CWE-187
CVEs classified under CWE-187, newest first.
5 CVEsRSS
CVE-2026-81479Medium· 5.8Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Partial String Comparison vulnerability
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Partial String Comparison vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service.
CVE-2026-87853High· 7.5A flaw was found in SSSD's IdP authentication provider
A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identifier using strncmp() with the authenticated user's identifier length, performing a prefix comparison instead of …
CVE-2026-84376MediumAstro is a web framework for content-driven websites
Astro is a web framework for content-driven websites. Prior to 7.2.4, Astro stripped a configured non-root base path from request pathnames using a string-prefix check without verifying a path-segment boundary. With base "/app", a reques…
CVE-2026-62750Medium· 6.5Windows HTTP Protocol Stack Tampering Vulnerability
Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network.
CVE-2026-55602Mediumhttp-proxy-middleware `router` host+path substring matching allows Host-header-driven backend routing bypass
http-proxy-middleware `router` host+path substring matching allows Host-header-driven backend routing bypass