CWE-76 · Injection and Smuggling
Improper Neutralization of Equivalent Special Elements
15CVEs
SortMost likely exploited
15 CVEs with CWE-76 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-1883Reflected XSS in PaperCut NG/MFPaperCut · PaperCut NG, PaperCut MF · CVSS 6.3 · 2024-03-14 | 6.3 | 61% | 2024-03-14 |
| CVE-2024-34359llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadataabetlen · llama-cpp-python · CVSS 9.7 · 2024-05-10 | 9.7 | 26% | 2024-05-10 |
| CVE-2023-0493Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserverbtcpayserver · btcpayserver/btcpayserver · CVSS 5.3 · 2023-01-26 | 5.3 | 8.1% | 2023-01-26 |
| CVE-2024-1882Server-side resource injection in PaperCut NG/MFPaperCut · PaperCut NG, PaperCut MF · CVSS 7.2 · 2024-03-14 | 7.2 | 1.4% | 2024-03-14 |
| CVE-2024-2952Server-Side Template Injection in BerriAI/litellmberriai · berriai/litellm · CVSS 9.8 · 2024-04-10 | 9.8 | 1.3% | 2024-04-10 |
| CVE-2026-66362NGF vulnerabilityF5 · NGINX Gateway Fabric · CVSS 8.1 · 2026-09-02 | 8.1 | 0.6% | 2026-09-02 |
| CVE-2026-54722dssrf: there a critical security bug with remove_at_symbol_in_stringHackingRepo · dssrf-js · CVSS 8.7 · 2026-07-30 | 8.7 | 0.6% | 2026-07-30 |
| CVE-2026-11311NGINX Gateway Fabric vulnerabilityF5 · NGINX Gateway Fabric · CVSS 8.1 · 2026-06-17 | 8.1 | 0.6% | 2026-06-17 |
| CVE-2023-1149Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserverbtcpayserver · btcpayserver/btcpayserver · CVSS 5.7 · 2023-03-02 | 5.7 | 0.5% | 2023-03-02 |
| CVE-2024-1221Improper access controls on APIs on Linux and macOS in PaperCut NG/MFPaperCut · PaperCut NG, PaperCut MF · CVSS 3.1 · 2024-03-14 | 3.1 | 0.5% | 2024-03-14 |
| CVE-2026-55723NGINX Ingress Controller vulnerabilityF5 · NGINX Ingress Controller · CVSS 8.3 · 2026-07-15 | 8.3 | 0.5% | 2026-07-15 |
| CVE-2026-77180NGINX Ingress Controller vulnerabilityF5 · NGINX Ingress Controller · CVSS 8.3 · 2026-09-02 | 8.3 | 0.5% | 2026-09-02 |
| CVE-2026-91184NGINX Gateway Fabric vulnerabilityF5 · NGINX Gateway Fabric · CVSS 8.8 · 2026-10-14 | 8.8 | 0.5% | 2026-10-14 |
| CVE-2024-4897Remote Code Execution in parisneo/lollms-webuiparisneo · parisneo/lollms-webui · CVSS 8.4 · 2024-07-02 | 8.4 | 0.4% | 2024-07-02 |
| CVE-2024-21600Junos OS: PTX Series: In an FTI scenario MPLS packets hitting reject next-hop will cause a host path wedge conditionJuniper Networks · Junos OS · CVSS 6.5 · 2024-01-12 | 6.5 | 0.3% | 2024-01-12 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.