Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-1116

5 published CVEs are weaknesses of this kind, as the records or NVD name it.

All 5 in the listAtom feed of new CVEsWhat CWE-1116 is, at MITRE (opens in a new tab)
Published CVEs
5
Last 12 months
1
Critical
0
Known exploited
0

Critical 0High 3Medium 2Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20232
  2. 20252
  3. 20261

Newest CVEs

  • CVE-2026-63345

    Refitter: C# source injection through OpenAPI path keys

    christianhelle · refitter

    High8.6
  • CVE-2025-47271

    OZI-Project/ozi-publish Code Injection vulnerability

    OZI-Project · publish

    Medium6.3
  • CVE-2025-1219

    libxml streams use wrong content-type header when requesting a redirected resource

    PHP Group · PHP

    Medium6.3
  • CVE-2022-30351

    PDFZorro PDFZorro Online r20220428 using TCPDF 6.2.5, despite having workflows claiming to correctly remove redacted information from a supplied PDF file, does…

    Product not named

    High7.5
  • CVE-2022-48339

    An issue was discovered in GNU Emacs through 28.2. htmlfontify.el has a command injection vulnerability. In the hfy-istext-command function, the parameter file…

    Product not named

    High7.8

Vendors it comes up for most

  1. OZI-Project1
  2. PHP Group1
  3. christianhelle1