CWE-603

CVEs per yearBy the year they were published

1. 20171
2. 20202
3. 20211
4. 20223
5. 20243
6. 20256
7. 202612

Newest CVEs

• CVE-2026-110972

  Use of Client-Side Authentication in Płatnik

  Zakład Ubezpieczeń Społecznych · Płatnik

  High8.6
• CVE-2026-90983

  OTP Code Exposure in Hayat Hospital's Hayat Mobile

  Hayat Health Facilities Inc. (Hayat Hospital) · Hayat Mobile

  High8.2
• CVE-2026-3096

  Reverse Tabnabbing via New Tab Navigation in Multiple WSO2 Products Allows Phishing and Credential Theft

  WSO2 · WSO2 API Control Plane

  Medium4.7
• CVE-2026-66305

  Skype for Business Spoofing Vulnerability

  Microsoft · Skype for Business Server 2015 CU13

  High7.1
• CVE-2026-76945

  Ebyte NE2-D11 Use of Client-Side Authentication

  Ebyte · Ebyte NE2-D11 Firmware

  High8.7
• CVE-2026-71187

  Ebyte NA111-M Use of Client-Side Authentication

  Ebyte · Ebyte NA111-M Firmware

  Critical9.3
• CVE-2026-42098

  Authorization Bypass in Sparx Enterprise Architect

  Sparx Systems · Enterprise Architect

  High8.7
• CVE-2026-8830

  Keycloak: org.keycloak/keycloak-services: keycloak: policy bypass during webauthn credential registration via client-side javascript manipulation

  Red Hat · Red Hat build of Keycloak 26.4

  Medium4.3
• CVE-2026-40551

  Use of Client-Side Authentication in multiple BinSoft products

  BinSoft · mpGabinet

  High8.4
• CVE-2025-30042

  Session generation possible with certificate number only

  CGM · CGM CLININET

  Critical9.0

Vendors it comes up for most

1. Ebyte2
2. Restaurant Brands International2
3. Siemens2
4. BinSoft1
5. CGM1
6. CyberTutor1
7. ECOVACS1
8. Fresenius Kabi1
9. Hayat Health Facilities Inc. (Hayat Hospital)1
10. Inaba Denki Sangyo Co., Ltd.1