CWE-396 · Input Validation and Logic
Declaration of Catch for Generic Exception
2CVEs
SortMost likely exploited
2 CVEs with CWE-396 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-27482Ray: Dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)ray-project · ray · CVSS 5.9 · 2026-02-21 | 5.9 | 0.3% | 2026-02-21 |
| CVE-2026-40149PraisonAI has an Unauthenticated Allow-List Manipulation Bypasses Agent Tool Approval Safety ControlsMervinPraison · PraisonAI · CVSS 7.9 · 2026-04-09 | 7.9 | 0.2% | 2026-04-09 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.