Weakness Types (CWE) | 9mmPterodactyl

CWE-284 (2634) CWE-79 (1821) CWE-416 (1289) CWE-862 (1175) CWE-89 (1097) CWE-22 (1023) CWE-125 (880) CWE-200 (847) CWE-306 (838) CWE-122 (830) CWE-20 (795) CWE-78 (710) CWE-918 (689) CWE-787 (681) CWE-94 (641) CWE-863 (617) CWE-74 (600) CWE-639 (542) CWE-400 (530) CWE-269 (501) CWE-119 (494) CWE-502 (470) CWE-770 (440) CWE-287 (431) CWE-121 (406) CWE-77 (373) CWE-190 (367) CWE-362 (323) CWE-352 (276) CWE-285 (243)

CWE-644

9 CVEs View on MITRE →

CVE	Severity	CVSS	EPSS	Published	Description	Flags
`CVE-2026-33805`	critical	9.0	0.0044	2026-04-15	@fastify/reply-from v12.6.1 and earlier and @fastify/http-proxy v11.4.3 and earlier process the clie
`CVE-2026-67179`	high	7.8	0.0021	2026-08-11	Genkit does not properly validate host request headers. Any host on the developer's network, and any
`CVE-2026-55791`	medium	6.9	0.0046	2026-07-02	Craft CMS is a content management system (CMS). Versions 4.0.0-RC1 and above, prior to 4.18.0 and 5.
`CVE-2026-0516`	medium	6.5	0.0034	2026-08-05	A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow
`CVE-2026-4096`	medium	6.1	0.0015	2026-06-11	IBM DevOps Plan 3.0.0 through 3.0.6 is vulnerable to HTTP header injection, caused by improper valid
`CVE-2026-72574`	medium	6.1	0.0042	2026-08-10	A host header injection vulnerability in picocms/Pico through 2.1.4 allows an unauthenticated remote
`CVE-2026-48061`	medium	5.9	0.0037	2026-08-03	Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. In versions prior to 2.22.0,
`CVE-2026-21762`	medium	5.3	0.0029	2026-07-17	HCL DevOps Loop is affected by missing HTTP security headers. Missing security headers may reduce br
`CVE-2026-66778`	medium	5.3	0.0036	2026-08-11	SAP Approuter does not sufficiently sanitize certain request headers before forwarding traffic to in