agentprime: CWE-178Every new CWE-178 Advisory and CVE.https://agentprime.io/CVE-2026-85287: HomeBox: Email Case-Sensitivity Bypass Allows Duplicate Account Creation and Login Denial of Servicehttps://agentprime.io/advisories/CVE-2026-85287/https://agentprime.io/advisories/CVE-2026-85287/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 16:03:13 GMTCVECVE-2026-73856: ModSecurity: Response Body Inspection Bypasshttps://agentprime.io/advisories/CVE-2026-73856/https://agentprime.io/advisories/CVE-2026-73856/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 15:50:09 GMTCVECVE-2026-63121: Kubewarden trusted-repos-policy: uppercase registry host bypasses registry/image deny ruleshttps://agentprime.io/advisories/CVE-2026-63121/https://agentprime.io/advisories/CVE-2026-63121/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 22:08:03 GMTCVECVE-2026-109411: Samba: access control bypass via vfs_ceph_rgw case-insensitive openhttps://agentprime.io/advisories/CVE-2026-109411/https://agentprime.io/advisories/CVE-2026-109411/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 19:17:45 GMTCVECVE-2026-116135: HTTP::Body versions before 1.23_01 for Perl drop mixed-case percent escapes from urlencoded form fields instead of decoding themhttps://agentprime.io/advisories/CVE-2026-116135/https://agentprime.io/advisories/CVE-2026-116135/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 17:15:50 GMTCVEcriticalCVE-2026-108313: Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.https://agentprime.io/advisories/CVE-2026-108313/https://agentprime.io/advisories/CVE-2026-108313/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 17:35:06 GMTCVECVE-2026-105608: Consul vulnerable to an authorization bypass in service mesh registrationhttps://agentprime.io/advisories/CVE-2026-105608/https://agentprime.io/advisories/CVE-2026-105608/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 17:52:33 GMTCVECVE-2026-116469: MISP Guard Case-Sensitive Policy Bypass Allows Unauthorized Feed Data Forwardinghttps://agentprime.io/advisories/CVE-2026-116469/https://agentprime.io/advisories/CVE-2026-116469/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 10:35:51 GMTCVEundici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokenshttps://agentprime.io/advisories/GHSA-f72v-6w45-q472/https://agentprime.io/advisories/GHSA-f72v-6w45-q472/undici >=7.15.0, <7.30.1 || >=8.0.0, <8.12.2, fixed in 7.30.1, 8.12.2. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 23 Oct 2026 22:12:57 GMTnpmundiciNuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitivehttps://agentprime.io/advisories/GHSA-vjh5-4x84-xrqp/https://agentprime.io/advisories/GHSA-vjh5-4x84-xrqp/nuxt >=3.0.0 || >=4.0.0, <4.6.2, fixed in 4.6.2. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 22 Oct 2026 16:59:55 GMTnpmnuxt@nuxt/nitro-serverfastify is vulnerable to header validation bypass via case-sensitive propertyNameshttps://agentprime.io/advisories/GHSA-389g-gv7q-r4x8/https://agentprime.io/advisories/GHSA-389g-gv7q-r4x8/fastify >=5.12.2, <5.12.6, fixed in 5.12.6. CVSS 3.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 22 Oct 2026 16:40:35 GMTnpmfastifyCVE-2026-85254: Apache Camel: Camel-Platform-HTTP Request-Header Echo Suppression Bypassed by Header-Name Casinghttps://agentprime.io/advisories/CVE-2026-85254/https://agentprime.io/advisories/CVE-2026-85254/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:36:46 GMTCVECVE-2026-80343: Apache Camel: Camel-Netty-HTTP Security Constraint Bypass via Case-Sensitive Context-Path Matchinghttps://agentprime.io/advisories/CVE-2026-80343/https://agentprime.io/advisories/CVE-2026-80343/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:27:58 GMTCVECVE-2026-111448: Wheels: Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons in path-containment checks…https://agentprime.io/advisories/CVE-2026-111448/https://agentprime.io/advisories/CVE-2026-111448/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 03:41:58 GMTCVECVE-2026-18660: Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnameshttps://agentprime.io/advisories/CVE-2026-18660/https://agentprime.io/advisories/CVE-2026-18660/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 09:38:02 GMTCVECVE-2026-74041: Wazuh 4.14.3 < 4.14.8 / 4.10.4 Remote Command Validation Bypass via Case Mismatchhttps://agentprime.io/advisories/CVE-2026-74041/https://agentprime.io/advisories/CVE-2026-74041/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 13:27:31 GMTCVECVE-2026-108721: Open Computer Use through 1.0.0 Denylist Bypass via Case-Variant Bundle IDhttps://agentprime.io/advisories/CVE-2026-108721/https://agentprime.io/advisories/CVE-2026-108721/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 11 Oct 2026 12:19:31 GMTCVEsvg-sanitizer: Mixed-case xlink:HrEf skips the `<use>` nesting-DoS check in Resolver::processReferenceshttps://agentprime.io/advisories/GHSA-m9xh-6747-9r6f/https://agentprime.io/advisories/GHSA-m9xh-6747-9r6f/enshrined/svg-sanitize <1.0.0, fixed in 1.0.0. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 08 Oct 2026 19:41:10 GMTPackagistenshrined/svg-sanitizeCVE-2026-105570: Docker Sandboxes OAuth response masking could be bypassed with a case-variant token hosthttps://agentprime.io/advisories/CVE-2026-105570/https://agentprime.io/advisories/CVE-2026-105570/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 18:46:05 GMTCVECVE-2026-89322: Vault ACL Policy Evaluation May Allow Bypass of Deny Restrictionshttps://agentprime.io/advisories/CVE-2026-89322/https://agentprime.io/advisories/CVE-2026-89322/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 22:01:37 GMTCVEBackstage: Scaffolder action input authorization bypasshttps://agentprime.io/advisories/GHSA-hmp2-4m7g-22cv/https://agentprime.io/advisories/GHSA-hmp2-4m7g-22cv/@backstage/plugin-scaffolder-backend <3.3.1 || >=3.4.0, <3.4.1 || >=4.0.0, <4.0.3 || >=4.0.4, <4.1.0, fixed in 3.3.1, 3.4.1, 4.0.3, 4.1.0. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 07 Oct 2026 17:59:08 GMTnpm@backstage/plugin-scaffolder-backendCVE-2026-106497: Backstage: Inconsistent catalog property permission evaluationhttps://agentprime.io/advisories/CVE-2026-106497/https://agentprime.io/advisories/CVE-2026-106497/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 21:18:31 GMTCVEfastify vulnerable to header validation bypass via incomplete schema case normalizationhttps://agentprime.io/advisories/GHSA-9q9j-q6p8-xq58/https://agentprime.io/advisories/GHSA-9q9j-q6p8-xq58/fastify <5.12.2, fixed in 5.12.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 30 Sep 2026 23:44:27 GMTnpmfastifyCVE-2026-102131: Kiteworks Email Protection Gateway Improper Handling of Case Sensitivityhttps://agentprime.io/advisories/CVE-2026-102131/https://agentprime.io/advisories/CVE-2026-102131/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:13:43 GMTCVEfast-uri vulnerable to inconsistent host case normalization via percent-encoded octetshttps://agentprime.io/advisories/GHSA-hrr3-gc8f-f4qj/https://agentprime.io/advisories/GHSA-hrr3-gc8f-f4qj/fast-uri <2.4.7 || >=3.0.0, <3.1.8 || >=4.0.0, <4.1.5, fixed in 2.4.7, 3.1.8, 4.1.5. CVSS 4.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 29 Sep 2026 23:54:25 GMTnpmfast-uriCVE-2026-100693: Hugo v0.162.0 before v0.166.0 IP-literal Deny Rule Bypasshttps://agentprime.io/advisories/CVE-2026-100693/https://agentprime.io/advisories/CVE-2026-100693/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:51 GMTCVECVE-2026-100669: Grav before 2.0.25 Sensitive File Disclosure via Case-Variation Bypasshttps://agentprime.io/advisories/CVE-2026-100669/https://agentprime.io/advisories/CVE-2026-100669/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:34 GMTCVECVE-2026-100580: OpenClaw before 2026.7.1 Remote Code Execution via cron toolhttps://agentprime.io/advisories/CVE-2026-100580/https://agentprime.io/advisories/CVE-2026-100580/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:19:06 GMTCVECVE-2026-100541: OpenClaw Matrix before 2026.8.1 Authorization Bypass via Case Foldinghttps://agentprime.io/advisories/CVE-2026-100541/https://agentprime.io/advisories/CVE-2026-100541/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:18:39 GMTCVETinyauth: forward-auth per-app ACL is matched case-sensitively against the (case-insensitive) hostname, letting an authenticated user reach apps they are not on the allowlist forhttps://agentprime.io/advisories/GHSA-328g-jx67-v94g/https://agentprime.io/advisories/GHSA-328g-jx67-v94g/github.com/tinyauthapp/tinyauth <1.0.1-0.20260720133915-80bc87188ec3, fixed in 1.0.1-0.20260720133915-80bc87188ec3. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 22 Sep 2026 20:37:08 GMTGogithub.com/tinyauthapp/tinyauthCaddy: rewrite placeholder re-expansion, unbounded body buffer DoS, and fileHidden case-sensitivity bypasshttps://agentprime.io/advisories/GHSA-j8px-rmrx-76h9/https://agentprime.io/advisories/GHSA-j8px-rmrx-76h9/github.com/caddyserver/caddy/v2 <2.11.4, fixed in 2.11.4. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 18 Sep 2026 13:09:27 GMTGogithub.com/caddyserver/caddy/v2CVE-2026-90982: @fastify/static vulnerable to route guard bypass via path case-foldinghttps://agentprime.io/advisories/CVE-2026-90982/https://agentprime.io/advisories/CVE-2026-90982/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 06:55:42 GMTCVECVE-2026-89012: Dolibarr 24.0.0 < 24.0.1 SQL Filter Denylist Bypass via sqlfilters Parameterhttps://agentprime.io/advisories/CVE-2026-89012/https://agentprime.io/advisories/CVE-2026-89012/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 15:49:17 GMTCVECVE-2026-87876: Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up)https://agentprime.io/advisories/CVE-2026-87876/https://agentprime.io/advisories/CVE-2026-87876/CVSS 3.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Sep 2026 16:12:07 GMTCVECVE-2026-86770: Snipe-IT before 8.7.0 Authentication Bypass via SAML Username Collationhttps://agentprime.io/advisories/CVE-2026-86770/https://agentprime.io/advisories/CVE-2026-86770/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Sep 2026 13:32:27 GMTCVExmldom: HTML raw-text closing-tag case mismatch causes output amplificationhttps://agentprime.io/advisories/GHSA-6mj3-qw4j-hgrw/https://agentprime.io/advisories/GHSA-6mj3-qw4j-hgrw/@xmldom/xmldom >=0.9.0-beta.1, <0.9.12, fixed in 0.9.12. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 08 Sep 2026 20:59:54 GMTnpm@xmldom/xmldomgRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasionhttps://agentprime.io/advisories/GHSA-qc2q-p7wx-3px3/https://agentprime.io/advisories/GHSA-qc2q-p7wx-3px3/google.golang.org/grpc <1.83.1, fixed in 1.83.1. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 08 Sep 2026 20:50:21 GMTGogoogle.golang.org/grpcCVE-2026-82067: Improper Case Sensitivity Handling in MongoDB Server Configuration Validation May Cause Authorization to Remain Disabled at Startuphttps://agentprime.io/advisories/CVE-2026-82067/https://agentprime.io/advisories/CVE-2026-82067/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:12:26 GMTCVEcriticalCVE-2026-73476: External Authentication - Moderately critical - Access bypass - SA-CONTRIB-2026-098https://agentprime.io/advisories/CVE-2026-73476/https://agentprime.io/advisories/CVE-2026-73476/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Sep 2026 12:32:38 GMTCVECVE-2026-73270: httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystemshttps://agentprime.io/advisories/CVE-2026-73270/https://agentprime.io/advisories/CVE-2026-73270/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Sep 2026 14:48:53 GMTCVEAshPhoenix get_subdomain maps a crafted or differently-cased Host header to an arbitrary tenanthttps://agentprime.io/advisories/GHSA-rpf8-q9jh-qxrr/https://agentprime.io/advisories/GHSA-rpf8-q9jh-qxrr/ash_phoenix >=2.1.26, <2.3.25, fixed in 2.3.25. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 31 Aug 2026 03:05:38 GMTHexash_phoenixCVE-2026-78959: Google Chrome: Improper handling of case sensitivity in FileSystem in Google Chrome prior to…https://agentprime.io/advisories/CVE-2026-78959/https://agentprime.io/advisories/CVE-2026-78959/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 20:10:37 GMTCVECVE-2026-59335: Case-Sensitive Authorization Check Bypass via Identity Zone ID Case Manipulation Leads to Full UAA Compromisehttps://agentprime.io/advisories/CVE-2026-59335/https://agentprime.io/advisories/CVE-2026-59335/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 11:05:11 GMTCVEGrav: .htaccess file extension rules bypass via case variation on case-insensitive filesystemshttps://agentprime.io/advisories/GHSA-vwg3-w8w3-pc79/https://agentprime.io/advisories/GHSA-vwg3-w8w3-pc79/getgrav/grav <2.0.4, fixed in 2.0.4. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 19 Aug 2026 19:32:38 GMTPackagistgetgrav/gravCVE-2026-72836: FileBrowser before 2.63.19 Case Sensitivity Authentication Bypasshttps://agentprime.io/advisories/CVE-2026-72836/https://agentprime.io/advisories/CVE-2026-72836/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 14 Aug 2026 11:35:41 GMTCVEcriticalCVE-2026-72721: Discourse: Onebox Domain Blocklist Bypass via Case-Sensitive Comparisonhttps://agentprime.io/advisories/CVE-2026-72721/https://agentprime.io/advisories/CVE-2026-72721/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 15:48:30 GMTCVETraefik: Incomplete fix for CVE-2026-33433 + CVE-2026-39858 cross-cohort: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuthhttps://agentprime.io/advisories/GHSA-x677-9fxg-v5c5/https://agentprime.io/advisories/GHSA-x677-9fxg-v5c5/github.com/traefik/traefik/v2 <2.11.51, fixed in 2.11.51. CVSS 7.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 06 Aug 2026 16:53:53 GMTGogithub.com/traefik/traefik/v2github.com/traefik/traefik/v3Nuxt route rules silently dropped for mixed-case paths, bypassing appMiddleware auth gates (incomplete fix for CVE-2026-53721)https://agentprime.io/advisories/GHSA-hxvh-4h3w-prp9/https://agentprime.io/advisories/GHSA-hxvh-4h3w-prp9/nuxt >=3.21.7, <3.21.10 || >=4.4.7, <4.5.1, fixed in 3.21.10, 4.5.1. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 05 Aug 2026 21:05:18 GMTnpmnuxtCVE-2026-70429: Jenkins: Jenkins 2.575 and earlier, LTS 2.568.1 and earlier handles case-insensitivity in user…https://agentprime.io/advisories/CVE-2026-70429/https://agentprime.io/advisories/CVE-2026-70429/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 17:40:29 GMTCVECVE-2026-15573: Keycloak-services: keycloak-services: authorization bypass via unnormalized uri matching in pathmatcherhttps://agentprime.io/advisories/CVE-2026-15573/https://agentprime.io/advisories/CVE-2026-15573/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 13:50:03 GMTCVE