On this page

CWE-20: Improper Input Validation

Weakness Summary

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

  • Canonical source: MITRE CWE-20
  • Published Atomicorp CVE observations: 141
  • Distinct affected products in those observations: 121
  • Active Atomicorp rules associated with this weakness: 112

Atomicorp Research Context

Atomicorp has published CVE-specific research observations associated with this weakness category. Each linked CVE page states whether the tested request was detected or blocked and is the authoritative customer-facing finding.

The CVEs and rules shown here are selected published examples, not a complete list of Atomicorp protections. If a CWE, CVE, or rule is absent from this page, no conclusion should be drawn about whether Atomicorp protects against that weakness or attack method.

A CWE describes a class of software weakness. It does not identify one exploit request, and association with a CWE does not mean that every vulnerability or exploitation path in that category is detected or blocked.

Selected Published CVE Observations

CVEVulnerabilityProductAtomicorp findingObserved rules
CVE-2009-0545ZeroShell Remote Code ExecutionzeroshellProtected by Atomicorp rules312657 , 340007 , 340029 , 344360 , 344370 , 347009 , 390709
CVE-2013-4811HP ProCurve Manager SNAC UpdateDomainControllerServlet File Uploadidentity driven managerProtected by Atomicorp rules340006 , 390719
CVE-2013-4812HP ProCurve Manager SNAC UpdateCertificatesServlet File Uploadidentity driven managerProtected by Atomicorp rules340006 , 390719
CVE-2021-44228Apache Log4j2 lookup feature JNDI injection (CVE-2021-44228)6bk1602-0aa12-0tp0 firmwareProtected by Atomicorp rules345115 , 345117 , 345118 , 393655
CVE-2024-22476Intel Neural Compressor <2.5.0 - SQL InjectionIntel(R) Neural Compressor softwareProtected by Atomicorp rules341245
CVE-2024-3400Palo Alto Networks PAN-OS Unauthenticated Remote Code Executionpan-osProtected by Atomicorp rules340006
CVE-2026-21858n8n Content-Type Confusion Arbitrary File Read to RCE (CVE-2026-21858)n8nProtected by Atomicorp rules344360 , 390709
CVE-2026-47668DbGate - Remote Code Execution via Anonymous JWTdbgateProtected by Atomicorp rules340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 345240 , 360151 , 380026
CVE-2026-72867Dokploy <= 0.29.12 - Authenticated RCE via Command InjectiondokployProtected by Atomicorp rules340014 , 344364 , 344366
CVE-2010-4239Tiki Wiki CMS Groupware 5.2 - Local File Inclusiontikiwiki cms/groupwareProtected by Atomicorp rules340007 , 390109
CVE-2012-0694SugarCRM unserialize() PHP Code ExecutionsugarcrmProtected by Atomicorp rules340195 , 380019
CVE-2014-3206Seagate BlackArmor NAS - Command Injectionblackarmor nas 220 firmwareProtected by Atomicorp rules311235 , 340014 , 340193 , 344364 , 344366
CVE-2015-4664Xceedium Xsuite - Multiple Vulnerabilitiesprivileged access managerProtected by Atomicorp rules320464 , 320465 , 333141 , 340023 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 344360 , 344361 , 344363 , 344370 , 346755 , 347198 , 350148 , 390726 , 392301 , 392647 , 392648
CVE-2016-1209WordPress Ninja Forms Unauthenticated File Uploadninja formsProtected by Atomicorp rules330791 , 334168 , 340152 , 382238
CVE-2016-3087Apache Struts REST Plugin With Dynamic Method Invocation Remote Code ExecutionstrutsProtected by Atomicorp rules340014 , 340128 , 340193 , 344370 , 360152 , 380018 , 390801
CVE-2016-5674NUUO NVRmini 2 / NETGEAR ReadyNAS Surveillance Unauthenticated Remote Code Executionreadynas surveillanceProtected by Atomicorp rules344361 , 344363 , 392301
CVE-2016-5675NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilitiesreadynas surveillanceProtected by Atomicorp rules392301
CVE-2016-6603WebNMS Framework Server 5.2/5.2 SP1 - Multiple Vulnerabilitieswebnms frameworkProtected by Atomicorp rules390727 , 392301 , 392648
CVE-2017-12611Apache Struts2 S2-053 - Remote Code ExecutionstrutsProtected by Atomicorp rules337207 , 337209 , 337211 , 337218 , 340014 , 340029 , 340193 , 344360 , 344362 , 344363 , 344370 , 347009
CVE-2017-16935Ametys CMS 4.0.2 - Password ResetametysProtected by Atomicorp rules345493 , 390724
CVE-2017-18349Fastjson 1.2.24 Deserialization Remote Command Execution (CVE-2017-18349)fastjsonProtected by Atomicorp rules344380 , 344385 , 398008
CVE-2017-18580WordPress Shortcodes Ultimate <= 5.0.0 - Authenticated Remote Code Executionshortcodes ultimateDetected by Atomicorp rules377360
CVE-2017-8046Spring Data REST Remote Code Execution (CVE-2017-8046)spring bootProtected by Atomicorp rules337209 , 337210 , 337211 , 340095
CVE-2017-9791Apache Struts2 S2-053 - Remote Code ExecutionstrutsProtected by Atomicorp rules337207
CVE-2017-9811Kaspersky Anti-Virus File Server 8.0.3.297 - Multiple Vulnerabilitiesanti-virus for linux serverProtected by Atomicorp rules390704 , 390724
CVE-2018-11686FlexPaper/FlowPaper 2.3.6 - Remote Code ExecutionflowpaperProtected by Atomicorp rules340029 , 344361 , 344364
CVE-2018-20985WordPress Payeezy Pay <=2.97 - Local File Inclusionwp payeezy payProtected by Atomicorp rules392301
CVE-2018-7600Drupal Drupalgeddon 2 Forms API Property InjectiondrupalProtected by Atomicorp rules330791 , 340095 , 340152 , 390755
CVE-2019-1821Cisco Prime Infrastructure Health Monitor TarArchive Directory Traversal Vulnerabilityevolved programmable network managerProtected by Atomicorp rules340006 , 390719
CVE-2020-13942Apache Unomi Expression Language Injection RCE (CVE-2020-13942)unomiProtected by Atomicorp rules340095 , 344370
CVE-2020-3243Cisco UCS Director Cloupia Script RCEucs directorProtected by Atomicorp rules340006 , 340007 , 344360 , 344370 , 347009 , 390719
CVE-2020-3250Cisco UCS Director Cloupia Script RCEucs directorProtected by Atomicorp rules340006 , 340007 , 344360 , 344370 , 347009 , 390719
CVE-2021-21978VMware View Planner Unauthenticated Log File Upload RCEview plannerProtected by Atomicorp rules330791 , 334168 , 340007 , 340152 , 390700
CVE-2021-21985VMware vCenter Server Virtual SAN Health Check Plugin RCEvcenter serverProtected by Atomicorp rules340162 , 340163
CVE-2022-1471PyTorch Model Server Registration and Deserialization RCEsnakeyamlProtected by Atomicorp rules337109 , 337110 , 398021 , 398022
CVE-2022-24086Adobe Commerce (Magento) - Remote Code ExecutioncommerceProtected by Atomicorp rules344360 , 344370
CVE-2022-47966ManageEngine Endpoint Central Unauthenticated SAML RCEmanageengine access manager plusProtected by Atomicorp rules341256 , 342259 , 344370 , 346755 , 350147 , 380026 , 383023
CVE-2023-22515Atlassian Confluence Unauthenticated Remote Code Executionconfluence data centerProtected by Atomicorp rules330791 , 334168 , 340128 , 340152 , 360152 , 380018 , 390801
CVE-2023-26068Lexmark Device Embedded Web Server RCEcxtpc firmwareProtected by Atomicorp rules340128 , 380018 , 390801 , 393655
CVE-2023-3710Honeywell PM43 Printers - Command Injectionpm43 firmwareProtected by Atomicorp rules344361 , 344363
CVE-2025-54123Hoverfly <= 1.11.3 - Remote Code ExecutionhoverflyProtected by Atomicorp rules344360
CVE-2026-19912Kaltura HTML5 Video Player, html5 library Arbitrary Code Execution VulnerabilityKaltura HTML5 Video Player, html5 libraryProtected by Atomicorp rules340014 , 340023 , 340193 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 390613 , 390614 , 390722 , 398008
CVE-2026-35048Piwigo RCE via PHP Code Injection into Config File in InstallerPiwigoProtected by Atomicorp rules340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370
CVE-2026-49827WebErpMesv2 has Unauthenticated RCE via Unrestricted File Upload in HR Expense scan_file (CWE-434)WebErpMesv2Protected by Atomicorp rules351000
CVE-2026-53513Better Auth: Server-side request forgery via unvalidated OIDC endpoints on @better-auth/sso provider registrationbetter-auth/ssoProtected by Atomicorp rules337109 , 337110 , 340162 , 340163 , 344360 , 398021 , 398022
CVE-2026-54694NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeoverskills-serviceProtected by Atomicorp rules333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148
CVE-2025-34100BuilderEngine Arbitrary File Upload Vulnerability and executionCMSProtected by Atomicorp rules340006 , 340007 , 344360 , 347009 , 390709 , 390719 , 399069
CVE-2025-34101Serviio Media Server checkStreamUrl Command ExecutionMedia ServerProtected by Atomicorp rules330791 , 340152
CVE-2025-34102Crypttech CryptoLog Remote Code ExecutionCryptoLogProtected by Atomicorp rules340145 , 340156 , 341145 , 341245 , 344364 , 393655
CVE-2025-34111Tiki Wiki Unauthenticated File Upload Vulnerabilitytikiwiki cms/groupwareProtected by Atomicorp rules330791 , 340006 , 340152 , 390719 , 393781
CVE-2026-44343WGDashboard < 4.3.2 - Unauthenticated File ReadwgdashboardProtected by Atomicorp rules340007 , 344360 , 347009 , 390709
CVE-2024-5276Fortra FileCatalyst Workflow SQL Injection (CVE-2024-5276)filecatalyst workflowProtected by Atomicorp rules340145 , 340156 , 341145 , 341245
CVE-2025-54236Magento SessionReapercommerceProtected by Atomicorp rules330791 , 334168 , 340152 , 340195 , 340196 , 360152 , 380019 , 383023 , 390700 , 390801
CVE-2026-41042Apache Gravitino < 1.2.1 - Unauthenticated Remote Code ExecutiongravitinoProtected by Atomicorp rules344370
CVE-2026-57499Liman: OS Command Injection in LogRotationController allows authenticated admin to execute arbitrary commands (RCE)coreProtected by Atomicorp rules340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-13603SSRF with API key leak in pretix-oppwapretix-oppwaProtected by Atomicorp rules337109 , 337110 , 340162 , 340163 , 340165 , 344360 , 347009 , 390722 , 398021 , 398022
CVE-2014-5468Railo Remote File IncluderailoProtected by Atomicorp rules344360 , 347009
CVE-2016-0792Jenkins XStream Groovy classpath Deserialization VulnerabilityjenkinsProtected by Atomicorp rules344366
CVE-2016-10960WordPress wSecure Lite < 2.4 - Remote Code ExecutionwsecureProtected by Atomicorp rules392301
CVE-2018-10054H2 Web Interface Create Alias RCEdatomicProtected by Atomicorp rules337209 , 337211 , 340014 , 344370
CVE-2023-22952SugarCRM unauthenticated Remote Code Execution (RCE)sugarcrmProtected by Atomicorp rules330791 , 334168 , 340128 , 340152 , 360152 , 380018 , 390801
CVE-2024-7340W&B Weave Server - Remote Arbitrary File Leak-Protected by Atomicorp rules347009
CVE-2025-66918edoc-doctor-appointment-system Cross-Site Scripting Vulnerabilityedoc-doctor-appointment-systemProtected by Atomicorp rules333140 , 333141 , 340095 , 340147 , 340148 , 342259 , 346755
CVE-2026-24893openITCOCKPIT has Authenticated Command Injection Leading to Remote Code Execution via Host Address Macro ExpansionopenitcockpitProtected by Atomicorp rules340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-34197Apache ActiveMQ Jolokia Remote Code Execution (CVE-2026-34197)activemqProtected by Atomicorp rules330925 , 340014 , 340023 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655
CVE-2026-35031Jellyfin: Potential RCE via subtitle upload path traversal + .strm chainjellyfinProtected by Atomicorp rules340014 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-40466Apache ActiveMQ - Remote Code Execution via HTTP Discovery Transport BypassactivemqProtected by Atomicorp rules330925 , 340162 , 340163
CVE-2026-45505Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Jolokia addNetworkConnector Discovery Wrapper BypassactivemqProtected by Atomicorp rules340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-57143PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parametepraisonaiagentsProtected by Atomicorp rules337109 , 337110 , 340162 , 340163 , 340165 , 344360 , 347009 , 390722 , 398021 , 398022
CVE-2026-84317Nginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the onginx-uiProtected by Atomicorp rules340014 , 340023 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655
CVE-2025-34115OP5 Monitor <= 7.1.9 Authenticated Command Execution via command_test.phpOP5 MonitorProtected by Atomicorp rules340014 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655
CVE-2025-34118Linknat Vos Manager TraversalVOS ManagerProtected by Atomicorp rules347009
CVE-2026-100664Netty codec-http3: HTTP/1 Host header authority confusionnetty-codec-http3Protected by Atomicorp rules340364
CVE-2026-28797RAGFlow: Server-Side Template Injection (SSTI) leading to Remote Code Execution (RCE) in Agent "Text Processing" ComponeragflowProtected by Atomicorp rules340014 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-55094Taskcluster: Unauthenticated remote code execution in web-server via GraphQL filter argument (sift $where)taskclusterProtected by Atomicorp rules340014 , 340023 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655
CVE-2025-34108Disk Pulse Enterprise Login Buffer OverflowDisk Pulse EnterpriseProtected by Atomicorp rules344365
CVE-2026-44522Note Mark: Arbitrary File Write via Path Traversal in Asset Names Leading to Remote Code Executionnote-markProtected by Atomicorp rules390719
CVE-2026-50553Note Mark: Path traversal via unsanitized book/note slug in migrate export (sibling of GHSA-g49p)note-markProtected by Atomicorp rules340007 , 344360 , 390709
CVE-2026-54710FreePBX: Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion)freepbxProtected by Atomicorp rules340014 , 340023 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655
CVE-2026-73658Trigger.dev: Cross-tenant object store read and write via URL path traversaltrigger.devProtected by Atomicorp rules347009
CVE-2017-15715Apache httpd <=2.4.29 - Arbitrary File Uploadhttp serverProtected by Atomicorp rules344365
CVE-2023-26067Lexmark Printers - Command Injectioncxtpc firmwareProtected by Atomicorp rules392301
CVE-2024-30188Apache DolphinScheduler >= 3.1.0, < 3.2.2 Resource File Read And WritedolphinschedulerProtected by Atomicorp rules340162 , 340165 , 344360 , 347009 , 390726 , 392647
CVE-2026-42588Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Remote Code Execution via Jolokia addNetworkConnectoractivemqProtected by Atomicorp rules340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2020-12029Rockwell FactoryTalk View SE SCADA Unauthenticated Remote Code Executionfactorytalk viewProtected by Atomicorp rules390716
CVE-2026-69192ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trusip-addressProtected by Atomicorp rules337109 , 337110 , 340165 , 344360 , 347009 , 390722 , 398021 , 398022
CVE-2011-2763LifeSize Room Command Injectionlifesize room appliance softwareProtected by Atomicorp rules344365
CVE-2013-0156Ruby on Rails XML Processor YAML Deserialization ScannerrailsProtected by Atomicorp rules340121 , 344363 , 344370 , 390635 , 398110
CVE-2014-0114Apache Struts ClassLoader Manipulation Remote Code Executioncommons beanutilsProtected by Atomicorp rules392648
CVE-2014-7146MantisBT XmlImportExport Plugin PHP Code Injection VulnerabilitymantisbtProtected by Atomicorp rules330791 , 334168 , 340128 , 340152 , 360152 , 380018 , 390801
CVE-2015-7808vBulletin 5.1.2 Unserialize Code ExecutionvbulletinProtected by Atomicorp rules376476
CVE-2016-10956WordPress Mail Masta 1.0 - Local File Inclusionmail-mastaProtected by Atomicorp rules344360 , 347009 , 390709
CVE-2016-1328Cisco EPC 3928 - Multiple Vulnerabilitiesepc3928 firmwareProtected by Atomicorp rules333141 , 340147 , 340148 , 340149 , 341256 , 342259 , 344363 , 346755 , 350148 , 390726 , 392301 , 392647 , 392648
CVE-2016-1336Cisco EPC 3928 - Multiple Vulnerabilitiesepc3928 firmwareProtected by Atomicorp rules333141 , 340147 , 340148 , 340149 , 341256 , 342259 , 344363 , 346755 , 350148 , 390726 , 392301 , 392647 , 392648
CVE-2017-14335Hanbanggaoke IP Camera - Arbitrary Password Changehb7024xt firmwareDetected by Atomicorp rules345493
CVE-2018-11222Pandora FMS <=7.0NG.722 - Remote Code Executionpandora fmsProtected by Atomicorp rules390726 , 392647
CVE-2019-11253Kubernetes API Server - YAML Parsing DoS (Billion Laughs)kubernetesProtected by Atomicorp rules391213
CVE-2026-19913Kaltura HTML5 Video Player, html5lib library Improper Input Validation VulnerabilityKaltura HTML5 Video Player, html5lib libraryProtected by Atomicorp rules340014 , 340023 , 340193 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 390613 , 390614 , 390722 , 398008
CVE-2016-2098Ruby on Rails ActionPack Inline ERB Code Executiondebian linuxProtected by Atomicorp rules330791 , 340095 , 340128 , 340152 , 346755 , 380018 , 392648
CVE-2010-4297VMware Tools - Update OS Command InjectionworkstationProtected by Atomicorp rules392301
CVE-2019-1936Cisco UCS Director_ Cisco Integrated Management Controller Supervisor and Cisco UCS Director Express for Big Data - Multiple Vulnerabilitiesintegrated management controller supervisorProtected by Atomicorp rules344361 , 344362 , 344363 , 344370 , 345493 , 350147 , 360151 , 390724 , 390727 , 392301 , 392648
CVE-2024-25641Cacti Import Packages RCEcactiProtected by Atomicorp rules330791 , 334168 , 340128 , 340152 , 360152 , 380018 , 390801
CVE-2025-60787Remote Code Execution Vulnerability in MotionEye Frontend (CVE-2025-60787)motioneyeProtected by Atomicorp rules330791 , 340152 , 393655
CVE-2025-66921open source point of sale Cross-Site Scripting Vulnerabilityopen source point of saleProtected by Atomicorp rules333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755
CVE-2025-66923open source point of sale Cross-Site Scripting Vulnerabilityopen source point of saleProtected by Atomicorp rules333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148
CVE-2026-27891Remote Code Execution (RCE) via Zip Slip in Plugin Upload MechanismfacturascriptsProtected by Atomicorp rules340014 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 390904 , 393655
CVE-2026-3576Wordpress Planyo Online Reservation System Arbitrary File Read (CVE-2026-3576)Planyo online reservation systemProtected by Atomicorp rules340165 , 344360 , 347009
CVE-2026-40871mailcow: dockerized vulnerable to Second Order SQL Injection in quarantine category via APImailcow-dockerizedProtected by Atomicorp rules340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572
CVE-2026-61793Nuxt OG Image has unauthenticated SSRF via fonts[].path URL parameterog-imageProtected by Atomicorp rules337109 , 337110 , 340162 , 340163 , 340165 , 344360 , 347009 , 390722 , 398021 , 398022
CVE-2026-97865Open-Web-Analytics Remote Event Queue Endpoint queue.php loadFromArray deserializationOpen-Web-AnalyticsProtected by Atomicorp rules340014 , 340023 , 340193 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 390613 , 390614 , 390722
CVE-2008-0506Coppermine Photo Gallery picEditor.php Command Executioncoppermine photo galleryProtected by Atomicorp rules340007 , 344361 , 344363
CVE-2013-5576Joomla Media Manager File Upload Vulnerabilityjoomla!Protected by Atomicorp rules330791 , 340152
CVE-2013-7102WordPress OptimizePress Theme File Upload VulnerabilityoptimizepressProtected by Atomicorp rules340133 , 390700
CVE-2012-6554Active Collab "chat module" Remote PHP Code Injection Exploitactivecollab chat moduleProtected by Atomicorp rules344363 , 346755
CVE-2014-5460Wordpress SlideShow Gallery Authenticated File Uploadtibulant slideshow galleryProtected by Atomicorp rules330791 , 334168 , 340152 , 382238
CVE-2023-39265Apache Superset Signed Cookie RCEsupersetProtected by Atomicorp rules330791 , 340152
CVE-2026-566789Router: Kiro region injection allows authenticated SSRF with Authorization header forwarding9routerProtected by Atomicorp rules337109 , 337110 , 340162 , 340163 , 344360 , 398021 , 398022
CVE-2026-56722Dompdf: Local file read due to improper file path validation in SVG images encoded as data-URIdompdfProtected by Atomicorp rules344360 , 390709
CVE-2025-61583TS3 Manager is vulnerable to unauthenticated reflected XSS attack due to insecure error handlingts3 managerProtected by Atomicorp rules333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148
CVE-2026-33436Stirling-PDF: Reflected XSS through crafted filename in file upload functionalitystirling pdfProtected by Atomicorp rules333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148
CVE-2026-34442FreeScout: Host Header Injection Leading to External Resource Loading and Open Redirect in FreeScoutfreescoutProtected by Atomicorp rules340165 , 344365
CVE-2009-4098OpenX banner-edit.php File Upload PHP Code ExecutionopenxProtected by Atomicorp rules330791 , 334168 , 340152 , 360152
CVE-2014-1610MediaWiki Thumb.php Remote Command ExecutionmediawikiProtected by Atomicorp rules330791 , 334168 , 340128 , 340152 , 360152 , 380018 , 390801
CVE-2012-4982Forescout CounterACT 6.3.4.1 - Open RedirectcounteractProtected by Atomicorp rules340162 , 340163
CVE-2012-6499WordPress Plugin Age Verification v0.4 - Open Redirectage verificationProtected by Atomicorp rules392301
CVE-2026-63428HeyForm: completeSubmission persists submitter-supplied hidden fields verbatim without validating against the form's decheyformProtected by Atomicorp rules333140 , 333141 , 340095 , 342259 , 350147 , 350148
CVE-2015-1487Symantec Endpoint Protection Manager Authentication Bypass and Code Executionendpoint protection managerProtected by Atomicorp rules340007 , 344360 , 347009 , 390709 , 392301
CVE-2025-64747Directus Vulnerable to Stored Cross-site ScriptingdirectusProtected by Atomicorp rules333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148
CVE-2026-32629phpMyFAQ: Stored XSS via Unsanitized Email Field in Admin FAQ EditorphpmyfaqProtected by Atomicorp rules333140 , 333141 , 340147 , 340148 , 346755
CVE-2026-47132phpMyFAQ: SQL LIKE Wildcard Injection in Chat User Search Allows Authenticated User EnumerationphpMyFAQProtected by Atomicorp rules340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572
CVE-2026-34959Adminer before 5.5.0 Open Redirect via X-Forwarded-PrefixadminerProtected by Atomicorp rules340165 , 344365
CVE-2026-73845CKAN MCP Server: MQA server allowlist bypass via unanchored regex (isValidMqaServer)ckan-mcp-serverProtected by Atomicorp rules337109 , 337110 , 340162 , 340163 , 344360 , 398021 , 398022
CVE-2010-1587Apache ActiveMQ Directory TraversalactivemqProtected by Atomicorp rules344365 , 390716
CVE-2013-4615Canon Wireless Printer Denial Of Servicemg3100 printerProtected by Atomicorp rules340147 , 341256 , 342259 , 346755
CVE-2014-0865IBM Algorithmics RICOS 4.5.0 < 4.7.0 - Multiple Vulnerabilitiesalgo credit limitsProtected by Atomicorp rules392301
CVE-2014-0868IBM Algorithmics RICOS 4.5.0 < 4.7.0 - Multiple Vulnerabilitiesalgo credit limitsProtected by Atomicorp rules392301
CVE-2026-90575PHPGurukul Small CRM Login Success login.php unserialize deserializationSmall CRMProtected by Atomicorp rules340014 , 340193 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 360152 , 390613 , 390614 , 390722
CVE-2026-16434Adminer before 5.5.1 X-Forwarded-Prefix Backslash BypassadminerProtected by Atomicorp rules340007 , 344360 , 347009 , 390709 , 390719
CVE-2026-55554Dompdf: Chroot Validation BypassdompdfProtected by Atomicorp rules344360 , 390709
CVE-2025-8266ChanCMS <= 3.1. - Remote Code ExecutionchancmsProtected by Atomicorp rules345240 , 380026
CVE-2025-15438PluXml Media Management medias.php __destruct deserializationpluxmlProtected by Atomicorp rules340014 , 340023 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 390614

Associated Atomicorp WAF Rules

RuleStatusBehavior
311235Activedisruptive (deny)
312657Activedisruptive (deny)
320464Activedisruptive (deny)
320465Activedisruptive (deny)
330791Activedisruptive (deny)
330925Activedisruptive (deny)
333140Activedisruptive (deny)
333141Activedisruptive (deny)
334168Activedisruptive (deny)
337109Activedisruptive (deny)
337110Activedisruptive (deny)
337207Activedisruptive (deny)
337209Activedisruptive (deny)
337210Activedisruptive (deny)
337211Activedisruptive (deny)
337218Activedisruptive (deny)
340006Activedisruptive (deny)
340007Activedisruptive (deny)
340014Activedisruptive (deny)
340016Activedisruptive (deny)
340017Activedisruptive (deny)
340023Activedisruptive (deny)
340029Activedisruptive (deny)
340087Activedisruptive (deny)
340095Activedisruptive (deny)
340099Activedisruptive (deny)
340121Activedisruptive (deny)
340128Activedisruptive (deny)
340133Activedisruptive (deny)
340144Activedisruptive (deny)
340145Activedisruptive (deny)
340147Activedisruptive (deny)
340148Activedisruptive (deny)
340149Activedisruptive (deny)
340152Activedisruptive (deny)
340156Activedisruptive (deny)
340157Activedisruptive (deny)
340162Activedisruptive (deny)
340163Activedisruptive (deny)
340165Activedisruptive (deny)
340193Activedisruptive (deny)
340195Activedisruptive (deny)
340196Activedisruptive (deny)
340364Activedisruptive (deny)
341099Activedisruptive (deny)
341145Activedisruptive (deny)
341245Activedisruptive (deny)
341256Activedisruptive (deny)
341266Activedisruptive (deny)
342259Activedisruptive (deny)
344360Activedisruptive (deny)
344361Activedisruptive (deny)
344362Activedisruptive (deny)
344363Activedisruptive (deny)
344364Activedisruptive (deny)
344365Activedisruptive (deny)
344366Activedisruptive (deny)
344370Activedisruptive (deny)
344380Activedisruptive (deny)
344382Activedisruptive (deny)
344385Activedisruptive (deny)
345115Activedisruptive (deny)
345117Activedisruptive (deny)
345118Activedisruptive (deny)
345240Activedisruptive (deny)
345493Activenon-disruptive (pass)
346755Activedisruptive (deny)
347009Activedisruptive (deny)
347198Activedisruptive (deny)
350147Activedisruptive (deny)
350148Activedisruptive (deny)
351000Activedisruptive (deny)
360147Activedisruptive (deny)
360148Activedisruptive (deny)
360151Activedisruptive (deny)
360152Activedisruptive (deny)
376476Activedisruptive (deny)
377360Activenon-disruptive (pass)
380018Activedisruptive (deny)
380019Activedisruptive (deny)
380026Activedisruptive (deny)
380122Activedisruptive (deny)
382238Activedisruptive (deny)
383023Activedisruptive (deny)
390109Activedisruptive (deny)
390572Activedisruptive (deny)
390613Activedisruptive (deny)
390614Activedisruptive (deny)
390635Activedisruptive (deny)
390700Activedisruptive (deny)
390704Activedisruptive (deny)
390709Activedisruptive (deny)
390716Activedisruptive (deny)
390719Activedisruptive (deny)
390722Activedisruptive (deny)
390724Activedisruptive (deny)
390726Activedisruptive (deny)
390727Activedisruptive (deny)
390755Activedisruptive (deny)
390801Activedisruptive (deny)
390904Activedisruptive (deny)
391213Activedisruptive (deny)
392301Activedisruptive (deny)
392647Activedisruptive (deny)
392648Activedisruptive (deny)
393655Activedisruptive (deny)
393781Activedisruptive (deny)
398008Activenon-disruptive (pass)
398021Activedisruptive (deny)
398022Activedisruptive (deny)
398110Activedisruptive (deny)
399069Activedisruptive (deny)

MITRE associates this CWE with the following attack-pattern entries. These taxonomy relationships are context, not Atomicorp coverage claims:

CAPEC-10 , CAPEC-101 , CAPEC-104 , CAPEC-108 , CAPEC-109 , CAPEC-110 , CAPEC-120 , CAPEC-13 , CAPEC-135 , CAPEC-136 , CAPEC-14 , CAPEC-153 , CAPEC-182 , CAPEC-209 , CAPEC-22 , CAPEC-23 , CAPEC-230 , CAPEC-231 , CAPEC-24 , CAPEC-250 , CAPEC-261 , CAPEC-267 , CAPEC-28 , CAPEC-3 , CAPEC-31 , CAPEC-42 , CAPEC-43 , CAPEC-45 , CAPEC-46 , CAPEC-47 , CAPEC-473 , CAPEC-52 , CAPEC-53 , CAPEC-588 , CAPEC-63 , CAPEC-64 , CAPEC-664 , CAPEC-67 , CAPEC-7 , CAPEC-71 , CAPEC-72 , CAPEC-73 , CAPEC-78 , CAPEC-79 , CAPEC-8 , CAPEC-80 , CAPEC-81 , CAPEC-83 , CAPEC-85 , CAPEC-88 , CAPEC-9