Advisories · Weakness

CWE-76.

Every Advisory and CVE whose sources give the weakness CWE-76, newest first.

CVE-2026-91184 CVE record

CVSS 8.7 High

NGINX Gateway Fabric vulnerability
- F5 NGINX Gateway Fabric
- CWE-76
Not analysed yet 14 Oct 2026
CVE-2026-77180 CVE record

CVSS 8.7 High

NGINX Ingress Controller vulnerability
- F5 NGINX Ingress Controller
- CWE-76
Not analysed yet 2 Sept 2026
CVE-2026-66362 CVE record

CVSS 8.6 High

NGF vulnerability
- F5 NGINX Gateway Fabric
- CWE-76
Not analysed yet 2 Sept 2026
dssrf npm

CVSS 8.7 High

dssrf has an SSRF bypass with remove_at_symbol_in_string
- CWE-76
<1.0.4 · fixed in 1.0.4

GHSA-cg4g-m8jx-vjv2 · CVE-2026-54722 Not analysed yet 30 Jul 2026
CVE-2026-55723 CVE record

CVSS 8.7 High

NGINX Ingress Controller vulnerability
- F5 NGINX Ingress Controller
- CWE-76
Not analysed yet 15 Jul 2026
CVE-2026-11311 CVE record

CVSS 8.6 High

NGINX Gateway Fabric vulnerability
- F5 NGINX Gateway Fabric
- CWE-76
Not analysed yet 17 Jun 2026
simple-git npm

CVSS 9.8 CriticalCritical · CVSS 9+

simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key enables RCE
- Command injection
- CWE-76
>=3.15.0, <3.32.3 · fixed in 3.32.3

GHSA-r275-fr43-pm7q · CVE-2026-28292 Not analysed yet 10 Mar 2026
CVE-2024-4897 CVE record

CVSS 8.4 High

Remote Code Execution in parisneo/lollms-webui
- parisneo/lollms-webui
- CWE-76
Not analysed yet 2 Jul 2024
llama-cpp-python PyPI

CVSS 9.7 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata
- CWE-76
>=0.2.30, <0.2.72 · fixed in 0.2.72

GHSA-56xg-wfcc-g829 · CVE-2024-34359 Not analysed yet 13 May 2024
litellm PyPI

CVSS 9.8 CriticalCritical · CVSS 9+

LiteLLM has Server-Side Template Injection vulnerability in /completions endpoint
- CWE-76
<1.34.42 · fixed in 1.34.42

GHSA-46cm-pfwv-cgf8 · CVE-2024-2952 Not analysed yet 10 Apr 2024
CVE-2024-1883 CVE record

CVSS 6.3 Medium

Reflected XSS in PaperCut NG/MF
- PaperCut NG, PaperCut MF
- CWE-76
Not analysed yet 14 Mar 2024
CVE-2024-1882 CVE record

CVSS 7.2 High

Server-side resource injection in PaperCut NG/MF
- PaperCut NG, PaperCut MF
- CWE-76
Not analysed yet 14 Mar 2024
CVE-2024-1221 CVE record

CVSS 3.1 Low

Improper access controls on APIs on Linux and macOS in PaperCut NG/MF
- PaperCut NG, PaperCut MF
- CWE-76
Not analysed yet 14 Mar 2024
CVE-2024-21600 CVE record

CVSS 6.5 Medium

Junos OS: PTX Series: In an FTI scenario MPLS packets hitting reject next-hop will cause a host path wedge condition
- Juniper Networks Junos OS
- CWE-76
Not analysed yet 12 Jan 2024
CVE-2023-1149 CVE record

CVSS 5.7 Medium

Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver
- btcpayserver/btcpayserver
- CWE-76
Not analysed yet 2 Mar 2023
BTCPayServer.Client NuGet

CVSS 5.3 Medium

Withdrawn Advisory: HTML injections in BTCPayServer
- Other injection
- CWE-76
<1.7.5 · fixed in 1.7.5

GHSA-33gv-rvgq-gpxp · CVE-2023-0493 Withdrawn Not analysed yet 27 Jan 2023