CWE-96

CVEs per yearBy the year they were published

1. 20202
2. 20211
3. 20221
4. 20233
5. 20246
6. 20259
7. 20265

Known exploitedNewest addition to KEV first

• CVE-2026-86218

  pre-authentication remote code execution

  N-able · N-central

  ExploitedCritical10.0

Newest CVEs

• CVE-2026-108121

  Koozali - SME Server Improper Input Validation in domain Creation Leads to Denial of Service

  Koozali · SME Server

  Medium6.9
• CVE-2026-85475

  Automation-controller: automation-controller-container: automation-controller: rsyslog configuration injection via log_aggregator_* settings leads to remote code execution in the control-plane rsyslog component

  Red Hat · Red Hat Ansible Automation Platform 2.7

  High7.2
• CVE-2026-68489

  Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authenticated users to execute arbitrary code as…

  WebPros · Plesk extension "Ruby"

  High8.7
• CVE-2026-86218

  pre-authentication remote code execution

  N-able · N-central

  ExploitedCritical10.0
• CVE-2025-57707

  File Station 5

  QNAP Systems Inc. · File Station 5

  Low1.1
• CVE-2025-7825

  Schema Plugin For Divi, Gutenberg & Shortcodes <= 4.3.2 - Authenticated (Contributor+) Object Instantiation

  wpt00ls · Schema Plugin For Divi, Gutenberg & Shortcodes

  Medium6.3
• CVE-2025-36595

  Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')…

  Dell · Unisphere for PowerMax vApp

  High7.2
• CVE-2015-2079

  Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code execution because it uses the two argument (not three argument) form…

  Usermin · Usermin

  Critical9.9
• CVE-2025-30091

  In Tiny MoxieManager PHP before 4.0.0, remote code execution can occur in the installer command. This vulnerability allows unauthenticated attackers to inject…

  Tiny · MoxieManager PHP

  Critical9.4
• CVE-2024-13268

  Opigno - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-032

  Drupal · Opigno

  Medium6.8

Vendors it comes up for most

1. Drupal5
2. xwiki4
3. Hitachi Vantara2
4. Atlassian1
5. Dell1
6. Koozali1
7. N-able1
8. QNAP Systems Inc.1
9. Red Hat1
10. SUPERAntiSpyware1