Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-15
Weakness type CWE-15 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 30 | 29 | 0 |
Monthly trend
▂▁▁▁▁▁▁▁▁▁▃▄▃▄▆█
2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 0 · 2026-05 2 · 2026-06 4 · 2026-07 3 · 2026-08 4 · 2026-09 7 · 2026-10 9
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-45087 | 10.0 | 71.8 | — | Dalfox: Unauthenticated Remote Code Execution via `found-action` in Dalfox Server Mode |
| CVE-2026-44417 | 7.5 | 59.0 | — | Apache CXF: Incomplete fix for CVE-2025-48913 (Untrusted JMS configuration can lead to … |
| CVE-2026-87987 | 10.0 | 45.7 | — | — |
| CVE-2026-96218 | 5.5 | 45.0 | — | Windows Update Stack Tampering Vulnerability |
| CVE-2026-46399 | 9.4 | 40.9 | — | Authenticated Remote Code Execution via File Overwrite |
| CVE-2026-46485 | 8.2 | 34.8 | — | Dash: Users can write to config despire permissions (OIDC tested) |
| CVE-2026-54918 | 5.3 | 34.3 | — | NetBox Device Type Library: PR-controllable upstream clone URL (NETBOX_DT_LIBRARY_URL) … |
| CVE-2019-25716 | 7.1 | 34.1 | — | Dräger Infinity Delta/Kappa Patient Monitor DoS via Malformed Network Packet |
| CVE-2026-13745 | 7.7 | 29.9 | — | Arbitrary Code Execution in Gemini CLI via Untrusted Local .env Files Overriding GEMINI… |
| CVE-2026-19593 | 9.8 | 28.9 | — | — |
| CVE-2026-96188 | 7.3 | 28.9 | — | Microsoft PowerToys Elevation of Privilege Vulnerability |
| CVE-2026-73027 | 7.8 | 28.7 | — | Windows Setup Files Cleanup Elevation of Privilege Vulnerability |
| CVE-2025-8283 | 3.7 | 25.8 | — | Netavark: podman: netavark may resolve hostnames to unexpected hosts |
| CVE-2026-107818 | 8.4 | 25.5 | — | MariaDB: environment injection via wsrep bootstrap in the mariadb.service file |
| CVE-2026-110845 | 7.7 | 25.4 | — | n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log Operation |
| CVE-2026-73661 | 8.6 | 22.1 | — | FreePBX: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup |
| CVE-2026-103442 | 7.2 | 19.1 | — | MergeAccount PHP object injection via session-key substitution |
| CVE-2026-44768 | 4.1 | 16.4 | — | Security misconfiguration in SAP CRM (WebClient UI) |
| CVE-2026-0418 | 4.3 | 14.6 | — | Certain NETGEAR devices allow administrators to tamper with system |
| CVE-2026-16708 | 7.5 | 14.6 | — | IBM Db2 Mirror for i is affected by multiple vulnerabilities |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| microsoft | 3 |
| openai | 2 |
| red hat | 2 |
| apache | 1 |
| autodesk | 1 |
| brocade | 1 |
| dräger | 1 |
| eclipse ditto | 1 |
| eclipse foundation | 1 |
| freepbx | 1 |
| google cloud | 1 |
| hahwul | 1 |
| haxtheweb | 1 |
| hcl software | 1 |
| ibm | 1 |
