<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-278</title><description>Every new CWE-278 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-71477: mise: Incorrect file ownership, when installed by the root user using `install.sh`</title><link>https://agentprime.io/advisories/CVE-2026-71477/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-71477/</guid><description>CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Aug 2026 15:22:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-6265: Local Privilege Escalation in Cerberus FTP Server =&lt; 2025.4.2</title><link>https://agentprime.io/advisories/CVE-2026-6265/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-6265/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 27 Apr 2026 13:00:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-2947: IBM i privilege escalation</title><link>https://agentprime.io/advisories/CVE-2025-2947/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-2947/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 17 Apr 2025 17:10:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-36538: Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account&apos;s token.</title><link>https://agentprime.io/advisories/CVE-2024-36538/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-36538/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 24 Jul 2024 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-37769: Insecure permissions in 14Finger v1.1 allow attackers to escalate privileges from normal user to Administrator via a crafted POST request.</title><link>https://agentprime.io/advisories/CVE-2024-37769/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-37769/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 05 Jul 2024 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-38531: Nix sandbox escape</title><link>https://agentprime.io/advisories/CVE-2024-38531/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-38531/</guid><description>CVSS 3.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 28 Jun 2024 13:18:58 GMT</pubDate><category>CVE</category></item><item><title>Cargo not respecting umask when extracting crate archives</title><link>https://agentprime.io/advisories/GHSA-j3xp-wfr4-hx87/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-j3xp-wfr4-hx87/</guid><description>cargo &lt;0.72.2, fixed in 0.72.2. CVSS 7.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 03 Aug 2023 16:30:52 GMT</pubDate><category>crates.io</category><category>cargo</category></item><item><title>Keycloak Authentication Error</title><link>https://agentprime.io/advisories/GHSA-jf86-9434-f8c2/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-jf86-9434-f8c2/</guid><description>org.keycloak:keycloak-parent &gt;=7.0.0, &lt;=7.0.1, no fixed version yet. CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 24 May 2022 17:02:42 GMT</pubDate><category>Maven</category><category>org.keycloak:keycloak-parent</category><category>critical</category></item></channel></rss>