CWE-749

222 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 4 of them as exploited in the wild.

Critical 55High 104Medium 60Low 3Not scored 0

CVEs per yearBy the year they were published

CVE-2018-19322
The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC…
Product not named
ExploitedHigh7.8
CVE-2010-0738
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before…
Product not named
ExploitedLow3.7
CVE-2010-1428
The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before…
Product not named
ExploitedMedium5.9
CVE-2006-1547
ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a…
Product not named
ExploitedHigh7.5

CVE-2026-92704
SharpEmu: Cross-site request forgery in the debugger frontend leads to arbitrary process execution
sharpemu · sharpemu
High8.3
CVE-2026-121145
Insecure Configuration Vulnerability in Tata Motors iRA and iRA.ev mobile application
Tata Motors · Tata Motors iRA 2.0
High7.1
CVE-2026-44265
Elo: Code injection in Elo backends via unvalidated emission of programmatic AST fields
enspirit · elo
High7.4
CVE-2026-120091
Temporal Server Kubernetes compute provider builds a client from caller-supplied configuration and runs a caller-chosen command on the Worker Service host
Temporal Technologies, Inc. · Temporal Server
High8.7
CVE-2026-119978
Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore
FlowiseAI · Flowise
Critical9.0
CVE-2026-66088
Unrestricted Command Execution via system.execute
Apereo Foundation · openEQUELLA
Critical9.4
CVE-2026-118606
Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability
Alpine · iLX-F511
High8.8
CVE-2026-118602
Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability
Alpine · iLX-F511
High7.8
CVE-2026-113775
Dynamic Library Loading Process Control in Autodesk Fusion Desktop
Autodesk · Fusion
High7.8
CVE-2026-116019
Grav 2.0.15 before 2.2.13 Allowlist Bypass via Flex Form Override Directives
getgrav · grav
High8.7