Falhas do tipo CWE-436

159 resultados

Conflito de Interpretação

Ocorre quando diferentes componentes de um sistema interpretam a mesma entrada, comando ou formato de dados de formas distintas, criando uma desconexão entre a intenção e o resultado. Um atacante explora essa divergência para contornar validações, executar ações não autorizadas ou injetar código malicioso.

Exemplo

Um firewall bloqueia requisições HTTP com 'union select' na query, mas o servidor backend interpreta sequências de espaços e comentários SQL de forma diferente do WAF. O atacante envia 'uni/**/on sel/**/ ect' que passa pelo filtro, mas o banco de dados executa como SQL injection completo.

Como mitigar

Normalize todas as entradas em um único ponto, antes de qualquer processamento, garantindo que validadores (WAF, parsers, bancos de dados) usem as mesmas regras. Implemente testes de integração que verifiquem se diferentes camadas interpretam dados idênticos da mesma maneira.

CVE-2026-68968HIGHApache Airflow: Authorization bypass in the Backfill API through conflicting interpretations of the backfill idEPSS 0.4%CVE-2026-110202HIGHRoo-Code through 3.54.0 Auto-Approve Bypass via Redirect Operator StrippingEPSS 0.4%CVE-2023-45715LOWHCL BigFix Platform is susceptible to a Denial of Service attackEPSS 0.4%CVE-2026-75931HIGHfast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative referencesEPSS 0.4%CVE-2026-14643MEDIUMundici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directivesEPSS 0.4%CVE-2026-42272HIGHHeimdall: Case-sensitive handling of URL-encoded slashes may lead to inconsistent path interpretationEPSS 0.4%CVE-2024-20293MEDIUMA vulnerability in the activation of an access control list (ACL) on Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower ThEPSS 0.4%CVE-2026-92598HIGHNodemailer before 9.1.0 IDN/Punycode Domain Allow-list BypassEPSS 0.4%CVE-2026-61789MEDIUMDBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validationEPSS 0.4%CVE-2026-92597HIGHNodemailer before 9.1.0 Email Domain Validation Bypass via RFC 5322 CommentEPSS 0.4%CVE-2026-18446HIGHfast-uri vulnerable to host confusion via backslash authority introducerEPSS 0.4%CVE-2026-84394HIGHfast-uri vulnerable to host confusion via an unclosed bracket in the URI authorityEPSS 0.4%CVE-2023-52892HIGHIn phpseclib before 1.0.22, 2.x before 2.0.46, and 3.x before 3.0.33, some characters in Subject Alternative Name fields in TLS certificatesEPSS 0.4%CVE-2026-73511MEDIUMEnvoy: Potential path-matching/authentication bypass when using Envoy in combination with a backend stripping per-segment path (matrix) parameters (e.g. Apache Tomcat)EPSS 0.4%CVE-2026-109297HIGHOpen WebUI 0.11.0 before 0.11.4 Denial of Service via Automation Recurrence RulesEPSS 0.4%CVE-2026-69246HIGHGuzzle: Noncanonical host can bypass host-based checksEPSS 0.4%CVE-2026-42274HIGHHeimdall: Authorization bypass via path normalization mismatchEPSS 0.4%CVE-2026-112362CRITICAL@fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targetsEPSS 0.4%CVE-2026-114131MEDIUMNuxt: Route rules are matched against the raw request path, so a percent-encoded segment can bypass `appMiddleware` on dynamic and catch-all routesEPSS 0.4%CVE-2026-122310CRITICALKyverno 1.19.1 before 1.19.2 Privilege Escalation via Policy apiCall urlPathEPSS 0.4%