Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-76

16 published CVEs are weaknesses of this kind, as the records or NVD name it.

Published CVEs
16
Last 12 months
7
Critical
3
Known exploited
0

Critical 3High 8Medium 4Low 1Not scored 0

CVEs per yearBy the year they were published

  1. 20232
  2. 20247
  3. 20267

Newest CVEs

  • CVE-2026-91184

    NGINX Gateway Fabric vulnerability

    F5 · NGINX Gateway Fabric

    High8.7
  • CVE-2026-77180

    NGINX Ingress Controller vulnerability

    F5 · NGINX Ingress Controller

    High8.7
  • CVE-2026-66362

    NGF vulnerability

    F5 · NGINX Gateway Fabric

    High8.6
  • CVE-2026-54722

    dssrf: there a critical security bug with remove_at_symbol_in_string

    HackingRepo · dssrf-js

    High8.7
  • CVE-2026-55723

    NGINX Ingress Controller vulnerability

    F5 · NGINX Ingress Controller

    High8.7
  • CVE-2026-11311

    NGINX Gateway Fabric vulnerability

    F5 · NGINX Gateway Fabric

    High8.6
  • CVE-2026-28292

    simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key that enables RCE

    steveukx · simple-git

    Critical9.8
  • CVE-2024-4897

    Remote Code Execution in parisneo/lollms-webui

    parisneo · parisneo/lollms-webui

    High8.4
  • CVE-2024-34359

    llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata

    abetlen · llama-cpp-python

    Critical9.7
  • CVE-2024-2952

    Server-Side Template Injection in BerriAI/litellm

    berriai · berriai/litellm

    Critical9.8

Vendors it comes up for most

  1. F55
  2. PaperCut3
  3. btcpayserver2
  4. HackingRepo1
  5. Juniper Networks1
  6. abetlen1
  7. berriai1
  8. parisneo1
  9. steveukx1