CWE-1023 · Input Validation and Logic
Incomplete Comparison with Missing Factors
17CVEs
SortMost likely exploited
17 CVEs with CWE-1023 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-7473In CISA KEVExploitedArista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding BypassArista Networks · EOS · CVSS 5.8 · 2026-06-05 | 5.8 | 1.1% | 2026-06-05 |
| CVE-2026-81376Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft · Visual Studio Code · CVSS 9.6 · 2026-09-08 | 9.6 | 0.9% | 2026-09-08 |
| CVE-2021-23146An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV verification. This issue affects: Gallagher Command Centre…Gallagher · Command Center · CVSS 7.1 · 2021-11-18 | 7.1 | 0.9% | 2021-11-18 |
| CVE-2025-55333Windows BitLocker Security Feature Bypass VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 6.1 · 2025-10-14 | 6.1 | 0.8% | 2025-10-14 |
| CVE-2026-24255NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pix…NVIDIA · Dynamo · CVSS 7.5 · 2026-08-04 | 7.5 | 0.5% | 2026-08-04 |
| CVE-2026-4599Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Factors via the getRandomBigIntegerZeroToMax and getRandomBigIn…Kjur · jsrsasign · CVSS 9.1 · 2026-03-23 | 9.1 | 0.5% | 2026-03-23 |
| CVE-2026-54713CakePHP Queue: Incomplete Comparison in getUniqueId vulnerable to collisionscakephp · queue · CVSS 3.7 · 2026-08-27 | 3.7 | 0.5% | 2026-08-27 |
| CVE-2024-5528Incomplete Comparison with Missing Factors in GitLabGitLab · GitLab · CVSS 3.5 · 2025-02-05 | 3.5 | 0.4% | 2025-02-05 |
| CVE-2026-91768IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes)PHP Group · PHP · CVSS 6.5 · 2026-09-25 | 6.5 | 0.4% | 2026-09-25 |
| CVE-2026-48587Potential exposure of private data via whitespace padding in Vary headerdjangoproject · Django · CVSS 3.1 · 2026-06-03 | 3.1 | 0.4% | 2026-06-03 |
| CVE-2026-85491Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later one past an authorization check via a dispatch memo keyed on the request path alo…No vendor recorded · CVSS 8.8 · 2026-09-24 | 8.8 | 0.4% | 2026-09-24 |
| CVE-2026-121564Silent loss of messages when merging overlapping chat exports in whatstklucasrodes · whatstk · CVSS 1.8 · 2026-11-03 | 1.8 | 0.3% | 2026-11-03 |
| CVE-2026-91836OpenClaw ClawScan Static Scanner static_scanner.go incomplete comparison with missing factorsOpenClaw · ClawScan · CVSS 2.8 · 2026-09-15 | 2.8 | 0.3% | 2026-09-15 |
| CVE-2026-53839OpenClaw < 2026.5.7 - Hostname Prefix Matching Bypass in Trusted Retry Endpoint ValidationOpenClaw · OpenClaw · CVSS 6.5 · 2026-06-12 | 6.5 | 0.3% | 2026-06-12 |
| CVE-2026-123593Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via TrustAnchorshickory-dns · hickory-dns · CVSS 4.8 · 2026-11-08 | 4.8 | 0.2% | 2026-11-08 |
| CVE-2026-53859OpenClaw < 2026.5.26 - Hostname Validation Bypass via Trailing-Dot InconsistencyOpenClaw · OpenClaw · CVSS 6.5 · 2026-06-16 | 6.5 | 0.2% | 2026-06-16 |
| CVE-2025-62000BullWall Ransomware Containment incomplete file inspectionBullWall · Ransomware Containment · CVSS 7.1 · 2025-12-18 | 7.1 | 0.2% | 2025-12-18 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.