Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Weakness type CWE-281 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 13 | 12 | 0 |
▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁█▅▄▄
2025-09 0 · 2025-10 0 · 2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 0 · 2026-05 5 · 2026-06 3 · 2026-07 2 · 2026-08 2
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2024-1726 | 5.3 | 51.1 | — | Quarkus: security checks for some inherited endpoints performed after serialization in … |
| CVE-2026-39832 | 9.1 | 46.1 | — | Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent |
| CVE-2026-39828 | 6.3 | 30.1 | — | Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh |
| CVE-2026-44832 | 8.7 | 24.3 | — | Snipe-IT: Privilege Escalation via API Permissions Assignment |
| CVE-2026-40767 | 7.5 | 21.2 | — | WordPress wpForo Forum plugin < 3.0.2 - Broken Access Control vulnerability |
| CVE-2026-4360 | 2.0 | 20.2 | — | Tarfile.extract() doesn't fully respect filter parameter |
| CVE-2024-47270 | 2.7 | 16.6 | — | — |
| CVE-2026-44947 | 6.9 | 14.0 | — | Stale PSA ClusterRoleBinding Persists After RoleTemplate Downgrade in Rancher |
| CVE-2026-58510 | 4.3 | 9.4 | — | GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code… |
| CVE-2025-14779 | 3.8 | 8.7 | — | Improper Access Control via Secret Type Management API in WSO2 Identity Server |
| CVE-2026-24194 | 7.8 | 4.9 | — | — |
| CVE-2026-23556 | 9.4 | 3.6 | — | oxenstored keeps quota related use counts across domain destruction |
| CVE-2026-58494 | 6.5 | 2.1 | — | Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination |
| Vendor | CVEs |
|---|---|
| golang.org/x/crypto | 2 |
| bytecodealliance | 1 |
| gitea | 1 |
| grokability | 1 |
| nvidia | 1 |
| python software foundation | 1 |
| red hat | 1 |
| suse | 1 |
| synology | 1 |
| tomdever | 1 |
| wso2 | 1 |
| xen | 1 |