CWE-1023 — known CVE vulnerabilities

CVEs classified under CWE-1023, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2026-4599 — CVSS 9.1 (critical): Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Factors via the…
• CVE-2025-62000 — CVSS 7.1 (high): BullWall Ransomware Containment may not always detect an encrypted file. This issue affects a specific file inspection method that…
• CVE-2026-53839 — CVSS 6.5 (medium): OpenClaw before 2026.5.7 contains a hostname validation vulnerability in retry endpoint checks that allows matching hostname prefixes…
• CVE-2025-55333 — CVSS 6.1 (medium): Incomplete comparison with missing factors in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a…
• CVE-2026-7473 — CVSS 5.8 (medium) — actively exploited: On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups…
• CVE-2025-46722 — CVSS 4.2 (medium): vLLM is an inference and serving engine for large language models (LLMs). In versions starting from 0.7.0 to before 0.9.0, in the file…
• CVE-2026-48587 — CVSS 3.1 (low): An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. `django.utils.cache.has_vary_header()` in Django does not strip…