CWE-158

CWE-158 · 9 records · 7 with a public proof-of-concept

Records the NVD classes under CWE-158, highest CVSS first.

  1. HIGH 7.8CVE-2026-92705public PoC2026-10-09

    Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by `Automation Scripts` metadata in `ASS` subtitle projects without asking whether the user trusts the scripts or their authors…

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 6.5CVE-2026-115473public PoC2026-11-04

    Mongoose is an embedded web server and network library. Prior to 7.22, mg_path_is_sane in src/util.c read path.buf[1] without first requiring path.len to be at least two and read s[2] when only two bytes remained. Unauthenticated remote requests reaching mg_ht…

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 5.3CVE-2026-105240public PoC2026-10-06

    Improper Neutralization of Null Byte or NUL Character vulnerability in the OutputDebugStringAppender of Apache log4net. A NUL character in logged content ended the debug output record at that point, so everything the layout rendered after it, including except…

    log4net

    AI risk analysis on Exploit-DB.ai →

  4. MEDIUM 5.3CVE-2026-105239public PoC2026-10-06

    Improper Neutralization of Null Byte or NUL Character vulnerability in the EventLogAppender of Apache log4net. A NUL character in logged content ended the Windows Event Log record at that point, so everything the layout rendered after it, including exception …

    log4net

    AI risk analysis on Exploit-DB.ai →

  5. MEDIUM 4.8CVE-2026-118767public PoC2026-10-29

    Botan is a C++ cryptography library. From 1.11.22 until 3.13.0, Botan's Python binding converted Python strings containing U+0000 to const char* values without consistently rejecting the embedded NUL, causing bcrypt and check_bcrypt to process only the prefix …

    AI risk analysis on Exploit-DB.ai →

  6. UNSCOREDCVE-2026-124077public PoC2026-11-09

    The GitIdentifiers class in Apache Commons Codec did not reject NUL bytes in tree entry names. Because Git uses a NUL byte to mark the end of each entry name in a tree object, a crafted name could make one tree serialize to the same bytes as a different tree. …

    AI risk analysis on Exploit-DB.ai →

  7. UNSCOREDCVE-2026-1054752026-11-02

    Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data.

    AI risk analysis on Exploit-DB.ai →

  8. UNSCOREDCVE-2026-116566public PoC2026-10-29

    socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be silently truncated.

    AI risk analysis on Exploit-DB.ai →

  9. UNSCOREDCVE-2026-847902026-10-13

    OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field

    AI risk analysis on Exploit-DB.ai →