Skip to content

CWE-1038 · weakness in Input Validation and Logic

Insecure Automated Optimizations

6 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

  1. MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.CVE-2023-52971MariaDB · CVSS 4.9 · 0.5% likely

    Mariadb

  2. MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes crash with an empty backtrace log. This may be related to make…CVE-2023-52969MariaDB · CVSS 4.9 · 0.5% likely

    Mariadb

  3. MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.*, and 11.1 through 11.4.* crashes in Item_direct_view_ref::derived_field_transfor…CVE-2023-52970MariaDB · CVSS 4.9 · 0.5% likely

    Mariadb

  4. Discourse vulnerable to auto-executing of third-party code in embedded CodePen iframeCVE-2025-48877discourse · CVSS 8.1 · 0.4% likely

    Discourse

  5. Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via S…CVE-2022-26861Dell · CVSS 7.9 · 0.2% likely

    Dell

  6. Dell BIOS versions contain an Unchecked Return Value vulnerability. A local authenticated administrator user could potentially exploit this vulnerability in order to change the st…CVE-2022-31220Dell · CVSS 3 · 0.2% likely

    Dell

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in