agentprime: CWE-1286

CVE-2026-33958: Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.

Thu, 05 Nov 2026 02:37:33 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-48179: In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service

Thu, 05 Nov 2026 02:37:05 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-20595: In neuropilot, there is a possible out of bounds write due to a missing bounds check.

Mon, 02 Nov 2026 02:34:12 GMT

CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-111107: Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service

Tue, 27 Oct 2026 15:52:27 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-110675: Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys under allow_barekey in decode_hv

Mon, 19 Oct 2026 18:11:35 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-110759: Text::CSV_XS versions before 1.65 for Perl return a 0xFF byte that is not in the input for an empty last field followed by a lone CR in parse

Fri, 16 Oct 2026 22:08:23 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in Bandit

Thu, 15 Oct 2026 18:37:02 GMT

bandit >=0.6.0, <1.13.0, fixed in 1.13.0. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-102084: Junos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remote Code Execution

Wed, 14 Oct 2026 16:24:40 GMT

CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-67418: RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers

Wed, 14 Oct 2026 16:07:29 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-83728: Windows Hyper-V Spoofing Vulnerability

Tue, 13 Oct 2026 19:00:52 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-109425: Tink-go 2.8.0 Keyset Validation Bypass via NewHandleWithNoSecrets

Mon, 12 Oct 2026 19:55:37 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-100902: Barco ClickShare CX-20 Gen2 Wallpaper Upload wallpaper improper validation of syntactic correctness of input

Mon, 28 Sep 2026 03:00:08 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-87082: Net::IDN::Punycode versions before 2.590 for Perl hang, crash or return a wrong label via unvalidated malformed UTF-8 in encode_punycode

Tue, 22 Sep 2026 07:25:37 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-87080: Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never encoded in decode_punycode

Tue, 22 Sep 2026 07:25:03 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-69211: Http4s: Set-Cookie rendering does not escape attribute delimiters

Tue, 15 Sep 2026 18:56:50 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-88260: Authentication bypass in Brainzcompany Zenius EMS 8.0

Fri, 11 Sep 2026 02:29:52 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging

Thu, 10 Sep 2026 23:03:53 GMT

github.com/traefik/traefik/v2 <2.11.57, fixed in 2.11.57. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content

Tue, 08 Sep 2026 21:02:13 GMT

xmldom <=0.6.0, no fixed version yet. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-72916: Mastodon: SSRF Protection Bypass via IPv4-compatible IPv6 Addresses

Mon, 10 Aug 2026 21:19:02 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-0931: Denial-of-service vulnerability in M-Files Server

Wed, 05 Aug 2026 09:42:23 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-25292: Improper Validation of Syntactic Correctness of Input in Automotive Linux OS

Tue, 04 Aug 2026 15:07:24 GMT

CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges

Tue, 14 Jul 2026 18:15:25 GMT

@fedify/fedify >=0.11.2, <1.9.12 || >=1.10.0, <1.10.11 || >=2.0.0, <2.0.19 || >=2.1.0, <2.1.15 || >=2.2.0, <2.2.4, fixed in 1.9.12, 1.10.11, 2.0.19, 2.1.15, 2.2.4. CVSS 8.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-57026: Junos OS: MX Series with SPC3, SRX Series: Processing of a specifically malformed SIP invite causes a flowd crash

Thu, 09 Jul 2026 21:07:44 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

guzzlehttp/guzzle: Dot-Only Cookie Domains Match All Hosts

Fri, 19 Jun 2026 14:37:29 GMT

guzzlehttp/guzzle <7.12.1, fixed in 7.12.1. CVSS 5.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion

Thu, 11 Jun 2026 20:19:27 GMT

io.netty:netty-codec-haproxy >=4.2.0.Final, <4.2.15.Final || <4.1.135.Final, fixed in 4.2.15.Final, 4.1.135.Final. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-8873: Arista EOS Dataplane Denial of Service via Malformed IPsec Packet

Thu, 04 Jun 2026 23:04:56 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2019-25720: Dräger SC Monitoring Devices DoS via Malformed Network Packet

Wed, 03 Jun 2026 16:56:29 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2021-4479: Dräger Atlan A350 1.00 <= 1.01 DoS via Medibus Interface

Tue, 02 Jun 2026 19:27:00 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2019-25723: Dräger Perseus A500 2.00-2.02 DoS via Medibus Interface

Tue, 02 Jun 2026 19:00:19 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-24092: Improper Validation of Syntactic Correctness of Input in Display

Mon, 01 Jun 2026 22:05:41 GMT

CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-24091: Improper Validation of Syntactic Correctness of Input in Display

Mon, 01 Jun 2026 22:05:40 GMT

CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-24089: Improper Validation of Syntactic Correctness of Input in Kernel

Mon, 01 Jun 2026 22:05:38 GMT

CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-24087: Improper Validation of Syntactic Correctness of Input in Kernel

Mon, 01 Jun 2026 22:05:36 GMT

CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-10099: XX-Net V5.16.6 WebSocket Frame Parsing Data Corruption via simple_http_server.py

Fri, 29 May 2026 15:58:24 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Keycloak: Denial of Service via specially crafted SAML input

Tue, 19 May 2026 12:31:41 GMT

org.keycloak:keycloak-saml-core <26.6.2, fixed in 26.6.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-0983: Denial of service vulnerability in M-Files Server

Mon, 18 May 2026 11:05:29 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

Netty has a DNS Codec Input Validation Bypass (Encoder + Decoder)

Thu, 07 May 2026 00:12:47 GMT

io.netty:netty-codec-dns >=4.2.0.Alpha1, <4.2.13.Final || <4.1.133.Final, fixed in 4.2.13.Final, 4.1.133.Final. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-6918: Out-of-bounds read in Eclipse Foundation Eclipse OpenJ9

Tue, 05 May 2026 12:29:09 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-6442: Improper Command Detection Logic Allows RCE in Cortex Code Command-Line Interface

Thu, 16 Apr 2026 18:43:21 GMT

CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-40198: Net::CIDR::Lite versions before 0.23 for Perl does not validate IPv6 group count, which may allow IP ACL bypass

Fri, 10 Apr 2026 21:42:06 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-33778: Junos OS: SRX Series, MX Series: When a specifically malformed first ISAKMP packet is received kmd/iked crashes

Thu, 09 Apr 2026 21:35:10 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

Rack::Request accepts invalid Host characters, enabling host allowlist bypass

Thu, 02 Apr 2026 20:36:40 GMT

rack >=3.0.0.beta1, <3.1.21 || >=3.2.0, <3.2.6, fixed in 3.1.21, 3.2.6. CVSS 4.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

NATS: Pre-auth remote server crash via WebSocket frame length overflow in wsRead

Wed, 25 Mar 2026 17:07:51 GMT

github.com/nats-io/nats-server *, no fixed version yet. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-20114: Cisco IOS XE Software: A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software…

Wed, 25 Mar 2026 16:08:17 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

NATS has pre-auth server panic via leafnode handling

Tue, 24 Mar 2026 21:45:29 GMT

github.com/nats-io/nats-server *, no fixed version yet. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-13995: IBM QRadar SIEM Information Disclosure

Thu, 19 Mar 2026 01:55:42 GMT

CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-3632: Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames

Tue, 17 Mar 2026 09:44:19 GMT

CVSS 3.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.

Incorrect parsing of IPv6 host literals in net/url

Fri, 06 Mar 2026 21:03:42 GMT

stdlib <1.25.8 || >=1.26.0-0, <1.26.1, fixed in 1.25.8, 1.26.1. CVSS 7.5 (High). Published by OSV. Not analysed by agentprime yet.

CVE-2025-59785: API - Insufficient Input Validation

Wed, 04 Mar 2026 15:30:31 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

uv has ZIP payload obfuscation through parsing differentials

Fri, 27 Feb 2026 09:30:29 GMT

uv <0.9.6, fixed in 0.9.6. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.