CWE-179 · 7 records

Incorrect Behavior Order: Early Validation

CVEs in this class

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
37Monitor	CVE-2022-1271No exploit	An arbitrary file write vulnerability was found in GNU gzip's zgrep utility.gnu · gzip · CWE-179	High8.8	—	5.5%	Aug 31, 2022
31Monitor	CVE-2026-49414No exploit	ASLR bypass for setuid executables via procctl(2)freebsd · freebsd · CWE-179 Local privilege escalation	High7.8	—	0.1%	Jun 27, 2026
29Monitor	CVE-2024-41686No exploit	Password Policy Bypass Vulnerabilitysyrotech · sy-gpon-1110-wdont firmware · CWE-179	High7.3	—	0.1%	Jul 26, 2024
22Monitor	CVE-2025-4759No exploit	Versions of the package lockfile-lint-api before 5.9.2 are vulnerable to Incorrect Behavior Order: Early Validation via the resolved attribulirantal · lockfile-lint-api · CWE-179 Pre-auth	Medium5.5	—	0.4%	May 16, 2025
15Monitor	GHSA-h39g-6x3c-7fq9No exploit	Zio has SubFileSystem Path Confinement Bypass via Unresolved `..` SegmentNuGet · Zio · CWE-179	Low3.8	—	—	Apr 18, 2026
14Monitor	CVE-2026-3832No exploit	Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp responsegnu · gnutls · CWE-179 Pre-auth	Low3.7	—	0.8%	Apr 30, 2026
8Monitor	CVE-2026-90813No exploit	cosmicstack-labs mercury-agent Shell Command Execution permissions.ts checkShellCommand validate before canonicalizecosmicstack-labs · mercury-agent · CWE-179 RCE	Low2.1	—	0.5%	Sep 14, 2026

CVE-2022-1271
37Monitor
An arbitrary file write vulnerability was found in GNU gzip's zgrep utility.
HighCVSS 8.8No exploitEPSS 5%
gnu · gzipAug 31, 2022
CVE-2026-49414
31Monitor
ASLR bypass for setuid executables via procctl(2)
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
freebsd · freebsdJun 27, 2026
CVE-2024-41686
29Monitor
Password Policy Bypass Vulnerability
HighCVSS 7.3No exploitEPSS 0%
syrotech · sy-gpon-1110-wdont firmwareJul 26, 2024
CVE-2025-4759
22Monitor
Versions of the package lockfile-lint-api before 5.9.2 are vulnerable to Incorrect Behavior Order: Early Validation via the resolved attribu
MediumCVSS 5.5No exploitEPSS 0%
- Pre-auth
lirantal · lockfile-lint-apiMay 16, 2025
GHSA-h39g-6x3c-7fq9
15Monitor
Zio has SubFileSystem Path Confinement Bypass via Unresolved `..` Segment
LowCVSS 3.8No exploit
NuGet · ZioApr 18, 2026
CVE-2026-3832
14Monitor
Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response
LowCVSS 3.7No exploitEPSS 0%
- Pre-auth
gnu · gnutlsApr 30, 2026
CVE-2026-90813
8Monitor
cosmicstack-labs mercury-agent Shell Command Execution permissions.ts checkShellCommand validate before canonicalize
LowCVSS 2.1No exploitEPSS 0%
- RCE
cosmicstack-labs · mercury-agentSep 14, 2026