agentprime: CWE-187

CVE-2026-112266: SGLang through 0.5.22 Cross-Request Abort via rid Prefix Matching

Mon, 19 Oct 2026 13:55:15 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-94576: Brocade Fabric OS: An authentication logic and privilege escalation vulnerability exists in the account…

Thu, 08 Oct 2026 04:34:21 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

@grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches

Mon, 28 Sep 2026 19:43:51 GMT

@grpc/grpc-js-xds <1.13.1 || >=1.14.0, <1.14.1, fixed in 1.13.1, 1.14.1. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-81479: Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Partial String Comparison vulnerability.

Thu, 17 Sep 2026 11:28:19 GMT

CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-87853: Sssd: sssd: idp authentication prefix comparison allows cross-user impersonation

Wed, 09 Sep 2026 16:06:25 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

Astro: Authorization bypass from missing path-segment boundary check when stripping the configured base

Tue, 08 Sep 2026 21:26:02 GMT

astro <7.2.4, fixed in 7.2.4. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-62750: Windows HTTP Protocol Stack Tampering Vulnerability

Tue, 11 Aug 2026 17:04:18 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-14687: 666ghj BettaFish InsightEngine search-result Deduplication agent.py _deduplicate_results partial string comparison

Sun, 05 Jul 2026 00:30:09 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

http-proxy-middleware `router` host+path substring matching allows Host-header-driven backend routing bypass

Thu, 18 Jun 2026 13:06:11 GMT

http-proxy-middleware >=0.16.0, <2.0.10 || >=3.0.0, <3.0.6 || >=4.0.0, <4.1.0, fixed in 2.0.10, 3.0.6, 4.1.0. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Caddy: Remote Admin Authorization Bypass in `/config` API via Array Index Normalization

Tue, 19 May 2026 15:51:31 GMT

github.com/caddyserver/caddy/v2 >=2.4.0, <2.11.3, fixed in 2.11.3. CVSS 5.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

view_component: System Test Entry Point Path Check Allows Sibling Directory Escape

Fri, 08 May 2026 23:33:58 GMT

view_component >=3.0.0, <4.9.0, fixed in 4.9.0. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-35031: Jellyfin: Potential RCE via subtitle upload path traversal + .strm chain

Tue, 14 Apr 2026 22:18:30 GMT

CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

Rack::Static prefix matching can expose unintended files under the static root

Thu, 02 Apr 2026 18:44:25 GMT

rack <2.2.23 || >=3.0.0.beta1, <3.1.21 || >=3.2.0, <3.2.6, fixed in 2.2.23, 3.1.21, 3.2.6. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-30874: OpenWrt procd PATH Environment Variable Filter Bypass via Incorrect String Comparison Leads to Privilege Escalation

Thu, 19 Mar 2026 22:36:04 GMT

CVSS 1.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.

ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header

Tue, 02 Sep 2025 16:46:58 GMT

esphome <2025.8.1, fixed in 2025.8.1. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-23384: Siemens RUGGEDCOM RM1224 LTE(4G) EU: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)…

Tue, 11 Mar 2025 09:48:08 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Authz zero length regression

Tue, 30 Jul 2024 10:18:57 GMT

github.com/docker/docker >=19.03.0, <23.0.15 || >=24.0.0, <25.0.6 || >=26.0.0, <26.1.5 || >=27.0.0, <27.1.1, fixed in 23.0.15, 25.0.6, 26.1.5, 27.1.1. CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. CVSS score 10.0 (7.0 or more) and EPSS 0.16 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-39742: IBM MQ Container authentication bypass

Mon, 08 Jul 2024 13:16:10 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2022-31802: Partial string comparison in CODESYS gateway server

Fri, 24 Jun 2022 07:46:09 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.