CWE-489

CVEs per yearBy the year they were published

1. 20171
2. 20181
3. 20205
4. 20215
5. 202216
6. 202312
7. 202415
8. 202517
9. 202633

Newest CVEs

• CVE-2026-120637

  CGI versions before 5.00 for Perl take request parameters from the process command line arguments for an unrecognised REQUEST_METHOD

  CGI

  Not scored
• CVE-2026-115727

  AgenticSeek before commit 409840c RCE via Exposed Werkzeug Debugger in llm_server

  Fosowl · AgenticSeek

  Critical9.2
• CVE-2026-15575

  Sensitive Information Disclosure Due to Enabled Debug Mode in Production in SFM Software's Costifier

  SFM Software Technologies Inc. · Costifier

  Medium5.3
• CVE-2026-83550

  Postgres-exporter: net/http/pprof exposed on metrics listener

  Red Hat · Multicluster Global Hub

  High7.1
• CVE-2026-100102

  RCE via exposed JDWP debug agent in P4Search

  Perforce · P4 (Helix Core)

  Critical9.5
• CVE-2026-102628

  Cadmos LTI exposure of sensitive information via debug mode

  Eummena · Cadmos LTI

  Critical9.2
• CVE-2026-13313

  An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP request, to bypass security mechanisms…

  ASUS · Router

  High8.9
• CVE-2026-103475

  yii2-starter-kit through 4.2.0 Debug and Gii Module Exposure

  yii2-starter-kit · yii2-starter-kit

  Critical9.3
• CVE-2026-100295

  Active debug code in Anjvision YSSD-RTMP-H5

  Anjvision · YSSD-RTMP-H5

  Medium5.3
• CVE-2026-73593

  Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Active Debug Code vulnerability. A high privileged attacker with…

  Dell · Secure Connect Gateway (SCG) Policy Manager

  Low3.0

Vendors it comes up for most

1. InHand Networks6
2. Lenovo5
3. Cisco4
4. Siemens3
5. ABB2
6. Acer2
7. ECOVACS ROBOTICS2
8. Four-Faith2
9. Google2
10. Mitsubishi Electric Corporation2