medium6.5
• CVE-2026-89106

  Cross Site Scripting (XSS) vulnerability in SAPUI5

  SAP_SE · SAPUI5

  Medium4.4
• CVE-2026-106510

  Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml

  backstage · backstage

  High7.7
• CVE-2026-103687

  rhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklist

  rhukster · dom-sanitizer

  Medium6.9
• CVE-2026-12974

  Security Policy Bypass in Forcepoint Security Engine (NGFW)

  Forcepoint · Forcepoint Security Engine (NGFW)

  High7.9
• CVE-2026-90808

  HKUDS nanobot ExecTool shell.py ExecTool._spawn incomplete blacklist

  HKUDS · nanobot

  Medium5.3

Vendors it comes up for most

1. OpenClaw4
2. axios3
3. Cisco2
4. Dell2
5. Microsoft2
6. MongoDB Inc2
7. @backstage1
8. ASUS1
9. AhmedAdelFahim1
10. Bosch Rexroth AG1