Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Weakness type CWE-1236 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 15 | 15 | 0 |
▄▇█▇
2026-05 2 · 2026-06 4 · 2026-07 5 · 2026-08 4
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-18738 | 5.1 | 31.4 | — | Shlink CSV Formula Injection via Visit Export CLI |
| CVE-2026-47705 | 9.6 | 31.1 | — | TypeBot vulnerable to CSV injection in result export |
| CVE-2026-5242 | 8.8 | 23.1 | — | Code Injection in Mia Technologies' Pizzy Library |
| CVE-2026-14846 | 4.5 | 16.8 | — | Incorrect neutralisation in the PrestaShop firmware |
| CVE-2026-10248 | 2.0 | 16.4 | — | SourceCodester Pharmacy Sales and Inventory System Supplier Creation export create_supp… |
| CVE-2026-55452 | 4.8 | 14.6 | — | Snipe-IT: CSV formula injection in Activity Report export |
| CVE-2026-47693 | 6.9 | 13.9 | — | Poweradmin: CSV Injection in log export endpoints allows formula execution in spreadshe… |
| CVE-2026-64955 | 6.1 | 13.3 | — | Velociraptor CSV Formula Injection in Export Pipeline |
| CVE-2025-52612 | 8.8 | 10.1 | — | HCL iControl was affected by Export CSV - CSV Injection vulnerability. |
| CVE-2026-54243 | 6.1 | 9.1 | — | Statamic: CSV formula injection in form submission exports |
| CVE-2026-50179 | 4.2 | 7.2 | — | Actual: CSV Formula Injection in Transaction Export via Imported Payee/Notes Fields |
| CVE-2026-9673 | 5.5 | 6.4 | — | — |
| CVE-2026-41073 | 4.6 | 6.3 | — | RT: Spreadsheet downloads vulnerable to CSV/formula injection in Microsoft Excel and si… |
| CVE-2026-65875 | 5.1 | 4.9 | — | — |
| CVE-2026-46672 | 4.6 | 3.2 | — | Actual: CSV Formula Injection in `@actual-app/cli` `--format csv` Output via Custom `es… |
| Vendor | CVEs |
|---|---|
| actualbudget | 2 |
| baptistearno | 1 |
| basercms users community | 1 |
| bestpractical | 1 |
| grokability | 1 |
| hcl | 1 |
| mia technology | 1 |
| poweradmin | 1 |
| prestashop | 1 |
| rapid7 | 1 |
| shlinkio | 1 |
| sourcecodester | 1 |
| statamic | 1 |