CWE-480 · Input Validation and Logic
Use of Incorrect Operator
11CVEs
SortMost likely exploited
11 CVEs with CWE-480 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-1947Use of Incorrect Operator in polonel/trudeskpolonel · polonel/trudesk · CVSS 9.1 · 2022-05-31 | 9.1 | 1.3% | 2022-05-31 |
| CVE-2026-15043DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on textHMBRAND · DBI::SQL::Nano · CVSS 9.8 · 2026-07-14 | 9.8 | 0.7% | 2026-07-14 |
| CVE-2026-63421Keystone: `graphql.maxTake` bypass with negative `take`keystonejs · keystone · CVSS 7.5 · 2026-08-21 | 7.5 | 0.7% | 2026-08-21 |
| CVE-2026-48497Envoy: Abnormal process termination in DNS UDP filterenvoyproxy · envoy · CVSS 5.9 · 2026-06-26 | 5.9 | 0.4% | 2026-06-26 |
| CVE-2026-43114netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiryLinux · Linux · CVSS 9.4 · 2026-05-06 | 9.4 | 0.4% | 2026-05-06 |
| CVE-2026-79643Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Incorrect Operator vulnerability. An unauthentica…Dell · Secure Connect Gateway 5.0 - Application · CVSS 7.3 · 2026-09-07 | 7.3 | 0.3% | 2026-09-07 |
| CVE-2026-83525Apache Kafka: Incorrect boolean operator in FetchSnapshot RPC handler allows authenticated network clients to crash the KRaft controller via a malformed request.Apache Software Foundation · Apache Kafka · CVSS 6.5 · 2026-10-28 | 6.5 | 0.3% | 2026-10-28 |
| CVE-2025-52985Junos OS Evolved: When a control-plane firewall filter refers to a prefix-list with more than 10 entries it's not matchingJuniper Networks · Junos OS Evolved · CVSS 5.3 · 2025-07-11 | 5.3 | 0.3% | 2025-07-11 |
| CVE-2026-123601Hickory DNS 0.26.0-beta.1 before 0.26.2 NSEC3 Proof of Nonexistence Forgeryhickory-dns · hickory-dns · CVSS 6.5 · 2026-11-08 | 6.5 | 0.3% | 2026-11-08 |
| CVE-2026-4748pf silently ignores certain rulesFreeBSD · FreeBSD · CVSS 7.5 · 2026-04-01 | 7.5 | 0.3% | 2026-04-01 |
| CVE-2026-44722pyzipper: Encryption bypass for small files encrypted with pyzipperdanifus · pyzipper · CVSS 6.2 · 2026-07-17 | 6.2 | 0.1% | 2026-07-17 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.