boxscore/security
CWE · referenceWeaknesses · latest edition

Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CWE-272

Weakness type CWE-272 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.

Totals

Totals
CVEs all-timeCVEs YTDKEV all-time
19180

Monthly trend

▂▁▁▁▁▁▁▁▁▁▁▂▁█▃▅▅▅

2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 1 · 2026-05 0 · 2026-06 6 · 2026-07 2 · 2026-08 3 · 2026-09 3 · 2026-10 3

Top CVEs

Ranked by KEV → EPSS → CVSS (§6)
CVECVSSEPSS %ileKEVTitle
CVE-2026-152706.857.5—D-link DIR-823G Web boa.conf least privilege violation
CVE-2026-152717.752.4—TOTOLINK EX200 Web boa.conf least privilege violation
CVE-2026-114922.142.3—D-Link DIR-823G vsftpd vsftpd.conf least privilege violation
CVE-2026-114975.536.1—D-Link DCS-5615 Boa Webserver boa.conf least privilege violation
CVE-2026-115552.933.2—D-Link DGS-1100-08PD Web boa.conf least privilege violation
CVE-2026-116205.519.7—TOTOLINK EX200 vsftpd vsftpd.conf least privilege violation
CVE-2026-1035048.116.4—Gitea API team demotion not applied to unit permissions
CVE-2025-622996.616.2—HCL IntelliOps Event Management is affected by multiple security vulnerabilities.
CVE-2026-552265.415.2—Strimzi: Unrestricted access to all Secrets within namespace watched by the Topic operator
CVE-2026-114942.111.1—TOTOLINK AC1200 T8 vsftpd vsftpd.conf least privilege violation
CVE-2026-115542.19.9—TOTOLINK CP450 vsftpd vsftpd.conf least privilege violation
CVE-2025-478098.26.9——
CVE-2026-355357.86.4——
CVE-2026-599157.32.7——
CVE-2026-796933.42.5——
CVE-2026-799443.42.5——
CVE-2026-814527.01.3——
CVE-2026-495006.01.0——
CVE-2026-1065892.90.2——

Most-affected vendors

Vendors with the most CVEs of this type
VendorCVEs
dell5
d-link4
totolink4
gitea1
hcl software1
openbsd1
strimzi1
sudo project1
wibu1