CWE-148 · 2 records

Improper Neutralization of Input Leaders

CVEs in this class

2 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
32Monitor	CVE-2023-4853No exploit	Quarkus: http security policy bypassquarkus · quarkus · CWE-148 Pre-auth	High8.1	—	1.4%	Sep 20, 2023
20Monitor	CVE-2026-12862No exploit	XLSX formula injection in exportspretix · venueless · CWE-148	Medium5.1	—	0.4%	Jun 22, 2026

CVE-2023-4853
32Monitor
Quarkus: http security policy bypass
HighCVSS 8.1No exploitEPSS 1%
- Pre-auth
quarkus · quarkusSep 20, 2023
CVE-2026-12862
20Monitor
XLSX formula injection in exports
MediumCVSS 5.1No exploitEPSS 0%
pretix · venuelessJun 22, 2026