CWE-790: Improper Filtering of Special Elements
The product receives data from an upstream component, but does not filter or incorrectly filters special elements before sending it to a downstream component.
13 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2026-2328 — Backend Access Due to Insufficient Input Validation
- CVE-2025-27260 — Ericsson Indoor Connect 8855 - Improper Filtering of Special Elements Vulnerability
- CVE-2026-11331 — Potential wildcard CNAME RPZ policy bypass
- CVE-2026-9658 — Plack::Middleware::Security::Common versions before 0.13.1 for Perl did not block header injections in request paths
- CVE-2025-0431 — Enterprise Protection Backslash URL Rewrite Bypass
- CVE-2024-43443 — Stored XSS in process management
- CVE-2024-43442 — Stored XSS in System Configuration
- CVE-2024-47984 — Dell RecoverPoint for Virtual Machines 6.0.x contains Denial of Service vulnerability. A User with Remote access could p
- CVE-2025-15576 — Jail chroot escape via fd exchange with a different jail
- CVE-2024-42416 — Multiple issues in ctl(4) CAM Target Layer
Recently published
- CVE-2026-11331 — Potential wildcard CNAME RPZ policy bypass
- CVE-2026-9658 — Plack::Middleware::Security::Common versions before 0.13.1 for Perl did not block header injections in request paths
- CVE-2026-2328 — Backend Access Due to Insufficient Input Validation
- CVE-2025-27260 — Ericsson Indoor Connect 8855 - Improper Filtering of Special Elements Vulnerability
- CVE-2025-15576 — Jail chroot escape via fd exchange with a different jail
- CVE-2025-0431 — Enterprise Protection Backslash URL Rewrite Bypass
- CVE-2024-47984 — Dell RecoverPoint for Virtual Machines 6.0.x contains Denial of Service vulnerability. A User with Remote access could p
- CVE-2024-42416 — Multiple issues in ctl(4) CAM Target Layer
- CVE-2024-43443 — Stored XSS in process management
- CVE-2024-43442 — Stored XSS in System Configuration
More specific weaknesses
- CWE-791 — Incomplete Filtering of Special Elements