Skip to content
CVE Tracker

CWE-924

39 published CVEs are weaknesses of this kind, as the records or NVD name it.

All 39 in the listAtom feed of new CVEsWhat CWE-924 is, at MITRE (opens in a new tab)
Published CVEs
39
Last 12 months
9
Critical
4
Known exploited
0

Critical 4High 15Medium 16Low 4Not scored 0

CVEs per yearBy the year they were published

  1. 20182
  2. 20214
  3. 20221
  4. 20238
  5. 20232
  6. 20247
  7. 20243
  8. 20252
  9. 20268
  10. 20262

Newest CVEs

  • CVE-2026-85104

    Brain stimulation parameters can be modified via Bluetooth in Sooma

    Sooma · Sooma tDCS Home Therapy

    Medium5.3
  • CVE-2026-48106

    Arc Enterprise cluster replication accepts unauthenticated MsgReplicateSync messages, enabling cluster-wide data injection from any TLS-trusted peer

    Basekick-Labs · arc

    High8.3
  • CVE-2026-68554

    Coturn: STUN attributes after MESSAGE-INTEGRITY are processed, letting on-path attackers modify authenticated TURN requests

    coturn · coturn

    Low2.3
  • CVE-2026-14681

    PostgreSQL improper enforcement of GSSAPI encryption when coupled with SSL

    PostgreSQL

    Medium4.2
  • CVE-2026-13584

    Information tampering and Denial-of-service (DoS) vulnerability in CC-Link IE TSN communication protocol

    Mitsubishi Electric Corporation · MELSEC MX Controller MX-R model MXR300-16

    High7.1
  • CVE-2026-54891

    Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl

    Erlang · OTP

    Medium6.3
  • CVE-2026-12576

    DVP80ES3 Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability

    deltaww · DVP80ES3

    High7.5
  • CVE-2019-25719

    Dräger Infinity M540 VG4.1.1 Spoofing and DoS via Network Message Handling

    Dräger · Infinity Acute Care System

    High8.8
  • CVE-2026-39827

    Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

    golang.org/x/crypto · golang.org/x/crypto/ssh

    Medium6.5
  • CVE-2025-29628

    A Gardyn Azure IoT Hub connection string is downloaded over an insecure HTTP connection in Gardyn Home Kit firmware before master.619, Home Kit Mobile…

    Gardyn · Home Kit Firmware

    Critical9.4

Vendors it comes up for most

  1. Schneider Electric3
  2. LINE Corporation2
  3. ABB1
  4. Basekick-Labs1
  5. Becton Dickinson & Co1
  6. CBOT1
  7. Cisco1
  8. Dräger1
  9. Erlang1
  10. F51