The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
12,834 vulnerabilities with CWE-20
CVE-2026-46341
MEDIUM
Apify MCP server: Domain Allowlist Bypass in fetch-apify-docs via String Prefix Matching
CVSS 6.1
CVE-2026-50012
MEDIUM
Squid: Memory corruption in cache_digest reply handling
CVSS 5.5
CVE-2026-11386
CRITICAL
Ubuntu Pro Client - APT Source Injection to Root Code Execution
CVSS 9.0
CVE-2026-56678
MEDIUM
9Router: Kiro region injection allows authenticated SSRF with Authorization header forwarding
CVSS 6.4
CVE-2026-50144
HIGH
ncnn: Out-of-bounds heap write in ParamDict::load_param via unchecked negative parameter id
CVSS 7.1
CVE-2026-40958
LOW
Input validation error in Secure Access clients prior to 14.55
CVSS 3.7
CVE-2026-53513
CRITICAL
Better Auth: Server-side request forgery via unvalidated OIDC endpoints on @better-auth/sso provider registration
CVSS 9.6
CVE-2026-14961
MEDIUM
Pegatron Corp. Tdelo64.sys - Privilege Escalation
CVSS 6.2
CVE-2026-59955
HIGH
Apollo ConfigService access key authentication bypass via raw config file appId parsing
CVSS 7.5
CVE-2026-59954
HIGH
Apollo ConfigService access key authentication bypass via appId parsing and non-canonical matching
CVSS 7.5
CVE-2026-20153
HIGH
Cisco RoomOS Security Hardening Release - Input Validation Vulnerabilities
CVSS 7.5
CVE-2026-61427
HIGH
PraisonAI before 4.6.78 Authentication Bypass via HTTP-stream
CVSS 7.3
CVE-2026-56398
HIGH
Open WebUI - Stored Cross-Site Scripting via OAuth Picture Claim SVG Data URI
CVSS 7.3
CVE-2026-56349
MEDIUM
n8n - Guardrail Node Bypass via Crafted Input
CVE-2026-48353
MEDIUM
CAI Content Credentials | Improper Input Validation (CWE-20)
CVSS 5.5
CVE-2026-48352
HIGH
CAI Content Credentials | Improper Input Validation (CWE-20)
CVSS 7.5
CVE-2026-48351
HIGH
CAI Content Credentials | Improper Input Validation (CWE-20)
CVSS 7.5
CVE-2026-48334
CRITICAL
Adobe Illustrator Desktop 2026 - Illustrator | Improper Input Validation (CWE-20)
CVSS 9.3
CVE-2026-48312
MEDIUM
CAI Content Credentials | Improper Input Validation (CWE-20)
CVSS 6.8
CVE-2026-48302
MEDIUM
CAI Content Credentials | Improper Input Validation (CWE-20)
CVSS 6.2
CVE-2026-48328
HIGH
Adobe ColdFusion 2025 - ColdFusion | Improper Input Validation (CWE-20)
CVSS 7.7
CVE-2026-48308
MEDIUM
Premiere Pro | Improper Input Validation (CWE-20)
CVSS 5.9
CVE-2026-48284
CRITICAL
Adobe ColdFusion 2025 - ColdFusion | Improper Input Validation (CWE-20)
CVSS 9.6
CVE-2026-47470
MEDIUM
Nvidia TensorRT-LLM < v1.3.0 rc14 - Improper Input Validation
CVSS 6.2
CVE-2026-15778
MEDIUM
Google Chrome - Improper Input Validation
CVSS 6.5
Details
Vulnerabilities
12,834
Exploit Likelihood
High