Insufficient Logging

Every one of the 40 is a mark on the map. Named now: 1 to 26, most at risk first.

1. ESX insufficient logging vulnerabilityCVE-2026-41709VMware · CVSS 2.7 · 0.7% likelycovered by CyberSIXT

   VMwareWarp Panda5 articles

2. Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. An attacker able to inject certain characters into a log entry could prevent Winlogbeat from recordin…CVE-2019-7613Elastic · 1.3% likely

   Elastic

3. A vulnerability has been identified in SIPORT MP (All versions < 3.1.4). Vulnerable versions of the device allow the creation of special accounts ("service users") with administra…CVE-2019-19277Siemens AG · 1.2% likely

   Siemens

4. A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) does not enforce logging of security-relevant activitie…CVE-2019-19295Siemens · CVSS 4.3 · 1.1% likely

   Siemens

5. Microsoft SQL Server Security Feature Bypass VulnerabilityCVE-2026-66816Microsoft · CVSS 6.5 · 1.0% likely

   Microsoft

6. An Information Disclosure vulnerability exists in Opay Mobile application 1.5.1.26 and maybe be higher in the logcat app.CVE-2021-43419Opayweb · CVSS 7.5 · 0.9% likely
7. Federated share accepting/declining is not logged in audit log in Nextcloud ServerCVE-2022-31120nextcloud · CVSS 2.1 · 0.9% likely

   Nextcloud1 bounty report

8. Apache log4net: Oversize EventLogAppender record silently discardedCVE-2026-105243Apache Software Foundation · CVSS 5.3 · 0.8% likely

   Apache

9. An insufficient logging [CWE-778] vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to 3.1.5 and FortiDeceptor versions 4.2.0, 4.1.0 through 4.1.1, 4…CVE-2022-30305Fortinet · CVSS 3.6 · 0.7% likely

   Fortinet

10. Life2000 ventilator and Service PC lack sufficient audit logging capabilitiesCVE-2024-48967Baxter · CVSS 10 · 0.6% likely

    Baxter

11. Hacking attempts from logged-in users are not properly logged by GMCVE-2022-25783Secomea · CVSS 4.3 · 0.6% likely

    Secomea

12. When user with insufficient privileges tries to access any application in SAP NetWeaver Administrator (Administrator applications), version - 7.50, no security audit log is create…CVE-2021-33689SAP SE · CVSS 3.5 · 0.5% likely

    SAP

13. MISP: Authentication failure logging suppressed during Redis unavailabilityCVE-2026-92002MISP · CVSS 5.1 · 0.5% likely

    MISP

14. MISP Access Log Entry Overwritten by Error Controller's Second beforeFilter PassCVE-2026-91859MISP · CVSS 5.3 · 0.5% likely

    MISP

15. Client-side audit exclusion vulnerabilityCVE-2024-10863OpenText · CVSS 5.1 · 0.5% likely

    OpenText

16. Insufficient Logging Vulnerability in HiRDBCVE-2023-1995Hitachi · CVSS 5.3 · 0.5% likely

    Hitachi

17. phpMyFAQ 3.1.0 through 4.1.6 Authentication Bypass via LDAPCVE-2026-76208thorsten · CVSS 8.2 · 0.4% likely

    Thorsten

18. Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a stored password without generating a correspo…CVE-2025-2562Devolutions · CVSS 5.4 · 0.4% likely

    Devolutions

19. Insufficient authentication logging in Progress MarkLogic ServerCVE-2026-85959Progress Software Corporation · CVSS 7.5 · 0.4% likely

    Progress Software

20. MOVEit Transfer Logging Bypass VulnerabilityCVE-2024-2291Progress Software · CVSS 4.3 · 0.4% likely

    Progress Software

21. Audit log is not properly logging unsetting of share expiration dateCVE-2021-32680nextcloud · CVSS 3.3 · 0.4% likely

    Nextcloud1 bounty report

22. IBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesCVE-2026-18161IBM · CVSS 4.3 · 0.3% likely

    IBM

23. Bypassing Logging of Outbound Connections Using sendto, sendmsg, and sendmmsg in Harden-Runner (Community Tier)CVE-2026-25598step-security · CVSS 6.3 · 0.3% likely

    Step-Security

24. Nextcloud Server admin_audit does not log all actions on files in groupfoldersCVE-2025-66552nextcloud · CVSS 4.3 · 0.3% likely

    Nextcloud1 bounty report

25. MariaDB Server Audit Plugin Comment Handling BypassCVE-2026-3494MariaDB Foundation · CVSS 4.3 · 0.3% likely

    Mariadb

26. OpenEMR doesn't log password administration properlyCVE-2025-32967openemr · CVSS 5.4 · 0.3% likely

    Open-Emr

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.