CWE-606 · Input Validation and Logic
Unchecked Input for Loop Condition
39CVEs
SortMost likely exploited
39 CVEs with CWE-606 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-3446Excessive time spent checking DH keys and parametersOpenSSL · OpenSSL · CVSS 5.3 · 2023-07-19 | 5.3 | 6.5% | 2023-07-19 |
| CVE-2023-5678Excessive time spent in DH check / generation with large Q parameter valueOpenSSL · OpenSSL · CVSS 5.3 · 2023-11-06 | 5.3 | 5.1% | 2023-11-06 |
| CVE-2023-3817Excessive time spent checking DH q parameter valueOpenSSL · OpenSSL · CVSS 5.3 · 2023-07-31 | 5.3 | 3.0% | 2023-07-31 |
| CVE-2023-6237Excessive time spent checking invalid RSA public keysOpenSSL · OpenSSL · CVSS 5.9 · 2024-04-25 | 5.9 | 2.6% | 2024-04-25 |
| CVE-2026-1519Excessive NSEC3 iterations cause high CPU load during insecure delegation validationISC · BIND 9 · CVSS 7.5 · 2026-03-25 | 7.5 | 1.7% | 2026-03-25 |
| CVE-2026-62901.NET Denial of Service VulnerabilityMicrosoft · .NET 10.0 runtime · CVSS 7.5 · 2026-08-11 | 7.5 | 1.2% | 2026-08-11 |
| CVE-2024-4603Excessive time spent checking DSA keys and parametersOpenSSL · OpenSSL · CVSS 5.3 · 2024-05-16 | 5.3 | 1.2% | 2024-05-16 |
| CVE-2022-3252Improper detection of complete HTTP body decompression SwiftNIO Extras provides a pair of helpers for transparently decompressing received HTTP request or response bodies. These t…Swift Project · SwiftNIO Extras · 2022-09-21 | – | 0.8% | 2022-09-21 |
| CVE-2024-8508Unbounded name compression could lead to Denial of ServiceNLnet Labs · Unbound · CVSS 5.3 · 2024-10-03 | 5.3 | 0.8% | 2024-10-03 |
| CVE-2026-128343ExcelJS through 4.4.0 Denial of Service via Oversized Row Numberexceljs · exceljs · CVSS 7.5 · 2026-11-13 | 7.5 | 0.7% | 2026-11-13 |
| CVE-2026-5950Unbounded resend loop in BIND 9 resolverISC · BIND 9 · CVSS 5.3 · 2026-05-20 | 5.3 | 0.7% | 2026-05-20 |
| CVE-2026-68077Apache Qpid Broker-J: Unbounded disposition range handling can lead to denial of serviceApache Software Foundation · Apache Qpid Broker-J · CVSS 6.5 · 2026-08-05 | 6.5 | 0.7% | 2026-08-05 |
| CVE-2026-67554Apache Qpid Proton Dotnet: Unbounded disposition range handling can lead to denial of serviceApache Software Foundation · Apache Qpid Proton Dotnet · CVSS 6.5 · 2026-08-05 | 6.5 | 0.7% | 2026-08-05 |
| CVE-2026-66276Apache Qpid Proton-J: Unbounded disposition range handling can lead to denial of serviceApache Software Foundation · Apache Qpid Proton-J · CVSS 6.5 · 2026-08-05 | 6.5 | 0.7% | 2026-08-05 |
| CVE-2024-34486OFPPacketQueue in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via OFPQueueProp.len=0.Facuet · Ryu · CVSS 7.5 · 2024-05-05 | 7.5 | 0.6% | 2024-05-05 |
| CVE-2026-20301Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service VulnerabilityCisco · Cisco IOS XE Software · CVSS 8.6 · 2026-08-05 | 8.6 | 0.6% | 2026-08-05 |
| CVE-2026-55731Loytec LINX firmware: Unchecked input for loop condition in the SNMP agentLoytec · LIP-ME20xC · CVSS 6.6 · 2026-07-24 | 6.6 | 0.5% | 2026-07-24 |
| CVE-2026-128342ExcelJS through 4.4.0 Denial of Service via Oversized Worksheet sheetIdexceljs · exceljs · CVSS 7.5 · 2026-11-13 | 7.5 | 0.5% | 2026-11-13 |
| CVE-2026-71439Mermaid radar diagrams are vulnerable to DoSmermaid-js · mermaid · CVSS 5.3 · 2026-08-06 | 5.3 | 0.5% | 2026-08-06 |
| CVE-2026-85730smol-toml: Denial of Service via malformed TOML documentssquirrelchat · smol-toml · CVSS 8.2 · 2026-09-04 | 8.2 | 0.5% | 2026-09-04 |
| CVE-2025-32399An Unchecked Input for Loop Condition in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to cause IO devices that use the library to enter an infinite loop by sending a…RT-Labs · P-Net · CVSS 5.3 · 2025-05-07 | 5.3 | 0.5% | 2025-05-07 |
| CVE-2026-16652Temporal Server Schedule exclusion search can cause excessive CPU consumptionTemporal Technologies, Inc. · Temporal Server · CVSS 7.1 · 2026-09-21 | 7.1 | 0.5% | 2026-09-21 |
| CVE-2024-13931Authenticated Relative Path TraversalABB · ASPECT-Enterprise · CVSS 7.2 · 2025-05-22 | 7.2 | 0.4% | 2025-05-22 |
| CVE-2026-13761Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs that are used for loop conditions, potentially leading to a denial of service or other…Pegasystems · Pega Infinity · CVSS 8.8 · 2026-08-28 | 8.8 | 0.4% | 2026-08-28 |
| CVE-2026-27689Denial of service (DOS) in SAP Supply Chain ManagementSAP_SE · SAP Supply Chain Management · CVSS 7.7 · 2026-03-10 | 7.7 | 0.4% | 2026-03-10 |
| CVE-2026-23689Denial of service (DOS) in SAP Supply Chain ManagementSAP_SE · SAP Supply Chain Management · CVSS 7.7 · 2026-02-10 | 7.7 | 0.4% | 2026-02-10 |
| CVE-2025-43801Unchecked input for loop condition vulnerability in XML-RPC in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through…Liferay · Portal · CVSS 6.9 · 2025-09-16 | 6.9 | 0.4% | 2025-09-16 |
| CVE-2024-13930Authenticated Unchecked Loop ConditionABB · ASPECT-Enterprise · CVSS 4.9 · 2025-05-22 | 4.9 | 0.4% | 2025-05-22 |
| CVE-2026-16599Denial of Service in GNU wgetGNU · wget · CVSS 5.1 · 2026-08-25 | 5.1 | 0.4% | 2026-08-25 |
| CVE-2026-107569Unchecked Input for Loop Condition in hMailServerProgressive Robot Ltd · hMailServer · CVSS 7.5 · 2026-10-19 | 7.5 | 0.4% | 2026-10-19 |
| CVE-2025-42930Denial of Service (DoS) vulnerability in SAP Business Planning and ConsolidationSAP_SE · SAP Business Planning and Consolidation · CVSS 6.5 · 2025-09-09 | 6.5 | 0.3% | 2025-09-09 |
| CVE-2026-33800Junos OS: MX Series: In a VC scenario a high rate of micro-BFD session flaps will cause an FPC crashJuniper Networks · Junos OS · CVSS 6.5 · 2026-07-09 | 6.5 | 0.3% | 2026-07-09 |
| CVE-2019-25624Liquid Studio 2.17 Denial of Service via Malformed InputPixarra · Liquid Studio · CVSS 6.2 · 2026-03-23 | 6.2 | 0.2% | 2026-03-23 |
| CVE-2026-0243Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through IPv6 Crafted PacketPalo Alto Networks · Prisma SD-WAN ION · CVSS 4.9 · 2026-05-13 | 4.9 | 0.2% | 2026-05-13 |
| CVE-2026-125264FFmpeg through 9.0.2 CPU Exhaustion via JPEG XL Parser TOC CountFFmpeg · FFmpeg · CVSS 5.5 · 2026-11-09 | 5.5 | 0.2% | 2026-11-09 |
| CVE-2026-93653Poppler: poppler: unbounded cpu loop in splashoutputdev::tilingpatternfill via unvalidated tiling-pattern repeat count (denial of service)Red Hat · Red Hat Enterprise Linux 10 · CVSS 5.5 · 2026-09-18 | 5.5 | 0.2% | 2026-09-18 |
| CVE-2026-15172Unchecked Input for Loop Condition in WiresharkWireshark Foundation · Wireshark · CVSS 5.5 · 2026-07-08 | 5.5 | 0.1% | 2026-07-08 |
| CVE-2026-95394Unchecked Input for Loop Condition in WiresharkWireshark Foundation · Wireshark · CVSS 4.7 · 2026-09-29 | 4.7 | 0.1% | 2026-09-29 |
| CVE-2026-41986Logic bypass vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability.Huawei · HarmonyOS · CVSS 2.4 · 2026-06-09 | 2.4 | 0.1% | 2026-06-09 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.