Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-1286
Weakness type CWE-1286 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 37 | 36 | 0 |
Monthly trend
▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▂▃▁▃█▂▃▅▅
2025-11 0 · 2025-12 0 · 2026-01 1 · 2026-02 1 · 2026-03 3 · 2026-04 0 · 2026-05 3 · 2026-06 11 · 2026-07 1 · 2026-08 3 · 2026-09 7 · 2026-10 6
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2025-13878 | 7.5 | 95.4 | — | Malformed BRID/HHIT records can cause named to terminate unexpectedly |
| CVE-2026-21527 | 6.5 | 94.8 | — | Microsoft Exchange Server Spoofing Vulnerability |
| CVE-2026-7307 | 7.5 | 62.5 | — | Keycloak: keycloak: denial of service via specially crafted saml input |
| CVE-2026-48059 | 8.7 | 58.4 | — | Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to M… |
| CVE-2026-42579 | 9.1 | 57.3 | — | Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder) |
| CVE-2026-27889 | 7.5 | 57.2 | — | NATS: Pre-auth remote server crash via WebSocket frame length overflow in wsRead |
| CVE-2026-33218 | 7.5 | 57.2 | — | NATS has pre-auth server panic via leafnode handling |
| CVE-2026-25679 | 7.5 | 56.9 | — | Incorrect parsing of IPv6 host literals in net/url |
| CVE-2026-83611 | 6.9 | 48.6 | — | xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a l… |
| CVE-2026-72916 | 6.3 | 46.9 | — | Mastodon: SSRF Protection Bypass via IPv4-compatible IPv6 Addresses |
| CVE-2026-102084 | 9.2 | 42.2 | — | Junos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remot… |
| CVE-2026-105660 | 6.9 | 39.9 | — | Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.por… |
| CVE-2026-57026 | 8.7 | 38.4 | — | Junos OS: MX Series with SPC3, SRX Series: Processing of a specifically malformed SIP i… |
| CVE-2026-88009 | 8.8 | 37.1 | — | Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypass… |
| CVE-2026-50131 | 8.6 | 35.1 | — | Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl a… |
| CVE-2026-87082 | 7.5 | 35.0 | — | Net::IDN::Punycode versions before 2.590 for Perl hang, crash or return a wrong label v… |
| CVE-2026-0931 | 6.9 | 33.7 | — | Denial-of-service vulnerability in M-Files Server |
| CVE-2026-67418 | 5.3 | 32.7 | — | RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers |
| CVE-2026-87080 | 9.1 | 32.1 | — | Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a nam… |
| CVE-2025-8873 | 8.7 | 31.1 | — | Arista EOS Dataplane Denial of Service via Malformed IPsec Packet |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| qualcomm | 5 |
| dräger | 3 |
| juniper networks | 2 |
| microsoft | 2 |
| nats-io | 2 |
| netty | 2 |
| @xmldom | 1 |
| arista networks | 1 |
| barco | 1 |
| brainzcompany | 1 |
| fedify-dev | 1 |
| go standard library | 1 |
| guzzle | 1 |
| http4s | 1 |
| isc | 1 |
