NEC
CVE Numbering Authority
Latest CVE published
Overview
NEC is a CVE Numbering Authority that has published 58 CVE records since 2021. It is currently classified as active, with 30 CVEs published in the last two years. Its CVE data quality is graded C (75.5% overall completeness).
Among the 370 CNAs tracked here, NEC ranks #154 by CVE volume and reports more complete records than 25% of all CNAs.
Data quality report card
How complete and consistent NEC's CVE records are, scored across vendor, product, CVSS, and CWE coverage.
A CVE record only requires a description to be published. “Completeness” measures how often NEC also fills in the optional — but extremely useful — fields that make a vulnerability actually actionable: the affected vendor and product, a CVSS severity score, and a CWE weakness type. A higher score means more of this CNA’s CVEs include those details, so defenders spend less time enriching records by hand.
Report card grade
75.5%
Overall score
What these scores mean
- Vendor completeness
- The share of this CNA's CVEs that name an affected vendor.
- Product completeness
- The share that name a specific affected product.
- CVSS completeness
- The share that include a CVSS severity score.
- CWE completeness
- The share mapped to a CWE weakness type.
- Update rate
- How often this CNA revises CVE records after first publishing them.
- Vendor diversity
- How many distinct vendors this CNA publishes CVEs for.
Severity and exploitation
How the CVSS severity of NEC's published CVEs breaks down, and how many are known to be exploited in the wild.
In CISA’s Known Exploited Vulnerabilities catalog
0
None of NEC's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Common weakness types
The CWE weakness categories NEC most often assigns to its CVEs. Follow any weakness to its full explanation.
- CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')8 CVEs
- CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')6 CVEs
- CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
- CWE-912Hidden Functionality4 CVEs
- CWE-287Improper Authentication4 CVEs
- CWE-121Stack-based Buffer Overflow3 CVEs
- CWE-306Missing Authentication for Critical Function2 CVEs
- CWE-427Uncontrolled Search Path Element2 CVEs
Publishing activity by year
How many CVEs NEC has published each year.
Top vendors
The vendors NEC publishes the most CVEs for.
- NEC Corporation52 CVEs
- Sharp Display Solutions, Ltd.11 CVEs
- NEC Platforms, Ltd.10 CVEs
- sharp6 CVEs
- sharp-nec-displays2 CVEs
Top products
The products NEC publishes the most CVEs for.
- expresscluster x17 CVEs
- expresscluster x singleserversafe17 CVEs
- aterm wg1800hp2 firmware16 CVEs
- Aterm WF300HP16 CVEs
- Aterm WG1800HP16 CVEs
- Aterm WG1800HP216 CVEs
- aterm wf300hp firmware16 CVEs
- Aterm WG1400HP16 CVEs
Latest CVEs
The most recent CVEs assigned by NEC.
- CVE-2026-8797CWE-782High · CVSS 8.5EPSS 0.1%2026-06-26
- CVE-2026-8652CWE-78High · CVSS 8.5EPSS 0.7%2026-05-25
- CVE-2026-6059CWE-79Medium · CVSS 4.8EPSS 0.2%2026-05-25
- CVE-2026-4620CWE-78High · CVSS 7.1EPSS 1.0%2026-03-27
- CVE-2026-4622CWE-78High · CVSS 7.1EPSS 0.9%2026-03-27
- CVE-2026-4621CWE-912Medium · CVSS 6.3EPSS 0.2%2026-03-27
- CVE-2026-4619CWE-22Medium · CVSS 6.0EPSS 0.3%2026-03-27
- CVE-2026-4309CWE-862Medium · CVSS 6.3EPSS 0.1%2026-03-27
- CVE-2025-11545CWE-497Critical · CVSS 9.5EPSS 0.3%2025-12-22
- CVE-2025-11544CWE-912Critical · CVSS 9.5EPSS 0.3%2025-12-22
- CVE-2025-11543CWE-354Critical · CVSS 9.5EPSS 0.2%2025-12-22
- CVE-2025-11542CWE-121High · CVSS 8.4EPSS 0.4%2025-12-22
Track new NEC CVEs as they are published and get AI-written analysis and remediation guidance.
Monitor NEC CVEsOther CNAs
Compare data quality across other CVE Numbering Authorities.
Frequently asked questions
Common questions about the NEC CNA.
- What is the NEC CNA?
- NEC is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 58 CVE records since 2021.
- How many CVEs has NEC published?
- NEC has published 58 CVE records, including 30 in the last two years.
- What is NEC's CVE data quality grade?
- RadicalNotion.AI grades NEC's CVE data quality as C, with an overall completeness score of 75.5%. This reflects how consistently its CVE records include vendor (98.3%), product (98.3%), CVSS (25.9%), and CWE (79.3%) information.
- What products does NEC publish CVEs for?
- NEC most frequently publishes CVEs for expresscluster x, expresscluster x singleserversafe, aterm wg1800hp2 firmware, Aterm WF300HP, Aterm WG1800HP.
- Which vendors does NEC cover?
- NEC publishes CVEs across 4 distinct vendors, most often NEC Corporation, Sharp Display Solutions, Ltd., NEC Platforms, Ltd., sharp, sharp-nec-displays.
- Is NEC actively publishing CVEs?
- NEC is currently active, based on 30 CVEs in the last two years.
- What is the average severity of NEC's CVEs?
- The average CVSS base score across NEC's scored CVEs is 7.9.
- How many critical CVEs has NEC published?
- NEC has published 30 critical-severity CVEs and 19 high-severity CVEs.
- Are any of NEC's CVEs in CISA's Known Exploited Vulnerabilities catalog?
- No. None of NEC's CVEs are currently listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.
- What are the most common weakness types in NEC's CVEs?
- NEC's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-912 (Hidden Functionality).
- How does NEC rank among CNAs?
- By total CVE volume, NEC ranks #154 of 370 CNAs, and it reports more complete CVE records than 25% of all CNAs.
References
- Official CVE.org list of CNA partners (opens in a new tab)
- Learn: What is a CNA?
- CWE directory: the weakness types this CNA maps its CVEs to
CNA report-card grades are computed by RadicalNotion.AI from published CVE records. CVE data is sourced from the CVE Program.
Track NEC CVEs
Monitor new vulnerabilities as this CNA publishes them, with AI-written analysis and remediation guidance.