Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-121
Weakness type CWE-121 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 805 | 764 | 20 |
Monthly trend
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▄▇▆▇█▇
2025-11 2 · 2025-12 1 · 2026-01 2 · 2026-02 4 · 2026-03 2 · 2026-04 3 · 2026-05 75 · 2026-06 128 · 2026-07 105 · 2026-08 145 · 2026-09 158 · 2026-10 142
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2025-22457 | 9.8 | 100.0 | KEV | Ivanti Connect Secure, Policy Secure, and ZTA Gateways |
| CVE-2025-0282 | 9.0 | 100.0 | KEV | Ivanti Connect Secure, Policy Secure, and ZTA Gateways |
| CVE-2021-20038 | 9.8 | 100.0 | KEV | SonicWall SMA 100 Appliances |
| CVE-2009-0927 | 8.8 | 99.9 | KEV | Adobe Reader and Acrobat |
| CVE-2008-0015 | 8.8 | 99.5 | KEV | Microsoft Windows |
| CVE-2022-20699 | 10.0 | 99.4 | KEV | Cisco Small Business RV Series Routers Vulnerabilities |
| CVE-2025-20352 | 7.7 | 98.7 | KEV | Cisco IOS and IOS XE |
| CVE-2020-5735 | 8.8 | 98.5 | KEV | Amcrest Cameras and Network Video Recorder (NVR) |
| CVE-2025-32756 | 9.6 | 98.2 | KEV | Fortinet Multiple Products |
| CVE-2018-5002 | 7.8 | 97.9 | KEV | Adobe Flash Player |
| CVE-2014-9163 | 7.8 | 97.5 | KEV | Adobe Flash Player |
| CVE-2022-20708 | 10.0 | 96.7 | KEV | Cisco Small Business RV Series Routers Vulnerabilities |
| CVE-2022-20701 | 10.0 | 95.5 | KEV | Cisco Small Business RV Series Routers Vulnerabilities |
| CVE-2022-20703 | 10.0 | 95.3 | KEV | Cisco Small Business RV Series Routers Vulnerabilities |
| CVE-2022-20700 | 10.0 | 92.9 | KEV | Cisco Small Business RV Series Routers Vulnerabilities |
| CVE-2021-27137 | 8.1 | 90.4 | KEV | DD-WRT DD-WRT |
| CVE-2025-42599 | 9.8 | 88.3 | KEV | Qualitia Active! Mail |
| CVE-2026-7273 | 8.8 | 84.5 | KEV | — |
| CVE-2025-53521 | 9.3 | 83.0 | KEV | BigIP APM Vulnerability |
| CVE-2013-2597 | 8.4 | 73.9 | KEV | Code Aurora ACDB Audio Driver |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| microsoft | 117 |
| tenda | 42 |
| ibm | 30 |
| trendnet | 26 |
| juniper networks | 23 |
| red hat | 22 |
| edimax | 20 |
| adobe | 18 |
| geovision | 18 |
| totolink | 15 |
| d-link | 13 |
| tp-link systems | 13 |
| utt | 13 |
| hewlett packard enterprise | 11 |
| apache | 10 |
