Reference page — cumulative record through Tuesday, October 20, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-804
Weakness type CWE-804 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 6 | 6 | 0 |
Monthly trend
▃█▁▁▆
2026-06 1 · 2026-07 3 · 2026-08 0 · 2026-09 0 · 2026-10 2
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-49953 | 6.9 | 40.2 | — | Discuz! X5.0 CAPTCHA Bypass via Predictable Character Set |
| CVE-2026-111278 | 6.9 | 23.7 | — | NivoCart through 2.5.1 CAPTCHA Bypass via Answer Disclosed in Page HTML |
| CVE-2024-23567 | 4.3 | 22.0 | — | — |
| CVE-2026-13082 | 5.3 | 21.9 | — | GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets |
| CVE-2024-23566 | 6.5 | 17.4 | — | — |
| CVE-2026-112067 | 6.9 | — | — | Captcha Bypass in extension "Accessible Form Captcha" (bw_captcha) |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| hclsoftware | 2 |
| burak | 1 |
| discuz | 1 |
| nivocart | 1 |
| typo3 | 1 |
