CWE-794 · Injection and Smuggling
Incomplete Filtering of Multiple Instances of Special Elements
5CVEs
SortMost likely exploited
5 CVEs with CWE-794 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-21876OWASP CRS has multipart bypass using multiple content-type partscoreruleset · coreruleset · CVSS 9.3 · 2026-01-08 | 9.3 | 17% | 2026-01-08 |
| CVE-2019-0002Junos OS: EX2300 and EX3400 series: Certain stateless firewall filter rules might not take effectJuniper Networks · Junos OS · CVSS 5.8 · 2019-01-15 | 5.8 | 2.4% | 2019-01-15 |
| CVE-2020-1665Junos OS: MX series/EX9200 Series: IPv6 DDoS protection does not work as expected.Juniper Networks · Junos OS · CVSS 5.3 · 2020-10-16 | 5.3 | 1.3% | 2020-10-16 |
| CVE-2021-0203Junos OS: EX and QFX5K Series: Storm Control does not work as expected when Redundant Trunk Group is configuredJuniper Networks · Junos OS · CVSS 8.6 · 2021-01-15 | 8.6 | 1.0% | 2021-01-15 |
| CVE-2021-0233Junos OS: ACX500 Series, ACX4000 Series: Denial of Service due to FFEB crash while processing high rate of specific packets.Juniper Networks · Junos OS · CVSS 7.5 · 2021-04-22 | 7.5 | 1.0% | 2021-04-22 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.