CWE-179 · Injection and Smuggling
Incorrect Behavior Order: Early Validation
7CVEs
SortMost likely exploited
7 CVEs with CWE-179 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-1271An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can…Gnu · gzip, xz-utils · CVSS 8.8 · 2022-08-31 | 8.8 | 5.5% | 2022-08-31 |
| CVE-2026-3832Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp responseRedhat · gnutls · CVSS 3.7 · 2026-04-30 | 3.7 | 0.8% | 2026-04-30 |
| CVE-2025-4759Versions of the package lockfile-lint-api before 5.9.2 are vulnerable to Incorrect Behavior Order: Early Validation via the resolved attribute of the package URL validation which…Lirantal · lockfile-lint-api · CVSS 8.3 · 2025-05-16 | 8.3 | 0.4% | 2025-05-16 |
| CVE-2026-84177Apache Wicket: A component's markup is served as a package resource when its class name contains an underscoreApache Software Foundation · Apache Wicket · CVSS 6.3 · 2026-11-01 | 6.3 | 0.3% | 2026-11-01 |
| CVE-2025-54508Improper validation of Reverse Map Table (RMP) entries in the Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker to trigger concurrent modifications…AMD · AMD EPYC™ 9005 Series Processors · CVSS 4 · 2026-11-10 | 4.0 | 0.2% | 2026-11-10 |
| CVE-2024-41686Password Policy Bypass VulnerabilitySyroTech · SyroTech SY-GPON-1110-WDONT router · CVSS 7.3 · 2024-07-26 | 7.3 | 0.2% | 2024-07-26 |
| CVE-2026-49414ASLR bypass for setuid executables via procctl(2)FreeBSD · FreeBSD · CVSS 7.8 · 2026-06-27 | 7.8 | 0.2% | 2026-06-27 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.