CVEs classified under CWE-315, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (3)
CVE-2026-25818 — CVSS 9.1 (critical): HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3…
CVE-2024-41290 — CVSS 8.1 (high): FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data via the cookie's component.
CVE-2021-34564 — CVSS 5.5 (medium): Any cookie-stealing vulnerabilities within the application or browser would enable an attacker to steal the user's credentials to the…