Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CWE-840 (业务逻辑错误) — Vulnerability Class 97

97 vulnerabilities classified as CWE-840 (业务逻辑错误). AI Chinese analysis included.

This page aggregates vulnerability data specifically for the weakness type CWE-840, known as Improper Handling of Exceptional Conditions, across various vendors and products. The collection encompasses a comprehensive history of security flaws where software fails to manage unexpected events correctly, spanning reports from the inception of the Common Weakness Enumeration database to the most recent disclosures. Visitors can utilize this resource to track specific vendor advisories regarding exception handling failures, understand the broader implications and patterns of this weakness class within modern software architectures, or look up the complete vulnerability history for a particular product affected by improper exception management. By centralizing these entries, the page provides a clear view of how exceptional conditions have historically led to system crashes, data corruption, or security breaches in diverse applications. Users seeking to analyze trends in exception handling or to audit their own systems for similar risks will find detailed metadata, affected component lists, and mitigation strategies relevant to CWE-840 without the distraction of unrelated vulnerability types. This focused aggregation supports security professionals, developers, and auditors in making informed decisions about risk management and code quality improvements related to robust error handling practices.

CVE ID Title CVSS Severity Published
CVE-2026-116461 Omega Solution Restro POS sale-invoice logic error — Restro POS 4.3 Medium 2026-10-26
CVE-2026-106070 Node.js 26.x 中 zlib.ZipFile API 的任意字节读取漏洞 — node - - 2026-10-23
CVE-2026-112028 light0011 cms Vote VoteController.class.php logic error — cms 6.5 Medium 2026-10-18
CVE-2026-109406 macrozheng mall mall-portal generateOrder OmsPortalOrderServiceImpl logic error — mall 5.4 Medium 2026-10-13
CVE-2026-108784 macrozheng mall Payment Endpoint AlipayServiceImpl.java AlipayServiceImpl.pay logic error — mall 6.5 Medium 2026-10-12
CVE-2026-105573 newbee-ltd newbee-mall Shopping Cart Quantity updateAccountHeadAndDetail logic error — newbee-mall 4.3 Medium 2026-10-06
CVE-2026-77166 Emoji更新端点布局破坏漏洞 — Collectives - - 2026-09-21
CVE-2026-82982 Approval应用ETag缺失致审批校验绕过 — Approval - - 2026-09-18
CVE-2026-85030 HKUDS AI-Trader selfRegister API Endpoint routes_agent.py logic error — AI-Trader 3.7 Low 2026-09-03
CVE-2026-79406 macrozheng mall quantity OmsCartItemServiceImpl.updateQuantity logic error — mall 4.3 Medium 2026-08-25
CVE-2026-58558 Huawei harmonyos 处理逻辑错误漏洞 — Harmony OS 7.8 High 2026-07-15
CVE-2026-13571 SourceCodester Simple Food Ordering System cart.php logic error — Simple Food Ordering System 5.3 Medium 2026-06-29
CVE-2026-41973 Huawei EMUI和Huawei HarmonyOS 安全漏洞 — HarmonyOS 5.9 Medium 2026-06-09
CVE-2026-11465 songquanpeng one-api Redemption Code Top-Up Endpoint redemption.go Redeem logic error — one-api 3.1 Low 2026-06-07
CVE-2026-8738 Sanluan PublicCMS Trade Payment Flow TradeOrderController.java AccountGatewayComponent.pay logic error — PublicCMS 6.5 Medium 2026-05-17
CVE-2026-41968 Huawei HarmonyOS 安全漏洞 — HarmonyOS 5.9 Medium 2026-05-15
CVE-2026-41967 Huawei HarmonyOS 安全漏洞 — HarmonyOS 5.9 Medium 2026-05-15
CVE-2026-41966 Huawei HarmonyOS 安全漏洞 — HarmonyOS 5.6 Medium 2026-05-15
CVE-2026-41961 Huawei EMUI和Huawei HarmonyOS 安全漏洞 — HarmonyOS 5.9 Medium 2026-05-15
CVE-2026-41971 Huawei HarmonyOS 安全漏洞 — HarmonyOS 5.5 Medium 2026-05-15
CVE-2026-41965 Huawei HarmonyOS 安全漏洞 — HarmonyOS 5.6 Medium 2026-05-15
CVE-2026-1322 Business Logic Errors in GitLab — GitLab 6.8 Medium 2026-05-14
CVE-2026-1274 IBM Guardium Data Protection is affected by multiple vulnerabilities — Guardium Data Protection 4.9 Medium 2026-04-22
CVE-2026-5812 SourceCodester Pharmacy Product Management System POST Parameter add-sales.php logic error — Pharmacy Product Management System 5.4 Medium 2026-04-08
CVE-2026-5811 SourceCodester Online Food Ordering System POST Parameter Actions.php save_product logic error — Online Food Ordering System 5.4 Medium 2026-04-08
CVE-2026-4547 mickasmt next-saas-stripe-starter Checkout generate-user-stripe.ts generateUserStripe logic error — next-saas-stripe-starter 4.3 Medium 2026-03-22
CVE-2026-28550 Huawei HarmonyOS 竞争条件问题漏洞 — HarmonyOS 4.0 Medium 2026-03-05
CVE-2026-1600 Bdtask Bhojon All-In-One Restaurant Management System Add-to-Cart Submission Endpoint addtocart logic error — Bhojon All-In-One Restaurant Management System 4.3 Medium 2026-01-29
CVE-2026-1599 Bdtask Bhojon All-In-One Restaurant Management System Checkout placeorder logic error — Bhojon All-In-One Restaurant Management System 4.3 Medium 2026-01-29
CVE-2025-14559 Org.keycloak/keycloak-services: keycloak keycloak-services: business logic flaw allows unauthorized token issuance for disabled users — Red Hat build of Keycloak 26.4 6.5 Medium 2026-01-21

Vulnerabilities classified as CWE-840 (业务逻辑错误) represent 97 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.