Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-195
Weakness type CWE-195 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 14 | 13 | 0 |
Monthly trend
▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▅▂█▃
2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 0 · 2026-05 0 · 2026-06 1 · 2026-07 3 · 2026-08 1 · 2026-09 6 · 2026-10 2
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2020-6096 | 8.1 | 92.7 | — | — |
| CVE-2026-85441 | 8.7 | 50.4 | — | MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Negative Serialized String L… |
| CVE-2026-62959 | 8.2 | 43.2 | — | Coturn: Pre-authentication heap memory disclosure in ACME redirect (`try_acme_redirect`) |
| CVE-2026-49840 | 9.1 | 40.4 | — | FreeSWITCH: Pre-authentication heap buffer overflow in libesl `Content-Length` parsing |
| CVE-2026-77406 | 8.2 | 33.9 | — | RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting i… |
| CVE-2026-55991 | 5.9 | 28.8 | — | Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2 |
| CVE-2026-74221 | 8.8 | 26.3 | — | U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK |
| CVE-2026-17507 | 8.7 | 26.3 | — | MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range … |
| CVE-2026-20248 | 6.8 | 25.8 | — | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense So… |
| CVE-2026-74220 | 8.8 | 25.7 | — | U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply |
| CVE-2026-102639 | 7.1 | 23.9 | — | MobilityDB through 1.3.0 Out-of-bounds Read DoS via WKB Deserialization |
| CVE-2026-55737 | 5.1 | 20.0 | — | Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in ert… |
| CVE-2026-101937 | 7.1 | 17.8 | — | Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-clus… |
| CVE-2026-18444 | 6.9 | 2.4 | — | Integer Conversion Vulnerability Resulting in an Out of Bounds Read in NI LabVIEW |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| u-boot | 2 |
| cisco | 1 |
| coturn | 1 |
| erlang | 1 |
| juniper networks | 1 |
| legion of the bouncy castle | 1 |
| mobilitydb | 1 |
| ni | 1 |
| nlnet labs | 1 |
| rabbitmq | 1 |
| signalwire | 1 |
| themoos | 1 |
