CWE-1023 · 14 records

Incomplete Comparison with Missing Factors

CVEs in this class

14 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
60This week	CVE-2026-7473Weaponized	Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypassarista · eos · CWE-1023 Pre-auth	Medium6.9	KEV	1.1%	Jun 5, 2026
37Monitor	CVE-2026-4599No exploit	Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Factors via the getRandokjur · jsrsasign · CWE-1023 Pre-auth	Critical9.3	—	0.4%	Mar 23, 2026
30Monitor	CVE-2021-23146No exploit	An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV verification.gallagher · command centre · CWE-1023 Pre-auth	High7.5	—	0.8%	Nov 18, 2021
30Monitor	CVE-2026-24255No exploit	NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitnvidia · dynamo · CWE-1023 Pre-auth	High7.5	—	0.5%	Aug 4, 2026
29Monitor	CVE-2025-46722No exploit	vLLM has a Weakness in MultiModalHasher Image Hashing Implementationvllm · vllm · CWE-1023 Pre-auth	High7.3	—	0.3%	May 29, 2025
27Monitor	CVE-2025-62000No exploit	BullWall Ransomware Containment incomplete file inspectionbullwall · ransomware containment · CWE-1023	Medium6.9	—	0.2%	Dec 18, 2025
26Monitor	CVE-2026-91768No exploit	IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes)php · php · CWE-1023 Pre-auth	Medium6.5	—	0.3%	Sep 25, 2026
24Monitor	CVE-2026-53839No exploit	OpenClaw < 2026.5.7 - Hostname Prefix Matching Bypass in Trusted Retry Endpoint Validationopenclaw · openclaw · CWE-1023	Medium6.0	—	0.2%	Jun 12, 2026
21Monitor	CVE-2024-5528No exploit	Incomplete Comparison with Missing Factors in GitLabgitlab · gitlab · CWE-1023	Medium5.4	—	0.4%	Feb 5, 2025
18Monitor	CVE-2025-55333No exploit	Windows BitLocker Security Feature Bypass Vulnerabilitymicrosoft · windows 10 1507 · CWE-1023	Medium4.6	—	0.8%	Oct 14, 2025
14Monitor	CVE-2026-54713No exploit	CakePHP Queue: Incomplete Comparison in getUniqueId vulnerable to collisionscakephp · queue · CWE-1023 Pre-auth Denial of service	Low3.7	—	0.4%	Aug 27, 2026
9Monitor	CVE-2026-48587No exploit	Potential exposure of private data via whitespace padding in Vary headerdjangoproject · django · CWE-1023 Pre-auth	Low2.3	—	0.3%	Jun 3, 2026
7Monitor	CVE-2026-121564No exploit	Silent loss of messages when merging overlapping chat exports in whatstklucasrodes · whatstk · CWE-1023	Low1.8	—	0.3%	3 days ago
3Monitor	CVE-2026-91836No exploit	OpenClaw ClawScan Static Scanner static_scanner.go incomplete comparison with missing factorsopenclaw · clawscan · CWE-1023	Low0.9	—	0.3%	Sep 15, 2026

CVE-2026-7473
60This week
Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass
MediumCVSS 6.9KEVWeaponizedEPSS 1%
- Pre-auth
arista · eosJun 5, 2026
CVE-2026-4599
37Monitor
Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Factors via the getRando
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
kjur · jsrsasignMar 23, 2026
CVE-2021-23146
30Monitor
An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV verification.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
gallagher · command centreNov 18, 2021
CVE-2026-24255
30Monitor
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submit
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
nvidia · dynamoAug 4, 2026
CVE-2025-46722
29Monitor
vLLM has a Weakness in MultiModalHasher Image Hashing Implementation
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
vllm · vllmMay 29, 2025
CVE-2025-62000
27Monitor
BullWall Ransomware Containment incomplete file inspection
MediumCVSS 6.9No exploitEPSS 0%
bullwall · ransomware containmentDec 18, 2025
CVE-2026-91768
26Monitor
IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes)
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
php · phpSep 25, 2026
CVE-2026-53839
24Monitor
OpenClaw < 2026.5.7 - Hostname Prefix Matching Bypass in Trusted Retry Endpoint Validation
MediumCVSS 6.0No exploitEPSS 0%
openclaw · openclawJun 12, 2026
CVE-2024-5528
21Monitor
Incomplete Comparison with Missing Factors in GitLab
MediumCVSS 5.4No exploitEPSS 0%
gitlab · gitlabFeb 5, 2025
CVE-2025-55333
18Monitor
Windows BitLocker Security Feature Bypass Vulnerability
MediumCVSS 4.6No exploitEPSS 0%
microsoft · windows 10 1507Oct 14, 2025
CVE-2026-54713
14Monitor
CakePHP Queue: Incomplete Comparison in getUniqueId vulnerable to collisions
LowCVSS 3.7No exploitEPSS 0%
- Pre-auth
- Denial of service
cakephp · queueAug 27, 2026
CVE-2026-48587
9Monitor
Potential exposure of private data via whitespace padding in Vary header
LowCVSS 2.3No exploitEPSS 0%
- Pre-auth
djangoproject · djangoJun 3, 2026
CVE-2026-121564
7Monitor
Silent loss of messages when merging overlapping chat exports in whatstk
LowCVSS 1.8No exploitEPSS 0%
lucasrodes · whatstk3 days ago
CVE-2026-91836
3Monitor
OpenClaw ClawScan Static Scanner static_scanner.go incomplete comparison with missing factors
LowCVSS 0.9No exploitEPSS 0%
openclaw · clawscanSep 15, 2026

All vulnerability classes