CWE-148 · Injection and Smuggling
Improper Neutralization of Input Leaders
2CVEs
SortMost likely exploited
2 CVEs with CWE-148 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-4853Quarkus: http security policy bypassRed Hat · Openshift Serverless 1 on RHEL 8 · CVSS 8.1 · 2023-09-20 | 8.1 | 2.3% | 2023-09-20 |
| CVE-2026-12862XLSX formula injection in exportspretix · Venueless · CVSS 5.1 · 2026-06-22 | 5.1 | 0.4% | 2026-06-22 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.