Common Weakness Enumeration
CWE-158 Improper Neutralization of Null Byte or NUL Character
Description
The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes NUL characters or null bytes when they are sent to a downstream component.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-158 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-5c9j-mhmv-5xgx | CVE-2026-70603 | MODERATE |
Electron: shell.openPath path validation bypass via embedded null byte |
2026-08-05 | |
| GHSA-p9hg-pq3q-v9gv | CVE-2026-33191 | HIGH |
free5GC UDM vulnerable to null byte injection in URL path parameters causing 500 Internal Server Error |
2026-03-20 |