Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-299
Weakness type CWE-299 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 9 | 9 | 0 |
Monthly trend
▂▃▁█▁
2026-06 1 · 2026-07 2 · 2026-08 0 · 2026-09 6 · 2026-10 0
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-61699 | 8.1 | 36.5 | — | nebula-mesh: Certificate revocation is never enforced at the mesh |
| CVE-2026-86231 | 2.9 | 34.0 | — | mwiede jsch KnownHosts.java getRevokedKeys improper check for certificate revocation |
| CVE-2026-56821 | 7.4 | 11.2 | — | Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidator |
| CVE-2026-93493 | 5.9 | 11.1 | — | Io.netty/netty-handler-ssl-ocsp: netty: ocsp validation silently skipped when a respons… |
| CVE-2026-9636 | 8.2 | 11.0 | — | Rockwell Automation CompactLogix® 5380 ControlLogix® 5580 / 1756-EN4 Communications Mod… |
| CVE-2026-93602 | 5.9 | 10.1 | — | rustls-webpki before 0.103.10 CRL Revocation Check Bypass |
| CVE-2026-6899 | 5.6 | 4.0 | — | Improper Check for Certificate Revocation in S2OPC |
| CVE-2026-94417 | 2.3 | 3.6 | — | CRL check skipped when OCSP enabled and certificate has no OCSP URL |
| CVE-2026-73581 | 6.5 | 1.5 | — | Apache Tomcat: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate… |
