Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-1288
Weakness type CWE-1288 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 17 | 17 | 0 |
Monthly trend
▃█▁█▅▆▆
2026-04 1 · 2026-05 4 · 2026-06 0 · 2026-07 4 · 2026-08 2 · 2026-09 3 · 2026-10 3
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-69793 | 7.5 | 56.6 | — | Windows TCP/IP Security Feature Bypass Vulnerability |
| CVE-2026-43001 | 8.0 | 47.0 | — | — |
| CVE-2026-94200 | 8.2 | 39.1 | — | TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension… |
| CVE-2026-73219 | 5.3 | 38.9 | — | CVAT: Denial of service with regards to automatic annotation |
| CVE-2026-101951 | 8.7 | 38.5 | — | Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash if a malformed MCAST-TREE… |
| CVE-2026-9689 | 4.2 | 35.8 | — | Keycloak: org.keycloak.protocol.oidc: http parameter pollution in oidc redirect uri all… |
| CVE-2026-18209 | 4.7 | 33.6 | — | Keycloak-services: keycloak-services: oidc redirect_uri fragment bypass in http paramet… |
| CVE-2026-15943 | 5.5 | 25.5 | — | Keycloak-services: keycloak-services: oidc idp update reuses masked client secret after… |
| CVE-2026-42982 | 7.8 | 25.1 | — | Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
| CVE-2026-56744 | 8.7 | 21.4 | — | `@bsv/wallet-toolbox` / `-client` / `-mobile` don't verify storage-supplied recipient o… |
| CVE-2026-18794 | 8.8 | 19.1 | — | OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and … |
| CVE-2026-14781 | 4.8 | 19.0 | — | Keycloak-services: keycloak-services: oidc email_verified claim incorrectly applied to … |
| CVE-2026-102047 | 7.1 | 17.8 | — | Junos OS and Junos OS Evolved: An attacker causes l2cpd denial of service when MVRP is … |
| CVE-2026-31709 | 8.8 | 16.4 | — | smb: client: validate the whole DACL before rewriting it in cifsacl |
| CVE-2026-31488 | 7.8 | 8.1 | — | drm/amd/display: Do not skip unrelated mode changes in DSC validation |
| CVE-2026-46117 | 7.8 | 7.7 | — | RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() |
| CVE-2026-18238 | 5.0 | 6.9 | — | OOBR in rpcap client in libpcap before 1.10.7 |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| red hat | 4 |
| linux | 3 |
| juniper networks | 2 |
| microsoft | 2 |
| bsv-blockchain | 1 |
| calcprogrammer1 | 1 |
| cvat-ai | 1 |
| erlang | 1 |
| openstack | 1 |
| the tcpdump group | 1 |
