Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-134
Weakness type CWE-134 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 48 | 44 | 3 |
Monthly trend
▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▁▁▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▃▂▇█▆▆█
2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 1 · 2026-04 2 · 2026-05 1 · 2026-06 8 · 2026-07 9 · 2026-08 7 · 2026-09 7 · 2026-10 9
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2024-23113 | 9.8 | 99.2 | KEV | Fortinet Multiple Products |
| CVE-2019-1579 | 8.1 | 98.8 | KEV | Palo Alto Networks PAN-OS |
| CVE-2020-3118 | 8.8 | 96.0 | KEV | Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability |
| CVE-2024-35845 | 9.1 | 66.9 | — | wifi: iwlwifi: dbg-tlv: ensure NUL termination |
| CVE-2026-63073 | 9.8 | 66.6 | — | Untrusted Sender DN Used as Format String in CMP Response Validation |
| CVE-2026-33210 | 8.3 | 63.6 | — | Ruby JSON has a format string injection vulnerability |
| CVE-2026-69395 | 6.5 | 62.0 | — | Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability |
| CVE-2026-6250 | 7.0 | 60.3 | — | Authenticated Format String Injection on TP-Link Tapo C110 |
| CVE-2026-17136 | 9.8 | 55.6 | — | Vulnerabilities in IBM AIX and PowerVM VIOS |
| CVE-2026-14157 | 9.4 | 54.5 | — | — |
| CVE-2026-94520 | 4.9 | 47.9 | — | Microsoft SQL Server Denial of Service Vulnerability |
| CVE-2026-101965 | 8.7 | 47.7 | — | Junos OS Evolved: An attacker causes telemetry disruption when network analytics teleme… |
| CVE-2026-12174 | 7.4 | 46.7 | — | D-Link DCS-935L HTTP rhea snprintf format string |
| CVE-2024-58366 | 9.0 | 46.3 | — | SurrealDB before 1.1.1 Format String via Scripting Functions |
| CVE-2026-76722 | 9.8 | 44.2 | — | Uncontrolled Format String Vulnerabilities lead to Remote Code Execution or Denial-of-S… |
| CVE-2026-76753 | 9.8 | 43.3 | — | Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager |
| CVE-2026-50211 | 8.8 | 43.0 | — | Exposed Factory Testing App Boundaries |
| CVE-2026-67244 | 8.6 | 41.4 | — | A format string vulnerability was found in the Notification OAuth settings of ADM |
| CVE-2026-12004 | 8.7 | 41.1 | — | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security… |
| CVE-2026-68553 | 7.1 | 40.0 | — | Coturn: Format String Injection via TURN USERNAME/REALM into hiredis Redis Command |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| asustor | 4 |
| hewlett packard enterprise (hpe) | 4 |
| ibm | 4 |
| microsoft | 4 |
| red hat | 4 |
| juniper networks | 3 |
| tp-link systems | 3 |
| acer | 1 |
| asus | 1 |
| cisco | 1 |
| coturn | 1 |
| d-link | 1 |
| dell | 1 |
| fortinet | 1 |
| geovision | 1 |
