Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-440
Weakness type CWE-440 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 15 | 11 | 0 |
Monthly trend
▃▁▁▁▃▁▁▁▁▁▁▁▁▁▁▁▁▁▁▃▁▁▁▁▁▁▁▃▁▁▃▁▆▆▁▆█▃
2025-11 0 · 2025-12 1 · 2026-01 0 · 2026-02 0 · 2026-03 1 · 2026-04 0 · 2026-05 2 · 2026-06 2 · 2026-07 0 · 2026-08 2 · 2026-09 3 · 2026-10 1
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2023-6129 | 6.5 | 83.2 | — | POLY1305 MAC implementation corrupts vector registers on PowerPC |
| CVE-2023-4807 | 7.8 | 75.1 | — | POLY1305 MAC implementation corrupts XMM registers on Windows |
| CVE-2026-93675 | 9.8 | 54.1 | — | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-42534 | 6.9 | 52.9 | — | Jostle logic bypass degrades resolution performance |
| CVE-2026-8806 | 8.7 | 49.5 | — | Denial-of-service (DoS) vulnerability in MELSEC iQ-F Series FX5-ENET/IP Ethernet module |
| CVE-2026-3344 | 6.9 | 38.0 | — | WatchGuard Firebox System Integrity Check Bypass |
| CVE-2026-35191 | 3.7 | 27.9 | — | QUIC Unvalidated Amplification Credit may be Over Accounted |
| CVE-2026-42752 | 6.5 | 21.8 | — | WordPress Stripe Payments plugin <= 2.0.98 - Bypass Vulnerability vulnerability |
| CVE-2026-49316 | 4.1 | 17.7 | — | Indian Scout Bobber 2025 WCM CAN bus-off attack silently bypasses anti-theft shutdown |
| CVE-2026-65932 | 5.3 | 15.3 | — | BT122 stops advertising |
| CVE-2026-97687 | 7.6 | 9.9 | — | urllib3: HTTPS proxy TLS configuration may be ignored or overridden |
| CVE-2025-32728 | 3.8 | 8.7 | — | — |
| CVE-2026-65934 | 7.1 | 3.1 | — | BT122 plaintext pause encryption request causes DOS |
| CVE-2025-13940 | 6.7 | 2.0 | — | WatchGuard Firebox Boot Time System Integrity Check Bypass |
| CVE-2026-16769 | 7.1 | 0.8 | — | RS9116W/SiWx917 plaintext pause encryption request causes DOS |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| openssl | 3 |
| silabs.com | 3 |
| watchguard | 2 |
| ibm | 1 |
| indian motorcycle | 1 |
| mitsubishi electric | 1 |
| mra13 / team tips and tricks hq | 1 |
| nlnet labs | 1 |
| openbsd | 1 |
| urllib3 | 1 |
