Skip to content
OpenAdvisories

Weakness (CWE)

CWE-115: Misinterpretation of Input

Base Incomplete

The product misinterprets an input, whether from an attacker or another product, in a security-relevant fashion.

Source: MITRE CWE-115

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.0
    CVE-2026-63650

    OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the co…

    OpenVPN OpenVPN openvpn Debian
  • Low 3.7
    CVE-2026-42004

    EDNS options smuggling

    An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist’s filtering rules, but will be rewritten as a valid OPT record when EDNS Client Subnet is inserted, causing the backend to see the EDNS option(s) that DNSdist did not filter.

    PowerDNS DNSdist dnsdist dnsdist Debian Ubuntu