Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-1336
Weakness type CWE-1336 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 123 | 120 | 3 |
Monthly trend
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▂▃█▅▄
2025-11 0 · 2025-12 1 · 2026-01 1 · 2026-02 0 · 2026-03 0 · 2026-04 2 · 2026-05 8 · 2026-06 7 · 2026-07 14 · 2026-08 45 · 2026-09 23 · 2026-10 20
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2024-4040 | 9.8 | 99.9 | KEV | Unauthenticated arbitrary file read and remote code execution in CrushFTP |
| CVE-2024-23692 | 9.8 | 99.9 | KEV | Rejetto HTTP File Server 2.3m Unauthenticated RCE |
| CVE-2026-75650 | 10.0 | 90.3 | KEV | Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine … |
| CVE-2026-28496 | 9.4 | 79.4 | — | FOSSBilling: Server-side template injection in Twig template rendering enables informat… |
| CVE-2026-73299 | 10.0 | 77.9 | — | Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core N… |
| CVE-2026-12370 | 7.6 | 74.1 | — | Remote Code Execution Vulnerability |
| CVE-2026-48323 | 10.0 | 71.4 | — | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements Used in a Te… |
| CVE-2026-22244 | 8.5 | 69.7 | — | OpenMetadata Server-Side Template Injection (SSTI) in FreeMarker email templates that l… |
| CVE-2026-52889 | 9.8 | 69.4 | — | Formie: Server-Side Template Injection in Formie Hidden field defaults |
| CVE-2026-40478 | 9.0 | 67.8 | — | Improper neutralization of specific syntax patterns for unauthorized expressions in Thy… |
| CVE-2026-102142 | 7.2 | 67.8 | — | Kiteworks Core Remote Code Execution through Server-Side Template Injection |
| CVE-2026-88064 | 8.8 | 67.2 | — | Backstage: Improper input validation in TechDocs MkDocs configuration |
| CVE-2026-54718 | 7.2 | 63.6 | — | Silverstripe Advanced Workflow: Remote code execution via advanced workflow email template |
| CVE-2026-65974 | 9.9 | 63.1 | — | ERPNext: Server-Side Template Injection leading to Remote Code Execution |
| CVE-2026-77136 | 9.5 | 61.2 | — | Server-Side Template Injection in extension "powermail" (powermail) |
| CVE-2026-40477 | 9.0 | 60.4 | — | Improper restriction of the scope of accessible objects in Thymeleaf expressions |
| CVE-2026-90970 | 9.9 | 60.4 | — | Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway |
| CVE-2026-34906 | 9.3 | 58.6 | — | Server-Side Template Injection (SSTI) in Wirtualna Uczelnia |
| CVE-2026-66613 | 9.8 | 57.8 | — | WordPress JetEngine plugin <= 3.8.14 - Remote Code Execution (RCE) vulnerability |
| CVE-2026-89094 | 9.9 | 57.4 | — | — |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| orval-labs | 7 |
| acacode | 4 |
| craftcms | 4 |
| frappe | 4 |
| adobe | 3 |
| getgrav | 3 |
| koxudaxi | 3 |
| thelia | 3 |
| apache | 2 |
| backstage | 2 |
| dromara | 2 |
| nozomi networks | 2 |
| oscal-compass | 2 |
| red hat | 2 |
| rejetto | 2 |
