Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Weakness type CWE-538 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 13 | 13 | 0 |
▂▁▂█▂▃
2026-03 1 · 2026-04 0 · 2026-05 1 · 2026-06 8 · 2026-07 1 · 2026-08 2
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2016-20024 | 9.3 | 51.6 | — | ZKTeco ZKTime.Net 3.0.1.6 Insecure File Permissions Privilege Escalation |
| CVE-2026-49298 | 8.8 | 40.1 | — | Apache Airflow: JWT Token Exposure in KubernetesExecutor Command-Line Arguments |
| CVE-2026-46617 | 8.7 | 27.7 | — | Fission runtime pods automount the fission-fetcher service-account token into the user … |
| CVE-2026-10254 | 5.5 | 25.8 | — | SourceCodester Pet Grooming Management Software admin file information disclosure |
| CVE-2026-19229 | 5.5 | 25.8 | — | SourceCodester Online Clothing Store Dreamweaver Metadata Files _notes file information… |
| CVE-2026-15574 | 7.5 | 17.8 | — | Vllm-orchestrator-gateway: vllm-orchestrator-gateway: authorization header and full cha… |
| CVE-2026-50565 | 4.9 | 17.4 | — | Fission builder pods auto-mount the fission-builder ServiceAccount token in the user-su… |
| CVE-2026-12762 | 5.3 | 15.4 | — | Insertion of Sensitive Information into Externally-Accessible File in IBM Business Auto… |
| CVE-2026-5434 | 5.9 | 11.2 | — | Improper storage of sensitive information |
| CVE-2025-36372 | 6.5 | 10.6 | — | IBM® Db2® could disclose sensitive information to an authenticated user from the monito… |
| CVE-2019-25717 | 5.3 | 10.6 | — | Dräger Infinity Delta/Kappa Patient Monitors Unauthenticated Log File Disclosure |
| CVE-2026-29114 | 2.3 | 9.0 | — | — |
| CVE-2026-50099 | 5.1 | 6.9 | — | Naxclow IoT Platform Insertion of sensitive information into Externally-Accessible file… |
| Vendor | CVEs |
|---|---|
| fission | 2 |
| ibm | 2 |
| sourcecodester | 2 |
| apache | 1 |
| dahua | 1 |
| dräger | 1 |
| honeywell international | 1 |
| naxclow | 1 |
| red hat | 1 |
| zkteco | 1 |