CWE-185

CWE-185 · 3 records · 3 with a public proof-of-concept

Records the NVD classes under CWE-185, highest CVSS first.

  1. CRITICAL 10CVE-2026-111057public PoC2026-10-19

    Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKED_PATTERNS concatenates the /lab and /api/terminals regular-expression literals. Requests to /api/terminals therefo…

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 6.5CVE-2026-114653public PoC2026-10-22

    A client-side encryption schema construction component in the MongoDB C# Driver places caller-supplied field identifiers into a position that is interpreted as a pattern expression, without normalizing or validating them. As a result, an application that desig…

    AI risk analysis on Exploit-DB.ai →

  3. UNSCOREDCVE-2026-111755public PoC2026-10-19

    follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 until 1.16.1, escapeRegex leaves valid header-name metacharacters unescaped in sensitiveHeaders. When an application declares a sensitive header whose…

    AI risk analysis on Exploit-DB.ai →