Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-1395
Weakness type CWE-1395 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 9 | 9 | 0 |
Monthly trend
█▆▃▃▆▁
2026-05 3 · 2026-06 2 · 2026-07 1 · 2026-08 1 · 2026-09 2 · 2026-10 0
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-34652 | 7.5 | 59.0 | — | Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395) |
| CVE-2026-34654 | 5.3 | 55.8 | — | Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395) |
| CVE-2026-58586 | 9.8 | 50.1 | — | Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebp |
| CVE-2026-69713 | 4.4 | 27.4 | — | Windows Secure Boot Security Feature Bypass Vulnerability |
| CVE-2026-58235 | 6.3 | 20.7 | — | Use of Vulnerable Third-Party Component in SAP NetWeaver AS Java (Adobe Document Services) |
| CVE-2026-47906 | 8.6 | 20.5 | — | Dreamweaver Desktop | Dependency on Vulnerable Third-Party Component (CWE-1395) |
| CVE-2026-90455 | 6.3 | 9.1 | — | Dependency on vulnerable third-party component in Malcolm |
| CVE-2025-31973 | 9.8 | 6.8 | — | HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of… |
| CVE-2024-42206 | 3.1 | 3.9 | — | HCL iReflection Use of Third party vulnerable and outdated components issue was detecte… |
