Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-840
Weakness type CWE-840 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 14 | 14 | 0 |
Monthly trend
▄▂█▄▁
2026-06 3 · 2026-07 1 · 2026-08 7 · 2026-09 3 · 2026-10 0
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-13571 | 5.5 | 41.5 | — | SourceCodester Simple Food Ordering System cart.php logic error |
| CVE-2026-85030 | 2.9 | 37.9 | — | HKUDS AI-Trader selfRegister API Endpoint routes_agent.py logic error |
| CVE-2026-82423 | 2.1 | 35.8 | — | macrozheng mall Payment Status Endpoint paySuccess behavioral workflow |
| CVE-2026-19208 | 2.9 | 34.7 | — | WonderTrader TraderDD.cpp queryTrades behavioral workflow |
| CVE-2026-79406 | 5.3 | 30.4 | — | macrozheng mall quantity OmsCartItemServiceImpl.updateQuantity logic error |
| CVE-2026-19037 | 2.1 | 28.3 | — | WonderTrader Internal Limit Order Book Cache MatchEngine.cpp update_lob behavioral work… |
| CVE-2026-19213 | 2.1 | 28.3 | — | WonderTrader Pending Order TraderAdapter.h _undone_qty behavioral workflow |
| CVE-2026-19993 | 2.1 | 28.3 | — | Webkul Bagisto RMA State Validation update-status behavioral workflow |
| CVE-2026-75081 | 2.1 | 28.3 | — | Webkul Bagisto store behavioral workflow |
| CVE-2026-82982 | 4.3 | 23.7 | — | — |
| CVE-2026-77166 | 2.4 | 19.0 | — | — |
| CVE-2026-11465 | 1.3 | 11.4 | — | songquanpeng one-api Redemption Code Top-Up Endpoint redemption.go Redeem logic error |
| CVE-2026-58558 | 7.8 | 1.9 | — | — |
| CVE-2026-41973 | 5.9 | 1.2 | — | — |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| huawei | 2 |
| macrozheng | 2 |
| nextcloud | 2 |
| webkul | 2 |
| hkuds | 1 |
| songquanpeng | 1 |
| sourcecodester | 1 |
