CWE-328

95 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 13High 16Medium 39Low 27Not scored 0

CVEs per yearBy the year they were published

CVE-2026-65104
NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference…
NVIDIA · Megatron-LM
High7.1
CVE-2026-97468
Apache CXF: Authentication bypass via weak cache keys for validated STS tokens
Apache Software Foundation · Apache CXF
Critical9.1
CVE-2026-97469
PostgreSQL Anonymizer: RESTRICTED functions are reachable through a subLink
DALIBO · PostgreSQL Anonymizer
Medium4.3
CVE-2026-51996
An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the src/lib/utils.ts and the getServerUrlHash…
Product not named
Critical9.8
CVE-2026-46488
motionEye: Authentication possible via password hash
motioneye-project · motioneye
Critical9.1
CVE-2026-15605
wandb Artifact Integrity Validation hashutil.py ArtifactManifestEntry.download weak hash
wandb
Low2.3
CVE-2026-41879
Weak password hashing in R-SOFT DMS
R-SOFT SERWIS · DMS
High8.2
CVE-2026-14742
langchain-ai langgraph Task Result Cache _cache.py _freeze weak hash
langchain-ai · langgraph
Low2.3
CVE-2026-14738
exo-explore exo Vision Feature Cache vision.py _image_cache_key weak hash
exo-explore · exo
Medium6.3
CVE-2026-14630
ForceInjection AI-fundermentals Memory Recall smart_customer_service.py get_conversation_history weak hash
ForceInjection · AI-fundermentals
Low2.3