Skip to content
OpenAdvisories

Weakness (CWE)

CWE-430: Deployment of Wrong Handler

Base Incomplete

The wrong "handler" is assigned to process an object or request.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Perform a type check before interpreting an object.

  2. Architecture and Design

    Reject any inconsistent types, such as a file with a .GIF extension that appears to consist of PHP code.

Source: MITRE CWE-430

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-42356

    Apache HTTP Server: limited RCE for some internal redirects to non-CGI files in CGI directories

    Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and executed. The target must already be in a directory enabled for CGI and have no other extension unders…

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine