CWE-525

39 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 0High 3Medium 24Low 8Not scored 4

CVEs per yearBy the year they were published

CVE-2026-114542
Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242
Drupal · Simple OAuth (OAuth2) & OpenID Connect
Not scored
CVE-2026-114546
Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-245
Drupal · Media Alias Display
Not scored
CVE-2026-114548
ImageAPI Optimize WebP - Moderately critical - Information disclosure - SA-CONTRIB-2026-247
Drupal · ImageAPI Optimize WebP
Not scored
CVE-2026-118550
AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-270
Drupal · AI (Artificial Intelligence)
Not scored
CVE-2026-118571
Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-292
Drupal · Media Alias Display
Medium5.9
CVE-2026-87940
Key auth - Moderately critical - Access bypass - SA-CONTRIB-2026-138
Drupal · Key auth
Medium5.4
CVE-2026-96369
Webform - Less critical - Access bypass - SA-CONTRIB-2026-165
Drupal · Webform
Low3.1
CVE-2026-4405
IBM Concert Software Use of Web Browser Cache Containing Sensitive Information
IBM · Concert
Medium4.0
CVE-2026-13697
undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives
undici · undici
High7.4
CVE-2024-23571
HCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate caching policy specifying the extent to which the page and its…
HCLSoftware · Aftermarket EPC
Medium4.3