CWE-149: Improper Neutralization of Quoting Syntax
Quotes injected into a product can be used to compromise a system. As data are parsed, an injected/absent/duplicate/malformed use of quotes may cause the process to take unexpected actions.
5 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2025-1094 — PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation
- CVE-2025-43878 — F5OS-A/C CLI vulnerability
- CVE-2026-42511 — Remote code execution via malicious DHCP options
Recently published
- CVE-2026-42511 — Remote code execution via malicious DHCP options
- CVE-2025-43878 — F5OS-A/C CLI vulnerability
- CVE-2025-1094 — PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation