CWE-757

CVEs per yearBy the year they were published

1. 20182
2. 20202
3. 20202
4. 20211
5. 20221
6. 20231
7. 20232
8. 20245
9. 20254
10. 202622

Newest CVEs

• CVE-2026-20578

  In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to remote denial of service, if a UE has…

  MediaTek, Inc. · MediaTek chipset

  Medium5.3
• CVE-2026-110310

  RSA PKCS#1 v1.5 padding oracle via legacy envelope key format downgrade in Amazon S3 Encryption Client for .NET

  Amazon · Amazon.Extensions.S3.Encryption

  Medium6.0
• CVE-2026-109952

  FreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrade via Negotiation Response

  FreeRDP · FreeRDP

  Medium6.0
• CVE-2026-107279

  AsyncHttpClient: Digest mutual authentication is switched off by a peer offering qop=auth-int

  AsyncHttpClient · async-http-client

  High8.8
• CVE-2026-107231

  AsyncHttpClient: Digest challenge without a usable nonce downgrades to Basic and sends the password in cleartext

  AsyncHttpClient · async-http-client

  High8.7
• CVE-2026-102508

  Apache PLC4X: OPC UA secure channel: integrity bypass, unverifiable server certificate, and silent downgrade

  Apache Software Foundation · Apache PLC4X

  Critical9.2
• CVE-2026-89177

  Howyar｜WeenyGenius - Use of Insecure Protocol

  Howyar · WeenyGenius

  High8.7
• CVE-2026-59293

  SMB minimum protocol dialect defaults to SMB1

  Spring · Spring Integration

  Medium6.6
• CVE-2026-72889

  Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify

  Net-OAuth

  Critical9.8
• CVE-2026-72887

  Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token

  Net-OAuth

  Critical9.8

Vendors it comes up for most

1. AsyncHttpClient2
2. Dell2
3. IBM2
4. MediaTek, Inc.2
5. Red Hat2
6. AWS1
7. Amazon1
8. Anviz1
9. Apache Software Foundation1
10. Apple1