CWE-807

High likelihood

Reliance on Untrusted Inputs in a Security Decision

Parent: CWE-693 - Protection Mechanism Failure

The product uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism.

50 vulnerabilities with CWE-807
CVE-2026-27707 HIGH
Seerr 2.0.0-3.1.0 - Auth Bypass
CVSS 7.3
CVE-2026-21514 HIGHKEV
Microsoft Office Word - Info Disclosure
CVSS 7.8
CVE-2026-25958 HIGH
Cubejs-backend Server-core < 1.0.14 - Privilege Escalation
CVSS 7.7
CVE-2026-25931 HIGH
vscode-spell-checker <4.5.4 - Info Disclosure
CVSS 7.8
CVE-2026-21509 HIGHKEV
Microsoft Office - Info Disclosure
CVSS 7.8
CVE-2026-23848 MEDIUM
MyTube <1.7.71 - DoS
CVSS 6.5
CVE-2026-20849 HIGH
Windows Kerberos - Privilege Escalation
CVSS 7.5
CVE-2025-65328 MEDIUM
Mega-Fence <25.1.914 - SSRF
CVSS 6.5
CVE-2025-66507 HIGH
1Panel <2.0.13 - Auth Bypass
CVSS 7.5
CVE-2025-66577 MEDIUM
cpp-httplib <0.27.0 - Log Poisoning
CVSS 5.3
CVE-2025-66570 CRITICAL
cpp-httplib <0.27.0 - Info Disclosure
CVSS 10.0
CVE-2025-10161 HIGH
Turkguven Software Technologies Inc. Perfektive <12574.2701 - Auth ...
CVSS 7.3
CVE-2025-12488 CRITICAL
oobabooga text-generation-webui - RCE
CVSS 9.8
CVE-2025-12487 CRITICAL
oobabooga text-generation-webui - RCE
CVSS 9.8
CVE-2025-11271 MEDIUM
Easy Digital Downloads <3.5.2 - Order Manipulation
CVSS 5.3
CVE-2025-53717 HIGH
Windows VBS Enclave - Privilege Escalation
CVSS 7.0
CVE-2025-59152 HIGH
Litestar 2.17.0 - Auth Bypass
CVSS 7.5
CVE-2025-55736 MEDIUM
flaskBlog <2.8.0 - Privilege Escalation
CVSS 6.5
CVE-2025-55735 MEDIUM
flaskBlog <2.8.0 - XSS
CVSS 5.4
CVE-2025-53882 MEDIUM
openSUSE mailman3 - RCE
CVSS 4.4
CVE-2024-13974 HIGH
Sophos Firewall Firmware < 21.0.1 - Remote Code Execution
CVSS 8.1
CVE-2025-49827 CRITICAL
Conjur OSS <1.22.0 - Auth Bypass
CVSS 9.8
CVE-2024-55354 HIGH
Lucee <5.4.7.3 LTS & 6 <6.1.1.118 - Code Injection
CVSS 8.8
CVE-2025-0117
GlobalProtect <unknown - Privilege Escalation
CVE-2025-1969 MEDIUM
TEAM <1.2.2 - Info Disclosure
CVSS 4.3
Details
Vulnerabilities 50
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits