CWE-204

CVEs per yearBy the year they were published

1. 20181
2. 20201
3. 20214
4. 20228
5. 202317
6. 202430
7. 202554
8. 202699

Newest CVEs

• CVE-2026-100362

  SuiteCRM: V8 OAuth2 Username Enumeration

  SuiteCRM · SuiteCRM

  Medium6.9
• CVE-2026-85286

  HomeBox: Timing Side-Channel in Login Endpoint Allows User Enumeration via Bcrypt Hashing Delay

  sysadminsmedia · homebox

  Low3.7
• CVE-2026-97702

  Open edX: Support "manage_course_team" REST API omits the `require_support_permission` gate its sibling support views enforce

  openedx · openedx-platform

  Medium5.3
• CVE-2026-122139

  blueprintUE Self-Hosted Edition before 4.3.3 Account Enumeration via Password Reset

  blueprintue · blueprintue-self-hosted-edition

  Medium6.9
• CVE-2026-119700

  WPGraphQL before 2.24.2 Object Existence Disclosure via Media and Comment Mutations

  WPGraphQL · WPGraphQL

  Medium6.9
• CVE-2026-100164

  User Enumeration in Rolantis Information Technologies' Agentis

  Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. · Agentis

  High7.5
• CVE-2026-49442

  Cacti: User Enumeration via Error Messages

  Cacti · cacti

  Medium5.3
• CVE-2024-7478

  Username Enumeration via External User Stores in Multiple WSO2 Products Allows User Account Discovery

  WSO2 · WSO2 API Manager

  Medium5.8
• CVE-2026-111056

  FOSSBilling: Unauthenticated client account enumeration via guest signup endpoint

  FOSSBilling · FOSSBilling

  Medium6.9
• CVE-2026-111887

  phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Account Enumeration via Guest Comment Endpoint

  thorsten · phpMyFAQ

  Medium6.9

Vendors it comes up for most

1. IBM14
2. Siemens5
3. SAP_SE4
4. SICK AG4
5. MB connect line3
6. Red Hat3
7. Checkmk GmbH2
8. ChurchCRM2
9. Cisco2
10. D-Link2