boxscore/security
CWE · referenceWeaknesses · latest edition

Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CWE-1357

Weakness type CWE-1357 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.

Totals

Totals
CVEs all-timeCVEs YTDKEV all-time
660

Monthly trend

█▃▃

2026-08 4 · 2026-09 1 · 2026-10 1

Top CVEs

Ranked by KEV → EPSS → CVSS (§6)
CVECVSSEPSS %ileKEVTitle
CVE-2026-476198.154.8——
CVE-2026-755697.747.5—Mce-operator-bundle: all github actions pinned by mutable tag, not commit sha
CVE-2026-854698.042.8—Quay-builder-qemu: quay-builder-qemu: release workflow uses third-party action pinned t…
CVE-2026-5567510.035.5—Salty documentation workflow executes fork-controlled Python build hooks with deploymen…
CVE-2026-667834.427.2—Submariner-operator: release workflow consumes same-org composite action via mutable @d…
CVE-2026-672756.521.4——

Most-affected vendors

Vendors with the most CVEs of this type
VendorCVEs
red hat3
dell1
nvidia1
saltyorg1