CWE-76
16 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 16Published CVEs16 of them scored
- 7Last 12 monthspublished in the last year
- 3Critical8 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-91184
NGINX Gateway Fabric vulnerability
F5 · NGINX Gateway Fabric
High8.7 - CVE-2026-77180
NGINX Ingress Controller vulnerability
F5 · NGINX Ingress Controller
High8.7 - CVE-2026-66362
NGF vulnerability
F5 · NGINX Gateway Fabric
High8.6 - CVE-2026-54722
dssrf: there a critical security bug with remove_at_symbol_in_string
HackingRepo · dssrf-js
High8.7 - CVE-2026-55723
NGINX Ingress Controller vulnerability
F5 · NGINX Ingress Controller
High8.7 - CVE-2026-11311
NGINX Gateway Fabric vulnerability
F5 · NGINX Gateway Fabric
High8.6 - CVE-2026-28292
simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key that enables RCE
steveukx · simple-git
Critical9.8 - CVE-2024-4897
Remote Code Execution in parisneo/lollms-webui
parisneo · parisneo/lollms-webui
High8.4 - CVE-2024-34359
llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata
abetlen · llama-cpp-python
Critical9.7 - CVE-2024-2952
Server-Side Template Injection in BerriAI/litellm
berriai · berriai/litellm
Critical9.8