# CWE-1286.

Every Advisory and CVE whose sources give the weakness CWE-1286, newest first.

## Records, newest first

- [Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.](https://agentprime.io/advisories/CVE-2026-33958.md)
  `CVE-2026-33958` · CVE record: Samsung Semiconductor Exynos 1080 and 4 more · No CVSS score · Not analysed yet · Published 5 Nov 2026 · Tags: CWE-1286
- [In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service](https://agentprime.io/advisories/CVE-2026-48179.md)
  `CVE-2026-48179` · CVE record: Samsung Semiconductor Exynos 1080 and 4 more · No CVSS score · Not analysed yet · Published 5 Nov 2026 · Tags: CWE-1286
- [In neuropilot, there is a possible out of bounds write due to a missing bounds check.](https://agentprime.io/advisories/CVE-2026-20595.md)
  `CVE-2026-20595` · CVE record: MediaTek, Inc. MediaTek chipset · CVSS 6.7 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-1286
- [Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service](https://agentprime.io/advisories/CVE-2026-111107.md)
  `CVE-2026-111107` · CVE record: WatchGuard Fireware OS · CVSS 8.7 High · Not analysed yet · Published 27 Oct 2026 · Tags: Memory corruption, CWE-248, CWE-1286
- [Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys under allow_barekey in decode_hv](https://agentprime.io/advisories/CVE-2026-110675.md)
  `CVE-2026-110675` · CVE record · CVSS 8.1 High · Not analysed yet · Published 19 Oct 2026 · Tags: CWE-1286
- [Text::CSV_XS versions before 1.65 for Perl return a 0xFF byte that is not in the input for an empty last field followed by a lone CR in parse](https://agentprime.io/advisories/CVE-2026-110759.md)
  `CVE-2026-110759` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Oct 2026 · Tags: CWE-1286
- [Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in Bandit](https://agentprime.io/advisories/GHSA-v53v-9hvg-37jf.md)
  `GHSA-v53v-9hvg-37jf`, `CVE-2026-105660`, `EEF-CVE-2026-105660` · Hex `bandit`: affected `>=0.6.0, <1.13.0`, fixed in `1.13.0` · CVSS 6.9 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-1286
- [Junos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remote Code Execution](https://agentprime.io/advisories/CVE-2026-102084.md)
  `CVE-2026-102084` · CVE record: Juniper Networks Junos OS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-1286
- [RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers](https://agentprime.io/advisories/CVE-2026-67418.md)
  `CVE-2026-67418` · CVE record: rabbitmq rabbitmq-server · CVSS 5.3 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-248, CWE-1286
- [Windows Hyper-V Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-83728.md)
  `CVE-2026-83728` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-1286
- [Tink-go 2.8.0 Keyset Validation Bypass via NewHandleWithNoSecrets](https://agentprime.io/advisories/CVE-2026-109425.md)
  `CVE-2026-109425` · CVE record: tink-crypto tink-go · CVSS 6.9 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-1286
- [Barco ClickShare CX-20 Gen2 Wallpaper Upload wallpaper improper validation of syntactic correctness of input](https://agentprime.io/advisories/CVE-2026-100902.md)
  `CVE-2026-100902` · CVE record: Barco ClickShare CX-20 Gen2 · CVSS 7.1 High · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-20, CWE-1286
- [Net::IDN::Punycode versions before 2.590 for Perl hang, crash or return a wrong label via unvalidated malformed UTF-8 in encode_punycode](https://agentprime.io/advisories/CVE-2026-87082.md)
  `CVE-2026-87082` · CVE record · CVSS 7.5 High · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service, CWE-1286
- [Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never encoded in decode_punycode](https://agentprime.io/advisories/CVE-2026-87080.md)
  `CVE-2026-87080` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Sept 2026 · Tags: CWE-1286
- [Http4s: Set-Cookie rendering does not escape attribute delimiters](https://agentprime.io/advisories/CVE-2026-69211.md)
  `CVE-2026-69211` · CVE record: http4s http4s · CVSS 4.8 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Other injection, CWE-1286
- [Authentication bypass in Brainzcompany Zenius EMS 8.0](https://agentprime.io/advisories/CVE-2026-88260.md)
  `CVE-2026-88260` · CVE record: Brainzcompany Zenius EMS 8.0 · CVSS 8.7 High · Not analysed yet · Published 11 Sept 2026 · Tags: Authentication bypass, CWE-1286
- [Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging](https://agentprime.io/advisories/GHSA-f52w-8j3h-j724.md)
  `GHSA-f52w-8j3h-j724`, `CVE-2026-88009`, `GO-2026-6465` · Go `github.com/traefik/traefik/v2` and 1 more: affected `<2.11.57`, fixed in `2.11.57` · CVSS 8.8 High · Not analysed yet · Published 10 Sept 2026 · Tags: HTTP request smuggling, CWE-1286
- [xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content](https://agentprime.io/advisories/GHSA-6h8r-xr42-gp59.md)
  `GHSA-6h8r-xr42-gp59`, `CVE-2026-83611` · npm `xmldom` and 1 more: affected `<=0.6.0`, no fixed version yet · CVSS 6.9 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-1286
- [Mastodon: SSRF Protection Bypass via IPv4-compatible IPv6 Addresses](https://agentprime.io/advisories/CVE-2026-72916.md)
  `CVE-2026-72916` · CVE record: mastodon mastodon · CVSS 6.3 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: Server-side request forgery (SSRF), CWE-1286
- [Denial-of-service vulnerability in M-Files Server](https://agentprime.io/advisories/CVE-2026-0931.md)
  `CVE-2026-0931` · CVE record: M-Files Corporation M-Files Server · CVSS 6.9 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-1286
- [Improper Validation of Syntactic Correctness of Input in Automotive Linux OS](https://agentprime.io/advisories/CVE-2026-25292.md)
  `CVE-2026-25292` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.6 High · Not analysed yet · Published 4 Aug 2026 · Tags: CWE-1286
- [Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges](https://agentprime.io/advisories/GHSA-xw9q-2mv6-9fr8.md)
  `GHSA-xw9q-2mv6-9fr8`, `CVE-2026-50131` · npm `@fedify/fedify` and 1 more: affected `>=0.11.2, <1.9.12 || >=1.10.0, <1.10.11 || >=2.0.0, <2.0.19 || >=2.1.0, <2.1.15 || >=2.2.0, <2.2.4`, fixed in `1.9.12`, `1.10.11`, `2.0.19`, `2.1.15`, `2.2.4` · CVSS 8.6 High · Not analysed yet · Published 14 Jul 2026 · Tags: Server-side request forgery (SSRF), CWE-1286, CWE-1389
- [Junos OS: MX Series with SPC3, SRX Series: Processing of a specifically malformed SIP invite causes a flowd crash](https://agentprime.io/advisories/CVE-2026-57026.md)
  `CVE-2026-57026` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-1286
- [guzzlehttp/guzzle: Dot-Only Cookie Domains Match All Hosts](https://agentprime.io/advisories/GHSA-cwxw-98qj-8qjx.md)
  `GHSA-cwxw-98qj-8qjx`, `CVE-2026-55767`, `PKSA-93qv-9n9h-6k6p` · Packagist `guzzlehttp/guzzle`: affected `<7.12.1`, fixed in `7.12.1` · CVSS 5.8 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: CWE-346, CWE-1286
- [Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion](https://agentprime.io/advisories/GHSA-h2qv-fj59-j46j.md)
  `GHSA-h2qv-fj59-j46j`, `CVE-2026-48059` · Maven `io.netty:netty-codec-haproxy`: affected `>=4.2.0.Final, <4.2.15.Final || <4.1.135.Final`, fixed in `4.2.15.Final`, `4.1.135.Final` · CVSS 8.7 High · Not analysed yet · Published 11 Jun 2026 · Tags: Denial of service, CWE-1286
- [Arista EOS Dataplane Denial of Service via Malformed IPsec Packet](https://agentprime.io/advisories/CVE-2025-8873.md)
  `CVE-2025-8873` · CVE record: Arista Networks EOS · CVSS 8.7 High · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-1286
- [Dräger SC Monitoring Devices DoS via Malformed Network Packet](https://agentprime.io/advisories/CVE-2019-25720.md)
  `CVE-2019-25720` · CVE record: Dräger SC 6002XL and 4 more · CVSS 7.1 High · Not analysed yet · Published 3 Jun 2026 · Tags: CWE-1286
- [Dräger Atlan A350 1.00 <= 1.01 DoS via Medibus Interface](https://agentprime.io/advisories/CVE-2021-4479.md)
  `CVE-2021-4479` · CVE record: Dräger Atlan A350 · CVSS 6.3 Medium · Not analysed yet · Published 2 Jun 2026 · Tags: CWE-1286
- [Dräger Perseus A500 2.00-2.02 DoS via Medibus Interface](https://agentprime.io/advisories/CVE-2019-25723.md)
  `CVE-2019-25723` · CVE record: Dräger Perseus A500 · CVSS 6.3 Medium · Not analysed yet · Published 2 Jun 2026 · Tags: CWE-1286
- [Improper Validation of Syntactic Correctness of Input in Display](https://agentprime.io/advisories/CVE-2026-24092.md)
  `CVE-2026-24092` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.2 High · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-1286
- [Improper Validation of Syntactic Correctness of Input in Display](https://agentprime.io/advisories/CVE-2026-24091.md)
  `CVE-2026-24091` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.2 High · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-1286
- [Improper Validation of Syntactic Correctness of Input in Kernel](https://agentprime.io/advisories/CVE-2026-24089.md)
  `CVE-2026-24089` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.2 High · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-1286
- [Improper Validation of Syntactic Correctness of Input in Kernel](https://agentprime.io/advisories/CVE-2026-24087.md)
  `CVE-2026-24087` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.2 High · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-1286
- [XX-Net V5.16.6 WebSocket Frame Parsing Data Corruption via simple_http_server.py](https://agentprime.io/advisories/CVE-2026-10099.md)
  `CVE-2026-10099` · CVE record: XX-net XX-Net · CVSS 5.1 Medium · Not analysed yet · Published 29 May 2026 · Tags: CWE-1286
- [Keycloak: Denial of Service via specially crafted SAML input](https://agentprime.io/advisories/GHSA-p5mv-gj8j-xqgf.md)
  `GHSA-p5mv-gj8j-xqgf`, `BIT-keycloak-2026-7307`, `CVE-2026-7307` · Maven `org.keycloak:keycloak-saml-core`: affected `<26.6.2`, fixed in `26.6.2` · CVSS 7.5 High · Not analysed yet · Published 19 May 2026 · Tags: CWE-1286
- [Denial of service vulnerability in M-Files Server](https://agentprime.io/advisories/CVE-2026-0983.md)
  `CVE-2026-0983` · CVE record: M-Files Corporation M-Files Server · CVSS 7.1 High · Not analysed yet · Published 18 May 2026 · Tags: CWE-1286
- [Netty has a DNS Codec Input Validation Bypass (Encoder + Decoder)](https://agentprime.io/advisories/GHSA-cm33-6792-r9fm.md)
  `GHSA-cm33-6792-r9fm`, `CVE-2026-42579` · Maven `io.netty:netty-codec-dns`: affected `>=4.2.0.Alpha1, <4.2.13.Final || <4.1.133.Final`, fixed in `4.2.13.Final`, `4.1.133.Final` · CVSS 7.5 High · Not analysed yet · Published 7 May 2026 · Tags: Denial of service, CWE-20, CWE-626, CWE-1286
- [Out-of-bounds read in Eclipse Foundation Eclipse OpenJ9](https://agentprime.io/advisories/CVE-2026-6918.md)
  `CVE-2026-6918` · CVE record: Eclipse Foundation Eclipse OpenJ9 · CVSS 8.7 High · Not analysed yet · Published 5 May 2026 · Tags: Memory corruption, CWE-1286
- [Improper Command Detection Logic Allows RCE in Cortex Code Command-Line Interface](https://agentprime.io/advisories/CVE-2026-6442.md)
  `CVE-2026-6442` · CVE record: Snowflake Cortex Code CLI · CVSS 8.3 High · Not analysed yet · Published 16 Apr 2026 · Tags: CWE-1286
- [Net::CIDR::Lite versions before 0.23 for Perl does not validate IPv6 group count, which may allow IP ACL bypass](https://agentprime.io/advisories/CVE-2026-40198.md)
  `CVE-2026-40198` · CVE record: STIGTSP Net::CIDR::Lite · CVSS 7.5 High · Not analysed yet · Published 10 Apr 2026 · Tags: CWE-1286
- [Junos OS: SRX Series, MX Series: When a specifically malformed first ISAKMP packet is received kmd/iked crashes](https://agentprime.io/advisories/CVE-2026-33778.md)
  `CVE-2026-33778` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-1286
- [Rack::Request accepts invalid Host characters, enabling host allowlist bypass](https://agentprime.io/advisories/GHSA-g2pf-xv49-m2h5.md)
  `GHSA-g2pf-xv49-m2h5`, `CVE-2026-34835` · RubyGems `rack`: affected `>=3.0.0.beta1, <3.1.21 || >=3.2.0, <3.2.6`, fixed in `3.1.21`, `3.2.6` · CVSS 4.8 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: CWE-1286
- [NATS: Pre-auth remote server crash via WebSocket frame length overflow in wsRead](https://agentprime.io/advisories/GHSA-pq2q-rcw4-3hr6.md)
  `GHSA-pq2q-rcw4-3hr6`, `BIT-nats-2026-27889`, `CVE-2026-27889`, `GO-2026-4841` · Go `github.com/nats-io/nats-server` and 1 more: affected `*`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 25 Mar 2026 · Tags: Memory corruption, CWE-1286
- [Cisco IOS XE Software: A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software…](https://agentprime.io/advisories/CVE-2026-20114.md)
  `CVE-2026-20114` · CVE record: Cisco Cisco IOS XE Software · CVSS 5.4 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: CWE-1286
- [NATS has pre-auth server panic via leafnode handling](https://agentprime.io/advisories/GHSA-vprv-35vv-q339.md)
  `GHSA-vprv-35vv-q339`, `BIT-nats-2026-33218`, `CVE-2026-33218`, `GO-2026-4837` · Go `github.com/nats-io/nats-server` and 1 more: affected `*`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 24 Mar 2026 · Tags: CWE-20, CWE-1286
- [IBM QRadar SIEM Information Disclosure](https://agentprime.io/advisories/CVE-2025-13995.md)
  `CVE-2025-13995` · CVE record: IBM QRadar · CVSS 5.0 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: CWE-1286
- [Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames](https://agentprime.io/advisories/CVE-2026-3632.md)
  `CVE-2026-3632` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.9 Low · Not analysed yet · Published 17 Mar 2026 · Tags: CWE-1286
- [Incorrect parsing of IPv6 host literals in net/url](https://agentprime.io/advisories/GO-2026-4601.md)
  `GO-2026-4601`, `BIT-golang-2026-25679`, `CVE-2026-25679` · Go `stdlib`: affected `<1.25.8 || >=1.26.0-0, <1.26.1`, fixed in `1.25.8`, `1.26.1` · CVSS 7.5 High · Not analysed yet · Published 6 Mar 2026 · Tags: CWE-1286
- [API - Insufficient Input Validation](https://agentprime.io/advisories/CVE-2025-59785.md)
  `CVE-2025-59785` · CVE record: 2N Telekomunikace a.s. 2N Access Commander · CVSS 5.3 Medium · Not analysed yet · Published 4 Mar 2026 · Tags: CWE-1286
- [uv has ZIP payload obfuscation through parsing differentials](https://agentprime.io/advisories/GHSA-v653-r55g-hcmg.md)
  `GHSA-v653-r55g-hcmg`, `CVE-2025-13327`, `GHSA-pqhf-p39g-3x64`, `PYSEC-2026-2295` · crates.io `uv`: affected `<0.9.6`, fixed in `0.9.6` · CVSS 6.3 Medium · Not analysed yet · Published 27 Feb 2026 · Tags: CWE-1286
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-21527.md)
  `CVE-2026-21527` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-345, CWE-451, CWE-1286
- [FacturaScripts has SQL Injection in API ORDER BY Clause](https://agentprime.io/advisories/GHSA-cjfx-qhwm-hf99.md)
  `GHSA-cjfx-qhwm-hf99`, `CVE-2026-25513`, `PKSA-tnd6-5wk6-f448` · Packagist `facturascripts/facturascripts`: affected `<2025.81`, fixed in `2025.81` · CVSS 8.3 High · Not analysed yet · Published 3 Feb 2026 · Tags: SQL injection, Other injection, CWE-20, CWE-1286
- [Malformed BRID/HHIT records can cause named to terminate unexpectedly](https://agentprime.io/advisories/CVE-2025-13878.md)
  `CVE-2025-13878` · CVE record: ISC BIND 9 · CVSS 7.5 High · Not analysed yet · Published 21 Jan 2026 · Tags: Denial of service, CWE-1286
- [Denial of Service condition in M-Files Server](https://agentprime.io/advisories/CVE-2026-0663.md)
  `CVE-2026-0663` · CVE record: M-Files Corporation M-Files Server · CVSS 6.9 Medium · Not analysed yet · Published 21 Jan 2026 · Tags: CWE-1286
- [Junos OS: SRX Series: Specifically malformed SSL packet causes FPC crash](https://agentprime.io/advisories/CVE-2026-21917.md)
  `CVE-2026-21917` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-1286
- [Weblate's over‑permissive webhook endpoint enables mass repository updates and component enumeration](https://agentprime.io/advisories/GHSA-pj86-258h-qrvf.md)
  `GHSA-pj86-258h-qrvf`, `CVE-2025-67492`, `PYSEC-2025-232` · PyPI `weblate`: affected `<5.15`, fixed in `5.15` · CVSS 5.3 Medium · Not analysed yet · Published 15 Dec 2025 · Tags: CWE-1286
- [Duplicate Advisory: Nodemailer: Email to an unintended domain can occur due to Interpretation Conflict](https://agentprime.io/advisories/GHSA-jj37-3377-m6vv.md)
  `GHSA-jj37-3377-m6vv` · npm `nodemailer`: affected `<7.0.7`, fixed in `7.0.7` · CVSS 7.5 High · Withdrawn · Not analysed yet · Published 14 Nov 2025 · Tags: CWE-436, CWE-1286
- [Sauter: Improper Validation of user-controlled data](https://agentprime.io/advisories/CVE-2025-41719.md)
  `CVE-2025-41719` · CVE record: Sauter modulo 6 devices modu680-AS and 4 more · CVSS 8.8 High · Not analysed yet · Published 22 Oct 2025 · Tags: CWE-1286
- [Web http client: Unchecked Server-Side Malicious Packet Issue](https://agentprime.io/advisories/CVE-2025-55085.md)
  `CVE-2025-55085` · CVE record: Eclipse Foundation NetX Duo · CVSS 8.8 High · Not analysed yet · Published 17 Oct 2025 · Tags: Memory corruption, CWE-1286
- [Amazon.IonDotnet is vulnerable to Denial of Service attacks](https://agentprime.io/advisories/GHSA-q5r6-9qwq-g2wj.md)
  `GHSA-q5r6-9qwq-g2wj`, `CVE-2025-11573` · NuGet `Amazon.IonDotnet`: affected `<1.3.2`, fixed in `1.3.2` · CVSS 8.7 High · Not analysed yet · Published 9 Oct 2025 · Tags: Denial of service, CWE-1286

Older: <https://agentprime.io/advisories/tag/cwe-1286.md?cursor=WyIyMDI1LTEwLTA5VDIyOjE1OjU3LjAwMDAwMFoiLCJHSFNBLXE1cjYtOXF3cS1nMndqIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-1286>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-1286/>. Everything for agents: <https://agentprime.io/llms.txt>.