CWE-799

CVEs per yearBy the year they were published

1. 20181
2. 20201
3. 20217
4. 20233
5. 202417
6. 202524
7. 202644

Newest CVEs

• CVE-2026-122049

  Campcodes Bitcoin Wallet System ForgotPasswordController.php random_int excessive authentication

  Campcodes · Bitcoin Wallet System

  Medium6.3
• CVE-2026-121535

  miroslavpejic85 MiroTalk P2P Room Action server.js checkPassword excessive authentication

  miroslavpejic85 · MiroTalk P2P

  Medium6.3
• CVE-2024-5617

  Account Lock Bypass via User Store Synchronization in Multiple WSO2 Products Allows Brute Force Attacks

  WSO2 · WSO2 API Manager

  Medium4.8
• CVE-2026-63399

  Coop: Unauthenticated org provisioning via GraphQL Mutation.createOrg

  roostorg · coop

  Medium6.9
• CVE-2026-116123

  NocoDB signup validatePassword excessive authentication

  NocoDB

  Medium6.3
• CVE-2026-116007

  YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification SmsCodeServiceImpl.java SmsCodeServiceImpl.validateSmsCode0 excessive authentication

  YunaiV · ruoyi-vue-pro

  Medium6.3
• CVE-2026-115480

  baserCMS: Public Web API mail-form submission bypasses image CAPTCHA

  baserproject · basercms

  Medium5.3
• CVE-2026-115359

  OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Role-Based Rate Limit Quota Bypass via Request Parsing

  openbao · openbao

  Medium6.3
• CVE-2026-96364

  Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171

  Drupal · Webform

  Medium5.3
• CVE-2026-111874

  OpenCATS Career Portal CareersUI.php processLogin excessive authentication

  OpenCATS

  Medium6.3

Vendors it comes up for most

1. IBM5
2. nextcloud5
3. openclaw4
4. Drupal2
5. ScriptAndTools2
6. Westermo2
7. mtons2
8. ASUS1
9. Arraytics1
10. Beetel1