CWE-179: Incorrect Behavior Order: Early Validation
Filter
The product validates input before applying protection mechanisms that modify the input.
What the weakness is: CWE-179 at MITRE
Ask an AI about CWE-179
ChatGPTClaudePerplexityGoogle AI Mode
Show the prompt
Explain CWE-179: Incorrect Behavior Order: Early Validation and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/179.html and https://cve.bz/cve/cwe/179?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 6.3CVE-2026-84177
Incorrect behavior order in Apache Wicket: a file path is validated before the framework appends the attributes that complete it. org.apache.wicket.request.resource.PackageResource asks the configured package resource guard about a path b…
- 2.1CVE-2026-90813EPSS 0.6%
A vulnerability was detected in cosmicstack-labs mercury-agent up to 1.1.13. Affected is the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Execution. The manipulation results in incor…
- 7.8CVE-2026-49414EPSS 0.2%
The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes the PIE base address, rather than before. As a result, a user-requested ASLR disable was still in effect at the point where…
- 3.7CVE-2026-3832EPSS 0.8%
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-…
- 7.8CVE-2026-32305EPSS 0.4%
Traefik is an HTTP reverse proxy and load balancer. Versions 2.11.40 and below, 3.0.0-beta1 through 3.6.11, and 3.7.0-ea.1 are vulnerable to mTLS bypass through the TLS SNI pre-sniffing logic related to fragmented ClientHello packets. When…
- 7.5CVE-2026-25223EPSS 0.9%
Fastify is a fast and low overhead web framework, for Node.js. Prior to version 5.7.2, a validation bypass vulnerability exists in Fastify where request body validation schemas specified by Content-Type can be completely circumvented. By a…
- 5.5CVE-2025-4759EPSS 0.4%
Versions of the package lockfile-lint-api before 5.9.2 are vulnerable to Incorrect Behavior Order: Early Validation via the resolved attribute of the package URL validation which can be bypassed by extending the package name allowing an at…
- 7.3CVE-2024-41686EPSS 0.2%
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to improper implementation of password policies. A local attacker could exploit this by creating password that do not adhere to the defined security standards/policy on th…
- 8.8CVE-2022-1271EPSS 5.5%
An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-sel…