Advisories · Weakness
CWE-626.
Every Advisory and CVE whose sources give the weakness CWE-626, newest first.
-
HTTP::Parser::XS versions before 0.18 for Perl truncate PATH_INFO at an encoded NUL byte in parse_http_request
- CWE-626
- CVSS 3.5 Low
Netty: MQTT Topic Name and Client ID Validation Bypass
- netty
- CWE-20
- CWE-626
- CVSS 6.3 Medium
Netty before 4.2.16.Final SOCKS Proxy Null Byte Injection
- netty
- CWE-626
- CVSS 7.1 High
Gnutls: gnutls: authentication bypass via nul character in username
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-170
- CWE-626
- CVSS 7.5 High
Netty has a DNS Codec Input Validation Bypass (Encoder + Decoder)
- Denial of service
- CWE-20
>=4.2.0.Alpha1, <4.2.13.Final || <4.1.133.Final · fixed in 4.2.13.Final, 4.1.133.Final
GHSA-cm33-6792-r9fm · CVE-2026-42579 - CVSS 3.7 Low
Axios: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParams
- CWE-116
- CWE-626
<0.31.1 || >=1.0.0, <1.15.1 · fixed in 0.31.1, 1.15.1
GHSA-xhjh-pmcv-23jw · CVE-2026-42040 - CVSS 4.4 Medium
[UNKNOWN] kernel: A stack information leak flaw was found in s390/s390x in the Linux kernel’s memory…
- [UNKNOWN] kernel
- CWE-626
- CVSS 9.4 CriticalCritical · CVSS 9+
NETGEAR AC1200: This vulnerability allows network-adjacent attackers to bypass authentication on affected…
- NETGEAR AC1200
- CWE-626
-
Facebook HHVM: Various APC functions accept keys containing null bytes as input…
- Facebook HHVM
- CWE-626