Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Weakness type CWE-706 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 14 | 13 | 0 |
▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▄▇█▄
2025-09 0 · 2025-10 0 · 2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 0 · 2026-05 2 · 2026-06 4 · 2026-07 5 · 2026-08 2
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-76039 | 6.5 | 36.1 | — | — |
| CVE-2026-62685 | 8.1 | 25.2 | — | File Browser: Colliding username normalization gives two users the same home directory |
| CVE-2026-54022 | 5.3 | 24.9 | — | Open WebUI: Any authenticated user can read other users' private notes via Socket.IO |
| CVE-2026-62190 | 8.7 | 21.1 | — | OpenClaw < 2026.6.9 Authorization Bypass via flock wrapper |
| CVE-2026-13372 | 7.2 | 20.3 | — | — |
| CVE-2026-10696 | 7.5 | 19.1 | — | — |
| CVE-2026-29036 | 8.7 | 17.7 | — | cJSON 1.7.19 Wrong-Key Modification via JSON Pointer Escape Decoding |
| CVE-2021-47261 | 7.8 | 14.6 | — | IB/mlx5: Fix initializing CQ fragments buffer |
| CVE-2026-45306 | 6.5 | 14.6 | — | pyLoad: Incomplete Fix for CVE-2026-33509 -storage_folder Bypass via Session Directory |
| CVE-2026-57054 | 6.9 | 14.3 | — | Junos OS: MX Series: Web filtering doesn't block specifically formatted URLs |
| CVE-2026-16120 | 2.1 | 13.9 | — | nextlevelbuilder GoClaw exec_approval.go extractBin name resolution |
| CVE-2026-54282 | 5.3 | 8.7 | — | Starlette: Unvalidated request path concatenated into authority poisons request.url.hos… |
| CVE-2025-12506 | 4.3 | 8.7 | — | Use of Incorrectly-Resolved Name or Reference in GitLab |
| CVE-2026-8716 | 4.3 | 8.7 | — | Use of Incorrectly-Resolved Name or Reference in GitLab |
| Vendor | CVEs |
|---|---|
| devolutions | 2 |
| gitlab | 2 |
| davegamble | 1 |
| filebrowser | 1 |
| 1 | |
| juniper networks | 1 |
| kludex | 1 |
| linux | 1 |
| nextlevelbuilder | 1 |
| open-webui | 1 |
| openclaw | 1 |
| pyload | 1 |