Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-310
Weakness type CWE-310 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 22 | 18 | 0 |
Monthly trend
▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▃▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▁▂▁▃█▄▄
2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 1 · 2026-04 0 · 2026-05 1 · 2026-06 0 · 2026-07 2 · 2026-08 8 · 2026-09 3 · 2026-10 3
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2015-0204 | 4.3 | 99.9 | — | — |
| CVE-2019-3740 | 6.5 | 90.1 | — | — |
| CVE-2021-22947 | 5.9 | 87.2 | — | — |
| CVE-2019-3739 | 6.5 | 85.3 | — | — |
| CVE-2026-82555 | 2.9 | 50.8 | — | TOTOLINK N600R Authentication cstecgi.cgi loginAuth random values |
| CVE-2026-19896 | 2.9 | 40.7 | — | mangroup dtale Flask Session Cookie app.py build_secret_key random values |
| CVE-2026-17616 | 9.8 | 32.2 | — | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security… |
| CVE-2026-77151 | 6.3 | 29.1 | — | lin-snow Ech0 crypto.go MD5Encrypt risky encryption |
| CVE-2026-86280 | 5.5 | 27.0 | — | SourceCodester Syllabus-Aligned Learning Management & Examination System cict_portal.sq… |
| CVE-2026-81836 | 2.9 | 19.4 | — | RooCodeInc Roo-Code OAuth Callback oauth.ts cleartext transmission |
| CVE-2026-82699 | 2.0 | 15.3 | — | sambitraj Student Management System Password aca.sql cleartext storage |
| CVE-2026-96550 | 2.9 | 10.9 | — | sfturing hosp_order MailUtil.java getProperties cleartext transmission |
| CVE-2026-2671 | 2.3 | 10.8 | — | Mendi Neurofeedback Headset Bluetooth Low Energy cleartext transmission |
| CVE-2026-105245 | 2.9 | 9.7 | — | sgl-project sglang HTTP Endpoint http_server.py server_info cleartext transmission |
| CVE-2026-49000 | 7.0 | 7.8 | — | Cryptography Implementation Flaw vulnerability in ZTE ZXUniPOS NDS-LTE product |
| CVE-2026-19891 | 6.3 | 7.1 | — | TRENDnet TEW-WLC100 IKE Phase 1 Aggressive Mode racoon.conf missing encryption |
| CVE-2026-105179 | 2.0 | 4.1 | — | SourceCodester Drug Recommendation System Password add_user.php missing encryption |
| CVE-2026-14702 | 1.1 | 3.3 | — | zcaceres markdownify-mcp webpage-to-markdown Markdownify.ts saveToTempFile random values |
| CVE-2026-16213 | 4.8 | 1.2 | — | Fantomas42 django-blog-zinnia Protected Entry Password entry_protection.py cleartext st… |
| CVE-2026-18591 | 0.9 | 1.2 | — | Meesho Online Shopping App com.meesho.supply cleartext storage |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| dell | 2 |
| sfturing | 2 |
| sourcecodester | 2 |
| fantomas42 | 1 |
| ibm | 1 |
| lin-snow | 1 |
| mangroup | 1 |
| meesho | 1 |
| mendi | 1 |
| roocodeinc | 1 |
| sambitraj | 1 |
| sgl-project | 1 |
| soarkey | 1 |
| totolink | 1 |
| trendnet | 1 |
