CWE-185: CWE-185
Yearly Trend
Top Affected Vendors
All CWE-185 CVEs (7)
This vulnerability allows attackers to bypass OAuth2 redirect URI validation in authentik by exploiting improper regex escaping. Attackers can registe...
Nov 21, 2024CVE-2026-25896 is a vulnerability in fast-xml-parser where a dot (.) in a DOCTYPE entity name is treated as a regex wildcard during entity replacement...
Feb 20, 2026An incorrect regular expression in Bitdefender GravityZone Update Server allows attackers to perform Server-Side Request Forgery (SSRF) and reconfigur...
Apr 9, 2024An unauthenticated remote attacker can send specially crafted chat messages to Cisco Enterprise Chat and Email (ECE) to trigger a denial of service co...
Apr 2, 2025Litestar ASGI framework versions before 2.20.0 have a host validation bypass vulnerability. Attackers can craft malicious host headers that match rege...
Feb 9, 2026Fastify incorrectly accepts malformed Content-Type headers with trailing characters, violating RFC 9110. This allows attackers to bypass content-type ...
Mar 6, 2026Hono framework's IP restriction middleware improperly validates IPv4 addresses, allowing attackers to bypass IP-based access controls by crafting malf...
Jan 27, 2026About CWE-185 (CWE-185)
Our database tracks 7 CVEs classified as CWE-185, with 2 rated critical and 2 rated high severity. The average CVSS score for CWE-185 vulnerabilities is 7.3.
External reference: View CWE-185 on MITRE CWE →
Monitor CWE-185 Vulnerabilities
Get alerted when new CWE-185 CVEs affect your infrastructure.
Start Monitoring Free