Skip to content
Noroxi

CWE-180 · 37 records

Incorrect Behavior Order: Validate Before Canonicalize

CVEs in this class

37 records

  • CVE-2022-26136
    41Plan

    A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third p

    CriticalCVSS 9.8No exploitEPSS 5%

    atlassian · bambooJul 20, 2022

  • CVE-2024-24790
    40Plan

    Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip

    CriticalCVSS 9.8No exploitEPSS 1%

    golang · goJun 5, 2024

  • CVE-2026-15704
    39Monitor

    CWE-863: ABAC authorization bypass via trailing slash route normalization in Eclipse BaSyx Go Components

    CriticalCVSS 9.8No exploitEPSS 0%

    eclipse foundation · eclipse basyx go componentsJul 24, 2026

  • CVE-2026-34475
    39Monitor

    Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of /

    CriticalCVSS 9.8No exploitEPSS 0%

    varnish-software · varnish enterpriseMar 27, 2026

  • CVE-2022-26137
    36Monitor

    A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked w

    HighCVSS 8.8No exploitEPSS 2%

    atlassian · bambooJul 20, 2022

  • CVE-2026-73420
    36Monitor

    NextAuth.js: Email normalizer validates the address before Unicode normalization, allowing a homoglyph @ bypass

    CriticalCVSS 9.1No exploitEPSS 0%

    nextauthjs · next-authAug 13, 2026

  • CVE-2026-24895
    35Monitor

    FrankenPHP affected by Path Confusion via Unicode casing in CGI path splitting allows execution of arbitrary files

    HighCVSS 8.9No exploitEPSS 0%

    php · frankenphpFeb 12, 2026

  • CVE-2026-82481
    34Monitor

    The cohttp package before 6.3.0 for OCaml allows directory traversal.

    HighCVSS 8.7No exploitEPSS 0%

    mirage · cohttpAug 29, 2026

  • CVE-2026-52747
    34Monitor

    ModSecurity: Multipart form-data parser silently strips embedded line breaks from form-field values, enabling request-body inspection bypass

    HighCVSS 8.6No exploitEPSS 0%

    owasp · modsecurityJul 10, 2026

  • CVE-2026-48721
    34Monitor

    Warp: Env-var prefixes can lead to denylisted command autoexecution

    HighCVSS 8.6No exploitEPSS 0%

    warpdotdev · warpJun 24, 2026

  • CVE-2026-39364
    33Monitor

    Vite has a `server.fs.deny` bypass with queries

    HighCVSS 8.2Proof of conceptEPSS 2%

    vitejs · viteApr 7, 2026

  • CVE-2026-105050
    28Monitor

    PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation

    HighCVSS 7.1No exploitEPSS 0%

    peazip · peazipOct 2, 2026

  • CVE-2026-110846
    28Monitor

    n8n before 2.41.4 and 2.42.1 Send-and-Wait HMAC Signature Bypass via Waiting-Webhook

    HighCVSS 7.0No exploitEPSS 0%

    n8n-io · n8nOct 14, 2026

  • CVE-2026-69246
    28Monitor

    Guzzle: Noncanonical host can bypass host-based checks

    HighCVSS 7.2No exploitEPSS 0%

    guzzle · guzzleAug 3, 2026

  • CVE-2026-42462
    28Monitor

    Fedify has an LD-Signature Bypass via JSON-LD Named-Graph Restructuring

    HighCVSS 7.0No exploitEPSS 0%

    fedify-dev · fedifyJun 10, 2026

  • CVE-2026-45022
    28Monitor

    go-git: Improper parsing of specially crafted objects may lead to inconsistent interpretation compared to upstream Git

    HighCVSS 7.0No exploitEPSS 0%

    go-git project · go-gitMay 27, 2026

  • CVE-2025-33194
    28Monitor

    NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper processing of input data.

    HighCVSS 7.1No exploitEPSS 0%

    nvidia · dgx osNov 25, 2025

  • CVE-2026-100547
    27Monitor

    OpenClaw before 2026.8.1 Authentication Bypass via File URL

    MediumCVSS 6.8No exploitEPSS 0%

    openclaw · openclawSep 26, 2026

  • CVE-2026-95811
    26Monitor

    Lemonldap::NG::Handler versions from 2.0.0 before 2.16.10, from 2.17.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow an equivalent spelling of a path

    MediumCVSS 6.5No exploitEPSS 0%

    Sep 24, 2026

  • CVE-2026-69245
    26Monitor

    Guzzle: Noncanonical cookie domain keeps subdomain scope

    MediumCVSS 6.5No exploitEPSS 0%

    guzzle · guzzleAug 3, 2026

  • CVE-2026-39409
    25Monitor

    Hono has incorrect IP matching in ipRestriction() for IPv4-mapped IPv6 addresses

    MediumCVSS 6.3No exploitEPSS 0%

    hono · honoApr 8, 2026

  • CVE-2026-112003
    24Monitor

    ProjectSend 2.0.0 before 2.7.0 Path Validation Bypass via Orphan File Import/Delete

    MediumCVSS 6.0No exploitEPSS 0%

    projectsend · projectsendOct 18, 2026

  • CVE-2026-93326
    24Monitor

    Crafted Git build source can bypass certain policy validation

    MediumCVSS 6.0No exploitEPSS 0%

    moby · buildkitOct 5, 2026

  • CVE-2025-43716
    23Monitor

    A directory traversal vulnerability exists in Ivanti LANDesk Management Gateway through 4.2-1.9.

    MediumCVSS 5.8No exploitEPSS 1%

    ivanti · landesk management suiteApr 23, 2025

  • CVE-2026-72917
    23Monitor

    AnythingLLM: Password recovery accepts one recovery code twice after whitespace normalization

    MediumCVSS 5.9No exploitEPSS 0%

    mintplex-labs · anything-llmAug 10, 2026

All vulnerability classes