| Acceptance of Extraneous Untrusted Data With Trusted Data | |
| Incorrect Authorization | |
| Information Exposure Through Log Files | |
| Incorrect Authorization | |
| Insufficient Granularity of Access Control | |
| Incorrect Authorization | |
| Cross-site Scripting (XSS) | |
| Permissive Regular Expression | |
| Incorrect Authorization | |
| Incorrect Authorization | |
| Incorrect Authorization | |
| Incorrect Authorization | |
| Server-Side Request Forgery (SSRF) | |
| Integer Overflow or Wraparound | |
| Incorrect Authorization | |
| Incorrect Authorization | |
| Incorrect Authorization | |
| Open Redirect | |
| Use of Less Trusted Source | |
| Race Condition | |
| Double Free | |
| Integer Overflow or Wraparound | |
| Incorrect Authorization | |
| CVE-2026-85706 | |
| Allocation of Resources Without Limits or Throttling | |
| Use After Free | |