CWE-777
6 published CVEs are weaknesses of this kind, as the records or NVD name it.
- Published CVEs
- 6
- Last 12 months
- 6
- Critical
- 1
- Known exploited
- 0
Critical 1High 1Medium 4Low 0Not scored 0
Newest CVEs
- CVE-2026-78191
WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as Perl pages
WebDyne
Critical9.8 - CVE-2026-97736
tinyauth before 5.1.3 allows rule bypass by appending an allowed route string. This is caused by an unanchored regular expression.
tinyauth · tinyauth
Medium5.4 - CVE-2026-22068
Apache Traffic Server: Regex mappings match with malicious domain names
Apache Software Foundation · Apache Traffic Server
Medium6.9 - CVE-2026-56021
Webmin information disclosure via regex pattern
Webmin · Webmin
Medium6.9 - CVE-2026-40110
jupyter-server CORS origin validation bypass via unanchored regex in allow_origin_pat
jupyter-server · jupyter_server
High7.6 - CVE-2026-39087
ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push endpoint URLs.
ntfy · ntfy
Medium6.4