Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-115
Weakness type CWE-115 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 9 | 6 | 0 |
Monthly trend
▅▁▁▁▁▁█▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁██▅▁▅
2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 0 · 2026-05 0 · 2026-06 2 · 2026-07 2 · 2026-08 1 · 2026-09 0 · 2026-10 1
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2018-12116 | 7.5 | 91.5 | — | — |
| CVE-2018-12123 | 4.3 | 90.5 | — | — |
| CVE-2018-7159 | 5.3 | 89.2 | — | — |
| CVE-2026-17566 | 9.4 | 51.2 | — | pgAdmin 4: RCE via backslash-escape mismatch in Import/Export Data query guard (incompl… |
| CVE-2026-17351 | 9.4 | 40.2 | — | pgAdmin 4: AI Assistant read-only transaction bypass via sqlparse/PostgreSQL lexer disa… |
| CVE-2026-63650 | 2.0 | 28.7 | — | — |
| CVE-2026-73798 | 8.2 | 24.0 | — | HPE NonStop DNS 9.2.3 Non Secure Version |
| CVE-2026-12491 | 4.8 | 13.9 | — | Vllm: vllm: image exif rotation & png trns transparency not normalized, causing mismatc… |
| CVE-2026-42004 | 3.7 | 12.3 | — | EDNS options smuggling |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| the node.js project | 3 |
| pgadmin.org | 2 |
| hewlett packard enterprise | 1 |
| openvpn | 1 |
| powerdns | 1 |
| red hat | 1 |
| vllm-project | 1 |
