CWE-778

CWE-778 · 3 records · 1 with a public proof-of-concept

Records the NVD classes under CWE-778, highest CVSS first.

  1. HIGH 7.5CVE-2026-859592026-10-12

    Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently record successful authentication events in audit logs, which could limit customers' ability to detect and investigate unauthorized access or credential mi…

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 5.3CVE-2026-105243public PoC2026-10-06

    Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to a fixed size that exceeds what the Windows Event Log accepts once the log and source names are counted, and the event log then stored nothing and rep…

    log4net

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 4.3CVE-2026-181612026-09-22

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to falsify transaction audit logs due to improper validation of a client-supplied HTTP header.

    AI risk analysis on Exploit-DB.ai →