CWE-147 · Injection and Smuggling
Improper Neutralization of Input Terminators
4CVEs
SortMost likely exploited
4 CVEs with CWE-147 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-7962In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.Eclipse Foundation · Jakarta Mail · CVSS 6 · 2025-07-21 | 6.0 | 0.9% | 2025-07-21 |
| CVE-2026-82989CVE-2026-82989Viewsonic · vCast · CVSS 9.8 · 2026-10-05 | 9.8 | 0.7% | 2026-10-05 |
| CVE-2026-113602json-smart through 2.6.0 Strict-Mode Validation Bypass via 0x1A Characterjson-smart · json-smart · CVSS 5.3 · 2026-10-20 | 5.3 | 0.4% | 2026-10-20 |
| CVE-2024-52505matrix-appservice-irc allows IRC Command injection in provisioning APImatrix-org · matrix-appservice-irc · CVSS 5.4 · 2024-11-14 | 5.4 | 0.4% | 2024-11-14 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.