CWE-707

264 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 2 of them as exploited in the wild.

Critical 8High 19Medium 125Low 112Not scored 0

CVEs per yearBy the year they were published

CVE-2025-26633
Microsoft Management Console Security Feature Bypass Vulnerability
Microsoft · Windows 10 Version 1507
ExploitedHigh7.0
CVE-2024-43572
Microsoft Management Console Remote Code Execution Vulnerability
Microsoft · Windows 10 Version 1507
ExploitedHigh7.8

CVE-2026-76526
Improper Neutralization in Splunk SOAR
Splunk · Splunk SOAR
High8.8
CVE-2026-76302
Security Hardening in Splunk Enterprise - October 2026
Splunk · Splunk Enterprise
Critical9.9
CVE-2026-76284
Improper Neutralization in Splunk Enterprise
Splunk · Splunk Enterprise
Critical9.8
CVE-2026-76499
Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Neutralization Vulnerabilities
Cisco · Cisco Application Policy Infrastructure Controller (APIC)
Critical9.8
CVE-2026-76453
Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Neutralization Vulnerabilities
Cisco · Cisco NX-OS Software
High8.8
CVE-2026-97182
halo-dev Halo SpEL ReplyNotificationSubscriptionHelper.java neutralization
halo-dev · Halo
Medium6.9
CVE-2026-20330
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Neutralization Vulnerabilities
Cisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
Critical9.9
CVE-2026-92213
a2ui-project a2ui Angular Renderer server-to-client.ts z.any injection
a2ui-project · a2ui
Medium5.1
CVE-2026-76443
Cisco Secure Email Gateway Security Hardening Release
Cisco · Cisco Secure Email
Critical9.8
CVE-2026-20278
Cisco IOS XR Software Security Hardening Release: September 2026
Cisco · Cisco IOS XR Software
High8.8