CWE-626
9 published CVEs are weaknesses of this kind, as the records or NVD name it.
- Published CVEs
- 9
- Last 12 months
- 6
- Critical
- 3
- Known exploited
- 0
Critical 3High 2Medium 2Low 2Not scored 0
CVEs per yearBy the year they were published
- 20191
- 20202
- 20266
Newest CVEs
- CVE-2026-116130
HTTP::Parser::XS versions before 0.18 for Perl truncate PATH_INFO at an encoded NUL byte in parse_http_request
HTTP-Parser-XS
Critical9.1 - CVE-2026-76816
Netty: MQTT Topic Name and Client ID Validation Bypass
netty · netty
Low3.5 - CVE-2026-62380
Netty before 4.2.16.Final SOCKS Proxy Null Byte Injection
netty · netty
Medium6.3 - CVE-2026-42579
Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)
netty · netty
High7.5 - CVE-2026-42010
Gnutls: gnutls: authentication bypass via nul character in username
gnutls
High7.1 - CVE-2026-42040
Axios: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParams
axios · axios
Low3.7 - CVE-2020-10773
A stack information leak flaw was found in s390/s390x in the Linux kernel’s memory manager functionality, where it incorrectly writes to the…
[UNKNOWN] · kernel
Medium4.4 - CVE-2019-17137
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR AC1200 R6220 Firmware version 1.1.0.86 Smart…
NETGEAR · AC1200
Critical9.4 - CVE-2019-11936
Various APC functions accept keys containing null bytes as input, leading to premature truncation of input. This issue affects HHVM versions prior to 3.30.12,…
Facebook · HHVM
Critical9.8