Reference page — cumulative record through Tuesday, October 20, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-778
Weakness type CWE-778 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 14 | 14 | 0 |
Monthly trend
▂▁▂▆█▃
2026-05 1 · 2026-06 0 · 2026-07 1 · 2026-08 4 · 2026-09 6 · 2026-10 2
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-66816 | 6.5 | 62.1 | — | Microsoft SQL Server Security Feature Bypass Vulnerability |
| CVE-2026-105243 | 5.3 | 56.1 | — | Apache log4net: Oversize EventLogAppender record silently discarded |
| CVE-2026-92002 | 5.1 | 43.9 | — | MISP: Authentication failure logging suppressed during Redis unavailability |
| CVE-2026-91859 | 5.3 | 39.7 | — | MISP Access Log Entry Overwritten by Error Controller's Second beforeFilter Pass |
| CVE-2026-76208 | 8.8 | 36.7 | — | phpMyFAQ 3.1.0 through 4.1.6 Authentication Bypass via LDAP |
| CVE-2026-85959 | 7.5 | 23.4 | — | Insufficient authentication logging in Progress MarkLogic Server |
| CVE-2026-41709 | 2.7 | 21.0 | — | ESX insufficient logging vulnerability |
| CVE-2026-29812 | 4.3 | 18.9 | — | — |
| CVE-2026-9247 | 2.4 | 17.7 | — | — |
| CVE-2025-62307 | 5.4 | 15.4 | — | HCL IntelliOps Event Management is affected by multiple security vulnerabilities. |
| CVE-2026-82863 | 8.7 | 14.5 | — | @hulumi/baseline before 1.3.2 CloudTrail Selector Tampering Detection |
| CVE-2026-18161 | 4.3 | 10.1 | — | IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities |
| CVE-2020-37268 | 6.8 | 7.4 | — | Coq and Rocq Prover Print Assumptions Omits Unsafe Universe Checking Inlined Through Pa… |
| CVE-2026-90955 | 4.6 | 4.7 | — | MISP CLI Shell Audit Logs Lose User Identity and CLI Marker After First Lazy Model Load |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| misp | 3 |
| apache | 1 |
| cyberpanel | 1 |
| devolutions | 1 |
| hcl software | 1 |
| hulumi | 1 |
| ibm | 1 |
| microsoft | 1 |
| progress | 1 |
| rocq-prover | 1 |
| thorsten | 1 |
| vmware | 1 |
