Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-626
Weakness type CWE-626 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 4 | 4 | 0 |
Monthly trend
█▁▁█▁▁
2026-05 2 · 2026-06 0 · 2026-07 0 · 2026-08 2 · 2026-09 0 · 2026-10 0
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-42010 | 9.8 | 59.7 | — | Gnutls: gnutls: authentication bypass via nul character in username |
| CVE-2026-42579 | 9.1 | 56.6 | — | Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder) |
| CVE-2026-62380 | 6.3 | 15.2 | — | Netty before 4.2.16.Final SOCKS Proxy Null Byte Injection |
| CVE-2026-76816 | 3.5 | 6.2 | — | Netty: MQTT Topic Name and Client ID Validation Bypass |
