CWE-164 · Injection and Smuggling
Improper Neutralization of Internal Special Elements
3CVEs
SortMost likely exploited
3 CVEs with CWE-164 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-29891Apache Camel: Camel Message Header Injection through request parametersApache Software Foundation · Apache Camel · CVSS 4.8 · 2025-03-12 | 4.8 | 76% | 2025-03-12 |
| CVE-2025-30177Apache Camel: Camel-Undertow Message Header Injection via Improper FilteringApache Software Foundation · Apache Camel · CVSS 6.5 · 2025-04-01 | 6.5 | 1.3% | 2025-04-01 |
| CVE-2026-19072Velociraptor Investigator reaches SuperUser via hunt EffectivePrincipalRapid7 · Velociraptor · CVSS 9.9 · 2026-09-24 | 9.9 | 0.4% | 2026-09-24 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.