boxscore/security
CWE · referenceWeaknesses · latest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CWE-1004

Weakness type CWE-1004 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.

Totals
CVEs all-timeCVEs YTDKEV all-time
220

Monthly trend

█▁▁

2026-06 2 · 2026-07 0 · 2026-08 0

Top CVEs

Ranked by KEV → EPSS → CVSS (§6)
CVECVSSEPSS %ileKEVTitle
CVE-2026-119566.39.2TwiN gatus OIDC Session Cookie oidc.go setSessionCookie missing secure attribute
CVE-2026-579487.62.7Pinpoint - Insecure Session Cookie Attributes in pinpointJwt

Most-affected vendors

Vendors with the most CVEs of this type
VendorCVEs
pinpoint-apm1
twin1