Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-784

6 published CVEs are weaknesses of this kind, as the records or NVD name it.

All 6 in the listAtom feed of new CVEsWhat CWE-784 is, at MITRE (opens in a new tab)
Published CVEs
6
Last 12 months
2
Critical
1
Known exploited
0

Critical 1High 3Medium 1Low 1Not scored 0

CVEs per yearBy the year they were published

  1. 20201
  2. 20232
  3. 20241
  4. 20262

Newest CVEs

  • CVE-2026-60134

    Weintek cMT3092X Reliance on Cookies without Validation and Integrity Checking in a Security Decision

    Weintek · cMT3092X firmware

    High8.7
  • CVE-2026-45055

    CubeCart: Pre-Authenticated Password Reset Link Poisoning via HTTP Host Header

    cubecart · v6

    High8.1
  • CVE-2024-9820

    WP 2FA with Telegram <= 3.0 - Two-Factor Authentication Bypass

    dueclic · AuthPress

    Medium6.5
  • CVE-2023-3050

    Authentication Bypass in TMT's Lockcell

    TMT · Lockcell

    Critical9.8
  • CVE-2022-3083

    All versions of Landis+Gyr E850 (ZMQ200) are vulnerable to CWE-784: Reliance on Cookies Without Validation and Integrity. The device's web application…

    Landis+Gyr · E850 (ZMQ200)

    Low3.9
  • CVE-2020-8184

    A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker…

    https://github.com/rack/rack

    High7.5

Vendors it comes up for most

  1. Landis+Gyr1
  2. TMT1
  3. Weintek1
  4. cubecart1
  5. dueclic1