Skip to content
OpenAdvisories

Weakness (CWE)

CWE-670: Always-Incorrect Control Flow Implementation

Class Draft

The code contains a control flow path that does not reflect the algorithm that the path is intended to implement, leading to incorrect behavior any time this path is navigated.

More detail

This weakness captures cases in which a particular code segment is always incorrect with respect to the algorithm that it is implementing. For example, if a C programmer intends to include multiple statements in a single block but does not include the enclosing braces (CWE-483), then the logic is always incorrect. This issue is in contrast to most weaknesses in which the code usually behaves correctly, except when it is externally manipulated in malicious ways.

Source: MITRE CWE-670

All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • High 8.1
    CVE-2026-109722 Public exploit

    JIT miscompilation in the JavaScript Engine: JIT component

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • Critical 9.8
    CVE-2026-96760 Public exploit

    Authlib library contains a signature‑verification bypass vulnerability

    Authlib (v1.7.2 and below) contains a signature verification bypass vulnerability. The JsonWebSignature.deserialize_json() method accepts a JSON Serialization JWS object and returns the payload as successfully verified without checking for a signature and wit…

    authlib authlib python-authlib python-authlib Debian Ubuntu PyPI
  • Medium 6.3
    CVE-2026-72705 Public exploit

    Rocq Prover before 9.2.0 Guard Checker Accepts Fixpoint Passed as a Higher-Order Argument

    The guard checker in Rocq Prover does not follow recursive calls made through a fixpoint's own arguments. A fixpoint may pass itself as a higher-order argument to a second fixpoint, which then applies it to a value that is not a subterm of the structural argu…

    rocq-prover rocq
  • Medium 6.3
    CVE-2026-72704 Public exploit

    Rocq Prover through 9.2.0 Guard Checker Trusts Corrupted Recursive Tree After Transport

    The guard checker in Rocq Prover does not recheck the recursive tree representation of an inductive type parameter after that parameter has been changed by transport. A fixpoint may apply a rewrite along an equality between types to its recursive argument, wh…

    rocq-prover rocq
  • Medium 6.3
    CVE-2026-72703 Public exploit

    Rocq Prover 8.20 before 9.2.0 Guard Checker Accepts Non-Terminating Fixpoint via Unchecked Cross-Calls

    The guard checker in Rocq Prover treats a parameter of a nested mutual fixpoint as uniform without examining calls between the different bodies of that fixpoint. find_uniform_parameters in kernel/inductive.ml inspects only self-recursive calls, so when no bod…

    rocq-prover rocq
  • High 7.5
    CVE-2026-38361 Public exploit

    Multiple unauthenticated denial-of-service (DoS) issues in fohrloop dash-uploader v0.1.0 through v0.7.0a2. The chunked-…

    dash-uploader PyPI
  • Medium 4.2
    CVE-2026-35414 Public exploit

    OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list …

    OpenBSD OpenSSH openssh openssh Debian Ubuntu
  • High 8.2
    CVE-2025-49091 Public exploit

    KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme…

    KDE Konsole konsole konsole Debian Ubuntu
  • Medium 5.9
    CVE-2023-0400 Public exploit

    The protection bypass vulnerability in DLP for Windows 11.9.x is addressed in version 11.10.0. This allowed a local use…

    Trellix Data Loss Prevention (DLP)
  • High 7.3
    CVE-2023-20921 Public exploit

    In onPackageRemoved of AccessibilityManagerService.java, there is a possibility to automatically grant accessibility se…

    Android
  • Low 3.7
    CVE-2021-3754 Public exploit

    Keycloak's improper input validation allows using email as username

    A flaw was found in keycloak where an attacker is able to register himself with the username same as the email ID of any existing user. This may cause trouble in getting password recovery email in case the user forgets the password.

    org.keycloak:keycloak-services Maven
  • High 7.4
    CVE-2021-34767 Public exploit

    Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers IPv6 Denial of Service Vulnerability

    A vulnerability in IPv6 traffic processing of Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a Layer 2 (L2) loop in a configured VLAN, resulting in a den…

    Cisco Cisco IOS XE Software iOS Network devices
  • High 8.1
    CVE-2020-28052 Public exploit

    Logic error in Legion of the Bouncy Castle BC Java

    An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect passwords to indicate they were matching with previously hashed…

    bouncycastle org.bouncycastle:bcprov-jdk14 org.bouncycastle:bcprov-jdk15on org.bouncycastle:bcprov-jdk15 Debian Maven