cve.bz

CWE-1286: Improper Validation of Syntactic Correctness of Input

Filter

The product receives input that is expected to be well-formed - i.e., to comply with a certain syntax - but it does not validate or incorrectly validates that the input complies with the syntax.

What the weakness is: CWE-1286 at MITRE

Ask an AI about CWE-1286

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-1286: Improper Validation of Syntactic Correctness of Input and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1286.html and https://cve.bz/cve/cwe/1286?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. –CVE-2026-20595

    In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for explo…

  2. 8.7CVE-2026-111107EPSS 0.4%

    A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticated attacker with network access to the management interface to crash the management service by sending a specially craf…

  3. 8.1CVE-2026-110675EPSS 0.5%

    Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys under allow_barekey in decode_hv. With utf8 and allow_barekey, which relaxed enables, a quoted key is validated as UTF-8 but a bare key's by…

  4. 9.8CVE-2026-110759EPSS 0.4%

    Text::CSV_XS versions before 1.65 for Perl return a 0xFF byte that is not in the input for an empty last field followed by a lone CR in parse. When the input to parse ends in a separator and a lone CR, the parser treats the end of the inp…

  5. 6.9CVE-2026-105660EPSS 0.6%

    Improper Validation of Syntactic Correctness of Input vulnerability in mtrudel bandit allows an unauthenticated remote attacker to set conn.host and conn.port to values outside the RFC 3986 host grammar via the authority of an HTTP/1 absol…

  6. 5.3CVE-2026-67418EPSS 0.4%

    RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, the MQTT 5 parser in deps/rabbitmq_mqtt/src/rabbit_mqtt_packet.erl accepts Request-Problem-Information on PUBLISH packets even thou…

  7. 9.2CVE-2026-102084EPSS 0.5%

    An Improper Validation of Syntactic Correctness of Input vulnerability in the VPN daemon of Juniper Networks Junos OS on SRX Series allows an authenticated, network-based attacker to take complete control of the device. If an SRX device c…

  8. 8.8CVE-2026-83728EPSS 0.3%

    Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.

  9. 6.9CVE-2026-109425EPSS 0.2%

    Tink-go (tink-crypto/tink-go) through 2.8.0 contains an input-validation vulnerability where keyset.NewHandleWithNoSecrets() and ReadWithNoSecrets() skip the structural Validate() step before constructing a keyset.Handle, allowing malforme…

  10. 5.7CVE-2026-100902EPSS 0.3%

    A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007. Affected by this issue is some unknown functionality of the file /wallpaper of the component Wallpaper Upload. This manipulation of the argument wallpaper c…

  11. 7.5CVE-2026-87082EPSS 0.4%

    Net::IDN::Punycode versions before 2.590 for Perl hang, crash or return a wrong label via unvalidated malformed UTF-8 in encode_punycode. Neither backend checks that its input is well-formed UTF-8, so a string with the UTF-8 flag set over…

  12. 9.1CVE-2026-87080EPSS 0.4%

    Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never encoded in decode_punycode. The pure-Perl decoder reads one digit at a time with four-argument substr and tests the r…

  13. 4.8CVE-2026-69211EPSS 0.3%

    Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, ResponseCookie.render writes attacker-influenced name, content, domain, path, and extension values without neutralizing semicolons or control characters. An app…

  14. 8.7CVE-2026-88260EPSS 0.3%

    Authentication bypass using an alternate path or channel and Improper validation of syntactic correctness of input vulnerability in Brainzcompany Zenius EMS 8.0 allows Remote Code Inclusion. This issue affects Zenius EMS 8.0: through OAM …

  15. 8.8CVE-2026-88009EPSS 0.4%

    Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.57, and 3.7.13, Traefik accepts a rootless HTTP/1 request target that Go stores in URL.Opaque while leaving URL.Path empty. The rewriteRequestBuilder path evalua…

  16. 6.9CVE-2026-83611EPSS 0.6%

    xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom version 0.6.0 and earlier, DOMParser.parseFromString() can silently…

  17. 6.3CVE-2026-72916EPSS 1.0%

    Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.4.21, 4.5.14, 4.6.4, and 4.7.0-beta.1, PrivateAddressCheck.private_address? in app/lib/private_address_check.rb normalized IPv4-mapped IPv6 addresses bu…

  18. 6.9CVE-2026-0931EPSS 0.4%

    Denial-of-service vulnerability in M-Files Server versions before 26.5.16015.3 allows an authenticated admin user to cause the M-Files Server process to crash and fail to restart.

  19. 7.6CVE-2026-25292EPSS 0.2%

    Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.

  20. 8.7CVE-2026-57026EPSS 0.5%

    An Improper Validation of Syntactic Correctness of Input vulnerability in the SIP plugin of Juniper Networks Junos OS on MX Series with SPC3 and SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS…

  21. 5.8CVE-2026-55767EPSS 0.2%

    Guzzle is an extensible PHP HTTP client. Prior to 7.12.1, CookieJar incorrectly accepts cookies with a dot-only Domain attribute and whitespace-padded variants. SetCookie::matchesDomain() removes leading dots from the cookie domain, normal…

  22. 8.7CVE-2026-48059EPSS 0.6%

    Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, the HAProxy PROXY protocol v2 codec in netty leaks native or heap memory on every connection when a…

  23. 8.6CVE-2026-50131EPSS 0.4%

    Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Fedify previously addressed SSRF/internal network access in GHSA-p9cg-vqcc-grcx by adding public URL validation before runtime document and media fet…

  24. 8.7CVE-2025-8873EPSS 0.4%

    On affected platforms running Arista EOS with IPsec configured, a specially crafted packet can cause the dataplane to stop processing all IPsec traffic. The control plane may detect this condition, and attempt to reset the IPsec processing…

  25. 7.1CVE-2019-25720EPSS 0.2%

    Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contain a denial-of-service vulnerability in all software versions that allows unauthenticated attackers to reboot the monitor by sending a malformed network…

  26. 6.3CVE-2021-4479EPSS 0.2%

    Dräger Atlan A350 versions 1.00 up to and including 1.01 contains an improper input handling vulnerability that allows attackers to cause a denial of service by sending specifically crafted non-Medibus-compliant data through the Medibus in…

  27. 6.3CVE-2019-25723EPSS 0.2%

    Dräger Perseus A500 software versions 2.00 through 2.02 contains an improper input handling vulnerability that allows external attackers to cause a denial of service by sending specifically crafted non-Medibus-compliant data through the Me…

  28. 7.2CVE-2026-24092EPSS 0.10%

    Memory Corruption when processing fastboot commands to set display mode.

  29. 7.2CVE-2026-24091EPSS 0.10%

    Memory corruption while processing fastboot commands with improperly formatted input.

  30. 7.2CVE-2026-24089EPSS 0.10%

    Memory corruption while processing fastboot commands with invalid input.

  31. 7.2CVE-2026-24087EPSS 0.10%

    Memory corruption while processing fastboot OEM commands.

  32. 5.1CVE-2026-10099EPSS 0.1%

    XX-Net V5.16.6 contains a WebSocket frame parsing vulnerability in the WebSocket_receive_worker routine of simple_http_server.py that allows attackers to cause corrupted application data by sending unmasked WebSocket frames. The server unc…

  33. 7.5CVE-2026-7307EPSS 0.9%

    A flaw was found in Keycloak. A remote, unauthenticated attacker can send a specially crafted XML input to the Security Assertion Markup Language (SAML) endpoint. This malicious input can cause high CPU usage and worker thread starvation, …

  34. 7.1CVE-2026-0983EPSS 0.2%

    Denial-of-service condition in M-Files Server versions before 26.5.16015.0, before 26.2 LTS, and before 25.8 LTS SR3 allows an authenticated user to cause the MFserver process to crash

  35. 9.1CVE-2026-42579EPSS 1.0%

    Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's DNS codec does not enforce RFC 1035 domain name constraints during either encoding or decoding. This creates a bidirecti…

  36. 8.7CVE-2026-6918EPSS 0.5%

    In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message.

  37. 8.3CVE-2026-6442EPSS 0.4%

    Improper validation of bash commands in Snowflake Cortex Code CLI versions prior to 1.0.25 allowed subsequent commands to execute outside the sandbox. An attacker could exploit this by embedding specially crafted commands in untrusted cont…

  38. 7.5CVE-2026-40198EPSS 0.3%

    Net::CIDR::Lite versions before 0.23 for Perl does not validate IPv6 group count, which may allow IP ACL bypass. _pack_ipv6() does not check that uncompressed IPv6 addresses (without ::) have exactly 8 hex groups. Inputs like "abcd", "1:2…

  39. 8.7CVE-2026-33778EPSS 0.3%

    An Improper Validation of Syntactic Correctness of Input vulnerability in the IPsec library used by kmd and iked of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated, network-based attacker to cause a complet…

  40. 6.5CVE-2026-34835EPSS 0.2%

    Rack is a modular Ruby web server interface. From versions 3.0.0.beta1 to before 3.1.21, and 3.2.0 to before 3.2.6, Rack::Request parses the Host header using an AUTHORITY regular expression that accepts characters not permitted in RFC-com…

  41. 7.5CVE-2026-33218EPSS 0.6%

    NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, a client which can connect to the leafnode port can crash the nats-server with a certain malformed messag…

  42. 7.5CVE-2026-27889EPSS 0.6%

    NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Starting in version 2.2.0 and prior to versions 2.11.14 and 2.12.5, a missing sanity check on a WebSockets frame could trigger a server panic i…

  43. 5.4CVE-2026-20114EPSS 0.4%

    A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate their privileges and access management APIs that would not normally be available for Lobby A…

  44. 5.0CVE-2025-13995EPSS 0.2%

    IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 could allow an attacker with access to one tenant to access hostname data from another tenant's account.

  45. 5.5CVE-2026-3632EPSS 0.2%

    A flaw was found in libsoup, a library used by applications to send network requests. This vulnerability occurs because libsoup does not properly validate hostnames, allowing special characters to be injected into HTTP headers. A remote at…

  46. 7.5CVE-2026-25679EPSS 0.8%

    url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.

  47. 5.3CVE-2025-59785EPSS 0.2%

    Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encryption. This vulnerability can only be exploited after authenticating with administrator priv…

  48. 6.3CVE-2025-13327EPSS 0.2%

    A flaw was found in uv. This vulnerability allows an attacker to execute malicious code during package resolution or installation via specially crafted ZIP (Zipped Information Package) archives that exploit parsing differentials, requiring…

  49. 6.5CVE-2026-21527EPSS 8.3%

    User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

  50. 8.3CVE-2026-25513EPSS 0.5%

    FacturaScripts is open-source enterprise resource planning and accounting software. Prior to version 2025.81, FacturaScripts contains a critical SQL injection vulnerability in the REST API that allows authenticated API users to execute arb…