Skip to content
CVE Tracker

CWE-294

305 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

All 305 in the listAtom feed of new CVEsWhat CWE-294 is, at MITRE (opens in a new tab)
Published CVEs
305
Last 12 months
121
Critical
46
Known exploited
1

Critical 46High 143Medium 105Low 11Not scored 0

CVEs per yearBy the year they were published

  1. 20175
  2. 202022
  3. 202011
  4. 202014
  5. 20201
  6. 202219
  7. 202425
  8. 202531
  9. 20251
  10. 2026106
  11. 202631
  12. 202638

Known exploitedNewest addition to KEV first

  • CVE-2023-23397

    Microsoft Outlook Elevation of Privilege Vulnerability

    Microsoft · Microsoft Office LTSC 2021

    ExploitedCritical9.8

Newest CVEs

  • CVE-2026-104381

    Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service

    WatchGuard · Fireware OS

    Medium6.0
  • CVE-2026-41020

    Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authentication traffic to replay…

    Eaton · easyE4

    High7.5
  • CVE-2026-117470

    WebAuthn assertion replay permits second-factor bypass in Psono Server

    esaqa GmbH · Psono

    Medium6.5
  • CVE-2026-116825

    YesWiki from 4.6.2 before 4.7.0 HTTP Signature Replay via ActivityPub Inbox

    YesWiki · yeswiki

    High8.3
  • CVE-2026-89209

    A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 11 compatible) (All versions < V4.2.4),…

    Siemens · Mendix SAML (Mendix 10 compatible)

    High7.6
  • CVE-2026-116201

    Snipe-IT before 8.5.0 SAML Assertion Replay via Race Condition

    grokability · snipe-it

    High8.7
  • CVE-2026-65824

    OpenReception: invite confirmation token is replayable within its validity window and re-issues a registration-bootstrap cookie

    open-reception · appointment-booking-software

    High7.4
  • CVE-2026-114617

    Authlib: ID token can disable its own nonce validation via the nonce_supported claim

    authlib · authlib

    Medium4.2
  • CVE-2026-87952

    SAML SSO - Service Provider - Moderately critical - Insufficient replay protection - SA-CONTRIB-2026-150

    Drupal · SAML SSO - Service Provider

    Low3.1
  • CVE-2026-103314

    Stackrox: stackrox: saml response replay allows multiple central authentication tokens

    Red Hat · Red Hat Advanced Cluster Security for Kubernetes 4.10

    High7.4

Vendors it comes up for most

  1. Apache Software Foundation9
  2. Microsoft7
  3. Siemens7
  4. OpenClaw5
  5. Red Hat4
  6. Dell3
  7. Drupal3
  8. HCL Software3
  9. Huawei3
  10. IBM3