Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-460
Weakness type CWE-460 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 6 | 5 | 0 |
Monthly trend
▃▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▃▁▁▃█▁
2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 0 · 2026-05 1 · 2026-06 0 · 2026-07 0 · 2026-08 1 · 2026-09 3 · 2026-10 0
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-93710 | 7.5 | 49.1 | — | Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a route that a dying hook re… |
| CVE-2026-61387 | 6.9 | 48.6 | — | — |
| CVE-2026-86748 | 6.9 | 32.3 | — | Snipe-IT before 8.7.0 Database Wipe via Invalid Backup Archive |
| CVE-2020-14304 | 4.4 | 30.6 | — | — |
| CVE-2026-48524 | 3.7 | 23.5 | — | PyJWT: PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values … |
| CVE-2026-96273 | 6.8 | 0.7 | — | Ghidra before 12.1.4 Denial of Service via Unreleased Lock in OptionsDB |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| eclipse foundation | 1 |
| grokability | 1 |
| jpadilla | 1 |
| linux | 1 |
| nationalsecurityagency | 1 |
