Skip to content
CVE Tracker

CWE-178

139 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

All 139 in the listAtom feed of new CVEsWhat CWE-178 is, at MITRE (opens in a new tab)
Published CVEs
139
Last 12 months
90
Critical
17
Known exploited
1

Critical 17High 68Medium 39Low 14Not scored 1

CVEs per yearBy the year they were published

  1. 20053
  2. 20071
  3. 20171
  4. 20182
  5. 20191
  6. 20203
  7. 20233
  8. 20232
  9. 20247
  10. 20257
  11. 202688
  12. 20269

Known exploitedNewest addition to KEV first

  • CVE-2020-12812

    An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log in successfully…

    Fortinet FortiOS

    ExploitedHigh7.5

Newest CVEs

  • CVE-2026-63121

    Kubewarden trusted-repos-policy: uppercase registry host bypasses registry/image deny rules

    kubewarden · policies

    Medium6.3
  • CVE-2026-109411

    Samba: access control bypass via vfs_ceph_rgw case-insensitive open

    Samba · Samba

    High8.1
  • CVE-2026-116135

    HTTP::Body versions before 1.23_01 for Perl drop mixed-case percent escapes from urlencoded form fields instead of decoding them

    HTTP-Body

    Not scored
  • CVE-2026-108313

    Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.

    Tanium · Tanium Server

    Medium6.6
  • CVE-2026-105608

    Consul vulnerable to an authorization bypass in service mesh registration

    HashiCorp · Consul

    High8.8
  • CVE-2026-116469

    MISP Guard Case-Sensitive Policy Bypass Allows Unauthorized Feed Data Forwarding

    MISP · misp-guard

    High7.1
  • CVE-2026-114132

    Nuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitive

    nuxt · nuxt

    Medium6.3
  • CVE-2026-85254

    Apache Camel: Camel-Platform-HTTP Request-Header Echo Suppression Bypassed by Header-Name Casing

    Apache Software Foundation · Apache Camel

    Medium6.5
  • CVE-2026-80343

    Apache Camel: Camel-Netty-HTTP Security Constraint Bypass via Case-Sensitive Context-Path Matching

    Apache Software Foundation · Apache Camel

    High8.2
  • CVE-2026-111448

    Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons in path-containment checks on case-sensitive filesystems. Canonical-path checks for zip entries,…

    Wheels · Wheels

    Low3.7

Vendors it comes up for most

  1. Apache Software Foundation7
  2. Red Hat5
  3. caddyserver5
  4. Drupal3
  5. getgrav3
  6. microsoft3
  7. nuxt3
  8. @backstage2
  9. Eclipse Foundation2
  10. HashiCorp2