CWE-436

Interpretation Conflict

Parent: CWE-435 - Improper Interaction Between Multiple Correctly-Behaving Entities

Product A handles inputs or steps differently than Product B, which causes A to perform incorrect actions based on its perception of B's state.

84 vulnerabilities with CWE-436
CVE-2026-27444 HIGH
SEPPmail Secure Email Gateway <15.0.1 - Auth Bypass
CVSS 7.5
CVE-2026-27896
Go MCP SDK <1.3.1 - Auth Bypass
CVE-2026-0958 HIGH
Gitlab < 18.6.6 - Interpretation Conflict
CVSS 7.5
CVE-2026-23686 LOW
SAP NetWeaver Application Server Java - CRLF Injection
CVSS 3.4
CVE-2026-25223 HIGH
Fastify < 5.7.2 - Interpretation Conflict
CVSS 7.5
CVE-2025-66490 MEDIUM
Traefik <3.6.2 - Path Traversal
CVSS 6.5
CVE-2025-12816 HIGH
node-forge <1.3.1 - SSRF
CVSS 8.6
CVE-2025-54368
Pypi UV < 0.8.6 - Interpretation Conflict
CVE-2025-48384 HIGHKEV
Git - Info Disclosure
CVSS 8.0
CVE-2025-1217 LOW
PHP <8.1.32, <8.2.28, <8.3.19, <8.4.5 - Info Disclosure
CVSS 3.1
CVE-2025-25292 CRITICAL
ruby-saml <1.12.4,1.18.0 - Auth Bypass
CVSS 9.8
CVE-2025-25291 CRITICAL
ruby-saml <1.12.4,1.18.0 - Auth Bypass
CVSS 9.8
CVE-2025-24013 MEDIUM
Codeigniter < 4.5.8 - Interpretation Conflict
CVSS 5.3
CVE-2024-55629 HIGH
Oisf Suricata < 7.0.8 - Interpretation Conflict
CVSS 7.5
CVE-2024-45097 MEDIUM
IBM Aspera Faspex <5.0.9 - Auth Bypass
CVSS 5.9
CVE-2024-42487 MEDIUM
Cilium <1.15.8-1.16.1 - Info Disclosure
CVSS 4.0
CVE-2023-52892 HIGH
Phpseclib < 1.0.22 - Interpretation Conflict
CVSS 7.5
CVE-2024-38428 CRITICAL
GNU Wget <1.24.5 - Info Disclosure
CVSS 9.1
CVE-2024-20293 MEDIUM
Cisco ASA/FTD - Auth Bypass
CVSS 5.8
CVE-2024-34478 HIGH
btcd <0.24.0 - Info Disclosure
CVSS 7.5
CVE-2023-39481 HIGH
Softing Secure Integration Server < 1.30 - Interpretation Conflict
CVSS 8.8
CVE-2024-3386 MEDIUM
Palo Alto Networks PAN-OS - Info Disclosure
CVSS 5.3
CVE-2023-45715 LOW
Hcltech Bigfix Platform < 9.5.24 - Interpretation Conflict
CVSS 3.5
CVE-2024-2004 LOW
Haxx Curl < 8.7.0 - Interpretation Conflict
CVSS 3.5
CVE-2024-29034 MEDIUM
Carrierwave < 2.2.6 - Interpretation Conflict
CVSS 6.8
Details
Vulnerabilities 84