Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-840
Weakness type CWE-840 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 25 | 19 | 0 |
Monthly trend
▂▁▃▁▁▁▁▁▁▁▁▁▂▃▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▄▂█▄▆
2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 0 · 2026-05 0 · 2026-06 3 · 2026-07 1 · 2026-08 7 · 2026-09 3 · 2026-10 5
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2021-22926 | 7.5 | 96.7 | — | — |
| CVE-2022-32207 | 9.8 | 96.2 | — | — |
| CVE-2022-32208 | 5.9 | 94.9 | — | — |
| CVE-2021-22922 | 6.5 | 91.1 | — | — |
| CVE-2021-22897 | 5.3 | 91.0 | — | — |
| CVE-2022-27782 | 7.5 | 87.5 | — | — |
| CVE-2026-108784 | 5.5 | 46.1 | — | macrozheng mall Payment Endpoint AlipayServiceImpl.java AlipayServiceImpl.pay logic error |
| CVE-2026-13571 | 5.5 | 42.3 | — | SourceCodester Simple Food Ordering System cart.php logic error |
| CVE-2026-85030 | 2.9 | 38.7 | — | HKUDS AI-Trader selfRegister API Endpoint routes_agent.py logic error |
| CVE-2026-82423 | 2.1 | 36.6 | — | macrozheng mall Payment Status Endpoint paySuccess behavioral workflow |
| CVE-2026-19208 | 2.9 | 35.5 | — | WonderTrader TraderDD.cpp queryTrades behavioral workflow |
| CVE-2026-79406 | 5.3 | 31.2 | — | macrozheng mall quantity OmsCartItemServiceImpl.updateQuantity logic error |
| CVE-2026-19037 | 2.1 | 29.1 | — | WonderTrader Internal Limit Order Book Cache MatchEngine.cpp update_lob behavioral work… |
| CVE-2026-19213 | 2.1 | 29.1 | — | WonderTrader Pending Order TraderAdapter.h _undone_qty behavioral workflow |
| CVE-2026-19993 | 2.1 | 29.1 | — | Webkul Bagisto RMA State Validation update-status behavioral workflow |
| CVE-2026-75081 | 2.1 | 29.1 | — | Webkul Bagisto store behavioral workflow |
| CVE-2026-82982 | 4.3 | 24.4 | — | — |
| CVE-2026-77166 | 2.4 | 19.6 | — | — |
| CVE-2026-109406 | 5.3 | 15.3 | — | macrozheng mall mall-portal generateOrder OmsPortalOrderServiceImpl logic error |
| CVE-2026-105573 | 2.1 | 12.7 | — | newbee-ltd newbee-mall Shopping Cart Quantity updateAccountHeadAndDetail logic error |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| macrozheng | 4 |
| huawei | 2 |
| nextcloud | 2 |
| webkul | 2 |
| deepseek-ai | 1 |
| hkuds | 1 |
| light0011 | 1 |
| newbee-ltd | 1 |
| songquanpeng | 1 |
| sourcecodester | 1 |
