Improper Access Control
7,610 CVEs across 134 months on the top 50 list since Oct 2001. Peak rank #1 in 3 months, last Aug 2026.
CWE-284 CVEs per month since Oct 2001
Oct 2021: 13 CVEs · rank #32Nov 2021: 25 CVEs · rank #14Dec 2021: 15 CVEs · rank #30Jan 2022: 24 CVEs · rank #18Feb 2022: 25 CVEs · rank #19Mar 2022: 14 CVEs · rank #34Apr 2022: 32 CVEs · rank #15May 2022: 21 CVEs · rank #22Jun 2022: 18 CVEs · rank #25Jul 2022: 17 CVEs · rank #24Aug 2022: 34 CVEs · rank #15Sep 2022: 36 CVEs · rank #14Oct 2022: 54 CVEs · rank #9Nov 2022: 38 CVEs · rank #12Dec 2022: 53 CVEs · rank #12Jan 2023: 51 CVEs · rank #10Feb 2023: 45 CVEs · rank #10Mar 2023: not on the top 50 that monthApr 2023: 37 CVEs · rank #13May 2023: 45 CVEs · rank #12Jun 2023: 23 CVEs · rank #23Jul 2023: 17 CVEs · rank #26Aug 2023: 46 CVEs · rank #11Sep 2023: 27 CVEs · rank #20Oct 2023: 48 CVEs · rank #15Nov 2023: 62 CVEs · rank #9Dec 2023: 36 CVEs · rank #17Jan 2024: 71 CVEs · rank #9Feb 2024: 98 CVEs · rank #5Mar 2024: 48 CVEs · rank #14Apr 2024: 78 CVEs · rank #12May 2024: 60 CVEs · rank #21Jun 2024: 53 CVEs · rank #12Jul 2024: 48 CVEs · rank #20Aug 2024: 91 CVEs · rank #7Sep 2024: 55 CVEs · rank #14Oct 2024: 44 CVEs · rank #19Nov 2024: 60 CVEs · rank #19Dec 2024: 44 CVEs · rank #15Jan 2025: 71 CVEs · rank #14Feb 2025: 82 CVEs · rank #12Mar 2025: 132 CVEs · rank #7Apr 2025: 139 CVEs · rank #6May 2025: 109 CVEs · rank #10Jun 2025: 62 CVEs · rank #18Jul 2025: 110 CVEs · rank #11Aug 2025: 100 CVEs · rank #10Sep 2025: 121 CVEs · rank #10Oct 2025: 143 CVEs · rank #6Nov 2025: 110 CVEs · rank #5Dec 2025: 103 CVEs · rank #10Jan 2026: 104 CVEs · rank #9Feb 2026: 110 CVEs · rank #11Mar 2026: 163 CVEs · rank #13Apr 2026: 188 CVEs · rank #11May 2026: 177 CVEs · rank #13Jun 2026: 371 CVEs · rank #5Jul 2026: 913 CVEs · rank #1Aug 2026: 1,202 CVEs · rank #1Sep 2026 so far: 491 CVEs · rank #3
Year by year
Each year's months on the top 50 list of weakness classes. Pick a year to read it in the lens.
The record
- Peak rank
- #1 in 3 months, last Aug 2026
- Busiest month
- Aug 2026, 1,202 CVEs
- First on the list
- Oct 2001
- On the top 50 list
- 134 of 300 monthly snapshots