CWE-778

CVEs per yearBy the year they were published

1. 20191
2. 20202
3. 20212
4. 20223
5. 20232
6. 20244
7. 20254
8. 202622

Known exploitedNewest addition to KEV first

• CVE-2026-41709

  ESX insufficient logging vulnerability

  VMware · Cloud Foundation

  ExploitedLow2.7

Newest CVEs

• CVE-2026-108311

  Tanium addressed an insufficient logging vulnerability in Tanium Server.

  Tanium · Tanium Server

  Low2.7
• CVE-2026-115357

  OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Improper Audit Logging of Root Generation and Rekey Responses

  openbao · openbao

  Low2.1
• CVE-2026-85959

  Insufficient authentication logging in Progress MarkLogic Server

  Progress Software Corporation · MarkLogic Server

  High7.5
• CVE-2026-105243

  Apache log4net: Oversize EventLogAppender record silently discarded

  Apache Software Foundation · Apache log4net

  Medium5.3
• CVE-2026-18161

  IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

  IBM · Financial Transaction Manager (FTM) for RedHat OpenShift

  Medium4.3
• CVE-2026-92002

  MISP: Authentication failure logging suppressed during Redis unavailability

  MISP · MISP

  Medium5.1
• CVE-2026-91859

  MISP Access Log Entry Overwritten by Error Controller's Second beforeFilter Pass

  MISP · MISP

  Medium5.3
• CVE-2026-90955

  MISP CLI Shell Audit Logs Lose User Identity and CLI Marker After First Lazy Model Load

  MISP · MISP

  Medium4.6
• CVE-2026-29812

  CyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the child domains list.

  CyberPanel · CyberPanel

  Medium4.3
• CVE-2026-66816

  Microsoft SQL Server Security Feature Bypass Vulnerability

  Microsoft · Microsoft SQL Server 2022 (CU 26)

  Medium6.5

Vendors it comes up for most

1. Dell3
2. MISP3
3. nextcloud3
4. Devolutions2
5. Amazon1
6. Apache Software Foundation1
7. Baxter1
8. Canonical1
9. CyberPanel1
10. Elastic1