CWE-99

CVEs per yearBy the year they were published

1. 20171
2. 20181
3. 20192
4. 20203
5. 20212
6. 20224
7. 20232
8. 20247
9. 202523
10. 202629

Newest CVEs

• CVE-2026-71901

  Apache OFBiz: Dispatch arbitrary internal services on SFA component

  Apache Software Foundation · Apache OFBiz

  High8.1
• CVE-2026-110283

  Multiple vulnerabilities that affects IBM Db2 Genius Hub

  IBM · Db2 Genius Hub

  Medium4.3
• CVE-2026-114726

  Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the Bounce (resend) action.…

  Roundcube · Webmail

  Medium5.8
• CVE-2026-114725

  Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_sendmail stripped newline characters only…

  Roundcube · Webmail

  Medium5.0
• CVE-2026-114717

  Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability when a message is forwarded as an attachment. The…

  Roundcube · Webmail

  Medium4.0
• CVE-2026-114716

  Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_sendmail::extract_inline_images() used the…

  Roundcube · Webmail

  High8.5
• CVE-2026-50218

  Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact…

  Akamai · Guardicore Platform Agent

  High8.5
• CVE-2026-107448

  Magic: The Gathering Arena (Windows/Steam client; 2026.59.30.12801.127931.6 and certain later 2026.60.x builds) passes a server-supplied URL from a home-screen…

  Wizards of the Coast · Magic: The Gathering Arena

  Low3.4
• CVE-2026-106583

  In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.

  OpenBSD · OpenSSH

  Low2.5
• CVE-2026-105444

  dotnet eShop Ordering API OrdersApi.cs GetOrderAsync resource injection

  dotnet · eShop

  Medium5.3

Vendors it comes up for most

1. Roundcube4
2. Hitachi Vantara3
3. Xuxueli3
4. Benner2
5. Campcodes2
6. GitLab2
7. MongoDB2
8. SAP SE2
9. SimpleMachines2
10. SourceCodester2