Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-923

86 published CVEs are weaknesses of this kind, as the records or NVD name it.

All 86 in the listAtom feed of new CVEsWhat CWE-923 is, at MITRE (opens in a new tab)
Published CVEs
86
Last 12 months
43
Critical
7
Known exploited
0

Critical 7High 34Medium 38Low 7Not scored 0

CVEs per yearBy the year they were published

  1. 20171
  2. 20181
  3. 20191
  4. 20212
  5. 20223
  6. 20237
  7. 202411
  8. 202517
  9. 202643

Newest CVEs

  • CVE-2026-10756

    TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to be reachable only…

    Hitachi Energy · TRO600 Series Firmware

    High7.7
  • CVE-2026-110909

    Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the current project. A process listening on a…

    Wheels · Wheels CLI

    Medium5.0
  • CVE-2026-102085

    Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker

    Juniper Networks · Junos OS Evolved

    Medium6.9
  • CVE-2026-70212

    Windows Security Center Elevation of Privilege Vulnerability

    Microsoft · Windows 10 Version 1607

    High7.0
  • CVE-2026-85925

    Azure Key Vault Client SDK Elevation of Privilege Vulnerability

    Microsoft · azure-keyvault-administration

    High8.2
  • CVE-2026-86345

    389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result

    Red Hat · Red Hat Directory Server 11

    Critical9.0
  • CVE-2026-92172

    Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be induced to send a privileged PendingIntent including a com.oculus.horizon CallerIdentity…

    Meta Platforms, Inc · Meta Horizon OS

    High8.8
  • CVE-2026-92173

    Prior to v74.0.0.878.1682 of Meta Horizon OS, MediaSyncJobReceiver could be induced to send a privileged PendingIntent including a com.oculus.vrshell…

    Meta Platforms, Inc · Meta Horizon OS

    Critical9.1
  • CVE-2026-102727

    FTP Passive Data Connection Not Bound to the Authenticated Control Peer

    Eclipse Foundation · Eclipse ThreadX NetX Duo

    Medium6.0
  • CVE-2026-101891

    WatchGuard AP Improper Access Control in API Service Allows Unauthenticated Access

    WatchGuard · WatchGuard AP

    Critical9.3

Vendors it comes up for most

  1. Microsoft8
  2. Juniper Networks7
  3. IBM5
  4. Fortinet3
  5. cryptomator3
  6. Dell2
  7. Docker2
  8. Meta Platforms, Inc2
  9. NVIDIA2
  10. Red Hat2