CWE-778

CWE-778 · 6 records · 2 with a public proof-of-concept

Records the NVD classes under CWE-778, highest CVSS first.

  1. HIGH 7.5CVE-2026-859592026-10-12

    Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently record successful authentication events in audit logs, which could limit customers' ability to detect and investigate unauthorized access or credential mi…

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 6.5CVE-2026-957592026-11-03

    Audit log bypass vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to suppress the audit records of their activity on the affected system.

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 5.3CVE-2026-105243public PoC2026-10-06

    Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to a fixed size that exceeds what the Windows Event Log accepts once the log and source names are counted, and the event log then stored nothing and rep…

    log4net

    AI risk analysis on Exploit-DB.ai →

  4. MEDIUM 4.3CVE-2026-181612026-09-22

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to falsify transaction audit logs due to improper validation of a client-supplied HTTP header.

    AI risk analysis on Exploit-DB.ai →

  5. LOW 2.7CVE-2026-1083112026-10-27

    Tanium addressed an insufficient logging vulnerability in Tanium Server.

    AI risk analysis on Exploit-DB.ai →

  6. LOW 2.2CVE-2026-115357public PoC2026-10-22

    OpenBao before 2.6.4 and 2.7.x before 2.7.1 fails to write response audit entries for the unauthenticated sys/generate-root, sys/rekey, and sys/rekey-recovery-key endpoints when request audit logging succeeds but response audit logging fails. An attacker using…

    AI risk analysis on Exploit-DB.ai →