CWE-624 · Command and Code Injection
Executable Regular Expression Error
4CVEs
0exploited
0with a public check
0likely (EPSS 10%+)
SortMost likely exploited
4 CVEs with CWE-624 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-41655TF2 Item Format Regular Expression Denial of Service vulnerabilitydanocmx · node-tf2-item-format · CVSS 7.5 · 2024-07-23 | 7.5 | 0.8% | 2024-07-23 |
| CVE-2026-113877HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressionsHTTP-Headers-ActionPack · CVSS 7.5 · 2026-10-23 | 7.5 | 0.7% | 2026-10-23 |
| CVE-2026-25237PEAR is Vulnerable to PHP Code Execution via preg_replace /e in Bug Update Emailspear · pearweb · CVSS 9.2 · 2026-02-03 | 9.2 | 0.5% | 2026-02-03 |
| CVE-2026-97076WordPress WP Rocket plugin < 3.23.5 - Denial of Service Attack vulnerabilityWP Media · WP Rocket · CVSS 7.5 · 2026-10-09 | 7.5 | 0.3% | 2026-10-09 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.