CWE-134 (CWE-134) — 16 disclosed vulnerabilities

Records the NVD classes under CWE-134, highest CVSS first.

CRITICAL 9.8CVE-2026-767532026-10-06
A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an attacker to execute arbitrary code.
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.8CVE-2026-767222026-09-29
Uncontrolled Format string vulnerabilities exist in the affected interface of HPE Networking Instant ON APs that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host. Successful exploitation could result in a Denial-o…
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-1019652026-10-14
An Use of Externally-Controlled Format String vulnerability in the gRPC daemon of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause telemetry-service disruption, information disclosure, or potential root-level code execution v…
AI risk analysis on Exploit-DB.ai →
HIGH 8.7CVE-2026-846912026-09-23
A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The setting that formats the log message emitted for API 4XX errors is an administrator-controlled Python format-string template that is rendered with a live user object as an ar…
AI risk analysis on Exploit-DB.ai →
HIGH 8.3CVE-2026-454522026-10-15
Use of Externally-Controlled format string vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.
AI risk analysis on Exploit-DB.ai →
HIGH 8.2CVE-2026-1019662026-10-14
A Use of Externally-Controlled Format String vulnerability in the jti-dialoutd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause persistent telemetry dial-out denial of service via a crafted analytics sensor resource submit…
AI risk analysis on Exploit-DB.ai →
HIGH 8.1CVE-2026-1020622026-10-14
An Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a compromised or impersonated configured HTTPS f…
AI risk analysis on Exploit-DB.ai →
HIGH 7.8CVE-2026-858422026-10-13
Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
AI risk analysis on Exploit-DB.ai →
HIGH 7.8CVE-2026-835852026-10-13
Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.
AI risk analysis on Exploit-DB.ai →
HIGH 7.8CVE-2026-47494public PoC2026-09-30
NVIDIA GPU Display Driver for Linux contains a vulnerability where a user might be able to cause a format string issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and in…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.8CVE-2026-120059public PoC2026-11-02
For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC places that column's name, as reported by the server, into a printf-style format string. It later expands that string with one argument while it builds the WHERE…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.6CVE-2026-767292026-09-29
A format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to cause memory corruption with a modified input. Successful exploitation could allow an attacker to provoke a …
AI risk analysis on Exploit-DB.ai →
MEDIUM 4.9CVE-2026-945202026-10-13
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.
AI risk analysis on Exploit-DB.ai →
UNSCOREDCVE-2026-63201public PoC2026-10-30
Netopeer2 is a server for implementing network configuration management based on the `NETCONF` Protocol. In affected versions, a low-privileged authenticated `NETCONF` user can remotely crash `netopeer2-server` by sending a `get RPC` with an invalid `subtree f…
AI risk analysis on Exploit-DB.ai →
UNSCOREDCVE-2026-141572026-10-01
Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface.
AI risk analysis on Exploit-DB.ai →
UNSCOREDCVE-2026-184612026-09-22
Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows Format String Injection. This issue affects Connext Professional: from 7.5.0 before 7.7.0.1, from 7.3.0.10 before 7.3.1.6.
AI risk analysis on Exploit-DB.ai →