agentprime: CWE-1327

CVE-2026-119249: Ubiquiti Inc WiFiman Desktop: A malicious actor with access to the network could exploit a Binding to an Unrestricted…

Thu, 29 Oct 2026 18:23:36 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-112346: OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE

Mon, 26 Oct 2026 15:34:30 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-92559: IBM App Connect Enterprise is vulnerable to a credential exposure

Tue, 20 Oct 2026 21:52:22 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-108760: LlamaFarm through 0.0.34 Unauthenticated API Exposed on All Interfaces

Sun, 11 Oct 2026 12:19:57 GMT

CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-100868: Penpot before 2.18.0 Unauthenticated WebSocket Access via MCP Bridge

Sun, 27 Sep 2026 13:09:53 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

ESPHome Device Builder Dashboard: Unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces

Wed, 09 Sep 2026 23:51:25 GMT

esphome-device-builder <1.0.10, fixed in 1.0.10. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-75021: fastify-cli vulnerable to remote code execution via ignored explicit Inspector bind address

Tue, 08 Sep 2026 12:50:23 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-20212: Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability

Wed, 02 Sep 2026 16:13:08 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-82456: argocd-mcp 0.8.0 Authentication Bypass via Unauthenticated HTTP

Sat, 29 Aug 2026 13:47:57 GMT

CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

9router: Unauthenticated `/v1` proxy access via `Host`-header spoofing → open AI relay + SSRF

Fri, 28 Aug 2026 18:33:20 GMT

9router <0.5.2, fixed in 0.5.2. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-72924: GitHub CLI: `gh codespace ports forward` exposes forwarded services on all network interfaces by default

Tue, 25 Aug 2026 21:03:11 GMT

CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-16713: IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution

Thu, 13 Aug 2026 19:40:09 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-16503: VPS.org one-click Supabase template deployment instance contains multiple vulnerabilities

Fri, 31 Jul 2026 15:18:33 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-47873: Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces

Thu, 30 Jul 2026 05:23:59 GMT

CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in

Thu, 18 Jun 2026 13:55:54 GMT

praisonaiagents <1.6.59, fixed in 1.6.59. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-0481: Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in lo…

Fri, 15 May 2026 03:04:56 GMT

CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-42503: Accidental binding to INADDR_ANY might lead to RCE in golang.org/x/tools/gopls

Wed, 06 May 2026 16:20:01 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

OpenClaw: Sandbox browser CDP relay could expose DevTools protocol on 0.0.0.0

Fri, 17 Apr 2026 21:59:55 GMT

openclaw <2026.4.10, fixed in 2026.4.10. CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Apache IoTDB has an Insecure Default Configuration Vulnerability

Mon, 09 Mar 2026 09:30:31 GMT

org.apache.iotdb:iotdb-core >=1.0.0, <1.3.7 || >=2.0.0, <2.0.7, fixed in 1.3.7, 2.0.7. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw's Chrome extension relay binds publicly due to wildcard treated as loopback

Tue, 17 Feb 2026 17:09:43 GMT

openclaw >=2026.1.14-1, <2026.2.12, fixed in 2026.2.12. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-21528: Azure IoT Explorer Information Disclosure Vulnerability

Tue, 10 Feb 2026 17:51:30 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Keycloak has debug default bind address

Tue, 02 Dec 2025 00:35:03 GMT

org.keycloak:keycloak-quarkus-dist <26.4.4, fixed in 26.4.4. CVSS 6.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Duplicate Advisory: Keycloak allows Binding to an Unrestricted IP Address

Thu, 13 Nov 2025 18:31:05 GMT

org.keycloak:keycloak-quarkus-server <=26.4.4, no fixed version yet. CVSS 6.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-61934: AutomationDirect Productivity Suite Binding to an Unrestricted IP Address CWE-1327

Thu, 23 Oct 2025 22:01:28 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-55322: OmniParser Remote Code Execution Vulnerability

Wed, 24 Sep 2025 19:03:47 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-3621: Remote Code Execution in ProTNS ActADUR

Tue, 15 Jul 2025 07:22:49 GMT

CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-49384: Excessive attack surface in acep-collector service due to binding to an unrestricted IP address.

Tue, 15 Oct 2024 10:33:52 GMT

CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-49383: Excessive attack surface in acep-importer service due to binding to an unrestricted IP address.

Tue, 15 Oct 2024 10:33:14 GMT

CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-49382: Excessive attack surface in archive-server service due to binding to an unrestricted IP address.

Tue, 15 Oct 2024 10:32:55 GMT

CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-47176: cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source

Thu, 26 Sep 2024 21:13:05 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

dbt allows Binding to an Unrestricted IP Address via socketsocket

Tue, 28 May 2024 21:19:14 GMT

dbt-core <1.6.15 || >=1.7.0, <1.7.15 || >=1.8.0, <1.8.1, fixed in 1.6.15, 1.7.15, 1.8.1. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2023-5398: Server receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service.

Wed, 17 Apr 2024 16:40:10 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-41742: Excessive attack surface due to binding to an unrestricted IP address.

Thu, 31 Aug 2023 14:27:28 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-1968: CVE-2023-1968

Fri, 28 Apr 2023 18:09:17 GMT

CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2022-29820: JetBrains PyCharm: In JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network…

Thu, 28 Apr 2022 09:55:30 GMT

CVSS 3.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.