CWE-158

CWE-158 · 3 records · 3 with a public proof-of-concept

Records the NVD classes under CWE-158, highest CVSS first.

  1. HIGH 7.8CVE-2026-92705public PoC2026-10-09

    Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by `Automation Scripts` metadata in `ASS` subtitle projects without asking whether the user trusts the scripts or their authors…

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 5.3CVE-2026-105240public PoC2026-10-06

    Improper Neutralization of Null Byte or NUL Character vulnerability in the OutputDebugStringAppender of Apache log4net. A NUL character in logged content ended the debug output record at that point, so everything the layout rendered after it, including except…

    log4net

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 5.3CVE-2026-105239public PoC2026-10-06

    Improper Neutralization of Null Byte or NUL Character vulnerability in the EventLogAppender of Apache log4net. A NUL character in logged content ended the Windows Event Log record at that point, so everything the layout rendered after it, including exception …

    log4net

    AI risk analysis on Exploit-DB.ai →