Skip to content
CVE Tracker

CWE-940

73 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

All 73 in the listAtom feed of new CVEsWhat CWE-940 is, at MITRE (opens in a new tab)
Published CVEs
73
Last 12 months
39
Critical
14
Known exploited
1

Critical 14High 27Medium 27Low 5Not scored 0

CVEs per yearBy the year they were published

  1. 20211
  2. 20222
  3. 202415
  4. 20246
  5. 202634
  6. 202614
  7. 20261

Known exploitedNewest addition to KEV first

  • CVE-2025-61932

    Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an…

    MOTEX Inc. · Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA))

    ExploitedCritical9.3

Newest CVEs

  • CVE-2026-76894

    CKAN MCP Server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)

    ondata · ckan-mcp-server

    Low3.1
  • CVE-2026-119568

    vsftpd through 3.0.5 require_ssl_reuse Bypass via FTPS Data Channel Hijacking

    vsftpd · vsftpd

    Critical9.1
  • CVE-2026-89409

    Unvalidated ZWAVE_CMD_NODES_EXIST May Cause Deletion of End Nodes​

    Silicon Labs · Z-Wave SDK

    Medium5.3
  • CVE-2026-66279

    Dis-connect vulnerability in Connect Stack

    Silicon Labs · Connect SDK

    High7.2
  • CVE-2026-112408

    Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()

    AWS · Amazon SageMaker Python SDK

    Critical9.4
  • CVE-2026-102552

    Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP DNS resolver

    FreeRTOS · FreeRTOS-Plus-TCP

    High8.2
  • CVE-2026-102551

    Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling

    FreeRTOS · FreeRTOS-Plus-TCP

    Critical9.2
  • CVE-2026-101897

    Angular DevTools (Local DoS)

    angular · angular

    Medium5.1
  • CVE-2026-87705

    Windows Hyper-V Security Feature Bypass Vulnerability

    Microsoft · Windows 10 Version 1607

    High7.4
  • CVE-2026-94590

    WordPress Sell Downloads plugin <= 1.2.3 - Broken Access Control vulnerability

    CodePeople2 · Sell Downloads

    Medium6.5

Vendors it comes up for most

  1. Silicon Labs3
  2. Cisco2
  3. Fortinet2
  4. FreeRTOS2
  5. IETF2
  6. Siemens2
  7. home-assistant2
  8. usememos2
  9. @auth1
  10. AMD1