boxscore/security
CWE · referenceWeaknesses · latest edition

Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CWE-926

Weakness type CWE-926 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.

Totals

Totals
CVEs all-timeCVEs YTDKEV all-time
21210

Monthly trend

▃▃██▂

2026-06 2 · 2026-07 2 · 2026-08 8 · 2026-09 8 · 2026-10 1

Top CVEs

Ranked by KEV → EPSS → CVSS (§6)
CVECVSSEPSS %ileKEVTitle
CVE-2026-473616.420.6——
CVE-2025-687138.019.5——
CVE-2026-473636.317.0——
CVE-2026-578486.89.7—Stoat for Android Internal File Disclosure via Exported ShareTargetActivity URI Validation
CVE-2026-210636.89.6——
CVE-2026-689288.68.7—Acode: Exported TerminalService (bundled terminal plugin) lets any installed app execut…
CVE-2026-204706.26.0——
CVE-2026-543187.15.8—Home Assistant: Exported BroadcastReceiver allows local apps to spoof device location
CVE-2026-813018.54.9—Ekia File Manager 1.2.7 - Exported ContentProvider allows unauthorized file access
CVE-2026-449655.54.9——
CVE-2026-129606.04.6——
CVE-2026-186041.93.4—textPlus Text Message and Call App com.gogii.textplus DialerActivity improper export of…
CVE-2026-867011.82.9——
CVE-2026-205165.52.5——
CVE-2026-210815.12.4——
CVE-2026-210596.92.1——
CVE-2026-211276.91.3——
CVE-2026-189948.40.8——
CVE-2026-211086.90.5——
CVE-2026-455287.30.3——

Most-affected vendors

Vendors with the most CVEs of this type
VendorCVEs
samsung mobile6
datadog3
mediatek2
acode-foundation1
asus1
ekia1
google1
home-assistant1
lenovo1
ntt docomo business1
stoatchat1
textplus1