CWE-777
6 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 6Published CVEs6 of them scored
- 6Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-78191
WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as Perl pages
WebDyne
Critical9.8 - CVE-2026-97736
tinyauth before 5.1.3 allows rule bypass by appending an allowed route string. This is caused by an unanchored regular expression.
tinyauth · tinyauth
Medium5.4 - CVE-2026-22068
Apache Traffic Server: Regex mappings match with malicious domain names
Apache Software Foundation · Apache Traffic Server
Medium6.9 - CVE-2026-56021
Webmin information disclosure via regex pattern
Webmin · Webmin
Medium6.9 - CVE-2026-40110
jupyter-server CORS origin validation bypass via unanchored regex in allow_origin_pat
jupyter-server · jupyter_server
High7.6 - CVE-2026-39087
ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push endpoint URLs.
ntfy · ntfy
Medium6.4