Weaknesses of type CWE-436

115 results

Conflito de Interpretação

Fraqueza em que diferentes componentes de um sistema interpretam a mesma entrada ou dado de forma diferente, causando inconsistência lógica. Um atacante explora essa divergência para contornar validações em um componente enquanto consegue efeito diferente em outro, comprometendo a segurança geral.

Example

Um firewall valida uma URL como segura interpretando-a de uma forma, mas o navegador a interpreta diferentemente e acessa um endpoint malicioso. Ou um validador servidor rejeita um caminho com '..' enquanto outro componente o normaliza de forma distinta, permitindo path traversal.

How to mitigate

Padronize a interpretação: use bibliotecas de parsing e normalização comuns entre todos os componentes, valide em múltiplas camadas com a mesma lógica, e teste casos de borda onde diferentes interpretadores possam divergir (encoding, caracteres especiais, formatos ambíguos).

CVE-2026-44576MEDIUMNext.js: Cache poisoning in React Server Component responsesEPSS 0.3%CVE-2026-53537LOWPython-Multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parametersEPSS 0.3%CVE-2026-32065MEDIUMOpenClaw < 2026.2.25 - Approval Identity Mismatch in system.run Command ExecutionEPSS 0.3%CVE-2026-47344LOWTYPO3 HTML Sanitizer allows Cross-Site ScriptingEPSS 0.3%CVE-2026-82537HIGHRoo-Code 3.54.0 Auto-Approve Bypass via Shell Parser Word-Boundary MismatchEPSS 0.3%CVE-2026-33804HIGH@fastify/middie vulnerable to middleware bypass via deprecated ignoreDuplicateSlashes optionEPSS 0.3%CVE-2026-49473HIGH@cedar-policy/authorization-for-expressjs has an authorization bypass via query string manipulationEPSS 0.3%CVE-2026-88004HIGHTraefik entrypoint header-name sanitization bypassed via request trailersEPSS 0.3%CVE-2026-92598HIGHNodemailer before 9.1.0 IDN/Punycode Domain Allow-list BypassEPSS 0.3%CVE-2026-53538LOWPython-Multipart: Semicolon treated as querystring field separator enables parameter smugglingEPSS 0.3%CVE-2026-27896HIGHMCP Go SDK Vulnerable to Improper Handling of Case SensitivityEPSS 0.3%CVE-2026-92597HIGHNodemailer before 9.1.0 Email Domain Validation Bypass via RFC 5322 CommentEPSS 0.3%CVE-2026-16221HIGHfast-uri vulnerable to host confusion via literal backslash authority delimiterEPSS 0.3%CVE-2026-26961LOWRack: Multipart Boundary Parsing Ambiguity allowing WAF BypassEPSS 0.3%CVE-2026-30246MEDIUMgithub.com/gofiber/fiber/v3 cache middleware can mix responses across query parametersEPSS 0.3%CVE-2026-32766LOWastral-tokio-tar insufficiently validates PAX extensions during extractionEPSS 0.2%CVE-2026-48788HIGHRemark42: Cross-Site Scripting (XSS) on /api/v1/img via content-type spoofingEPSS 0.2%CVE-2026-42177MEDIUMlinux-entra-sso: PRT SSO cookie can leak to attacker-controlled hosts when broad host permissions are grantedEPSS 0.2%CVE-2026-75931HIGHfast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative referencesEPSS 0.2%CVE-2026-47076MEDIUMSSRF allowlist bypass via percent-encoded host in hackneyEPSS 0.2%