CWE-625 · Input Validation and Logic
Permissive Regular Expression
22CVEs
SortMost likely exploited
22 CVEs with CWE-625 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2018-8926Permissive regular expression vulnerability in synophoto_dsm_user in Synology Photo Station before 6.8.5-3471 and before 6.3-2975 allows remote authenticated users to conduct priv…Synology · Photo Station · CVSS 8.8 · 2018-06-08 | 8.8 | 1.7% | 2018-06-08 |
| CVE-2023-6544Keycloak: authorization bypassRed Hat · Red Hat build of Keycloak 22 · CVSS 5.4 · 2024-04-25 | 5.4 | 1.1% | 2024-04-25 |
| CVE-2026-23651Microsoft ACI Confidential Containers Elevation of Privilege VulnerabilityMicrosoft · Microsoft ACI Confidential Containers · CVSS 6.7 · 2026-03-05 | 6.7 | 0.6% | 2026-03-05 |
| CVE-2020-8910Auth Bypass in Google's Closure-LibraryGoogle · Closure-Library · CVSS 6.5 · 2020-03-26 | 6.5 | 0.5% | 2020-03-26 |
| CVE-2026-82726AshPhoenix get_subdomain maps a crafted or differently-cased Host header to an arbitrary tenantash-project · ash_phoenix · CVSS 6.3 · 2026-08-31 | 6.3 | 0.5% | 2026-08-31 |
| CVE-2026-55536Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92)MervinPraison · PraisonAI · CVSS 9.1 · 2026-08-25 | 9.1 | 0.5% | 2026-08-25 |
| CVE-2026-34157Wails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOriginswailsapp · wails · CVSS 7.6 · 2026-11-05 | 7.6 | 0.5% | 2026-11-05 |
| CVE-2024-49400Tacquito prior to commit 07b49d1358e6ec0b5aa482fcd284f509191119e2 was not properly performing regex matches on authorized commands and arguments. Configured allowed commands/argum…Meta · Tacquito · CVSS 9.8 · 2024-10-17 | 9.8 | 0.5% | 2024-10-17 |
| CVE-2026-32973OpenClaw < 2026.3.11 - Exec Allowlist Pattern Overmatch via POSIX Path NormalizationOpenClaw · OpenClaw · CVSS 9.8 · 2026-03-29 | 9.8 | 0.4% | 2026-03-29 |
| CVE-2026-64940Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability due to a permissive regular expression, which may allow an attacker who can access the aff…Nishishi Factory · Tegalog -Fumy Otegaru Memo Logger- · CVSS 8.6 · 2026-08-10 | 8.6 | 0.4% | 2026-08-10 |
| CVE-2026-14814Permissive Regular Expression in GitLabGitLab · GitLab · CVSS 8.2 · 2026-10-13 | 8.2 | 0.4% | 2026-10-13 |
| CVE-2026-73845CKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`)ondata · ckan-mcp-server · CVSS 5.3 · 2026-08-14 | 5.3 | 0.4% | 2026-08-14 |
| CVE-2026-79965Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of Critical State Data vulnerability. A…Dell · Secure Connect Gateway 5.0 - Application · CVSS 5.3 · 2026-09-09 | 5.3 | 0.3% | 2026-09-09 |
| CVE-2026-19278Stackrox: stackrox: privilege escalation via unanchored regular expressions in auth m2m role mappingsRed Hat · Red Hat Advanced Cluster Security 4 · CVSS 6.8 · 2026-08-10 | 6.8 | 0.3% | 2026-08-10 |
| CVE-2026-118995CallBackery versions before 0.62.0 for Perl accept unintended values in form fields checked by createRxValidatorCallBackery · CVSS 9.1 · 2026-10-30 | 9.1 | 0.3% | 2026-10-30 |
| CVE-2026-102983Astro: Netlify Image CDN allowlist bypass enables SSRFwithastro · astro · CVSS 6.3 · 2026-09-30 | 6.3 | 0.3% | 2026-09-30 |
| CVE-2026-123315In JetBrains Junie CLI before 26.8.24 command execution was possible via the Allow Similar Commands optionJetBrains · Junie CLI · CVSS 7 · 2026-11-06 | 7.0 | 0.3% | 2026-11-06 |
| CVE-2026-34763Rack: Rack::Directory info disclosure and DoS via unescaped regex interpolationrack · rack · CVSS 5.3 · 2026-04-02 | 5.3 | 0.3% | 2026-04-02 |
| CVE-2026-34830Rack: Rack::Sendfile regex injection via HTTP_X_ACCEL_MAPPING header allows arbitrary file reads through nginxrack · rack · CVSS 5.9 · 2026-04-02 | 5.9 | 0.2% | 2026-04-02 |
| CVE-2026-44587CarrierWave has a denylisted_content_type bypass via Unescaped Regex Metacharacterscarrierwaveuploader · carrierwave · CVSS 4.7 · 2026-06-16 | 4.7 | 0.2% | 2026-06-16 |
| CVE-2026-37737sanic-cors version 2.2.0 and prior contains an improper regular expression in the try_match() function in sanic_cors/core.py that uses re.match without end-anchoring. This allows…No vendor recorded · CVSS 6.5 · 2026-06-05 | 6.5 | 0.2% | 2026-06-05 |
| CVE-2026-126367@grpc/grpc-js: safe_regex incorrectly applies partial string matching for patterns with alternationgrpc · grpc-node · CVSS 4.8 · 2026-11-12 | 4.8 | 0.2% | 2026-11-12 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.