CWE-177
CWE-177 · 4 records · 3 with a public proof-of-concept
Records the NVD classes under CWE-177, highest CVSS first.
- CRITICAL 9.8CVE-2026-76504
A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user. This vulnerability is due to improper handlin…
catalyst sd-wan manager
- HIGH 7.5CVE-2026-118650public PoC
Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, a globally mounted middleware.Static instance can interpret an encoded request path differently from Echo's router because the router matches the still-encoded path while the static handler uses the decode…
- HIGH 7.5CVE-2026-100409public PoC
OpenNext Cloudflare is an open Next.js adapter for Cloudflare. From 0.3.0 until 1.20.2, applications that enable enableCacheInterception, rely on middleware for access control, and have a matching cached protected route process encoded pathnames inconsistently…
- MEDIUM 6.5CVE-2026-96748public PoC
PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When an application places a hostname value supplied by an unauthenticated party into a connection string, that part…