CWE-186 · Input Validation and Logic
Overly Restrictive Regular Expression
2CVEs
SortMost likely exploited
2 CVEs with CWE-186 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-121373Symfony: HtmlSanitizer MetaRefreshAttributeSanitizer Matches Only a Narrow Subset of the Browser Refresh Grammar (Incomplete Fix for CVE-2026-48761)sensiolabs · symfony · CVSS 5.3 · 2026-11-04 | 5.3 | 0.5% | 2026-11-04 |
| CVE-2025-46821Envoy vulnerable to bypass of RBAC uri_template permissionenvoyproxy · envoy · CVSS 5.3 · 2025-05-07 | 5.3 | 0.3% | 2025-05-07 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.