Skip to content
OpenAdvisories

Weakness (CWE)

CWE-482: Comparing instead of Assigning

Variant Draft

The code uses an operator for comparison when the intention was to perform an assignment.

How to prevent it (1 mitigation)

  1. Testing

    Many IDEs and static analysis products will detect this problem.

Source: MITRE CWE-482

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-26279

    Froxlor Admin-to-Root Privilege Escalation via Input Validation Bypass + OS Command Injection

    Froxlor is open source server administration software. Prior to 2.3.4, a typo in Froxlor's input validation code (== instead of =) completely disables email format checking for all settings fields declared as email type. This allows an authenticated admin to …

    froxlor froxlor froxlor/froxlor Packagist