CWE-912
94 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 3 of them as exploited in the wild.
- Published CVEs
- 94
- Last 12 months
- 28
- Critical
- 35
- Known exploited
- 3
Critical 35High 30Medium 26Low 3Not scored 0
CVEs per yearBy the year they were published
- 20181
- 20215
- 20215
- 20223
- 20238
- 202416
- 20247
- 202522
- 20251
- 20251
- 202625
Known exploitedNewest addition to KEV first
- CVE-2025-47729
The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different…
TeleMessage · archiving backend
ExploitedLow1.9 - CVE-2024-20439
A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an affected system by using a static…
Cisco · Cisco Smart License Utility
ExploitedCritical9.8 - CVE-2021-25371
A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.
Samsung Mobile · Samsung Mobile Devices
ExploitedMedium6.1
Newest CVEs
- CVE-2026-118579
D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor
D-Link · DIR-505
Critical9.3 - CVE-2026-114353
DJI CrystalSky ZS600C USB-gadget backdoor allows root command execution
DJI · CrystalSky ZS600C
High7.0 - CVE-2026-97627
Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with…
Atsumi Electric Co., Ltd. · ADX5004
High8.6 - CVE-2026-100737
Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with…
Atsumi Electric Co., Ltd. · ADX5004
Medium6.9 - CVE-2026-112360
Netis EAP930 CGI Endpoint debug return200 backdoor
Netis · EAP930
High8.9 - CVE-2026-82829
Hidden accounts or hard-coded credentials may permit unauthorized access without the legitimate authentication process
Hitachi Industrial Equipment Systems · Hitachi Coding Software Suite
Critical9.3 - CVE-2026-80217
Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can log in via SSH and access the enable mode on the product to…
LITE-ON Technology Corporation · FF-RFI079I4
High8.7 - CVE-2026-15413
Link Factory - Backdoor
Unknown · Link Factory
Critical10.0 - CVE-2026-18844
Pulsetto Vagus Nerve Stimulator Hidden Functionality
Pulsetto · Vagus Nerve Stimulator
High7.2 - CVE-2026-17032
Supsystic Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server
Unknown · google-maps-easy-pro
Critical9.8