CWE-300
60 published CVEs are weaknesses of this kind, as the records or NVD name it.
- Published CVEs
- 60
- Last 12 months
- 10
- Critical
- 5
- Known exploited
- 0
Critical 5High 24Medium 28Low 3Not scored 0
CVEs per yearBy the year they were published
- 20091
- 201710
- 20183
- 20181
- 20202
- 20217
- 20221
- 20247
- 20256
- 20258
- 20256
- 20268
Newest CVEs
- CVE-2026-97866
Zhonglun CloudPOS Automatic Update Program.cs channel accessible
Zhonglun · CloudPOS
Medium6.3 - CVE-2026-76715
Unauthenticated Man-in-the-Middle Attach Leads to Remote Code Execution Vulnerability in HPE Networking Analytics and Location Engine (ALE)
Hewlett Packard Enterprise (HPE) · ALE
High7.1 - CVE-2026-84197
In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and of its predecessor…
Eclipse Foundation · Eclipse Ditto
Critical9.2 - CVE-2026-74232
Zbtlink MQWrt yunmgrd Cloud C2 Implant
Zbtlink · L3_V2_8
Critical9.3 - CVE-2025-29419
CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack.
Product not named
High7.1 - CVE-2026-12991
Multiple vulnerabilities in Ghost Robotics' Vision 60
Ghost Robotics · Vision 60
High8.7 - CVE-2026-23812
Security Boundary Bypass via Routing Node Impersonation
Hewlett Packard Enterprise (HPE) · HPE Aruba Networking Wireless Operating Systems (AOS-8 & AOS-10)
Medium4.3 - CVE-2026-23811
Unauthorized Bi-Directional Traffic Interception via L2/L3 Manipulation
Hewlett Packard Enterprise (HPE) · HPE Aruba Networking Wireless Operating Systems (AOS-8 & AOS-10)
Medium4.3 - CVE-2026-23810
Cross-BSSID GTK Re-encryption and Traffic Injection
Hewlett Packard Enterprise (HPE) · HPE Aruba Networking Wireless Operating Systems (AOS-8 & AOS-10)
Medium4.3 - CVE-2025-63363
A lack of Management Frame Protection in Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage…
Product not named
High7.5