Records · Flaws
Weakness-type records
Milestones in which weakness classes dominate: long streaks at #1, sharp rank shifts, and weakness types seen for the first time.
6 records · updated 16 October 2026, 12:42 UTC
25 August 2026Weakness shift: CWE-79 is now the #2 most common vulnerability typeOver the last 90 days, CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')) has moved into the #2 spot among 08 August 2026Weakness shift: CWE-284 is now the #2 most common vulnerability typeOver the last 90 days, CWE-284 (Improper Access Control) has moved into the #2 spot among all vulnerability types, displacing CWE-89 (Improper Neutral31 July 2026Weakness shift: CWE-284 is now the #2 most common vulnerability typeOver the last 90 days, CWE-284 (Improper Access Control) has moved into the #2 spot among all vulnerability types, displacing CWE-89 (Improper Neutral25 July 2026Weakness shift: CWE-284 is now the #2 most common vulnerability typeOver the last 90 days, CWE-284 (Improper Access Control) has moved into the #2 spot among all vulnerability types, displacing CWE-89 (Improper Neutral23 July 2026Weakness shift: CWE-416 is now the #3 most common vulnerability typeOver the last 90 days, CWE-416 (Use After Free) has moved into the #3 spot among all vulnerability types, displacing CWE-862 (Missing Authorization). 23 July 2026CWE-79 has been the most common vulnerability type for over 24 monthsCWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')) has led the monthly weakness ranking for at least 24 con