CWE-187

CVEs per yearBy the year they were published

1. 20221
2. 20242
3. 20251
4. 202614

Newest CVEs

• CVE-2026-112266

  SGLang through 0.5.22 Cross-Request Abort via rid Prefix Matching

  sgl-project · sglang

  High8.2
• CVE-2026-94576

  An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and…

  Brocade · Fabric OS

  Medium5.9
• CVE-2026-101914

  @grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches

  grpc · grpc-node

  Medium6.5
• CVE-2026-81479

  Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Partial String Comparison vulnerability. A low privileged attacker with local…

  Dell · OpenManage Server Administrator Managed Node (Patch) for Windows

  Medium5.8
• CVE-2026-87853

  Sssd: sssd: idp authentication prefix comparison allows cross-user impersonation

  Red Hat · Red Hat Enterprise Linux 10

  High7.5
• CVE-2026-84376

  Astro: Authorization bypass from missing path-segment boundary check when stripping the configured base

  withastro · astro

  Medium6.3
• CVE-2026-62750

  Windows HTTP Protocol Stack Tampering Vulnerability

  Microsoft · Windows 10 Version 1607

  Medium6.5
• CVE-2026-14687

  666ghj BettaFish InsightEngine search-result Deduplication agent.py _deduplicate_results partial string comparison

  666ghj · BettaFish

  Medium6.9
• CVE-2026-45692

  Caddy: Remote Admin Authorization Bypass in `/config` API via Array Index Normalization

  caddyserver · caddy

  Medium5.4
• CVE-2026-55602

  http-proxy-middleware `router` host+path substring matching allows Host-header-driven backend routing bypass

  chimurai · http-proxy-middleware

  Medium6.9

Vendors it comes up for most

1. 666ghj1
2. Brocade1
3. CODESYS1
4. Dell1
5. IBM1
6. Microsoft1
7. Red Hat1
8. Siemens1
9. ViewComponent1
10. caddyserver1