Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-186

3 published CVEs are weaknesses of this kind, as the records or NVD name it.

All 3 in the listAtom feed of new CVEsWhat CWE-186 is, at MITRE (opens in a new tab)
Published CVEs
3
Last 12 months
2
Critical
0
Known exploited
0

Critical 0High 0Medium 2Low 1Not scored 0

CVEs per yearBy the year they were published

  1. 20251
  2. 20262

Newest CVEs

  • CVE-2026-121373

    Symfony: HtmlSanitizer MetaRefreshAttributeSanitizer Matches Only a Narrow Subset of the Browser Refresh Grammar (Incomplete Fix for CVE-2026-48761)

    sensiolabs · symfony

    Medium5.3
  • CVE-2026-47241

    Net::IMAP: Denial of Service via incomplete raw argument validation

    ruby · net-imap

    Low2.1
  • CVE-2025-46821

    Envoy vulnerable to bypass of RBAC uri_template permission

    envoyproxy · envoy

    Medium5.3

Vendors it comes up for most

  1. envoyproxy1
  2. ruby1
  3. sensiolabs1