boxscore/security
CWE · referenceWeaknesses · latest edition

Reference page — cumulative record through Thursday, October 8, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CWE-567

Weakness type CWE-567 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.

Totals

Totals
CVEs all-timeCVEs YTDKEV all-time
990

Monthly trend

▃▁▁▁▁▆▁▆█▃

2026-01 1 · 2026-02 0 · 2026-03 0 · 2026-04 0 · 2026-05 0 · 2026-06 2 · 2026-07 0 · 2026-08 2 · 2026-09 3 · 2026-10 1

Top CVEs

Ranked by KEV → EPSS → CVSS (§6)
CVECVSSEPSS %ileKEVTitle
CVE-2026-487087.543.6—OliveTin has a Concurrent Template Parsing Race Condition which Leads to Cross-Request …
CVE-2026-736314.329.4—Apache Struts: Shared parsing state in the JSON plugin
CVE-2026-736324.329.4—Apache Struts: Shared serialization state in the JSON plugin
CVE-2026-799625.922.0——
CVE-2026-799695.922.0——
CVE-2026-799736.312.3——
CVE-2025-140176.31.4—broken TLS options for threaded LDAPS
CVE-2026-466934.10.8—ImageMagick: Race Condition in distributed pixel cache server can result in file descri…
CVE-2026-933195.70.4—A malicious frontend can cause a daemon panic

Most-affected vendors

Vendors with the most CVEs of this type
VendorCVEs
dell3
apache2
curl1
imagemagick1
moby1
olivetin1