Skip to content
CVE Tracker

CWE-172

23 published CVEs are weaknesses of this kind, as the records or NVD name it.

All 23 in the listAtom feed of new CVEsWhat CWE-172 is, at MITRE (opens in a new tab)
Published CVEs
23
Last 12 months
9
Critical
3
Known exploited
0

Critical 3High 3Medium 14Low 3Not scored 0

CVEs per yearBy the year they were published

  1. 20164
  2. 20184
  3. 20193
  4. 20211
  5. 20241
  6. 20252
  7. 20268

Newest CVEs

  • CVE-2026-110306

    fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding

    fast-uri · fast-uri

    Medium6.1
  • CVE-2026-95101

    NGINX ngx_http_v3_module vulnerability

    F5 · NGINX Plus

    Medium6.9
  • CVE-2026-104774

    OWASP Coraza WAF: jsDecode Off-by-One in Octal Escape Handling Enables WAF Bypass

    corazawaf · coraza

    Medium5.8
  • CVE-2026-106122

    RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers

    rabbitmq · rabbitmq-java-client

    Medium6.0
  • CVE-2026-100891

    Trusted Domain Project OpenDMARC Internationalized Domain Name opendmarc_policy.c opendmarc_policy_query_dmarc encoding error

    Trusted Domain Project · OpenDMARC

    Medium6.9
  • CVE-2026-86818

    fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronization

    fast-uri · fast-uri

    Medium4.8
  • CVE-2026-48784

    Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization

    symfony · symfony

    Medium5.1
  • CVE-2026-42926

    NGINX ngx_http_proxy_v2_module vulnerability

    F5 · NGINX Open Source

    Medium6.3
  • CVE-2025-12758

    Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength()…

    validator

    High8.7
  • CVE-2025-27110

    Libmodsecurity3 has possible bypass of encoded HTML entities

    owasp-modsecurity · ModSecurity

    High7.9

Vendors it comes up for most

  1. F52
  2. fast-uri2
  3. Cisco1
  4. ClusterLabs1
  5. Python1
  6. SAP SE1
  7. Trusted Domain Project1
  8. Vaadin1
  9. authzed1
  10. com.rabbitmq1