CWE-754

588 vulnerabilities with CWE-754

CVE-2026-47216 HIGH

Typesense: Unauthenticated Denial of Service in the Typesense /multi_search Endpoint

CVE-2026-0269 MEDIUM

PAN-OS: Denial of Service (DoS) in Tunnel Traffic Processing

CVE-2026-46541 HIGH

Nimiq network-libp2p: DHT query poisoning via first-record verification failure

CVSS 7.5

CVE-2026-45678 HIGH

OpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloads

CVSS 7.5

CVE-2026-49325 MEDIUM

Indian Scout Bobber 2025 WCM voltage-based shutdown

CVSS 4.6

CVE-2026-49318 LOW

Indian Scout Bobber 2025 Infotainment Digital Round skips PIN entry when WCM is silent at boot

CVSS 2.4

CVE-2026-49317 LOW

Indian Scout Bobber 2025 Infotainment Digital Round skips PIN entry when WCM is silent at boot

CVSS 2.4

CVE-2026-49316 MEDIUM

Indian Scout Bobber 2025 WCM CAN bus-off attack silently bypasses anti-theft shutdown

CVSS 4.6

CVE-2026-5343 HIGH

SAML SSO - Service Provider - Critical - Authentication bypass - SA-CONTRIB-2026-031

CVSS 7.4

CVE-2026-39929 HIGH

Lakeside SysTrack Agent LsiAgent.exe Out-of-Bounds Read via UDP

CVSS 7.5

CVE-2026-44324 MEDIUM

free5GC: UDR nudr-dr DELETE amf-subscriptions panics on missing UE state via nil interface type assertion (single authenticated request)

CVSS 6.5

CVE-2026-44322 HIGH

free5GC: NEF 3gpp-pfd-management PATCH applications/{appId} panics on UDR access failure due to nil ProblemDetails dereference

CVSS 7.5

CVE-2026-44317 MEDIUM

free5GC: PCF npcf-policyauthorization POST /app-sessions panics on suppFeat=1 with missing AfRoutReq via nil pointer dereference

CVSS 6.5

CVE-2026-44316 HIGH

free5GC: PCF npcf-smpolicycontrol POST /sm-policies panics on downstream UDR/OpenAPI 404 via nil pointer dereference

CVSS 7.5

CVE-2026-4915 MEDIUM

Mattermost - Server Panic via Outgoing Webhook Responses

CVSS 6.5

CVE-2026-40094 MEDIUM

nimiq-blockchain: network-libp2p untrusted peer can crash address book via empty peer contact addresses

CVSS 4.3

CVE-2026-5946 HIGH

BIND 9.11.0-9.16.50, 9.18.0-9.18.48, 9.20.0-9.20.22, 9.21.0-9.21.21 - DoS via Non-IN DNS Message Handling

CVSS 7.5

CVE-2026-8491 LOW

Node View Permissions - Moderately critical - Access bypass - SA-CONTRIB-2026-034

CVSS 3.7

CVE-2026-47315 MEDIUM

Samsung Open Source Escargot - Improper Check for Unusual or Exceptional Conditions

CVSS 5.5

CVE-2026-4643 LOW

Calling window.close() from server-side content causes crash in the Mattermost Desktop App

CVSS 3.5

CVE-2026-4054 MEDIUM

SVG content served through Mattermost image proxy despite Content-Type restrictions causes client-side denial of service

CVSS 4.3

CVE-2026-0262 MEDIUM

PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing

CVE-2026-0241 MEDIUM

Trust Protection Foundation: Multiple Authorization Bypass Vulnerabilities

CVE-2026-0235 MEDIUM

Prisma Browser: Access and Data Rule Bypass

CVE-2026-42950 MEDIUM

Elecom Co.,ltd. WAB-BE187-M - Improper Check for Unusual or Exceptional Conditions

CVSS 4.3