Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-1427
Weakness type CWE-1427 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 6 | 6 | 0 |
Monthly trend
█▁▂
2026-08 5 · 2026-09 0 · 2026-10 1
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-77931 | 8.7 | 62.3 | — | MoviePilot 3.1.5 Command Injection via ExecuteCommandTool |
| CVE-2026-78379 | 9.2 | 46.3 | — | Consent bypass in python_repl tool via batch kwargs forwarding in Amazon Strands Agents… |
| CVE-2026-18733 | 7.5 | 46.2 | — | Prompt injection bypasses shell tool consent gate in Strands Agents Tools |
| CVE-2026-75130 | 6.4 | 40.7 | — | Context7 2.1.2 Prompt Injection via Custom AI Instructions |
| CVE-2026-70331 | 5.4 | 34.1 | — | Microsoft Edge for iOS Spoofing Vulnerability |
| CVE-2026-21832 | 4.3 | 20.7 | — | HCL AION is affected by multiple security vulnerabilities. |
