CWE-436
196 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 2 of them as exploited in the wild.
- Published CVEs
- 196
- Last 12 months
- 119
- Critical
- 21
- Known exploited
- 2
Critical 21High 84Medium 73Low 16Not scored 2
CVEs per yearBy the year they were published
- 20182
- 20194
- 202012
- 20216
- 202210
- 202319
- 202417
- 20259
- 2026117
Known exploitedNewest addition to KEV first
- CVE-2026-63030
WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
WordPress · WordPress
ExploitedCritical9.8 - CVE-2025-48384
Git allows arbitrary code execution through broken config quoting
git · git
ExploitedHigh8.1
Newest CVEs
- CVE-2026-118517
Symfony: HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URLs Without a Well-Formed Authority (Incomplete Fix for CVE-2026-45066)
sensiolabs · symfony
Low2.3 - CVE-2026-104269
ModSecurity: RFC 2231 `filename*` Parameter Bypasses Multipart Filename Rules on RFC-Compliant Backends (Go, Python, Node, Java)
owasp-modsecurity · ModSecurity
High8.6 - CVE-2026-103866
Apache Sling Engine: Hand-rolled parameter parser diverges from RFC/container parsing, enabling smuggling
Apache Software Foundation · Apache Sling Engine
Not scored - CVE-2026-122310
Kyverno 1.19.1 before 1.19.2 Privilege Escalation via Policy apiCall urlPath
kyverno · kyverno
Critical9.4 - CVE-2026-118516
Symfony: Host Placeholders Can Match the Start of the Path in Compiled URL Matchers, Bypassing Path-Based Access Control
sensiolabs · symfony
Medium6.3 - CVE-2026-120635
CGI versions before 5.00 for Perl allow form fields to be smuggled past proxies and WAFs via multipart parsing that differs from the RFCs
CGI
Not scored - CVE-2026-121135
Security issue in Platform in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium…
Google · Chrome
High8.8 - CVE-2026-120213
@fastify/http-proxy vulnerable to prefix escape via decoded route parameters
@fastify/http-proxy · @fastify/http-proxy
Critical9.1 - CVE-2026-120309
Nuxt 4.6.0 before 4.6.2 Route Param Confusion via getRouterParam
nuxt · nuxt
Medium6.3 - CVE-2026-61789
DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation
bytebase · dbhub
Medium6.1