# CWE-1025.

Every Advisory and CVE whose sources give the weakness CWE-1025, newest first.

## Records, newest first

- [Keycloak vulnerable to authorization bypass via incorrect uri comparison](https://agentprime.io/advisories/GHSA-f5p5-6xmx-p252.md)
  `GHSA-f5p5-6xmx-p252`, `BIT-keycloak-2026-9800`, `CVE-2026-9800` · Maven `org.keycloak:keycloak-policy-enforcer` and 1 more: affected `<26.0.10`, fixed in `26.0.10` · CVSS 8.1 High · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-1025
- [Authentication bypass via issuer-and-serial-only certificate equality in shared cluster cache](https://agentprime.io/advisories/CVE-2026-114649.md)
  `CVE-2026-114649` · CVE record: MongoDB C# Driver · CVSS 7.6 High · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-1025
- [Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation](https://agentprime.io/advisories/CVE-2026-104048.md)
  `CVE-2026-104048` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-1025
- [The Rattadan Cosmowarp smart contract before 56c6147 can have a comparison to an unintended value of current_admin.](https://agentprime.io/advisories/CVE-2026-100248.md)
  `CVE-2026-100248` · CVE record: Rattadan Cosmowarp Contract · CVSS 8.4 High · Not analysed yet · Published 25 Sept 2026 · Tags: CWE-1025
- [Logic flaw in SANnav Java cache key handling object comparison handling](https://agentprime.io/advisories/CVE-2026-14441.md)
  `CVE-2026-14441` · CVE record: Brocade SANnav · CVSS 6.9 Medium · Not analysed yet · Published 24 Sept 2026 · Tags: CWE-1025
- [Apache Tomcat: WebSocket DoS due to lost asynchronous write timeout](https://agentprime.io/advisories/CVE-2026-79677.md)
  `CVE-2026-79677` · CVE record: Apache Software Foundation Apache Tomcat · CVSS 7.5 High · Not analysed yet · Published 23 Sept 2026 · Tags: Denial of service, CWE-1025
- [OpenStack Blazar: In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level…](https://agentprime.io/advisories/CVE-2026-93854.md)
  `CVE-2026-93854` · CVE record: OpenStack Blazar · CVSS 7.2 High · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-1025
- [CyberPanel: CyberPanel before 2.4.4 attempts to detect an "alais" domain (i.e…](https://agentprime.io/advisories/CVE-2026-29811.md)
  `CVE-2026-29811` · CVE record: CyberPanel CyberPanel · CVSS 7.7 High · Not analysed yet · Published 13 Sept 2026 · Tags: CWE-1025
- [Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totp_use_recovery compares user identifiers numerically](https://agentprime.io/advisories/CVE-2026-78619.md)
  `CVE-2026-78619` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-305, CWE-1025
- [ArcadeDB before 26.8.1 Arbitrary File Read via Unescaped Regex](https://agentprime.io/advisories/CVE-2026-75840.md)
  `CVE-2026-75840` · CVE record: ArcadeData arcadedb · CVSS 8.7 High · Not analysed yet · Published 18 Aug 2026 · Tags: CWE-1025
- [stoatchat before 20250210-1 Unrestricted Message History Fetch](https://agentprime.io/advisories/CVE-2025-71377.md)
  `CVE-2025-71377` · CVE record: stoatchat stoatchat · CVSS 8.7 High · Not analysed yet · Published 16 Jul 2026 · Tags: CWE-1025
- [Duplicate Advisory: Keycloak vulnerable to authorization bypass via incorrect uri comparison](https://agentprime.io/advisories/GHSA-79qw-g39g-mfxc.md)
  `GHSA-79qw-g39g-mfxc` · Maven `org.keycloak:keycloak-policy-enforcer` and 1 more: affected `*`, no fixed version yet · CVSS 8.1 High · Withdrawn · Not analysed yet · Published 25 Jun 2026 · Tags: CWE-1025
- [Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_dist](https://agentprime.io/advisories/CVE-2026-48860.md)
  `CVE-2026-48860` · CVE record: Erlang OTP · CVSS 7.5 High · Not analysed yet · Published 10 Jun 2026 · Tags: Broken access control, CWE-1025
- [Zebra: Cached Mempool Verification Bypasses Consensus Rules for Ahead-of-Tip Blocks](https://agentprime.io/advisories/GHSA-xvj8-ph7x-65gf.md)
  `GHSA-xvj8-ph7x-65gf`, `CVE-2026-40880` · crates.io `zebra-consensus` and 1 more: affected `<5.0.2`, fixed in `5.0.2` · CVSS 7.2 High · Not analysed yet · Published 18 Apr 2026 · Tags: CWE-1025
- [systemd: In systemd 260 before 261, a local unprivileged user can trigger an assert via an IPC API…](https://agentprime.io/advisories/CVE-2026-40227.md)
  `CVE-2026-40227` · CVE record: systemd systemd · CVSS 6.2 Medium · Not analysed yet · Published 10 Apr 2026 · Tags: CWE-1025
- [iccDEV has Type Confusion in CIccTag:IsTypeCompressed()](https://agentprime.io/advisories/CVE-2026-21691.md)
  `CVE-2026-21691` · CVE record: InternationalColorConsortium iccDEV · CVSS 5.4 Medium · Not analysed yet · Published 7 Jan 2026 · Tags: Memory corruption, CWE-20, CWE-140, CWE-697
- [HAProxy: HAProxy 2.2 through 3.1.6, in certain uncommon configurations…](https://agentprime.io/advisories/CVE-2025-32464.md)
  `CVE-2025-32464` · CVE record: HAProxy HAProxy · CVSS 6.8 Medium · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-1025
- [tough timestamp metadata is cached when it fails snapshot rollback check](https://agentprime.io/advisories/GHSA-76g3-38jv-wxh4.md)
  `GHSA-76g3-38jv-wxh4`, `CVE-2025-2888` · crates.io `tough`: affected `<0.20.0`, fixed in `0.20.0` · CVSS 5.7 Medium · Not analysed yet · Published 28 Mar 2025 · Tags: CWE-1025
- [tough failure to detect delegated target rollback](https://agentprime.io/advisories/GHSA-q6r9-r9pw-4cf7.md)
  `GHSA-q6r9-r9pw-4cf7`, `CVE-2025-2887` · crates.io `tough`: affected `<0.20.0`, fixed in `0.20.0` · CVSS 5.7 Medium · Not analysed yet · Published 28 Mar 2025 · Tags: CWE-1025
- [Misskey's Incomplete Patch of CVE-2024-52591 Leads to Forgery of Federated Notes](https://agentprime.io/advisories/CVE-2025-25306.md)
  `CVE-2025-25306` · CVE record: misskey-dev misskey · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Mar 2025 · Tags: CWE-346, CWE-441, CWE-1025
- [Tangem SDK: operations/attestation/AttestationTask.kt in the Tangem SDK before 5.18.3 for Android has…](https://agentprime.io/advisories/CVE-2025-27839.md)
  `CVE-2025-27839` · CVE record: Tangem SDK · CVSS 3.2 Low · Not analysed yet · Published 7 Mar 2025 · Tags: CWE-1025
- [Cisco Firepower Threat Defense Software Rate Filter Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-20342.md)
  `CVE-2024-20342` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 5.8 Medium · Not analysed yet · Published 23 Oct 2024 · Tags: CWE-1025
- [PocketMine-MP server crash with certain invalid JSON payloads in \`LoginPacket\` due to dependency vulnerability (again)](https://agentprime.io/advisories/GHSA-92jh-gwch-jq38.md)
  `GHSA-92jh-gwch-jq38`, `CVE-2023-54390`, `PKSA-nv2r-zxzd-wzsw` · Packagist `pocketmine/pocketmine-mp`: affected `<4.23.1 || >=5.0.0, <5.3.1`, fixed in `4.23.1`, `5.3.1` · CVSS 8.7 High · Not analysed yet · Published 14 Sept 2023 · Tags: CWE-1025

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-1025>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-1025/>. Everything for agents: <https://agentprime.io/llms.txt>.