CWE-807

High likelihood

Reliance on Untrusted Inputs in a Security Decision

Parent: CWE-693 - Protection Mechanism Failure

The product uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism.

72 vulnerabilities with CWE-807
CVE-2025-65328 MEDIUM
Mega-Fence <25.1.914 - SSRF
CVSS 6.5
CVE-2025-66507 HIGH
1Panel <2.0.13 - Auth Bypass
CVSS 7.5
CVE-2025-66577 MEDIUM
cpp-httplib <0.27.0 - Log Poisoning
CVSS 5.3
CVE-2025-66570 CRITICAL
cpp-httplib <0.27.0 - Info Disclosure
CVSS 10.0
CVE-2025-10161 HIGH
Turkguven Software Technologies Inc. Perfektive <12574.2701 - Auth ...
CVSS 7.3
CVE-2025-12488 CRITICAL
oobabooga text-generation-webui - RCE
CVSS 9.8
CVE-2025-12487 CRITICAL
oobabooga text-generation-webui - RCE
CVSS 9.8
CVE-2025-11271 MEDIUM
Easy Digital Downloads <3.5.2 - Order Manipulation
CVSS 5.3
CVE-2025-53717 HIGH
Windows VBS Enclave - Privilege Escalation
CVSS 7.0
CVE-2025-59152 HIGH
Litestar 2.17.0 - Auth Bypass
CVSS 7.5
CVE-2025-55736 MEDIUM
flaskBlog <2.8.0 - Privilege Escalation
CVSS 6.5
CVE-2025-55735 MEDIUM
flaskBlog <2.8.0 - XSS
CVSS 5.4
CVE-2025-53882 MEDIUM
openSUSE mailman3 - RCE
CVSS 4.4
CVE-2025-49827 CRITICAL
Conjur OSS <1.22.0 - Auth Bypass
CVSS 9.8
CVE-2025-0117 HIGH
GlobalProtect <unknown - Privilege Escalation
CVE-2025-1969 MEDIUM
TEAM <1.2.2 - Info Disclosure
CVSS 4.3
CVE-2025-1126 CRITICAL
Lexmark Print Management Client - RCE
CVSS 9.3
CVE-2025-24369 LOW
Anubis - RCE
CVE-2024-13974 HIGH
Sophos Firewall Firmware < 21.0.1 - Remote Code Execution
CVSS 8.1
CVE-2024-55354 HIGH
Lucee <5.4.7.3 LTS & 6 <6.1.1.118 - Code Injection
CVSS 8.8
CVE-2024-52327 MEDIUM
ECOVACS - Auth Bypass
CVSS 6.5
CVE-2024-9310 MEDIUM
Software-Defined Radios - Info Disclosure
CVE-2024-45654 MEDIUM
IBM Security ReaQta 3.12 - Privilege Escalation
CVSS 4.3
CVE-2024-11146 MEDIUM
TrueFiling <3.1.112.19 - Info Disclosure
CVSS 6.3
CVE-2024-47254 MEDIUM
2N Access Commander <3.1.1.2 - Privilege Escalation
CVSS 6.3
Details
Vulnerabilities 72
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits