CWE · MITRE source
CWE-177Improper Handling of URL Encoding (Hex Encoding)
The product does not properly handle when all or part of an input has been URL encoded.
Last updated: 20 May 2026 08:06 UTC
NIST 800-53 r5 controls that address this weakness (0)AI
| Control | Title | Family | Why it addresses this CWE |
|---|---|---|---|
| No NIST controls proposed yet. | |||
Top CVEs of this weakness type, ranked by Risk Priority
| CVE | Risk | CVSS | EPSS | Published |
|---|---|---|---|---|
CVE-2026-22031 UPD | 1.7 | 8.4 | 0.0011 | 2026-01-19 |
CVE-2026-22037 | 1.7 | 8.4 | 0.0003 | 2026-01-19 |
CVE-2022-27780 | 1.5 | 7.5 | 0.0016 | 2022-06-02 |
CVE-2026-29045 | 1.5 | 7.5 | 0.0005 | 2026-03-04 |
CVE-2022-3854 | 1.3 | 6.5 | 0.0031 | 2023-03-06 |
CVE-2026-6414 UPD | 1.2 | 5.9 | 0.0002 | 2026-04-16 |
CVE-2018-3718 | 1.1 | 5.3 | 0.0024 | 2018-06-07 |
CVE-2024-48866 | 1.1 | 5.3 | 0.0065 | 2024-12-06 |
CVE-2025-11990 | 0.6 | 3.1 | 0.0002 | 2025-11-15 |
CVE-2024-23983 | 0.0 | 0.0 | 0.0011 | 2024-11-11 |