# CWE-146.

Every Advisory and CVE whose sources give the weakness CWE-146, newest first.

## Records, newest first

- [Cisco IMC Remote Code Execution Vulnerability Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-20288.md)
  `CVE-2026-20288` · CVE record: Cisco Cisco Enterprise NFV Infrastructure Software and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-146
- [Dell PowerProtect Data Manager: Dell PowerProtect Data Manager, version(s) prior to 19.22…](https://agentprime.io/advisories/CVE-2026-22266.md)
  `CVE-2026-22266` · CVE record: Dell PowerProtect Data Manager · CVSS 4.7 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: CWE-146
- [Apache Commons OGNL: Expression Injection leading to RCE](https://agentprime.io/advisories/CVE-2025-53192.md)
  `CVE-2025-53192` · CVE record: Apache Software Foundation Apache Commons OGNL · CVSS 8.8 High · Not analysed yet · Published 18 Aug 2025 · Tags: CWE-146
- [A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arb…](https://agentprime.io/advisories/CVE-2025-20237.md)
  `CVE-2025-20237` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 6.0 Medium · Not analysed yet · Published 14 Aug 2025 · Tags: CWE-146
- [Cisco Adaptive Security Appliance Software Remote Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2024-20329.md)
  `CVE-2024-20329` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Oct 2024 · Tags: CWE-146
- [Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-20470.md)
  `CVE-2024-20470` · CVE record: Cisco Cisco Small Business RV Series Router Firmware · CVSS 6.5 Medium · Not analysed yet · Published 2 Oct 2024 · Tags: CWE-146
- [Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilities](https://agentprime.io/advisories/CVE-2023-20128.md)
  `CVE-2023-20128` · CVE record: Cisco Cisco Small Business RV Series Router Firmware · CVSS 7.2 High · Critical (CVSS 7+ and EPSS) · EPSS 0.30 · Not analysed yet · Published 5 Apr 2023 · Tags: CWE-146
- [Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilities](https://agentprime.io/advisories/CVE-2023-20117.md)
  `CVE-2023-20117` · CVE record: Cisco Cisco Small Business RV Series Router Firmware · CVSS 7.2 High · Critical (CVSS 7+ and EPSS) · EPSS 0.30 · Not analysed yet · Published 5 Apr 2023 · Tags: CWE-146
- [Cisco IOS XE SD-WAN Software Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2023-20035.md)
  `CVE-2023-20035` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.8 High · Not analysed yet · Published 23 Mar 2023 · Tags: CWE-146
- [When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368.](https://agentprime.io/advisories/CVE-2022-4055.md)
  `CVE-2022-4055` · CVE record: xdg-utils · CVSS 7.4 High · Not analysed yet · Published 18 Nov 2022 · Tags: CWE-146

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-146>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-146/>. Everything for agents: <https://agentprime.io/llms.txt>.