CWE-807 · Input Validation and Logic
Reliance on Untrusted Inputs in a Security Decision
111CVEs
SortMost likely exploited
111 CVEs with CWE-807 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-21509In CISA KEVExploitedMicrosoft Office Security Feature Bypass VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise · CVSS 7.8 · 2026-01-26 | 7.8 | 71% | 2026-01-26 |
| CVE-2026-21514In CISA KEVExploitedMicrosoft Word Security Feature Bypass VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise · CVSS 7.8 · 2026-02-10 | 7.8 | 1.6% | 2026-02-10 |
| CVE-2026-56681Check9router <=0.5.4 - Authentication Bypassdecolua · 9router · CVSS 7.3 · 2026-09-22 | 7.3 | 1.1% | 2026-09-22 |
| CVE-2024-13974A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21.0 MR1 (20.0.1) can lead to attackers controlling the firewall’s DNS environment to…Sophos · Sophos Firewall · CVSS 8.1 · 2025-07-21 | 8.1 | 9.1% | 2025-07-21 |
| CVE-2025-49827Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) Vulnerable to Bypass of IAM Authenticatorcyberark · conjur · CVSS 9.1 · 2025-07-15 | 9.1 | 1.4% | 2025-07-15 |
| CVE-2026-102117Kiteworks Core Remote Code ExecutionKiteworks · Core · CVSS 7.2 · 2026-09-30 | 7.2 | 1.3% | 2026-09-30 |
| CVE-2026-82533DeepSeek Harness < 0.1.2-alpha.1 Authentication Bypass via Host Header SpoofingDeepSeek · DeepSeek Harness · CVSS 9.6 · 2026-09-08 | 9.6 | 1.2% | 2026-09-08 |
| CVE-2021-31999Rancher: Privilege escalation vulnerability via malicious Connection headerRancher · Rancher · CVSS 8.8 · 2021-07-15 | 8.8 | 1.1% | 2021-07-15 |
| CVE-2026-118154Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft · Microsoft Exchange Server Subscription Edition RTM · CVSS 8.8 · 2026-11-10 | 8.8 | 1.0% | 2026-11-10 |
| CVE-2026-20849Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 7.5 · 2026-01-13 | 7.5 | 1.0% | 2026-01-13 |
| CVE-2024-29039Missing check in tpm2_checkquote allows attackers to misrepresent the TPM statetpm2-software · tpm2-tools · CVSS 9.1 · 2024-06-28 | 9.1 | 1.0% | 2024-06-28 |
| CVE-2022-20744Cisco Firepower Management Center Software Information Disclosure VulnerabilityCisco · Cisco Firepower Management Center · CVSS 4.3 · 2022-05-03 | 4.3 | 0.9% | 2022-05-03 |
| CVE-2021-36777login-proxy sends password to attacker-provided domainopenSUSE · Build service · CVSS 8.1 · 2022-03-09 | 8.1 | 0.9% | 2022-03-09 |
| CVE-2017-0887Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation. Due to not properly sanitizing values provided by the `OC-Total-Length` HTTP header an aut…Nextcloud · Nextcloud Server · 2017-04-05 | – | 0.9% | 2017-04-05 |
| CVE-2021-29479Cached redirect poisoning via X-Forwarded-Host headerratpack · ratpack · CVSS 7 · 2021-06-29 | 7.0 | 0.9% | 2021-06-29 |
| CVE-2026-64827Telenia TVox 26.5.3 Authentication Bypass via set_env.phpTelenia Software · TVox · CVSS 9.8 · 2026-08-03 | 9.8 | 0.8% | 2026-08-03 |
| CVE-2026-102234Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft · Visual Studio Code · CVSS 7.4 · 2026-10-13 | 7.4 | 0.8% | 2026-10-13 |
| CVE-2026-84474Automation-controller: automation-controller-container: automation-controller: view_jobtemplate to execute privilege escalation via host_config_key exposure and x-forwarded-for sp…Red Hat · Red Hat Ansible Automation Platform 2.4 for RHEL 8 · CVSS 9.9 · 2026-09-23 | 9.9 | 0.8% | 2026-09-23 |
| CVE-2026-83522Windows IKE Extension Spoofing VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 8.1 · 2026-10-13 | 8.1 | 0.8% | 2026-10-13 |
| CVE-2026-87858Temporal Server completion callback source header can direct attacker-chosen requests to the internal frontend with administrator authorizationTemporal Technologies, Inc. · Temporal Server · CVSS 7.2 · 2026-09-21 | 7.2 | 0.8% | 2026-09-21 |
| CVE-2026-85817Microsoft PowerShell Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 8.8 · 2026-10-13 | 8.8 | 0.7% | 2026-10-13 |
| CVE-2025-12488oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerabilityoobabooga · text-generation-webui · CVSS 9.8 · 2025-11-06 | 9.8 | 0.7% | 2025-11-06 |
| CVE-2025-12487oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerabilityoobabooga · text-generation-webui · CVSS 9.8 · 2025-11-06 | 9.8 | 0.7% | 2025-11-06 |
| CVE-2026-96251Microsoft PowerShell Remote Code Execution VulnerabilityMicrosoft · PowerShell 7.4 · CVSS 8.8 · 2026-10-13 | 8.8 | 0.7% | 2026-10-13 |
| CVE-2026-63041Apache APISIX: attach-consumer-label does not strip client-supplied consumer-label headersApache Software Foundation · Apache APISIX · CVSS 5.3 · 2026-08-26 | 5.3 | 0.7% | 2026-08-26 |
| CVE-2026-54730authentik: Authentication Flow Bypass via Unguarded challenge_valid() in AuthenticatorEndpointGDTCStage and GoogleChromeStageViewgoauthentik · authentik · CVSS 8.6 · 2026-08-18 | 8.6 | 0.7% | 2026-08-18 |
| CVE-2026-66768Improper Access Control in SAP NetWeaver (SAP GUI for Java)SAP_SE · SAP NetWeaver (SAP GUI for Java) · CVSS 9 · 2026-09-08 | 9.0 | 0.6% | 2026-09-08 |
| CVE-2026-90908Azul Payara JMX/RMI Remote Authentication Bypass Leading to Remote Code Execution via GenericAdminAuthenticatorAzul Payara · Payara Server · CVSS 9.3 · 2026-11-12 | 9.3 | 0.5% | 2026-11-12 |
| CVE-2026-39807Client-supplied URI scheme trusted without transport verification in banditmtrudel · bandit · CVSS 6.3 · 2026-05-01 | 6.3 | 0.5% | 2026-05-01 |
| CVE-2024-51561Authentication bypass Vulnerability in AeroBrokerage Technology Solutions · Aero · CVSS 9.3 · 2024-11-04 | 9.3 | 0.5% | 2024-11-04 |
| CVE-2026-111869makeplane API Endpoint reliance on untrusted inputs in a security decisionmakeplane · plane · CVSS 5.3 · 2026-10-18 | 5.3 | 0.5% | 2026-10-18 |
| CVE-2023-46686A reliance on untrusted inputs in a security decision could be exploited by a privileged user to configure the Gallagher Command Centre Diagnostics Service to use less secure comm…Gallagher · Command Centre Diagnostics Service · CVSS 5.5 · 2023-12-18 | 5.5 | 0.5% | 2023-12-18 |
| CVE-2024-21510Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host (XFH) header. When making a request to a…sinatra · CVSS 5.4 · 2024-11-01 | 5.4 | 0.5% | 2024-11-01 |
| CVE-2025-59152X-Forwarded-For Header Spoofing Bypasses Litestar Rate Limitinglitestar-org · litestar · CVSS 7.5 · 2025-10-06 | 7.5 | 0.5% | 2025-10-06 |
| CVE-2026-81179SysReptor: Host header injection might allow account takeoverSyslifters · sysreptor · CVSS 8.1 · 2026-09-18 | 8.1 | 0.5% | 2026-09-18 |
| CVE-2026-79701Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass in Module Context in the Contact, Opt-in and Form Builder Addons in SP Page Builder Pro 3.2.6 - 5.6.1p2 and 6.0.…joomshaper.com · SP Page Builder (Pro) extension for Joomla · CVSS 6.9 · 2026-09-14 | 6.9 | 0.5% | 2026-09-14 |
| CVE-2026-79700Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass via Request-Controlled CAPTCHA Configuration in SP Page Builder Pro 5.1.4 - 6.9.0joomshaper.com · SP Page Builder (Pro) extension for Joomla · CVSS 6.9 · 2026-09-14 | 6.9 | 0.5% | 2026-09-14 |
| CVE-2025-13926Contemporary Controls BASC 20T Reliance on Untrusted Inputs in a Security DecisionContemporary Controls · BASControl20 · CVSS 9.8 · 2026-04-09 | 9.8 | 0.5% | 2026-04-09 |
| CVE-2026-88210Microsoft Office Word Security Feature Bypass VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise · CVSS 7.8 · 2026-10-13 | 7.8 | 0.4% | 2026-10-13 |
| CVE-2026-9077Reliance on Untrusted Inputs in a Security Decision vulnerabilities in Model Context Protocol featuresIBM · Langflow OSS · CVSS 8.5 · 2026-08-05 | 8.5 | 0.4% | 2026-08-05 |
| CVE-2025-24369Anubis has a bot protection bypass when a sophisticated attacker asks to pass a challenge of difficulty 0Xe · x · CVSS 2.3 · 2025-01-27 | 2.3 | 0.4% | 2025-01-27 |
| CVE-2026-108433Microsoft Office Word Security Feature Bypass VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise · CVSS 7.8 · 2026-10-15 | 7.8 | 0.4% | 2026-10-15 |
| CVE-2026-87479Insufficient policy enforcement in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engin…Google · Chrome · CVSS 8.3 · 2026-09-09 | 8.3 | 0.4% | 2026-09-09 |
| CVE-2026-16093Keycloak-services: keycloak-services: required signed-jwt assertion policy can be bypassed with unsigned assertion headersRed Hat · Red Hat build of Keycloak 26.6 · CVSS 5.4 · 2026-07-17 | 5.4 | 0.4% | 2026-07-17 |
| CVE-2026-111748AIOHTTP: Absolute-form request targets can spoof Request.schemeaio-libs · aiohttp · CVSS 6.3 · 2026-10-19 | 6.3 | 0.4% | 2026-10-19 |
| CVE-2026-13059Improper Validation of Client-Supplied Command Parameters Allowing Role-Based Access Control BypassMongoDB · MongoDB Server · CVSS 8.1 · 2026-07-22 | 8.1 | 0.4% | 2026-07-22 |
| CVE-2026-25958Cube privilege escalation via a specially crafted requestcube-js · cube · CVSS 7.7 · 2026-02-09 | 7.7 | 0.4% | 2026-02-09 |
| CVE-2026-121885Podman: untrusted image labels allow auto-update to restart arbitrary systemd unitsRedhat · podman · CVSS 6.5 · 2026-11-10 | 6.5 | 0.4% | 2026-11-10 |
| CVE-2026-23848MyTube has Rate Limiting Bypass via X-Forwarded-For Header Spoofingfranklioxygen · MyTube · CVSS 6.5 · 2026-01-19 | 6.5 | 0.4% | 2026-01-19 |
| CVE-2024-47254In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability could allow an attacker to escalate their privileges and gain ro…2N · 2N Access Commander · CVSS 6.3 · 2024-11-05 | 6.3 | 0.4% | 2024-11-05 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.