Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Weakness type CWE-602 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 61 | 59 | 0 |
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁█▄▃
2025-09 0 · 2025-10 0 · 2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 0 · 2026-05 1 · 2026-06 35 · 2026-07 15 · 2026-08 8
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2023-42787 | 6.5 | 69.8 | — | — |
| CVE-2026-54104 | 8.7 | 51.2 | — | U.S. GAO EPDS and CBCA EDS client-based privilege escalation |
| CVE-2025-4527 | 2.9 | 45.7 | — | Dígitro NGC Explorer Password Transmission client-side enforcement of server-side security |
| CVE-2026-42266 | 8.8 | 43.9 | — | JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (mali… |
| CVE-2026-72867 | 9.9 | 40.2 | — | Dokploy: Incomplete fix of CVE-2026-45628: Command Injection via Unvalidated Branch Fie… |
| CVE-2026-13901 | 9.6 | 36.5 | — | — |
| CVE-2026-13903 | 8.8 | 36.5 | — | — |
| CVE-2026-13919 | 6.5 | 34.6 | — | — |
| CVE-2026-13930 | 6.5 | 34.6 | — | — |
| CVE-2026-59504 | 9.1 | 33.1 | — | Priority – CWE-602: Client-Side Enforcement of Server-Side Security |
| CVE-2026-64813 | 10.0 | 32.6 | — | — |
| CVE-2026-63301 | 7.0 | 29.3 | — | Denial of Service in Quick.CMS |
| CVE-2026-13871 | 6.5 | 28.6 | — | — |
| CVE-2026-16480 | 7.1 | 26.5 | — | IBM® Db2® is affected by an improper authorization vulnerability in the certain command… |
| CVE-2026-13795 | 6.5 | 25.7 | — | — |
| CVE-2026-17703 | 6.5 | 24.7 | — | — |
| CVE-2026-14086 | 8.8 | 24.3 | — | — |
| CVE-2026-13896 | 6.5 | 24.1 | — | — |
| CVE-2026-11011 | 8.1 | 23.8 | — | — |
| CVE-2026-14831 | 5.3 | 23.8 | — | Easy Booking < 3.5.0 - Unauthenticated Minimum Booking Duration Bypass |
| Vendor | CVEs |
|---|---|
| 38 | |
| ibm | 2 |
| johnson & johnson | 2 |
| jupyterlab | 2 |
| balbooa.com | 1 |
| capgo | 1 |
| civilian board of contract appeals | 1 |
| dfir-iris | 1 |
| dokploy | 1 |
| dígitro | 1 |
| fortinet | 1 |
| gobito informatics technologies engineering industry and trade ltd. co | 1 |
| government accountability office | 1 |
| jetbrains | 1 |
| lissy93 | 1 |