Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-444
Weakness type CWE-444 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 149 | 133 | 5 |
Monthly trend
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▁▂▄▅▄█▃
2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 5 · 2026-04 3 · 2026-05 8 · 2026-06 20 · 2026-07 22 · 2026-08 20 · 2026-09 43 · 2026-10 12
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2022-22536 | 9.8 | 99.9 | KEV | SAP Multiple Products |
| CVE-2025-61884 | 7.5 | 99.9 | KEV | Oracle E-Business Suite |
| CVE-2023-41265 | 9.9 | 99.8 | KEV | Qlik Sense |
| CVE-2023-48365 | 9.6 | 98.8 | KEV | Qlik Sense |
| CVE-2026-48710 | 6.5 | 94.1 | KEV | Starlette has missing Host header validation that poisons request.url.path, bypassing p… |
| CVE-2021-33037 | 5.3 | 99.5 | — | Incorrect Transfer-Encoding handling with HTTP/1.0 |
| CVE-2021-23336 | 5.9 | 98.6 | — | Web Cache Poisoning |
| CVE-2021-21295 | 5.9 | 97.3 | — | Possible request smuggling in HTTP/2 due missing validation |
| CVE-2019-20445 | 9.1 | 96.5 | — | — |
| CVE-2020-1935 | 4.8 | 95.4 | — | — |
| CVE-2019-20444 | 9.1 | 95.2 | — | — |
| CVE-2019-16869 | 7.5 | 95.1 | — | — |
| CVE-2021-21409 | 5.9 | 92.0 | — | Possible request smuggling in HTTP/2 due missing validation of content-length |
| CVE-2026-61642 | 7.7 | 91.7 | — | Squid Request Smuggling in HTTP Transfer-Encoding |
| CVE-2021-43797 | 6.5 | 86.6 | — | HTTP fails to validate against control chars in header names which may lead to HTTP req… |
| CVE-2026-93569 | 8.2 | 82.1 | — | Io.netty/netty-codec-http2: http/1 absolute-form host mismatch is translated to http/2 … |
| CVE-2026-40175 | 4.8 | 80.7 | — | Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain |
| CVE-2026-93574 | 6.5 | 71.1 | — | Io.netty/netty-codec-http: netty: http request smuggling via post-digit whitespace in c… |
| CVE-2026-2332 | 9.1 | 70.1 | — | HTTP Request Smuggling via Chunked Extension Quoted-String Parsing |
| CVE-2026-48746 | 9.1 | 66.4 | — | vLLM: OpenAI auth bypass |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| ibm | 13 |
| red hat | 13 |
| netty | 12 |
| apache | 11 |
| http4s | 6 |
| eclipse foundation | 4 |
| elixir-mint | 4 |
| erlang | 4 |
| microsoft | 4 |
| go standard library | 3 |
| libevent | 3 |
| progress | 3 |
| traefik | 3 |
| apple | 2 |
| aws | 2 |
