CWE-480 — known CVE vulnerabilities

CVEs classified under CWE-480, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2026-43114 — CVSS 9.4 (critical): In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on…
• CVE-2026-4748 — CVSS 7.5 (high): A regression in the way hashes were calculated caused rules containing the address range syntax (x.x.x.x - y.y.y.y) that only differ in the…
• CVE-2022-1947 — CVSS 6.5 (medium): Use of Incorrect Operator in GitHub repository polonel/trudesk prior to 1.2.3.
• CVE-2026-48497 — CVSS 5.9 (medium): Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, in…
• CVE-2025-52985 — CVSS 5.3 (medium): A Use of Incorrect Operator vulnerability in the Routing Engine firewall of Juniper Networks Junos OS Evolved allows an unauthenticated…