CWE-444

471 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 5 of them as exploited in the wild.

Critical 86High 154Medium 206Low 24Not scored 1

CVEs per yearBy the year they were published

CVE-2026-48710
Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks
Kludex · starlette
ExploitedMedium6.5
CVE-2025-61884
Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions that are affected are 12.2.3-12.2.14.…
Oracle Corporation · Oracle Configurator
ExploitedHigh7.5
CVE-2023-48365
Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation of HTTP…
Product not named
ExploitedCritical9.6
CVE-2023-41265
An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and…
Product not named
ExploitedCritical9.6
CVE-2022-22536
SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for…
SAP SE · SAP NetWeaver and ABAP Platform
ExploitedCritical9.8

CVE-2026-123318
In JetBrains Ktor before 3.6.1 hTTP request smuggling was possible in the CIO engine
JetBrains · Ktor
Medium4.8
CVE-2026-55458
Caddy: RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak through
caddyserver · caddy
Low2.9
CVE-2026-103866
Apache Sling Engine: Hand-rolled parameter parser diverges from RFC/container parsing, enabling smuggling
Apache Software Foundation · Apache Sling Engine
Not scored
CVE-2026-121441
Wasmtime before 36.0.19, 37.0.0 before 48.0.7, and 49.0.0 before 49.0.4 wasi-http Request Smuggling
bytecodealliance · wasmtime
Medium6.3
CVE-2026-121439
Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 HTTP Response Splitting via wasi-http
bytecodealliance · wasmtime
Medium6.9
CVE-2026-55614
uhttpd vulnerable to HTTP request smuggling via case-sensitive Transfer-Encoding matching
openwrt · uhttpd
Medium6.9
CVE-2026-55612
uhttpd vulnerable to HTTP request smuggling via invalid chunk-length state reset
openwrt · uhttpd
Low3.7
CVE-2026-55613
uhttpd: HTTP request smuggling via ubus POST body parse-error desync
openwrt · uhttpd
Medium6.9
CVE-2026-116127
Starlet versions before 0.33 for Perl send a body in responses to HEAD requests, corrupting the next response on a persistent or pipelined connection
Starlet
Critical9.1
CVE-2026-91920
Undertow: undertow: chunkreader message length permits chunk-size overflow
Red Hat · Red Hat build of Apache Camel for Spring Boot 4
Medium6.5