CWE-841 · 61 records

Improper Enforcement of Behavioral Workflow

CVEs in this class

61 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
60This week	CVE-2026-67279Weaponized	SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOSmikrotik · routeros · CWE-841 Pre-auth	Medium6.9	KEV	1.0%	Sep 5, 2026
39Monitor	CVE-2023-4181No exploit	SourceCodester Free Hospital Management System for Small Practices Redirect behavioral workflowmayurik · free hospital management system for small practices · CWE-841 Pre-auth	Critical9.8	—	1.0%	Aug 6, 2023
39Monitor	CVE-2026-3130No exploit	Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacker with the delete perdevolutions · devolutions server · CWE-841 Pre-auth	Critical9.8	—	0.5%	Mar 3, 2026
36Monitor	CVE-2022-2105No exploit	Secheron SEPCOS Control and Protection Relaysecheron · sepcos control and protection relay firmware · CWE-841 Pre-auth Auth bypass	Critical9.1	—	1.0%	Jun 24, 2022
35Monitor	CVE-2026-95369No exploit	Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code google · chrome · CWE-841 pre-auth RCE	High8.8	—	0.4%	Sep 29, 2026
35Monitor	CVE-2026-65126No exploit	NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper enforcement of a behavioral workfnvidia · infra controller · CWE-841	High8.8	—	0.3%	Sep 22, 2026
35Monitor	CVE-2026-104626No exploit	Gitea fork workflow job revival through later approvalgitea · gitea · CWE-841	High8.8	—	0.3%	Oct 6, 2026
34Monitor	CVE-2026-43974No exploit	gun HTTP/1.1 client accepts unsolicited 101 Switching Protocols response allowing server-driven protocol hijack and OOMninenines · gun · CWE-841 Pre-auth	High8.7	—	0.6%	Jun 8, 2026
34Monitor	CVE-2026-55763No exploit	Klever-Go: Percentage-transfer royalty skips the source debit at exactly-100% splitsklever-io · klever-go · CWE-841 Pre-auth	High8.7	—	0.5%	Aug 28, 2026
34Monitor	CVE-2026-34582No exploit	Botan has a TLS 1.3 certificate authentication bypassbotan project · botan · CWE-841 Pre-auth Auth bypass	High8.7	—	0.3%	Apr 7, 2026
34Monitor	CVE-2026-80195No exploit	Kimai before 2.63.0 Team Membership Removal via APIkimai · kimai · CWE-841	High8.7	—	0.3%	Aug 26, 2026
34Monitor	CVE-2025-48479No exploit	FreeScout Has Business Logic Errorsfreescout · freescout · CWE-841	High8.5	—	0.3%	May 30, 2025
32Monitor	CVE-2026-41259No exploit	Mastodon: Insufficient verification of email addressesjoinmastodon · mastodon · CWE-841 Pre-auth	High8.2	—	0.3%	Apr 23, 2026
30Monitor	CVE-2022-1667No exploit	Secheron SEPCOS Control and Protection Relaysecheron · sepcos control and protection relay firmware · CWE-841 Pre-auth Denial of service	High7.5	—	1.2%	Jun 24, 2022
30Monitor	CVE-2026-70079No exploit	Windows DNS Denial of Service Vulnerabilitymicrosoft · windows 10 1607 · CWE-841 Pre-auth Denial of service	High7.5	—	1.1%	Oct 13, 2026
30Monitor	CVE-2022-2102No exploit	Secheron SEPCOS Control and Protection Relaysecheron · sepcos control and protection relay firmware · CWE-841 Pre-auth File upload	High7.5	—	0.9%	Jun 24, 2022
30Monitor	CVE-2024-46307No exploit	A loop hole in the payment logic of Sparkshop v1.16 allows attackers to arbitrarily modify the number of products.sparkshop · sparkshop · CWE-841 Pre-auth	High7.5	—	0.4%	Oct 9, 2024
30Monitor	CVE-2024-0410No exploit	Improper Enforcement of Behavioral Workflow in GitLabgitlab · gitlab · CWE-841	High7.7	—	0.4%	Feb 21, 2024
30Monitor	CVE-2026-30574No exploit	A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-sales.php file.senior-walter · web-based pharmacy product management system · CWE-841 Pre-auth	High7.5	—	0.3%	Mar 27, 2026
30Monitor	CVE-2026-79083No exploit	Improper enforcement of behavioral workflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised tgoogle · chrome · CWE-841 pre-auth RCE	High7.5	—	0.3%	Aug 25, 2026
29Monitor	CVE-2026-78135No exploit	libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine.strongswan · strongswan · CWE-841 Pre-auth Auth bypass	High7.3	—	0.3%	Sep 10, 2026
28Monitor	CVE-2025-48476No exploit	FreeScout Has Business Logic Errorsfreescout · freescout · CWE-841	High7.1	—	0.5%	May 30, 2025
28Monitor	CVE-2025-48477No exploit	FreeScout Has Business Logic Errorsfreescout · freescout · CWE-841	High7.1	—	0.4%	May 30, 2025
28Monitor	CVE-2025-48478No exploit	FreeScout Has Business Logic Errorsfreescout · freescout · CWE-841	High7.0	—	0.4%	May 30, 2025
28Monitor	CVE-2026-82406No exploit	Klever-Go: Zombie-order theft: `Buy` missing `IsClaimed` guard in native marketplaceklever-io · klever-go · CWE-841	High7.1	—	0.3%	Sep 23, 2026

CVE-2026-67279
60This week
SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS
MediumCVSS 6.9KEVWeaponizedEPSS 1%
- Pre-auth
mikrotik · routerosSep 5, 2026
CVE-2023-4181
39Monitor
SourceCodester Free Hospital Management System for Small Practices Redirect behavioral workflow
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
mayurik · free hospital management system for small practicesAug 6, 2023
CVE-2026-3130
39Monitor
Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacker with the delete per
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
devolutions · devolutions serverMar 3, 2026
CVE-2022-2105
36Monitor
Secheron SEPCOS Control and Protection Relay
CriticalCVSS 9.1No exploitEPSS 1%
- Pre-auth
- Auth bypass
secheron · sepcos control and protection relay firmwareJun 24, 2022
CVE-2026-95369
35Monitor
Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
google · chromeSep 29, 2026
CVE-2026-65126
35Monitor
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper enforcement of a behavioral workf
HighCVSS 8.8No exploitEPSS 0%
nvidia · infra controllerSep 22, 2026
CVE-2026-104626
35Monitor
Gitea fork workflow job revival through later approval
HighCVSS 8.8No exploitEPSS 0%
gitea · giteaOct 6, 2026
CVE-2026-43974
34Monitor
gun HTTP/1.1 client accepts unsolicited 101 Switching Protocols response allowing server-driven protocol hijack and OOM
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
ninenines · gunJun 8, 2026
CVE-2026-55763
34Monitor
Klever-Go: Percentage-transfer royalty skips the source debit at exactly-100% splits
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
klever-io · klever-goAug 28, 2026
CVE-2026-34582
34Monitor
Botan has a TLS 1.3 certificate authentication bypass
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
botan project · botanApr 7, 2026
CVE-2026-80195
34Monitor
Kimai before 2.63.0 Team Membership Removal via API
HighCVSS 8.7No exploitEPSS 0%
kimai · kimaiAug 26, 2026
CVE-2025-48479
34Monitor
FreeScout Has Business Logic Errors
HighCVSS 8.5No exploitEPSS 0%
freescout · freescoutMay 30, 2025
CVE-2026-41259
32Monitor
Mastodon: Insufficient verification of email addresses
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
joinmastodon · mastodonApr 23, 2026
CVE-2022-1667
30Monitor
Secheron SEPCOS Control and Protection Relay
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
secheron · sepcos control and protection relay firmwareJun 24, 2022
CVE-2026-70079
30Monitor
Windows DNS Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
microsoft · windows 10 1607Oct 13, 2026
CVE-2022-2102
30Monitor
Secheron SEPCOS Control and Protection Relay
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- File upload
secheron · sepcos control and protection relay firmwareJun 24, 2022
CVE-2024-46307
30Monitor
A loop hole in the payment logic of Sparkshop v1.16 allows attackers to arbitrarily modify the number of products.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
sparkshop · sparkshopOct 9, 2024
CVE-2024-0410
30Monitor
Improper Enforcement of Behavioral Workflow in GitLab
HighCVSS 7.7No exploitEPSS 0%
gitlab · gitlabFeb 21, 2024
CVE-2026-30574
30Monitor
A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-sales.php file.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
senior-walter · web-based pharmacy product management systemMar 27, 2026
CVE-2026-79083
30Monitor
Improper enforcement of behavioral workflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised t
HighCVSS 7.5No exploitEPSS 0%
- pre-auth RCE
google · chromeAug 25, 2026
CVE-2026-78135
29Monitor
libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine.
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
strongswan · strongswanSep 10, 2026
CVE-2025-48476
28Monitor
FreeScout Has Business Logic Errors
HighCVSS 7.1No exploitEPSS 0%
freescout · freescoutMay 30, 2025
CVE-2025-48477
28Monitor
FreeScout Has Business Logic Errors
HighCVSS 7.1No exploitEPSS 0%
freescout · freescoutMay 30, 2025
CVE-2025-48478
28Monitor
FreeScout Has Business Logic Errors
HighCVSS 7.0No exploitEPSS 0%
freescout · freescoutMay 30, 2025
CVE-2026-82406
28Monitor
Klever-Go: Zombie-order theft: `Buy` missing `IsClaimed` guard in native marketplace
HighCVSS 7.1No exploitEPSS 0%
klever-io · klever-goSep 23, 2026

All vulnerability classes