CWE-778 · Other weaknesses
Insufficient Logging
40CVEs
1exploited
0with a public check
0likely (EPSS 10%+)
SortMost likely exploited
40 CVEs with CWE-778 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-41709In CISA KEVExploitedESX insufficient logging vulnerabilityVMware · Cloud Foundation · CVSS 2.7 · 2026-07-30 | 2.7 | 0.7% | 2026-07-30 |
| CVE-2019-7613Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. An attacker able to inject certain characters into a log entry could prevent Winlogbeat from recordin…Elastic · Logstash · 2019-03-25 | – | 1.3% | 2019-03-25 |
| CVE-2019-19277A vulnerability has been identified in SIPORT MP (All versions < 3.1.4). Vulnerable versions of the device allow the creation of special accounts ("service users") with administra…Siemens AG · SIPORT MP · 2020-03-10 | – | 1.2% | 2020-03-10 |
| CVE-2019-19295A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) does not enforce logging of security-relevant activitie…Siemens · Control Center Server (CCS) · CVSS 4.3 · 2020-03-10 | 4.3 | 1.1% | 2020-03-10 |
| CVE-2026-66816Microsoft SQL Server Security Feature Bypass VulnerabilityMicrosoft · Microsoft SQL Server 2022 (CU 26) · CVSS 6.5 · 2026-09-08 | 6.5 | 1.0% | 2026-09-08 |
| CVE-2021-43419An Information Disclosure vulnerability exists in Opay Mobile application 1.5.1.26 and maybe be higher in the logcat app.Opayweb · Opay · CVSS 7.5 · 2023-11-07 | 7.5 | 0.9% | 2023-11-07 |
| CVE-2022-31120Federated share accepting/declining is not logged in audit log in Nextcloud Servernextcloud · security-advisories · CVSS 2.1 · 2022-08-04 | 2.1 | 0.9% | 2022-08-04 |
| CVE-2026-105243Apache log4net: Oversize EventLogAppender record silently discardedApache Software Foundation · Apache log4net · CVSS 5.3 · 2026-10-06 | 5.3 | 0.8% | 2026-10-06 |
| CVE-2022-30305An insufficient logging [CWE-778] vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to 3.1.5 and FortiDeceptor versions 4.2.0, 4.1.0 through 4.1.1, 4…Fortinet · FortiSandbox · CVSS 3.6 · 2022-12-06 | 3.6 | 0.7% | 2022-12-06 |
| CVE-2024-48967Life2000 ventilator and Service PC lack sufficient audit logging capabilitiesBaxter · Life2000 Ventilation System · CVSS 10 · 2024-11-14 | 10.0 | 0.6% | 2024-11-14 |
| CVE-2022-25783Hacking attempts from logged-in users are not properly logged by GMSecomea · GateManager · CVSS 4.3 · 2022-05-04 | 4.3 | 0.6% | 2022-05-04 |
| CVE-2021-33689When user with insufficient privileges tries to access any application in SAP NetWeaver Administrator (Administrator applications), version - 7.50, no security audit log is create…SAP SE · SAP NetWeaver AS JAVA (Administrator applications) · CVSS 3.5 · 2021-07-14 | 3.5 | 0.5% | 2021-07-14 |
| CVE-2026-92002MISP: Authentication failure logging suppressed during Redis unavailabilityMISP · MISP · CVSS 5.1 · 2026-09-15 | 5.1 | 0.5% | 2026-09-15 |
| CVE-2026-91859MISP Access Log Entry Overwritten by Error Controller's Second beforeFilter PassMISP · MISP · CVSS 5.3 · 2026-09-15 | 5.3 | 0.5% | 2026-09-15 |
| CVE-2024-10863Client-side audit exclusion vulnerabilityOpenText · Secure Content Manager · CVSS 5.1 · 2024-11-22 | 5.1 | 0.5% | 2024-11-22 |
| CVE-2023-1995Insufficient Logging Vulnerability in HiRDBHitachi · HiRDB Server · CVSS 5.3 · 2023-08-29 | 5.3 | 0.5% | 2023-08-29 |
| CVE-2026-76208phpMyFAQ 3.1.0 through 4.1.6 Authentication Bypass via LDAPthorsten · phpMyFAQ · CVSS 8.2 · 2026-08-19 | 8.2 | 0.4% | 2026-08-19 |
| CVE-2025-2562Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a stored password without generating a correspo…Devolutions · Remote Desktop Manager · CVSS 5.4 · 2025-03-26 | 5.4 | 0.4% | 2025-03-26 |
| CVE-2026-85959Insufficient authentication logging in Progress MarkLogic ServerProgress Software Corporation · MarkLogic Server · CVSS 7.5 · 2026-10-12 | 7.5 | 0.4% | 2026-10-12 |
| CVE-2024-2291MOVEit Transfer Logging Bypass VulnerabilityProgress Software · MOVEit Transfer · CVSS 4.3 · 2024-03-20 | 4.3 | 0.4% | 2024-03-20 |
| CVE-2021-32680Audit log is not properly logging unsetting of share expiration datenextcloud · security-advisories · CVSS 3.3 · 2021-07-12 | 3.3 | 0.4% | 2021-07-12 |
| CVE-2026-18161IBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesIBM · Financial Transaction Manager (FTM) for RedHat OpenShift · CVSS 4.3 · 2026-09-22 | 4.3 | 0.3% | 2026-09-22 |
| CVE-2026-25598Bypassing Logging of Outbound Connections Using sendto, sendmsg, and sendmmsg in Harden-Runner (Community Tier)step-security · harden-runner · CVSS 6.3 · 2026-02-09 | 6.3 | 0.3% | 2026-02-09 |
| CVE-2025-66552Nextcloud Server admin_audit does not log all actions on files in groupfoldersnextcloud · security-advisories · CVSS 4.3 · 2025-12-05 | 4.3 | 0.3% | 2025-12-05 |
| CVE-2026-3494MariaDB Server Audit Plugin Comment Handling BypassMariaDB Foundation · MariaDB Server · CVSS 4.3 · 2026-03-03 | 4.3 | 0.3% | 2026-03-03 |
| CVE-2025-32967OpenEMR doesn't log password administration properlyopenemr · openemr · CVSS 5.4 · 2025-05-23 | 5.4 | 0.3% | 2025-05-23 |
| CVE-2025-53498Lack of Audit Logging in AbuseFilterWikimedia Foundation · Mediawiki - AbuseFilter Extension · CVSS 5.3 · 2025-07-07 | 5.3 | 0.3% | 2025-07-07 |
| CVE-2026-29812CyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the child domains list.CyberPanel · CyberPanel · CVSS 4.3 · 2026-09-13 | 4.3 | 0.3% | 2026-09-13 |
| CVE-2026-22279Dell PowerScale OneFS, versions prior 9.13.0.0, contains an insufficient logging vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulne…Dell · PowerScale OneFS · CVSS 4.3 · 2026-01-22 | 4.3 | 0.3% | 2026-01-22 |
| CVE-2026-95759Authenticated Audit Log Bypass in the API of HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) · Fabric Composer · CVSS 6.5 · 2026-11-03 | 6.5 | 0.3% | 2026-11-03 |
| CVE-2025-62307HCL IntelliOps Event Management is affected by multiple security vulnerabilities.HCL Software · IEM · CVSS 5.4 · 2026-08-20 | 5.4 | 0.3% | 2026-08-20 |
| CVE-2026-82863@hulumi/baseline before 1.3.2 CloudTrail Selector Tampering Detectionhulumi · baseline · CVSS 3.3 · 2026-08-31 | 3.3 | 0.2% | 2026-08-31 |
| CVE-2026-108311Tanium addressed an insufficient logging vulnerability in Tanium Server.Tanium · Tanium Server · CVSS 2.7 · 2026-10-27 | 2.7 | 0.2% | 2026-10-27 |
| CVE-2026-9247Insufficient logging in the entry export feature in Devolutions Server allows an authenticated user with export permissions to export a sealed entry without triggering the unseal…Devolutions · Server · CVSS 2.4 · 2026-05-22 | 2.4 | 0.2% | 2026-05-22 |
| CVE-2026-115357OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Improper Audit Logging of Root Generation and Rekey Responsesopenbao · openbao · CVSS 2.2 · 2026-10-22 | 2.2 | 0.2% | 2026-10-22 |
| CVE-2020-37268Coq and Rocq Prover Print Assumptions Omits Unsafe Universe Checking Inlined Through Parameter Inlinerocq-prover · rocq · CVSS 6.3 · 2026-08-24 | 6.3 | 0.2% | 2026-08-24 |
| CVE-2025-52644HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged.HCL · AION · CVSS 5.8 · 2026-03-16 | 5.8 | 0.2% | 2026-03-16 |
| CVE-2026-90955MISP CLI Shell Audit Logs Lose User Identity and CLI Marker After First Lazy Model LoadMISP · MISP · CVSS 4.6 · 2026-09-14 | 4.6 | 0.2% | 2026-09-14 |
| CVE-2024-24901Dell PowerScale OneFS 8.2.x through 9.6.0.x contain an insufficient logging vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability…Dell · PowerScale OneFS · CVSS 3 · 2024-03-04 | 3.0 | 0.1% | 2024-03-04 |
| CVE-2026-32803Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.6, 9.6.0.0 through 9.7.1.13, 9.8.0.0 through 9.10.1.5 and 9.11.0.0 through 9.12.0.1 contains an Insufficient Logging vulnerabi…Dell · PowerScale OneFS · CVSS 3.3 · 2026-05-08 | 3.3 | 0.1% | 2026-05-08 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.