CWE-1287.

Apache Kafka: Broker silently skips JWT signature verification for SASL/OAUTHBEARER when the JWKS endpoint URL is not configured

• Apache Software Foundation Apache Kafka
• Weak cryptography or TLS
• CWE-345

GitPython command wrappers omit unsafe protocol and option checks

• CWE-1287

<3.2.0 · fixed in 3.2.0

Laravel TokenGuard authentication bypass through non-string API credentials

• Authentication bypass
• CWE-1287

<12.68.0 || >=13.0.0, <13.29.0 · fixed in 12.68.0, 13.29.0

OpenStack Ironic: OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g…

• OpenStack Ironic
• CWE-1287

.NET Framework Tampering Vulnerability

• Microsoft .NET Framework 3.5
• Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2
• CWE-1287

Microsoft Office SharePoint Elevation of Privilege Vulnerability

• Microsoft SharePoint Server Subscription Edition
• Privilege escalation
• CWE-1287

Dell Secure Connect Gateway (SCG) Policy Manager: Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16…

• Dell Secure Connect Gateway (SCG) Policy Manager
• CWE-1287

fast-jwt : Silent claim-validator bypass when JWT payload is a JSON array

• CWE-1287

<6.3.0 · fixed in 6.3.0

PraisonAI: Prompt Injection Defense Bypassed for HIGH-Level Threats

• CWE-116
• CWE-693

<4.6.78 · fixed in 4.6.78

Mis-typed WebAssembly tag imports can lead to GC heap corruption

• CWE-1287

>=47.0.0, <48.0.4 || >=49.0.0, <49.0.2 · fixed in 48.0.4, 49.0.2

ICMPv6 option validation accepts a trailing byte residue, sending the Router Advertisement, Neighbor Solicitation, Neighbor Advertisement and Redirect option walkers past the packet or into a permane…

• Eclipse Foundation Eclipse ThreadX NetX Duo
• Memory corruption
• Denial of service

CVE-2026-94570

• SGLang
• CWE-1287

Mattermost Desktop App plugin popout scheme validation bypass

• Mattermost
• CWE-1287

Siemens WTV676-HB6035 Web Interface: A vulnerability has been identified in WTV676-HB6035 Web Interface (All versions <…

• Siemens WTV676-HB6035 Web Interface
• Siemens WTV776-HB6035 Web Interface
• CWE-1287

Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value

• CWE-754
• CWE-1287

>=0.9.0, <0.11.1 · fixed in 0.11.1

Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths

• CWE-1287

yast2-users: OS command injection via LDAP-supplied shadowLastChange/shadowExpire attribute

• SUSE yast2-users
• Command injection
• CWE-1287

Ash.Type.Union with :map_with_tag does not force the tag on dump, enabling tag confusion

• CWE-1287

>=2.14.18, <3.32.2 · fixed in 3.32.2

graphql-go: github.com/graphql-go/graphql (GraphQL for Go) through 0.8.1 does not validate that a…

• graphql-go
• CWE-1287

Cri-o: cri-o: unvalidated image env var causes daemon crash

• Red Hat OpenShift Container Platform 4
• CWE-1287

An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation.

• Axis Communications AB AXIS OS
• CWE-1287

Insufficient input validation in Amazon Bedrock AgentCore harness InvokeHarness API

• AWS Amazon Bedrock AgentCore harness
• CWE-1287

XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookup

• TIMLEGGE XML::Sig
• Other injection
• CWE-1287

In geniezone, there is a possible escalation of privilege due to a missing permission check.

• MediaTek, Inc. MediaTek chipset
• CWE-1287

OTP Bypass in Magarsus' IDM-MFA

• Magarsus Consulting Ltd. Co. IDM-MFA
• CWE-1287

Microsoft Security Advisory CVE-2026-50524 – .NET Denial of Service Vulnerability

• CWE-1287

>=8.0.0, <8.0.29 || >=9.0.0, <9.0.18 || >=10.0.0, <10.0.10 · fixed in 8.0.29, 9.0.18, 10.0.10

Microsoft Word Information Disclosure Vulnerability

• Microsoft 365 Apps for Enterprise
• Microsoft Office 2019
• CWE-20
• CWE-1287

YesWiki: SQL injection via the `recentchanges` action `period` argument leads to arbitrary DB read

• SQL injection
• CWE-1287

<4.6.6 · fixed in 4.6.6

Keycloak: Unauthorized access via improper validation of encrypted SAML assertions

• CWE-1287

<=26.2.5 || >=26.3.0, <=26.4.7 || >=26.5.0, <26.5.5 · fixed in 26.5.5

Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer

• Broken access control
• CWE-1287

>=0.12.0, <0.12.15 || >=0.13.0, <0.13.11 || >=0.14.0, <0.14.6 || >=0.15.0, <0.15.2 · fixed in 0.12.15, 0.13.11, 0.14.6, 0.15.2

vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels

• CWE-1287

>=0.8.5, <0.24.0 · fixed in 0.24.0

Improper JSON Input Validation in WebSocket API Leads to Denial of Service

• Moxa NPort 6000-G2 Series
• CWE-1287

Server crash via malformed binary diff passed to $_internalApplyOplogUpdate.

• MongoDB Server
• CWE-1287

Authenticate command with specific mechanism parameter can trigger server crash

• MongoDB Server
• CWE-1287

Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking

• Broken access control
• CWE-697

>=4.2.0.Final, <4.2.15.Final || <4.1.135.Final · fixed in 4.2.15.Final, 4.1.135.Final

Boost Serialization improper validation of specified type of input

• Boost Serialization
• CWE-20
• CWE-1287

In Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if there exists an EAPOL capable device in the fallback VLAN.

• Arista Networks EOS
• CWE-1287

Hono: Cookie helper does not sanitize sameSite and priority, allowing Set-Cookie injection

• Other injection
• CWE-1287

<4.12.21 · fixed in 4.12.21

Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses

• RRWO Net::CIDR::Set
• Denial of service
• CWE-1287

Symfony's OidcTokenHandler Accepts JWTs Missing aud/iss/exp Claims

• CWE-345
• CWE-1287

>=6.3.0, <6.4.40 || >=7.4.0, <7.4.12 || >=8.0.0, <8.0.12 · fixed in 6.4.40, 7.4.12, 8.0.12

Command injection via USB

• MB connect line mbNET/mbNET.rokey
• MB connect line mbNET.mini
• CWE-1287

Mattermost doesn't validate user-supplied input in API request handlers

• CWE-1287

<1.0.1-0.20260330164815-c2840e980b3c · fixed in 1.0.1-0.20260330164815-c2840e980b3c

fraillt bitsery std_smart_ptr.h loadFromSharedState improper validation of specified type of input

• fraillt bitsery
• CWE-20
• CWE-1287

Concrete CMS: OAuth 2.0 Authorization-Code Handler Bypasses Account Status

• CWE-1287

<9.5.1 · fixed in 9.5.1

Invalid handling of CLASS != IN

• ISC BIND 9
• Memory corruption
• Denial of service

An ACAP configuration file lacked sufficient input validation, which could allow command injection and potentially lead to privilege escalation.

• Axis Communications AB AXIS OS
• CWE-1287

NEMU (OpenXiangShan/NEMU) before v2025.12.r2 contains an improper instruction-validation flaw in its RISC-V Vector (RVV) decoder.

• Memory corruption
• CWE-1287

Fastify has a Body Schema Validation Bypass via Leading Space in Content-Type Header

• CWE-1287
• CWE-1289

>=5.3.2, <5.8.5 · fixed in 5.8.5

TSPortal: Any user can forge self-deletion requests for any account

• CWE-283
• CWE-1287

<30 · fixed in 30

jsrsasign is vulnerable to DoS through Infinite Loop when processing zero or negative inputs

• Denial of service
• CWE-1287

<11.1.1 · fixed in 11.1.1

SpotAuditor 5.2.6 Name Field Denial of Service

• Nsauditor SpotAuditor
• CWE-1287

Duplicate Advisory: Keycloak: Unauthorized access via improper validation of encrypted SAML assertions

• CWE-1287

<26.2.14 || >=26.3.0, <26.4.10 || >=26.5.0, <26.5.5 · fixed in 26.2.14, 26.4.10, 26.5.5

DoS in Calls plugin via malformed msgpack in websocket request.

• Mattermost
• CWE-1287

Mattermost fails to properly validate User-Agent header tokens

• CWE-1287

<5.3.2-0.20260129181235-1346cf529aef || >=10.11.0-rc1, <10.11.11 || >=11.2.0-rc1, <11.2.3 || >=11.3.0-rc1, <11.3.1 · fixed in 5.3.2-0.20260129181235-1346cf529aef, 10.11.11, 11.2.3, 11.3.1

Cisco IOS XR Software Multi-Instance Intermediate System-to-Intermediate System Denial of Service Vulnerability

• Cisco IOS XR Software
• CWE-1287

SQL Server Elevation of Privilege Vulnerability

• Microsoft SQL Server 2016 Service Pack 3 (GDR)
• Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
• CWE-1287

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• CWE-1287

PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code

• PostgreSQL
• CWE-1287

PostgreSQL oidvector discloses a few bytes of memory

• PostgreSQL
• CWE-1287

Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig

• Prototype pollution
• CWE-754

<0.30.3 || >=1.0.0, <1.13.5 · fixed in 0.30.3, 1.13.5