CWE-653

CVEs per yearBy the year they were published

1. 20233
2. 202411
3. 202528
4. 202651

Known exploitedNewest addition to KEV first

• CVE-2025-21590

  Junos OS: An local attacker with shell access can execute arbitrary code

  Juniper Networks · Junos OS

  ExploitedMedium6.7

Newest CVEs

• CVE-2026-113687

  Apache Syncope: RCE via ProcessGroovyMethodsSandbox bypass

  Apache Software Foundation · Apache Syncope

  Not scored
• CVE-2026-109083

  Apache Syncope: Remote Code Execution via Flowable JUEL expression

  Apache Software Foundation · Apache Syncope

  Not scored
• CVE-2026-120306

  Beta9 build sandbox escape via chroot-only isolation

  beam-cloud · Beta9 worker

  Critical9.9
• CVE-2026-119408

  n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodes

  n8n-io · n8n

  High8.7
• CVE-2026-115517

  Unrestricted network access between execution contexts in KNIME Business Hub

  KNIME · KNIME Business Hub

  Medium6.4
• CVE-2026-115416

  Incorrect authorization checks in Amazon Athena engine version 3 query processing

  AWS · Amazon Athena

  Medium6.3
• CVE-2026-114087

  Trigger.dev before 4.5.6 Authentication Bypass via Hardcoded Default Secrets

  triggerdotdev · trigger.dev

  Critical9.2
• CVE-2026-109443

  JoySafeter through 1.0.0 Authenticated RCE via Copilot Standard Mode Shell

  jd-opensource · JoySafeter

  High8.7
• CVE-2026-109441

  LangAlpha through 2026.09.07 Cross-Tenant Sandbox Exposure via Shared Docker Bridge

  ginlix-ai · LangAlpha

  Medium6.9
• CVE-2026-34009

  **Container Escape** Host user home directory mounted with write access into application container

  QNAP Systems Inc. · Notes Station 3

  High8.4

Vendors it comes up for most

1. Apache Software Foundation7
2. Mozilla6
3. patriksimek6
4. Red Hat5
5. NVIDIA3
6. Cisco2
7. Fortinet2
8. Grafana Labs2
9. Juniper Networks2
10. metal3-io2