Skip to content
BackEsc
Sign in

CWE-444 · weakness in Injection and Smuggling

Inconsistent Interpretation of HTTP Requests

441 CVEs · 4 exploited

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
4
check available
2
likely to be exploited
24

Every one of the 441 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. SAP Memory Pipes (MPI) DesynchronizationCVE-2022-22536SAP SE · CVSS 9.8 · 98% likely

    SAP

  2. Qlik Sense Enterprise - HTTP Request SmugglingCVE-2023-41265Qlik · CVSS 9.6 · 88% likelycovered by CyberSIXT

    Qlik1 article1 article this week: Cynet Finds Reverse Shell Activity Targeting Qlik Sense Servers

  3. Starlette - Improper Validation of Unsafe Equivalence in InputCVE-2026-48710Kludex · CVSS 6.5 · 70% likelycovered by CyberSIXT

    Kludex

  4. Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation of HTTP headers, a remote attac…CVE-2023-48365Qlik · CVSS 9.6 · 48% likelycovered by CyberSIXT

    Qlik1 article1 article this week: Cynet Finds Reverse Shell Activity Targeting Qlik Sense Servers

  5. Avigilon ACM - Host Header InjectionCVE-2025-56266Avigilon · CVSS 9.8 · 3.0% likely
  6. Emby Server - Authentication BypassCVE-2023-33193EmbySupport · CVSS 9.1 · 1.7% likely
  7. Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to…CVE-2020-9490Apache HTTP Server · 89% likely
  8. Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxyCVE-2023-25690Apache Software Foundation · CVSS 9.8 · 84% likely

    Apache

  9. The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request S…CVE-2022-32214NodeJS · 82% likely

    Node.js

  10. Incorrect Transfer-Encoding handling with HTTP/1.0CVE-2021-33037Apache Software Foundation · 75% likely

    Apache

  11. The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding headers. This can lead to HTTP Request Smu…CVE-2022-32215NodeJS · 70% likely

    Node.js

  12. ASP.NET Security Feature Bypass VulnerabilityCVE-2025-55315Microsoft · CVSS 9.9 · 67% likely

    Microsoft

  13. Apache Dubbo RCE on customers via Condition route poisoning (Unsafe YAML unmarshaling)CVE-2021-30180Apache Software Foundation · 60% likely

    Apache

  14. mod_proxy_wstunnel tunneling of non Upgraded connectionsCVE-2019-17567Apache Software Foundation · 60% likely

    Apache

  15. HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformedCVE-2019-15605NodeJS · 57% likely

    Node.js

  16. Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong con…CVE-2020-11993Apache HTTP Server · 57% likely
  17. Pulse Secure version 9.115 and below may be susceptible to client-side http request smuggling, When the application receives a POST request, it ignores the request's Content-Lengt…CVE-2022-21826Pulse Connect Secure VPN Server · 46% likely
  18. The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly parse and validate Transfer-Encoding headers and can lead to HTTP Request Smug…CVE-2022-32213NodeJS · 45% likely

    Node.js

  19. Web Cache PoisoningCVE-2021-23336python/cpython · CVSS 5.9 · 41% likely
  20. Microsoft IIS 5.0 and 6.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Tra…CVE-2005-208931% likely
  21. HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlierCVE-2022-22720Apache Software Foundation · 28% likely

    Apache

  22. mod_proxy_ajp: Possible request smugglingCVE-2022-26377Apache Software Foundation · 21% likely

    Apache

  23. The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy, allows remote attackers to poison the web cache, bypass web application firewall prote…CVE-2005-208820% likely
  24. In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths header…CVE-2017-7658The Eclipse Foundation · 19% likely

    Eclipse Foundation

  25. Possible request smuggling in HTTP/2 due missing validationCVE-2021-21295netty · CVSS 5.9 · 19% likely

    The Netty project

  26. Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in an HTTP request (for example, two Transfer-Encoding header fields). In this case, N…CVE-2020-8287NodeJS · 16% likely

    Node.js

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in