CWE-187
20 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 20Published CVEs20 of them scored
- 16Last 12 monthspublished in the last year
- 4Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-115646
Partial String Comparison Vulnerability in HiRDB
Hitachi · HiRDB Server Version 10
Critical9.8 - CVE-2026-125371
Tinyproxy through 1.11.3 Hostname ACL Allow-List Bypass via Suffix Match
tinyproxy · tinyproxy
Medium6.3 - CVE-2026-112266
SGLang through 0.5.22 Cross-Request Abort via rid Prefix Matching
sgl-project · sglang
High8.2 - CVE-2026-94576
An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and…
Brocade · Fabric OS
Medium5.9 - CVE-2026-101914
@grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches
grpc · grpc-node
Medium6.5 - CVE-2026-81479
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Partial String Comparison vulnerability. A low privileged attacker with local…
Dell · OpenManage Server Administrator Managed Node (Patch) for Windows
Medium5.8 - CVE-2026-87853
Sssd: sssd: idp authentication prefix comparison allows cross-user impersonation
Red Hat · Red Hat Enterprise Linux 10
High7.5 - CVE-2026-84376
Astro: Authorization bypass from missing path-segment boundary check when stripping the configured base
withastro · astro
Medium6.3 - CVE-2026-62750
Windows HTTP Protocol Stack Tampering Vulnerability
Microsoft · Windows 10 Version 1607
Medium6.5 - CVE-2026-14687
666ghj BettaFish InsightEngine search-result Deduplication agent.py _deduplicate_results partial string comparison
666ghj · BettaFish
Medium6.9