Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-841

90 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

Published CVEs
90
Last 12 months
59
Critical
3
Known exploited
1

Critical 3High 29Medium 50Low 8Not scored 0

CVEs per yearBy the year they were published

  1. 20223
  2. 20233
  3. 20248
  4. 202520
  5. 202656

Known exploitedNewest addition to KEV first

  • CVE-2026-67279

    SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS

    Mikrotik · RouterOS

    ExploitedMedium6.9

Newest CVEs

  • CVE-2026-109231

    Germanized for WooCommerce <= 4.1.4 - Authenticated (Subscriber+) Unauthorized Access of Private Data via Activation Token Reuse via Activation Token Reuse After Email Change

    vendidero · Germanized for WooCommerce

    Medium4.3
  • CVE-2026-119558

    OpenCart through 4.1.0.4 Payment Bypass via Free Checkout Reward Points

    OpenCart · OpenCart

    Low2.3
  • CVE-2026-115248

    subhajitkhan online-clinic-management-system Booking patappointtime.php behavioral workflow

    subhajitkhan · online-clinic-management-system

    Medium5.3
  • CVE-2026-113165

    Inappropriate implementation in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and…

    Google · Chrome

    High8.8
  • CVE-2026-113308

    Inappropriate implementation in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged…

    Google · Chrome

    High8.8
  • CVE-2026-113094

    Inappropriate implementation in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass system…

    Google · Chrome

    High8.8
  • CVE-2026-103977

    FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts

    error311 · FileRise

    High8.1
  • CVE-2026-70079

    Windows DNS Denial of Service Vulnerability

    Microsoft · Windows 10 Version 1607

    High7.5
  • CVE-2026-108789

    deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow

    deepseek-ai · deepseek-harness

    Medium5.1
  • CVE-2026-19878

    Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

    IBM · Security Verify Access

    Medium6.5

Vendors it comes up for most

  1. Google8
  2. freescout-help-desk7
  3. Microsoft5
  4. Apple3
  5. IBM3
  6. Secheron3
  7. pretix3
  8. Devolutions2
  9. WatchGuard2
  10. Webkul2