Reference page — cumulative record through Thursday, October 8, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-778
Weakness type CWE-778 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 13 | 13 | 0 |
Monthly trend
▂▁▂▆█▂
2026-05 1 · 2026-06 0 · 2026-07 1 · 2026-08 4 · 2026-09 6 · 2026-10 1
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-66816 | 6.5 | 61.5 | — | Microsoft SQL Server Security Feature Bypass Vulnerability |
| CVE-2026-92002 | 5.1 | 43.2 | — | MISP: Authentication failure logging suppressed during Redis unavailability |
| CVE-2026-91859 | 5.3 | 39.0 | — | MISP Access Log Entry Overwritten by Error Controller's Second beforeFilter Pass |
| CVE-2026-76208 | 8.8 | 36.1 | — | phpMyFAQ 3.1.0 through 4.1.6 Authentication Bypass via LDAP |
| CVE-2026-105243 | 5.3 | 24.2 | — | Apache log4net: Oversize EventLogAppender record silently discarded |
| CVE-2026-41709 | 2.7 | 20.5 | — | ESX insufficient logging vulnerability |
| CVE-2026-29812 | 4.3 | 18.5 | — | — |
| CVE-2026-9247 | 2.4 | 17.3 | — | — |
| CVE-2025-62307 | 5.4 | 15.1 | — | HCL IntelliOps Event Management is affected by multiple security vulnerabilities. |
| CVE-2026-82863 | 8.7 | 14.2 | — | @hulumi/baseline before 1.3.2 CloudTrail Selector Tampering Detection |
| CVE-2026-18161 | 4.3 | 9.8 | — | IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities |
| CVE-2020-37268 | 6.8 | 7.2 | — | Coq and Rocq Prover Print Assumptions Omits Unsafe Universe Checking Inlined Through Pa… |
| CVE-2026-90955 | 4.6 | 4.6 | — | MISP CLI Shell Audit Logs Lose User Identity and CLI Marker After First Lazy Model Load |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| misp | 3 |
| apache | 1 |
| cyberpanel | 1 |
| devolutions | 1 |
| hcl software | 1 |
| hulumi | 1 |
| ibm | 1 |
| microsoft | 1 |
| rocq-prover | 1 |
| thorsten | 1 |
| vmware | 1 |
