# CWE-158.

Every Advisory and CVE whose sources give the weakness CWE-158, newest first.

## Records, newest first

- [Mongoose: Heap OOB reads and null-byte bypass in mg_path_is_sane (util.c)](https://agentprime.io/advisories/CVE-2026-115473.md)
  `CVE-2026-115473` · CVE record: cesanta mongoose · CVSS 6.5 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: Memory corruption, CWE-158
- [WebPros cPanel: Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail…](https://agentprime.io/advisories/CVE-2026-105475.md)
  `CVE-2026-105475` · CVE record: WebPros cPanel · CVSS 8.7 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-158
- [socket.getaddrinfo() accepts embedded null bytes in host and port](https://agentprime.io/advisories/CVE-2026-116566.md)
  `CVE-2026-116566` · CVE record: Python Software Foundation CPython · CVSS 5.3 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-158
- [Botan: Python binding bcrypt APIs truncate passwords containing embedded NULs](https://agentprime.io/advisories/CVE-2026-118767.md)
  `CVE-2026-118767` · CVE record: randombit botan · CVSS 4.8 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-158
- [Authentication bypass by spoofing in OpenVPN](https://agentprime.io/advisories/CVE-2026-84790.md)
  `CVE-2026-84790` · CVE record: OpenVPN OpenVPN · CVSS 7.6 High · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass, CWE-158
- [Aegisub executes arbitrary code through automatically loaded Automation scripts](https://agentprime.io/advisories/CVE-2026-92705.md)
  `CVE-2026-92705` · CVE record: TypesettingTools Aegisub · CVSS 7.8 High · Not analysed yet · Published 9 Oct 2026 · Tags: CWE-158, CWE-829
- [Apache log4net: NUL character truncates OutputDebugStringAppender records](https://agentprime.io/advisories/CVE-2026-105240.md)
  `CVE-2026-105240` · CVE record: Apache Software Foundation Apache log4net · CVSS 5.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-158
- [Apache log4net: NUL character truncates EventLogAppender records](https://agentprime.io/advisories/CVE-2026-105239.md)
  `CVE-2026-105239` · CVE record: Apache Software Foundation Apache log4net · CVSS 5.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-158
- [Path Traversal through Search Head Clustering in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76354.md)
  `CVE-2026-76354` · CVE record: Splunk Splunk Enterprise · CVSS 8.1 High · Not analysed yet · Published 19 Aug 2026 · Tags: CWE-158
- [Electron: shell.openPath path validation bypass via embedded null byte](https://agentprime.io/advisories/GHSA-5c9j-mhmv-5xgx.md)
  `GHSA-5c9j-mhmv-5xgx`, `CVE-2026-70603` · npm `electron`: affected `<39.8.6 || >=40.0.0-alpha.1, <40.9.0 || >=41.0.0-alpha.1, <41.1.1 || >=42.0.0-alpha.1, <42.0.0-beta.1`, fixed in `39.8.6`, `40.9.0`, `41.1.1`, `42.0.0-beta.1` · CVSS 6.0 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-20, CWE-158
- [Envoy: Embedded NUL in TLS DNS SAN Truncation in the Default TLS Certificate Validator. (Auth Bypass)](https://agentprime.io/advisories/CVE-2026-47778.md)
  `CVE-2026-47778` · CVE record: envoyproxy envoy · CVSS 4.4 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: CWE-158
- [jq: Embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts](https://agentprime.io/advisories/CVE-2026-43895.md)
  `CVE-2026-43895` · CVE record: jqlang jq · CVSS 4.4 Medium · Not analysed yet · Published 11 May 2026 · Tags: CWE-20, CWE-158
- [jq: Embedded NUL truncates top-level jq programs loaded with -f](https://agentprime.io/advisories/CVE-2026-41256.md)
  `CVE-2026-41256` · CVE record: jqlang jq · CVSS 5.5 Medium · Not analysed yet · Published 11 May 2026 · Tags: CWE-158
- [mutt before 2.3.2 does not check for '\0' in url_pct_decode.](https://agentprime.io/advisories/CVE-2026-43861.md)
  `CVE-2026-43861` · CVE record: mutt mutt · CVSS 3.7 Low · Not analysed yet · Published 4 May 2026 · Tags: CWE-158
- [mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest.](https://agentprime.io/advisories/CVE-2026-43859.md)
  `CVE-2026-43859` · CVE record: mutt mutt · CVSS 3.7 Low · Not analysed yet · Published 4 May 2026 · Tags: CWE-158
- [An attachment spoofing issue in WhatsApp for Windows prior to v2.3000.1032164386.258709 could have allowed maliciously formatted documents with embedded NUL bytes in the filename to be shown in the a…](https://agentprime.io/advisories/CVE-2026-23863.md)
  `CVE-2026-23863` · CVE record: Facebook WhatsApp Desktop for Windows · CVSS 6.5 Medium · Not analysed yet · Published 1 May 2026 · Tags: CWE-158
- [free5GC UDM vulnerable to null byte injection in URL path parameters causing 500 Internal Server Error](https://agentprime.io/advisories/GHSA-p9hg-pq3q-v9gv.md)
  `GHSA-p9hg-pq3q-v9gv`, `CVE-2026-33191`, `GO-2026-4763` · Go `github.com/free5gc/udm`: affected `<1.4.2`, fixed in `1.4.2` · CVSS 8.7 High · Not analysed yet · Published 18 Mar 2026 · Tags: CWE-158, CWE-248
- [Heap-buffer-over-read in \_mongoc_http_send via strstr on non-null-terminated buffer](https://agentprime.io/advisories/CVE-2026-4359.md)
  `CVE-2026-4359` · CVE record: MongoDB Inc MongoDB C Driver · CVSS 2.0 Low · Not analysed yet · Published 17 Mar 2026 · Tags: CWE-158
- [Out-of-bounds character read vulnerability in Bluetooth.](https://agentprime.io/advisories/CVE-2026-28540.md)
  `CVE-2026-28540` · CVE record: Huawei HarmonyOS · CVSS 4.0 Medium · Not analysed yet · Published 5 Mar 2026 · Tags: CWE-158
- [PhastPress <= 3.7 - Unauthenticated Arbitrary File Read via Null Byte Injection](https://agentprime.io/advisories/CVE-2025-14388.md)
  `CVE-2025-14388` · CVE record: kiboit PhastPress · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Dec 2025 · Tags: CWE-158
- [Unauthenticated Arbitrary File Read via Null Byte Injection](https://agentprime.io/advisories/CVE-2025-66263.md)
  `CVE-2025-66263` · CVE record: DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter · CVSS 8.9 High · Not analysed yet · Published 26 Nov 2025 · Tags: CWE-158
- [OpenBSD OpenSSH: ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI…](https://agentprime.io/advisories/CVE-2025-61985.md)
  `CVE-2025-61985` · CVE record: OpenBSD OpenSSH · CVSS 3.6 Low · Not analysed yet · Published 6 Oct 2025 · Tags: CWE-158
- [Denial of Service in CivetWeb](https://agentprime.io/advisories/CVE-2025-9648.md)
  `CVE-2025-9648` · CVE record: CivetWeb CivetWeb · CVSS 8.7 High · Not analysed yet · Published 29 Sept 2025 · Tags: CWE-158
- [BMC Control-M/Agent unescaped NULL byte in access control list checks](https://agentprime.io/advisories/CVE-2025-55113.md)
  `CVE-2025-55113` · CVE record: BMC Control-M/Agent · CVSS 9.5 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2025 · Tags: CWE-158
- [wftpserver Wing FTP Server: In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes…](https://agentprime.io/advisories/CVE-2025-47812.md)
  `CVE-2025-47812` · CVE record: wftpserver Wing FTP Server · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.94 · Not analysed yet · Published 10 Jul 2025 · Tags: CWE-158
- [Adding %00 and a fake extension to a jar: URL changed the interpretation of the contents](https://agentprime.io/advisories/CVE-2025-1936.md)
  `CVE-2025-1936` · CVE record: Mozilla Firefox and 1 more · CVSS 7.3 High · Not analysed yet · Published 4 Mar 2025 · Tags: CWE-158
- [Improper neutralization of null bytes may lead to buffer over-reads in MongoDB Server](https://agentprime.io/advisories/CVE-2024-10921.md)
  `CVE-2024-10921` · CVE record: MongoDB Inc MongoDB Server · CVSS 6.8 Medium · Not analysed yet · Published 14 Nov 2024 · Tags: CWE-158
- [PHP-FPM logs from children may be altered](https://agentprime.io/advisories/CVE-2024-9026.md)
  `CVE-2024-9026` · CVE record: PHP Group PHP · CVSS 3.3 Low · Not analysed yet · Published 8 Oct 2024 · Tags: Other injection, CWE-158
- [Xorg-x11-server: selinux unlabeled glx pbuffer](https://agentprime.io/advisories/CVE-2024-0408.md)
  `CVE-2024-0408` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 18 Jan 2024 · Tags: CWE-158
- [Red Lion Crimson Improper Neutralization of Null Byte or NUL Character](https://agentprime.io/advisories/CVE-2023-5719.md)
  `CVE-2023-5719` · CVE record: Red Lion Crimson · CVSS 8.8 High · Not analysed yet · Published 6 Nov 2023 · Tags: CWE-158
- [Dell BIOS versions contain an Improper Neutralization of Null Byte vulnerability.](https://agentprime.io/advisories/CVE-2022-31223.md)
  `CVE-2022-31223` · CVE record: Dell CPG BIOS · CVSS 2.3 Low · Not analysed yet · Published 12 Sept 2022 · Tags: CWE-158
- [Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities](https://agentprime.io/advisories/CVE-2022-20813.md)
  `CVE-2022-20813` · CVE record: Cisco Cisco TelePresence Video Communication Server (VCS) Expressway · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Jul 2022 · Tags: CWE-158
- [Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities](https://agentprime.io/advisories/CVE-2022-20812.md)
  `CVE-2022-20812` · CVE record: Cisco Cisco TelePresence Video Communication Server (VCS) Expressway · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Jul 2022 · Tags: CWE-158
- [Improper neutralization of null byte leads to read overrun](https://agentprime.io/advisories/CVE-2020-7928.md)
  `CVE-2020-7928` · CVE record: MongoDB Inc. MongoDB Server · CVSS 6.5 Medium · Not analysed yet · Published 23 Nov 2020 · Tags: CWE-158
- [IMPROPER NEUTRALIZATION OF NULL BYTE OR NUL CHARACTER CWE-158](https://agentprime.io/advisories/CVE-2020-14500.md)
  `CVE-2020-14500` · CVE record: Secomea GateManager all versions prior to 9.2c Secomea GateManager all versions prior to 9.2c · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2020 · Tags: CWE-158
- [Dell Client Consumer and Commercial platforms: Select Dell Client Consumer and Commercial platforms include an issue that allows the…](https://agentprime.io/advisories/CVE-2020-5363.md)
  `CVE-2020-5363` · CVE record: Dell Dell Client Consumer and Commercial platforms · CVSS 8.6 High · Not analysed yet · Published 10 Jun 2020 · Tags: CWE-158
- [Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 S…](https://agentprime.io/advisories/CVE-2009-1537.md)
  `CVE-2009-1537` · CVE record · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.51 · Not analysed yet · Published 29 May 2009 · Tags: CWE-158

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-158>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-158/>. Everything for agents: <https://agentprime.io/llms.txt>.