Reference page — cumulative record through Tuesday, October 20, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-302
Weakness type CWE-302 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 12 | 11 | 0 |
Monthly trend
▃▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁█▆█▃▆
2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 0 · 2026-05 0 · 2026-06 3 · 2026-07 2 · 2026-08 3 · 2026-09 1 · 2026-10 2
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-84731 | 9.3 | 69.7 | — | Pre-Authentication Admin Bypass and Remote Code Execution in Nutanix Prism Gateway insi… |
| CVE-2026-47303 | 8.8 | 57.2 | — | ASP.NET Core Elevation of Privilege Vulnerability |
| CVE-2026-50528 | 8.2 | 48.2 | — | .NET Security Feature Bypass Vulnerability |
| CVE-2026-80092 | 5.3 | 47.7 | — | Microsoft Identity Web Elevation of Privilege Vulnerability |
| CVE-2026-5423 | 8.2 | 47.0 | — | Subscription Authentication Bypass via Unverified connectionParams.jwt |
| CVE-2022-2503 | 6.7 | 34.9 | — | Linux Kernel LoadPin bypass via dm-verity table reload |
| CVE-2026-61682 | 9.9 | 30.9 | — | kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authen… |
| CVE-2026-13267 | 8.1 | 27.1 | — | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security… |
| CVE-2026-48117 | 6.8 | 20.3 | — | DroneAware's Improper Account Activation in Registration and SSO Flows Leads to Account… |
| CVE-2026-48781 | 9.9 | 19.2 | — | Postiz has cross-tenant SUPERADMIN takeover via Skool-provider JWT forgery |
| CVE-2026-77508 | 3.5 | 16.5 | — | Weblate: Unverified REST API email changes |
| CVE-2026-34460 | 5.4 | 2.5 | — | NamelessMC: OAuth callback `state` is not validated, allowing login CSRF / session swap… |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| microsoft | 3 |
| fduflyer | 1 |
| gitroomhq | 1 |
| ibm | 1 |
| kcp-dev | 1 |
| linux | 1 |
| namelessmc | 1 |
| neo4j | 1 |
| nutanix | 1 |
| weblateorg | 1 |
