Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-283
Weakness type CWE-283 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 12 | 12 | 0 |
Monthly trend
▂▁▁▃█▃
2026-05 1 · 2026-06 0 · 2026-07 0 · 2026-08 2 · 2026-09 7 · 2026-10 2
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-44707 | 6.8 | 38.1 | — | Chatwoot: Pre-Account Takeover via OAuth on Unconfirmed Accounts |
| CVE-2026-85781 | 5.1 | 37.1 | — | Unverified access point ownership in Amazon EFS CSI Driver |
| CVE-2026-87912 | 5.1 | 36.9 | — | Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agent… |
| CVE-2026-87913 | 5.1 | 36.9 | — | Missing S3 bucket ownership verification in the AWS Security Agent MCP server |
| CVE-2026-9745 | 6.5 | 23.9 | — | Vulnerabilities exists in IBM Netezza Software |
| CVE-2026-83791 | 7.8 | 19.5 | — | Windows Virtual Input Elevation of Privilege Vulnerability |
| CVE-2026-93853 | 7.2 | 10.1 | — | Barman snapshot backup deletion trusts unverified backup catalog metadata |
| CVE-2025-24890 | 6.8 | 7.9 | — | gix-sec safe.directory protections absent for elevated administrators |
| CVE-2026-54467 | 7.0 | 6.3 | — | — |
| CVE-2026-110237 | 7.0 | 3.7 | — | Vifm 0.8.1-beta through 0.14.4 Unverified IPC FIFO Ownership Allows Cross-User Command … |
| CVE-2026-84386 | 5.1 | 3.2 | — | — |
| CVE-2026-15599 | 3.3 | 2.1 | — | Arbitrary Process Termination in TÜBİTAK BİLGEM's pardus-domain-joiner |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| aws | 3 |
| chatwoot | 1 |
| enterprisedb | 1 |
| fortinet | 1 |
| gitoxidelabs | 1 |
| ibm | 1 |
| microsoft | 1 |
| trustedfirmware | 1 |
| tübi̇tak bi̇lgem software technologies research institute | 1 |
| vifm | 1 |
