CWE-688 · Input Validation and Logic
Function Call With Incorrect Variable or Reference as Argument
5CVEs
SortMost likely exploited
5 CVEs with CWE-688 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-76878In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the all_projects query parameter is set to false. The API checks for the presence of the all_proj…OpenStack · Aodh · CVSS 8.4 · 2026-08-19 | 8.4 | 0.6% | 2026-08-19 |
| CVE-2026-101959Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crashJuniper Networks · Junos OS · CVSS 6.5 · 2026-10-14 | 6.5 | 0.3% | 2026-10-14 |
| CVE-2026-33549SPIP 4.4.10 through 4.4.12 before 4.4.13 allows unintended privilege assignment (of administrator privileges) during the editing of an author data structure because of STATUT mish…SPIP · SPIP · CVSS 6.7 · 2026-03-22 | 6.7 | 0.2% | 2026-03-22 |
| CVE-2021-33713A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files, a hash function is called with an incorrect argument leadi…Siemens · JT Utilities · 2021-07-13 | – | 0.2% | 2021-07-13 |
| CVE-2026-12311Information disclosure, sandbox escape in the Security: Process Sandboxing componentMozilla · Firefox · CVSS 4.7 · 2026-06-16 | 4.7 | 0.2% | 2026-06-16 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.