boxscore/security
CWE · referenceWeaknesses · latest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CWE-840

Weakness type CWE-840 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.

Totals
CVEs all-timeCVEs YTDKEV all-time
990

Monthly trend

▅▂█

2026-06 3 · 2026-07 1 · 2026-08 5

Top CVEs

Ranked by KEV → EPSS → CVSS (§6)
CVECVSSEPSS %ileKEVTitle
CVE-2026-135715.531.7SourceCodester Simple Food Ordering System cart.php logic error
CVE-2026-190372.128.4WonderTrader Internal Limit Order Book Cache MatchEngine.cpp update_lob behavioral work…
CVE-2026-192082.919.7WonderTrader TraderDD.cpp queryTrades behavioral workflow
CVE-2026-199932.119.4Webkul Bagisto RMA State Validation update-status behavioral workflow
CVE-2026-750812.119.4Webkul Bagisto store behavioral workflow
CVE-2026-114651.312.8songquanpeng one-api Redemption Code Top-Up Endpoint redemption.go Redeem logic error
CVE-2026-192132.112.3WonderTrader Pending Order TraderAdapter.h _undone_qty behavioral workflow
CVE-2026-585587.80.3
CVE-2026-419735.90.2

Most-affected vendors

Vendors with the most CVEs of this type
VendorCVEs
huawei2
webkul2
songquanpeng1
sourcecodester1