CWE-156 · Injection and Smuggling
Improper Neutralization of Whitespace
5CVEs
SortMost likely exploited
5 CVEs with CWE-156 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-6013Vault LDAP MFA Enforcement Bypass When Using Username As AliasHashiCorp · Vault · CVSS 6.5 · 2025-08-06 | 6.5 | 0.6% | 2025-08-06 |
| CVE-2025-6014Vault TOTP Secrets Engine Code ReuseHashiCorp · Vault · CVSS 6.5 · 2025-08-01 | 6.5 | 0.5% | 2025-08-01 |
| CVE-2025-55001OpenBao LDAP MFA Enforcement Bypass When Using Username As Aliasopenbao · openbao · CVSS 6.5 · 2025-08-09 | 6.5 | 0.3% | 2025-08-09 |
| CVE-2025-55000OpenBao TOTP Secrets Engine Enables Code Reuseopenbao · openbao · CVSS 6.5 · 2025-08-09 | 6.5 | 0.3% | 2025-08-09 |
| CVE-2025-55127HackerOne community member Dao Hoang Anh (yoyomiski) has reported an improper neutralization of whitespace in the username when adding new users. A username with leading or traili…Revive · Revive Adserver · CVSS 5.4 · 2025-11-20 | 5.4 | 0.2% | 2025-11-20 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.