# CWE-264. Every Advisory and CVE whose sources give the weakness CWE-264, newest first. ## Records, newest first - [Permission control vulnerability in the Bluetooth module.](https://agentprime.io/advisories/CVE-2026-101184.md) `CVE-2026-101184` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-264 - [Permission control vulnerability in the Optimizer module.](https://agentprime.io/advisories/CVE-2026-101177.md) `CVE-2026-101177` · CVE record: Huawei HarmonyOS and 1 more · CVSS 3.7 Low · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-264 - [Permission control vulnerability in the event notification management module.](https://agentprime.io/advisories/CVE-2026-101176.md) `CVE-2026-101176` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.1 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-264 - [Permission control vulnerability in the background task management module.](https://agentprime.io/advisories/CVE-2026-101171.md) `CVE-2026-101171` · CVE record: Huawei HarmonyOS · CVSS 3.6 Low · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-264 - [Permission control vulnerability in the graphics module.](https://agentprime.io/advisories/CVE-2026-101172.md) `CVE-2026-101172` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-264 - [DeepSeek Harness sandbox.ts createContext](https://agentprime.io/advisories/CVE-2026-116367.md) `CVE-2026-116367` · CVE record: DeepSeek Harness · CVSS 5.3 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-264, CWE-265 - [IBM Db2 Mirror for i Privilege Escalation](https://agentprime.io/advisories/CVE-2026-96012.md) `CVE-2026-96012` · CVE record: IBM Db2 Mirror for i · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-264 - [deepseek-ai deepseek-harness Sandbox spawn sandbox](https://agentprime.io/advisories/CVE-2026-108788.md) `CVE-2026-108788` · CVE record: deepseek-ai deepseek-harness · CVSS 4.8 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-264, CWE-265 - [Cisco Application Policy Infrastructure Controller Authenticated Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-76488.md) `CVE-2026-76488` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 6.5 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-264 - [deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox](https://agentprime.io/advisories/CVE-2026-101102.md) `CVE-2026-101102` · CVE record: deepseek-ai deepseek-harness · CVSS 5.3 Medium · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-264, CWE-265 - [Cisco Secure Firewall Management Center Software Authenticated Privilege Escalation to Root Vulnerability](https://agentprime.io/advisories/CVE-2026-76412.md) `CVE-2026-76412` · CVE record: Cisco Cisco Secure Firewall Management Center (FMC) · CVSS 8.5 High · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-264 - [Permission control vulnerability in the app lock module.](https://agentprime.io/advisories/CVE-2026-49313.md) `CVE-2026-49313` · CVE record: Huawei HarmonyOS · CVSS 5.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-264 - [Permission control vulnerability in the Settings module.](https://agentprime.io/advisories/CVE-2026-49309.md) `CVE-2026-49309` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-264 - [Permission control vulnerability in the app management module.](https://agentprime.io/advisories/CVE-2026-41987.md) `CVE-2026-41987` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-264 - [DoS vulnerability in the input device module.](https://agentprime.io/advisories/CVE-2026-49315.md) `CVE-2026-49315` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.1 High · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-264 - [DoS vulnerability in the preview service module.](https://agentprime.io/advisories/CVE-2026-81644.md) `CVE-2026-81644` · CVE record: Huawei HarmonyOS · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-264 - [Permission control vulnerability in the window module.](https://agentprime.io/advisories/CVE-2026-49312.md) `CVE-2026-49312` · CVE record: Huawei HarmonyOS · CVSS 4.0 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-264 - [Permission control vulnerability in the event notification module.](https://agentprime.io/advisories/CVE-2026-49310.md) `CVE-2026-49310` · CVE record: Huawei HarmonyOS · CVSS 8.6 High · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-264 - [Permission control vulnerability in the notification module.](https://agentprime.io/advisories/CVE-2026-49303.md) `CVE-2026-49303` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: CWE-264 - [Permission control vulnerability in the clipboard module.](https://agentprime.io/advisories/CVE-2026-49308.md) `CVE-2026-49308` · CVE record: Huawei HarmonyOS · CVSS 5.5 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: CWE-264 - [Permission control vulnerability in the device key management module.](https://agentprime.io/advisories/CVE-2026-49304.md) `CVE-2026-49304` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: CWE-264 - [vxcontrol PentAGI Tool Management Protocol pentester.tmpl sandbox](https://agentprime.io/advisories/CVE-2026-18593.md) `CVE-2026-18593` · CVE record: vxcontrol PentAGI · CVSS 6.3 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: CWE-264, CWE-265 - [Permission control vulnerability in the Bluetooth module.](https://agentprime.io/advisories/CVE-2026-58556.md) `CVE-2026-58556` · CVE record: Huawei Harmony OS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: CWE-264 - [Permission bypass vulnerability in the card module.](https://agentprime.io/advisories/CVE-2026-58555.md) `CVE-2026-58555` · CVE record: Huawei HarmonyOS · CVSS 6.6 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: CWE-264 - [vxcontrol PentAGI Docker API client.go sandbox](https://agentprime.io/advisories/CVE-2026-14784.md) `CVE-2026-14784` · CVE record: vxcontrol PentAGI · CVSS 5.3 Medium · Not analysed yet · Published 6 Jul 2026 · Tags: CWE-264, CWE-265 - [Permission control vulnerability in service notifications.](https://agentprime.io/advisories/CVE-2026-41974.md) `CVE-2026-41974` · CVE record: Huawei HarmonyOS and 1 more · CVSS 3.6 Low · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-264 - [hermes-agent has a sandbox issue](https://agentprime.io/advisories/GHSA-wm96-9gfh-vvgq.md) `GHSA-wm96-9gfh-vvgq`, `CVE-2026-9368`, `PYSEC-2026-2515` · PyPI `hermes-agent`: affected `<0.11.0`, fixed in `0.11.0` · CVSS 6.9 Medium · Not analysed yet · Published 26 May 2026 · Tags: Privilege escalation, CWE-264, CWE-265, CWE-526 - [Permission control vulnerability in the app management and control module.](https://agentprime.io/advisories/CVE-2026-41962.md) `CVE-2026-41962` · CVE record: Huawei HarmonyOS · CVSS 3.6 Low · Not analysed yet · Published 15 May 2026 · Tags: CWE-264 - [verl's math_equal() Vulnerable to Arbitrary Code Execution via Unsafe eval()](https://agentprime.io/advisories/GHSA-h57c-v2v3-5v3v.md) `GHSA-h57c-v2v3-5v3v`, `CVE-2026-6878`, `PYSEC-2026-3402` · PyPI `verl`: affected `<=0.7.1`, no fixed version yet · CVSS 6.3 Medium · Not analysed yet · Published 23 Apr 2026 · Tags: Code injection, CWE-264, CWE-265 - [nocobase plugin-workflow-javascript Vm.js createSafeConsole sandbox](https://agentprime.io/advisories/CVE-2026-6224.md) `CVE-2026-6224` · CVE record: nocobase plugin-workflow-javascript · CVSS 6.9 Medium · Not analysed yet · Published 13 Apr 2026 · Tags: CWE-264, CWE-265 - [AstrBotDevs AstrBot install-upload Endpoint plugin.py install_plugin_upload sandbox](https://agentprime.io/advisories/CVE-2026-6117.md) `CVE-2026-6117` · CVE record: AstrBotDevs AstrBot · CVSS 5.3 Medium · Not analysed yet · Published 12 Apr 2026 · Tags: CWE-264, CWE-265 - [Cisco IOS XR Software CLI Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2026-20046.md) `CVE-2026-20046` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.8 High · Not analysed yet · Published 11 Mar 2026 · Tags: CWE-264 - [Permission control vulnerability in the cellular_data module.](https://agentprime.io/advisories/CVE-2026-28541.md) `CVE-2026-28541` · CVE record: Huawei HarmonyOS · CVSS 4.0 Medium · Not analysed yet · Published 5 Mar 2026 · Tags: CWE-264 - [Permission control vulnerability in the resource scheduling module.](https://agentprime.io/advisories/CVE-2025-66319.md) `CVE-2025-66319` · CVE record: Huawei HarmonyOS · CVSS 3.3 Low · Not analysed yet · Published 5 Mar 2026 · Tags: CWE-264 - [Vulnerability of improper permission control in the print module.](https://agentprime.io/advisories/CVE-2026-24924.md) `CVE-2026-24924` · CVE record: Huawei HarmonyOS · CVSS 6.1 Medium · Not analysed yet · Published 6 Feb 2026 · Tags: CWE-264 - [Permission control vulnerability in the AMS module.](https://agentprime.io/advisories/CVE-2026-24920.md) `CVE-2026-24920` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 6 Feb 2026 · Tags: CWE-264 - [Vulnerability of improper criterion security check in the card module.](https://agentprime.io/advisories/CVE-2026-24931.md) `CVE-2026-24931` · CVE record: Huawei HarmonyOS · CVSS 5.9 Medium · Not analysed yet · Published 6 Feb 2026 · Tags: CWE-264 - [Permission control vulnerability in the HDC module.](https://agentprime.io/advisories/CVE-2026-24923.md) `CVE-2026-24923` · CVE record: Huawei HarmonyOS · CVSS 6.3 Medium · Not analysed yet · Published 6 Feb 2026 · Tags: CWE-264 - [Vulnerability of improper permission control in the print module.](https://agentprime.io/advisories/CVE-2025-68967.md) `CVE-2025-68967` · CVE record: Huawei HarmonyOS · CVSS 5.7 Medium · Not analysed yet · Published 14 Jan 2026 · Tags: CWE-264 - [Permission control vulnerability in the window management module.](https://agentprime.io/advisories/CVE-2025-66329.md) `CVE-2025-66329` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.0 Medium · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-264 - [Permission control vulnerability in the package management module.](https://agentprime.io/advisories/CVE-2025-66325.md) `CVE-2025-66325` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-264 - [Permission control vulnerability in the Settings module.](https://agentprime.io/advisories/CVE-2025-58302.md) `CVE-2025-58302` · CVE record: Huawei HarmonyOS and 1 more · CVSS 8.4 High · Not analysed yet · Published 28 Nov 2025 · Tags: CWE-264 - [Permission control vulnerability in the print module.](https://agentprime.io/advisories/CVE-2025-58294.md) `CVE-2025-58294` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 28 Nov 2025 · Tags: CWE-264 - [Permission control vulnerability in the Wi-Fi module.](https://agentprime.io/advisories/CVE-2025-58315.md) `CVE-2025-58315` · CVE record: Huawei HarmonyOS · CVSS 5.5 Medium · Not analysed yet · Published 28 Nov 2025 · Tags: CWE-264 - [Permission control vulnerability in the App Lock module.](https://agentprime.io/advisories/CVE-2025-58312.md) `CVE-2025-58312` · CVE record: Huawei HarmonyOS · CVSS 5.1 Medium · Not analysed yet · Published 28 Nov 2025 · Tags: CWE-264 - [Permission control vulnerability in the startup recovery module.](https://agentprime.io/advisories/CVE-2025-58309.md) `CVE-2025-58309` · CVE record: Huawei HarmonyOS · CVSS 6.8 Medium · Not analysed yet · Published 28 Nov 2025 · Tags: CWE-264 - [Configuration defect vulnerability in the file management module.](https://agentprime.io/advisories/CVE-2025-64315.md) `CVE-2025-64315` · CVE record: Huawei HarmonyOS · CVSS 4.4 Medium · Not analysed yet · Published 28 Nov 2025 · Tags: CWE-264 - [Vulnerability of improper exception handling in the print module.](https://agentprime.io/advisories/CVE-2025-58293.md) `CVE-2025-58293` · CVE record: Huawei HarmonyOS · CVSS 5.5 Medium · Not analysed yet · Published 11 Oct 2025 · Tags: CWE-264 - [Permission control vulnerability in the media module.](https://agentprime.io/advisories/CVE-2025-58285.md) `CVE-2025-58285` · CVE record: Huawei HarmonyOS · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2025 · Tags: CWE-264 - [Permission control vulnerability in the network module.](https://agentprime.io/advisories/CVE-2025-58284.md) `CVE-2025-58284` · CVE record: Huawei HarmonyOS · CVSS 5.9 Medium · Not analysed yet · Published 11 Oct 2025 · Tags: CWE-264 - [Permission control vulnerability in the Wi-Fi module.](https://agentprime.io/advisories/CVE-2025-58283.md) `CVE-2025-58283` · CVE record: Huawei HarmonyOS · CVSS 5.5 Medium · Not analysed yet · Published 11 Oct 2025 · Tags: CWE-264 - [Permission control vulnerability in the camera module.](https://agentprime.io/advisories/CVE-2025-58282.md) `CVE-2025-58282` · CVE record: Huawei HarmonyOS · CVSS 2.8 Low · Not analysed yet · Published 11 Oct 2025 · Tags: CWE-264 - [Permission control vulnerability in the Gallery module.](https://agentprime.io/advisories/CVE-2025-54654.md) `CVE-2025-54654` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 11 Oct 2025 · Tags: CWE-264 - [Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2025-58276.md) `CVE-2025-58276` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 5 Sept 2025 · Tags: CWE-264 - [Vulnerability that allows setting screen rotation direction without permission verification in the screen management module.](https://agentprime.io/advisories/CVE-2025-54608.md) `CVE-2025-54608` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-264 - [Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2025-53186.md) `CVE-2025-53186` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 7 Jul 2025 · Tags: CWE-264 - [Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule reminder function of head units.](https://agentprime.io/advisories/CVE-2025-53178.md) `CVE-2025-53178` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 7 Jul 2025 · Tags: CWE-264 - [Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule syncing function of watches.](https://agentprime.io/advisories/CVE-2025-53177.md) `CVE-2025-53177` · CVE record: Huawei HarmonyOS and 1 more · CVSS 3.9 Low · Not analysed yet · Published 7 Jul 2025 · Tags: CWE-264 - [Redash getattr python.py run_query sandbox](https://agentprime.io/advisories/CVE-2025-5874.md) `CVE-2025-5874` · CVE record: Redash · CVSS 2.1 Low · Not analysed yet · Published 9 Jun 2025 · Tags: CWE-264, CWE-265 - [Permission bypass vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2025-48903.md) `CVE-2025-48903` · CVE record: Huawei HarmonyOS · CVSS 7.8 High · Not analysed yet · Published 6 Jun 2025 · Tags: CWE-264 Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .