Skip to content

Search CVEs

Leaderboard Log in Join free

// browse trending latest kev overrated false-positives weakness vendor

Browse › By weakness › CWE-331

CWE-331

1 CVE of this weakness class.

CVE-2026-41080LOW 2.9EPSS 0%
libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.

Community-sourced verdicts on CVEs: real vs false positive, how exploitable it is, and the remediation that actually worked.

Companion tool: Denoizr — de-noise a scanner report in your browser.

ExploreTrending Latest Known-exploited Overrated False positives By weakness By vendor

ResourcesBrowse all CVEs Leaderboard API Contact Latest RSS KEV RSS Trending RSS

The Triage · weekly

What's real, what's noise, once a week.

Email address

© 2026 Umaadi · TruePositiveIs it real? Ask the field.