Misinterpretation of Input
CWE-115
The product misinterprets an input, whether from an attacker or another product, in a security-relevant fashion.
We track 8 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.4.
Latest Misinterpretation of Input vulnerabilities
- 8.8 High severity
dulwich: Misinterpretation of Input
Dulwich before 1.2.20 contains a commit object parsing vulnerability where the read path in _parse_commit resolves a duplicate tree header to the last occurrence instead of the first, diverging from core git's resolution behavior, while Poetry 2.5.1 ships this
- 8.8 High severity
pgAdmin 4: Improper Neutralization of Special Elements used in an OS Command
pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command and checks that the query's parentheses are balanced so that nothing can escape the wrapper. The check rejected a backslash inside a single-quoted string, but not
- 9.9 Critical severity
pgAdmin 4: Improper Neutralization of Special Elements used in an OS Command
pgAdmin 4's Import/Export Data tool builds a psql \copy (...) command line by interpolating a user-supplied SQL query into a Jinja template and passing the rendered line to psql via --command. To stop an attacker from breaking out of the (...) wrapper, create_
- 9.0 Critical severity
pgAdmin 4: Improper Neutralization of Special Elements used in an SQL Command
The fix for CVE-2026-12045 in pgAdmin 4 9.16 required the LLM-supplied query passed to the AI Assistant's execute_sql_query tool to parse, via sqlparse, as exactly one non-transaction-control statement before running it inside a BEGIN TRANSACTION READ ONLY wra
- 8.0 High severity
Level 2 EV Charger: Misinterpretation of Input
WOLFBOX Level 2 EV Charger MCU Command Parsing Misinterpretation of Input Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installatons of WOLFBOX Level 2 EV Charger devices. Authen
- 7.5 High severity
Red Hat Enterprise Linux 10: Misinterpretation of Input
A flaw was found in libsoup. The HTTP/2 server in libsoup may not fully validate the values of pseudo-headers :scheme, :authority, and :path, which may allow a user to cause a denial of service (DoS).
- 7.5 High severity
danny-avila/librechat: Misinterpretation of Input
An unhandled exception in danny-avila/librechat version 3c94ff2 can lead to a server crash. The issue occurs when the fs module throws an exception while handling file uploads. An unauthenticated user can trigger this exception by sending a specially crafted r
- 7.4 High severity
Cisco IOS XE Software: Interpretation Conflict
A vulnerability in the implementation of IPv6 VPN over MPLS (6VPE) with Zone-Based Firewall (ZBFW) of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability