Reference page — cumulative record through Thursday, October 8, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-195
Weakness type CWE-195 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 12 | 12 | 0 |
Monthly trend
▂▅▂█▂
2026-06 1 · 2026-07 3 · 2026-08 1 · 2026-09 6 · 2026-10 1
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-85441 | 8.7 | 49.9 | — | MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Negative Serialized String L… |
| CVE-2026-62959 | 8.2 | 42.6 | — | Coturn: Pre-authentication heap memory disclosure in ACME redirect (`try_acme_redirect`) |
| CVE-2026-49840 | 9.1 | 39.8 | — | FreeSWITCH: Pre-authentication heap buffer overflow in libesl `Content-Length` parsing |
| CVE-2026-77406 | 8.2 | 33.3 | — | RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting i… |
| CVE-2026-55991 | 5.9 | 28.3 | — | Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2 |
| CVE-2026-74221 | 8.8 | 25.8 | — | U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK |
| CVE-2026-20248 | 6.8 | 25.3 | — | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense So… |
| CVE-2026-74220 | 8.8 | 25.2 | — | U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply |
| CVE-2026-17507 | 8.7 | 23.4 | — | MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range … |
| CVE-2026-102639 | 7.1 | 23.5 | — | MobilityDB through 1.3.0 Out-of-bounds Read DoS via WKB Deserialization |
| CVE-2026-55737 | 5.1 | 19.6 | — | Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in ert… |
| CVE-2026-18444 | 6.9 | 2.3 | — | Integer Conversion Vulnerability Resulting in an Out of Bounds Read in NI LabVIEW |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| u-boot | 2 |
| cisco | 1 |
| coturn | 1 |
| erlang | 1 |
| legion of the bouncy castle | 1 |
| mobilitydb | 1 |
| ni | 1 |
| nlnet labs | 1 |
| rabbitmq | 1 |
| signalwire | 1 |
| themoos | 1 |
