Skip to content

CWE-1173 · weakness in Misconfiguration and Insecure Design

Improper Use of Validation Framework

9 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

  1. Junos OS: Receipt of certain genuine BGP packets from any BGP Speaker causes RPD to crash.CVE-2020-1640Juniper Networks · CVSS 7.5 · 1.4% likely

    Juniper Networks

  2. 3scale API Management 2 does not perform adequate sanitation for user input in multiple fields. An authenticated user could use this flaw to inject scripts and possibly gain acces…CVE-2022-1414Redhat · CVSS 8.8 · 0.9% likely

    Red Hat

  3. An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exyn…CVE-2023-29091Samsung · CVSS 6.8 · 0.8% likely

    Samsung

  4. Laravel Rest Api has a Search Validation BypassCVE-2025-48490Lomkit · CVSS 6.6 · 0.6% likely
  5. stoatchat before 0.7.8 Unrestricted Account CreationCVE-2024-58360stoatchat · CVSS 6.5 · 0.4% likely

    Stoatchat

  6. CGI versions before 5.00 for Perl return request-derived values untainted under taint modeCVE-2026-120642CGI · CVSS 9.1 · 0.4% likely
  7. Improper Use of Validation FrameworkCVE-2025-3940Tridium · CVSS 5.3 · 0.4% likely

    Tridium

  8. PrestaShop: Improper Use of Validation FrameworkCVE-2026-33674PrestaShop · CVSS 2 · 0.3% likely

    PrestaShop

  9. CVE-2023-30949Palantir · CVSS 4.3 · 0.2% likely

    Palantir

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in