boxscore/security
CWE · referenceWeaknesses · latest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CWE-820

Weakness type CWE-820 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.

Totals
CVEs all-timeCVEs YTDKEV all-time
550

Monthly trend

▅█▅▅

2026-05 1 · 2026-06 2 · 2026-07 1 · 2026-08 1

Top CVEs

Ranked by KEV → EPSS → CVSS (§6)
CVECVSSEPSS %ileKEVTitle
CVE-2026-443185.319.1free5GC: BSF concurrent PUT /nbsf-management/v1/subscriptions/{subId} crashes the BSF p…
CVE-2026-706378.213.7LightFTP 2.4 Data Race Condition via ABOR Command in ftpserv.c
CVE-2026-570296.02.2Junos OS Evolved: QFX Series: When sFlow collector reachability changes evo-pfemand pro…
CVE-2026-532778.81.3KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation
CVE-2026-531537.80.9mm/list_lru: drain before clearing xarray entry on reparent

Most-affected vendors

Vendors with the most CVEs of this type
VendorCVEs
linux2
free5gc1
hfiref0x1
juniper networks1