CWE-143
CVEs classified under CWE-143, newest first.
2 CVEsRSS
CVE-2026-107181High· 8.1PoCTelegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in Core::Sandbox that allows remote attackers to inject OPEN: records via crafted tg:// links containing unescaped semicolons
Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in Core::Sandbox that allows remote attackers to inject OPEN: records via crafted tg:// links containing unescaped semicolons. Attackers can reach the…
▾ MidnightTelegram · Telegram DesktopEPSS 0.61%via NVD
CVE-2026-59787Medium· 5.3The Perl SNMP trap receiver script shipped with Zabbix does not properly neutralize the ZBXTRAP record delimiter in trap content
The Perl SNMP trap receiver script shipped with Zabbix does not properly neutralize the ZBXTRAP record delimiter in trap content. This means someone able to send SNMP traps can inject a record targeting another host, resulting in a loss …
▾ SunlitZabbix · ZabbixEPSS 0.23%via NVD