CWE-178

Improper Handling of Case Sensitivity

Parent: CWE-706 - Use of Incorrectly-Resolved Name or Reference

The product does not properly account for differences in case sensitivity when accessing or determining the properties of a resource, leading to inconsistent results.

62 vulnerabilities with CWE-178
CVE-2026-3833 MEDIUM
Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison
CVSS 6.5
CVE-2026-40453 CRITICAL
Apache Camel JMS, Apache Camel CoAP, Apache Camel Google PubSub: Incomplete fix for CVE-2025-27636 in non-HTTP HeaderFilterStrategies (camel-jms, camel-sjms, camel-coap, camel-google-pubsub) allows ca
CVSS 9.9
CVE-2026-22665 HIGH
prompts.chat Identity Confusion via Case-Sensitive Username Handling
CVSS 8.1
CVE-2026-33691 MEDIUM
OWASP CRS: Whitespace padding in filenames bypasses file upload extension checks
CVSS 6.8
CVE-2026-3532 MEDIUM
OpenID Connect / OAuth client - Less critical - Access bypass - SA-CONTRIB-2026-027
CVSS 4.2
CVE-2026-32939 HIGH
DataEase is Vulnerable to H2 JDBC RCE Bypass
CVE-2026-28292 CRITICAL
simple-git 3.15.0-3.32.2 - RCE
CVSS 9.8
CVE-2026-29054 HIGH
Traefik 2.11.9-2.11.37/3.1.3-3.6.8 - Auth Bypass
CVSS 7.5
CVE-2026-27896 HIGH
Go MCP SDK <1.3.1 - Auth Bypass
CVSS 7.5
CVE-2026-27588 CRITICAL
Caddy <2.11.1 - Auth Bypass
CVSS 9.1
CVE-2026-27587 CRITICAL
Caddy <2.11.1 - Auth Bypass
CVSS 9.1
CVE-2026-25889 MEDIUM
Filebrowser < 2.57.1 - XSS
CVSS 5.4
CVE-2025-67718 HIGH
NPM Formio < 3.5.7 - Information Disclosure
CVE-2025-59944 HIGH
Anysphere Cursor < 1.6.23 - Remote Code Execution
CVSS 8.0
CVE-2025-61593 HIGH
Cursor <1.7 - RCE
CVSS 7.1
CVE-2025-50864 MEDIUM
Elysia-cors <1.3.0 - CSRF Bypass
CVSS 6.5
CVE-2025-46701 HIGH
Apache Tomcat <11.0.6 - Security Constraint Bypass
CVSS 7.3
CVE-2025-4035 MEDIUM
Libsoup - Info Disclosure
CVSS 4.3
CVE-2025-27636 MEDIUM
Apache Camel <4.10.2 - Command Injection
CVSS 5.6
CVE-2024-6866 HIGH
corydolphin/flask-cors <4.01 - SSRF
CVSS 7.5
CVE-2024-55634 HIGH
Drupal < 10.2.11 - Privilege Escalation
CVSS 8.1
CVE-2024-38829 LOW
Spring LDAP <3.2.7 - Info Disclosure
CVSS 3.7
CVE-2024-38820 LOW
DataBinder - Info Disclosure
CVSS 3.1
CVE-2024-5699 CRITICAL
Firefox < 127 - Info Disclosure
CVSS 9.8
CVE-2024-32879 MEDIUM
Python Social Auth <5.4.1 - Info Disclosure
CVSS 4.9
Details
Vulnerabilities 62