Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-377
Weakness type CWE-377 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 26 | 25 | 0 |
Monthly trend
▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▆▃█▃▆
2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 0 · 2026-05 0 · 2026-06 6 · 2026-07 2 · 2026-08 9 · 2026-09 2 · 2026-10 6
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-44878 | 7.2 | 47.6 | — | Authenticated Path Traversal allows Unauthorized Access in Web Interface |
| CVE-2021-29429 | 5.5 | 40.3 | — | Information disclosure through temporary directory permissions |
| CVE-2026-49134 | 7.5 | 39.8 | — | CodexBar < 0.32.0 Privilege Escalation via CLI Installer Temp File |
| CVE-2026-54584 | 5.3 | 38.9 | — | mport trusts environment-controlled temporary directories in privileged metadata extrac… |
| CVE-2025-14602 | 5.3 | 38.9 | — | Weak File Name Generation in vsDesk |
| CVE-2026-40635 | 5.4 | 31.6 | — | — |
| CVE-2026-75920 | 6.0 | 28.0 | — | phpMyFAQ before 4.1.6 Information Disclosure via Backup ZIP |
| CVE-2026-47852 | 7.5 | 26.7 | — | Predictable cache directory location allows local ONNX model substitution in Spring AI |
| CVE-2026-49484 | 5.1 | 13.3 | — | Code for IBM i: Temporary files are visible to all users |
| CVE-2026-53759 | 2.0 | 8.2 | — | linuxfabrik-lib: Insecure creation of SQLite databases |
| CVE-2026-49135 | 7.2 | 5.7 | — | CodexBar < 0.32.0 Insecure Temporary File Handling in Notarization Workflow |
| CVE-2026-45384 | 6.1 | 5.7 | — | bit7z: Arbitrary File Overwrite via Symlink Attack on Predictable Temp File During Arch… |
| CVE-2026-63404 | 7.3 | 4.6 | — | Faktory: Insecure predictable /tmp/redis.conf enables local Redis config hijack (networ… |
| CVE-2026-55480 | 5.7 | 4.4 | — | CUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink… |
| CVE-2026-46406 | 4.4 | 4.1 | — | Claude Code: Insecure Temporary File in /copy Command Enables Response Disclosure and S… |
| CVE-2026-73585 | 6.3 | 3.3 | — | Sblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider registrat… |
| CVE-2026-62294 | 5.1 | 2.9 | — | Flameshot: OCTOU symlink attack via predictable /tmp path in Flameshot "Open With" |
| CVE-2026-55086 | 4.2 | 2.9 | — | Etherpad: Import/export use Math.random() for temp file paths; predictable paths on sha… |
| CVE-2026-110234 | 4.1 | 2.9 | — | Elio through 1.13.0 Insecure Temporary File Creation in External Preview Command Capture |
| CVE-2026-41001 | 5.3 | 2.5 | — | Predictable Temp Directory in Artemis Auto-configuration |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| red hat | 2 |
| spring | 2 |
| steipete | 2 |
| anthropics | 1 |
| codefori | 1 |
| contribsys | 1 |
| dell | 1 |
| elio-fm | 1 |
| ether | 1 |
| flameshot-org | 1 |
| fortra | 1 |
| gnu | 1 |
| gradle | 1 |
| hewlett packard enterprise (hpe) | 1 |
| hitachi | 1 |
