Weakness Types (CWE) | 9mmPterodactyl

CWE-284 (2605) CWE-79 (1759) CWE-416 (1278) CWE-862 (1115) CWE-89 (1087) CWE-22 (1001) CWE-125 (857) CWE-200 (835) CWE-306 (829) CWE-122 (821) CWE-20 (783) CWE-78 (695) CWE-918 (679) CWE-787 (672) CWE-94 (626) CWE-863 (600) CWE-74 (599) CWE-639 (527) CWE-400 (509) CWE-269 (499) CWE-119 (493) CWE-770 (426) CWE-502 (422) CWE-287 (419) CWE-121 (403) CWE-77 (370) CWE-190 (359) CWE-362 (319) CWE-352 (269) CWE-285 (238)

CWE-1325

9 CVEs View on MITRE →

CVE	Severity	CVSS	EPSS	Published	Description	Flags
`CVE-2026-109618`	critical	9.2	1.0000	2026-10-21	PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code e	KEV 710 PoC
`CVE-2026-109619`	critical	9.2	1.0000	2026-10-21	PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote cod	KEV
`CVE-2026-8199`	high	7.1	0.0026	2026-05-13	An authenticated user can cause excess memory usage via bitwise match expression AST processing of $
`CVE-2026-13056`	high	7.1	0.0040	2026-07-22	Using expressions that generate large arrays it is possible to craft a query that creates very large
`CVE-2026-54080`	medium	6.9	0.0052	2026-07-29	veraPDF PDF parser is a PDF parser for veraPDF. Prior to 1.30.2 and 1.31.23, veraPDF-parser contains
`CVE-2026-54081`	medium	6.9	0.0052	2026-07-29	veraPDF PDF parser is a PDF parser for veraPDF. Prior to 1.30.2 and 1.31.23, veraPDF-parser contains
`CVE-2026-18772`	medium	6.5	0.0036	2026-08-04	Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allo
`CVE-2026-6533`	medium	5.5	0.0015	2026-04-30	Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows de
`CVE-2026-71436`	medium	5.3	0.0058	2026-08-06	Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and char