Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-347
Weakness type CWE-347 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 292 | 281 | 7 |
Monthly trend
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▁▂▃▅▇█▆
2025-11 0 · 2025-12 2 · 2026-01 1 · 2026-02 1 · 2026-03 10 · 2026-04 3 · 2026-05 9 · 2026-06 26 · 2026-07 41 · 2026-08 68 · 2026-09 74 · 2026-10 48
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2025-59718 | 9.1 | 99.3 | KEV | Fortinet Multiple Products |
| CVE-2013-3900 | 5.5 | 98.8 | KEV | WinVerifyTrust Signature Validation Vulnerability |
| CVE-2020-1464 | 7.8 | 98.6 | KEV | Windows Spoofing Vulnerability |
| CVE-2026-48558 | 9.5 | 92.9 | KEV | SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification |
| CVE-2025-47827 | 4.6 | 92.0 | KEV | IGEL IGEL OS |
| CVE-2020-2021 | 10.0 | 91.1 | KEV | PAN-OS: Authentication Bypass in SAML Authentication |
| CVE-2026-5430 | 10.0 | 47.0 | KEV | Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Accou… |
| CVE-2025-59719 | 9.1 | 98.2 | — | — |
| CVE-2026-67276 | 9.2 | 93.7 | — | SSH user impersonation possible in Mikrotik RouterOS |
| CVE-2026-10795 | 8.1 | 89.4 | — | UpdraftPlus: WP Backup & Migration Plugin <= 1.26.4 - Unauthenticated Authentication By… |
| CVE-2024-8698 | 7.7 | 80.7 | — | Keycloak-saml-core: improper verification of saml responses leading to privilege escala… |
| CVE-2026-47212 | 6.9 | 74.0 | — | Symfony: Twilio Notifier Webhook Parser Never Verifies the X-Twilio-Signature HMAC: Una… |
| CVE-2026-15013 | 9.8 | 73.9 | — | SAML Single Sign On <= 5.4.3 - Unauthenticated Authentication Bypass via 'SAMLResponse'… |
| CVE-2026-12263 | 8.8 | 72.0 | — | Authentication Bypass |
| CVE-2024-0567 | 7.5 | 71.9 | — | Gnutls: rejects certificate chain with distributed trust |
| CVE-2026-0265 | 7.2 | 63.8 | — | PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled |
| CVE-2026-54733 | 9.3 | 58.2 | — | moodle-local_o365: Authentication bypass via unverified JWT signature in Teams SSO endp… |
| CVE-2026-40372 | 9.1 | 56.6 | — | ASP.NET Core Elevation of Privilege Vulnerability |
| CVE-2026-10754 | 8.6 | 55.0 | — | Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of c… |
| CVE-2026-50010 | 7.5 | 53.0 | — | Netty's wrapping plain trust manager silently disables hostname verification |
