Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-636
Weakness type CWE-636 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 44 | 43 | 0 |
Monthly trend
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▃▄▄█▄
2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 1 · 2026-05 3 · 2026-06 4 · 2026-07 6 · 2026-08 6 · 2026-09 16 · 2026-10 7
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2024-43532 | 8.8 | 96.1 | — | Remote Registry Service Elevation of Privilege Vulnerability |
| CVE-2026-53913 | 9.8 | 64.7 | — | Apache Camel Keycloak: KeycloakSecurityPolicy verifies the bearer access token only ins… |
| CVE-2026-68746 | 7.7 | 55.8 | — | Livebook Teams identity check fails open when the deployment group is unresolvable, all… |
| CVE-2026-40525 | 9.1 | 54.5 | — | OpenViking < 0.3.9 Authentication Bypass via VikingBot OpenAPI |
| CVE-2026-53459 | 9.3 | 54.5 | — | Bambuddy's authentication fails open on database errors, allowing unauthenticated acces… |
| CVE-2026-73421 | 9.1 | 49.8 | — | NextAuth.js: Configuration errors can cause existence-based auth checks to fail open (a… |
| CVE-2026-77560 | 8.1 | 48.3 | — | Tinyauth: forward-auth per-app ACL is matched case-sensitively against the (case-insens… |
| CVE-2026-50528 | 8.2 | 48.1 | — | .NET Security Feature Bypass Vulnerability |
| CVE-2026-69306 | 8.2 | 44.3 | — | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-81379 | 8.2 | 44.3 | — | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-77866 | 9.0 | 40.0 | — | SSRF protection bypass in safeurl via IPv6 addresses and unresolvable hosts |
| CVE-2026-70452 | 9.1 | 38.6 | — | rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure |
| CVE-2026-44094 | 8.3 | 37.9 | — | Fallback to second RAUC slot with default credentials |
| CVE-2026-46482 | 5.3 | 37.5 | — | MyBB: Security Question insufficient validation |
| CVE-2026-54762 | 5.9 | 36.3 | — | Traefik Kubernetes Ingress NGINX provider fails open when auth-secret resolution fails |
| CVE-2026-95848 | 9.3 | 35.2 | — | Moquette fails open when configured authentication or authorization classes cannot load |
| CVE-2026-92591 | 8.2 | 33.4 | — | Craft CMS 5.0.0 before 5.10.13 Environment Secret Exposure via Installer |
| CVE-2026-61595 | 7.7 | 31.0 | — | djust: Multi-tenant isolation fails open on the WebSocket/SSE path, disclosing other te… |
| CVE-2026-18329 | 8.8 | 30.1 | — | NGINX ngx_http_js_module vulnerability |
| CVE-2026-95676 | 7.4 | 29.9 | — | AuthPoint Gateway Improper Authentication in LDAP Sync Allows First-Factor Authenticati… |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| microsoft | 4 |
| indian motorcycle | 2 |
| openclaw | 2 |
| pgjdbc | 2 |
| apache | 1 |
| apitable | 1 |
| ash-project | 1 |
| bytebase | 1 |
| chewkeanho | 1 |
| craftcms | 1 |
| dell | 1 |
| djust-org | 1 |
| docker | 1 |
| f5 | 1 |
| getgrav | 1 |
