Threats Tagged 'cwe-697'
View all threats tagged with 'cwe-697'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cwe-697'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-73258: CWE-697: Incorrect Comparison in cesanta mongooseCVE-2026-73258 0 Mongoose is an embedded web server and network library. Prior to 7.22, a remote attacker can place a lone carriage return or line feed in multipart input processed by mg_http_next_multipart() in src/http.c. The loops comparing s[b] and s[b + 1], and s[h2] and s[h2 + 1], use an incorrect AND condition and stop when either character resembles part of a CRLF terminator. This truncates headers, filenames, or boundaries and can cause an application to accept dangerous content after seeing a misleading Content-Type value. This issue is fixed in version 7.22. Join the discussion | CVE Database V5 | 08/20/2026, 17:36:39 UTC Added: 08/20/2026, 17:52:46 UTC |
CVE-2026-48032: CWE-697: Incorrect Comparison in kerberosmansour hulumiCVE-2026-48032 0 Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, IAM-role policy checks can be bypassed when the role trusts multiple OIDC providers. This issue has been patched in version 1.4.0. Join the discussion | CVE Database V5 | 07/24/2026, 18:39:05 UTC Added: 07/24/2026, 19:07:40 UTC |
Showing 1 to 2 of 2 results