CWE-625 · 13 records
Permissive Regular Expression
CVEs in this class
13 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2024-49400No exploit | Tacquito prior to commit 07b49d1358e6ec0b5aa482fcd284f509191119e2 was not properly performing regex matches on authorized commands and argummeta · tacquito · CWE-625 | Critical9.8 | — | 0.4% | Oct 17, 2024 |
36Monitor | CVE-2018-8926No exploit | Permissive regular expression vulnerability in synophoto_dsm_user in Synology Photo Station before 6.8.5-3471 and before 6.3-2975 allows remsynology · photo station · CWE-625 | High8.8 | — | 1.7% | Jun 8, 2018 |
35Monitor | CVE-2026-32973No exploit | OpenClaw < 2026.3.11 - Exec Allowlist Pattern Overmatch via POSIX Path Normalizationopenclaw · openclaw · CWE-625 | High8.8 | — | 0.4% | Mar 29, 2026 |
35Monitor | CVE-2026-64940No exploit | Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability due to a permissive regular expression, which may anishishi factory · tegalog -fumy otegaru memo logger- · CWE-625 | High8.8 | — | 0.3% | Aug 10, 2026 |
32Monitor | CVE-2026-14814No exploit | Permissive Regular Expression in GitLabgitlab · gitlab · CWE-625 | High8.2 | — | 0.3% | Oct 13, 2026 |
30Monitor | CVE-2026-34830No exploit | Rack: Rack::Sendfile regex injection via HTTP_X_ACCEL_MAPPING header allows arbitrary file reads through nginxrack · rack · CWE-625 | High7.5 | — | 0.2% | Apr 2, 2026 |
27Monitor | CVE-2026-19278No exploit | Stackrox: stackrox: privilege escalation via unanchored regular expressions in auth m2m role mappingsred hat · red hat advanced cluster security 4 · CWE-625 | Medium6.8 | — | 0.3% | Aug 10, 2026 |
26Monitor | CVE-2026-23651No exploit | Microsoft ACI Confidential Containers Elevation of Privilege Vulnerabilitymicrosoft · aci confidential containers · CWE-625 | Medium6.7 | — | 0.6% | Mar 5, 2026 |
26Monitor | CVE-2020-8910No exploit | Auth Bypass in Google's Closure-Librarygoogle · closure library · CWE-625 | Medium6.5 | — | 0.5% | Mar 26, 2020 |
25Monitor | CVE-2026-102983No exploit | Astro: Netlify Image CDN allowlist bypass enables SSRFwithastro · astro · CWE-625 | Medium6.3 | — | 0.3% | Sep 30, 2026 |
21Monitor | CVE-2023-6544No exploit | Keycloak: authorization bypassred hat · red hat build of keycloak 22 · CWE-625 | Medium5.4 | — | 1.0% | Apr 25, 2024 |
21Monitor | CVE-2026-79965No exploit | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control dell · secure connect gateway · CWE-625 | Medium5.3 | — | 0.3% | Sep 9, 2026 |
21Monitor | CVE-2026-34763No exploit | Rack: Rack::Directory info disclosure and DoS via unescaped regex interpolationrack · rack · CWE-625 | Medium5.3 | — | 0.2% | Apr 2, 2026 |
- CVE-2024-4940039Monitor
Tacquito prior to commit 07b49d1358e6ec0b5aa482fcd284f509191119e2 was not properly performing regex matches on authorized commands and argum
CriticalCVSS 9.8No exploitEPSS 0%meta · tacquitoOct 17, 2024
- CVE-2018-892636Monitor
Permissive regular expression vulnerability in synophoto_dsm_user in Synology Photo Station before 6.8.5-3471 and before 6.3-2975 allows rem
HighCVSS 8.8No exploitEPSS 1%synology · photo stationJun 8, 2018
- CVE-2026-3297335Monitor
OpenClaw < 2026.3.11 - Exec Allowlist Pattern Overmatch via POSIX Path Normalization
HighCVSS 8.8No exploitEPSS 0%openclaw · openclawMar 29, 2026
- CVE-2026-6494035Monitor
Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability due to a permissive regular expression, which may a
HighCVSS 8.8No exploitEPSS 0%nishishi factory · tegalog -fumy otegaru memo logger-Aug 10, 2026
- CVE-2026-1481432Monitor
Permissive Regular Expression in GitLab
HighCVSS 8.2No exploitEPSS 0%gitlab · gitlabOct 13, 2026
- CVE-2026-3483030Monitor
Rack: Rack::Sendfile regex injection via HTTP_X_ACCEL_MAPPING header allows arbitrary file reads through nginx
HighCVSS 7.5No exploitEPSS 0%rack · rackApr 2, 2026
- CVE-2026-1927827Monitor
Stackrox: stackrox: privilege escalation via unanchored regular expressions in auth m2m role mappings
MediumCVSS 6.8No exploitEPSS 0%red hat · red hat advanced cluster security 4Aug 10, 2026
- CVE-2026-2365126Monitor
Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability
MediumCVSS 6.7No exploitEPSS 0%microsoft · aci confidential containersMar 5, 2026
- CVE-2020-891026Monitor
Auth Bypass in Google's Closure-Library
MediumCVSS 6.5No exploitEPSS 0%google · closure libraryMar 26, 2020
- CVE-2026-10298325Monitor
Astro: Netlify Image CDN allowlist bypass enables SSRF
MediumCVSS 6.3No exploitEPSS 0%withastro · astroSep 30, 2026
- CVE-2023-654421Monitor
Keycloak: authorization bypass
MediumCVSS 5.4No exploitEPSS 1%red hat · red hat build of keycloak 22Apr 25, 2024
- CVE-2026-7996521Monitor
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control
MediumCVSS 5.3No exploitEPSS 0%dell · secure connect gatewaySep 9, 2026
- CVE-2026-3476321Monitor
Rack: Rack::Directory info disclosure and DoS via unescaped regex interpolation
MediumCVSS 5.3No exploitEPSS 0%rack · rackApr 2, 2026