<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-286</title><description>Every new CWE-286 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-56428: Bosch BSH ELP (Electronic Platform) Modules: The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific…</title><link>https://agentprime.io/advisories/CVE-2026-56428/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-56428/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Jul 2026 13:11:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-60135: Weintek cMT3092X Incorrect User Management</title><link>https://agentprime.io/advisories/CVE-2026-60135/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-60135/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 24 Jul 2026 22:06:12 GMT</pubDate><category>CVE</category></item><item><title>OpenClaw&apos;s Trusted-proxy Control UI sessions retain privileged scopes without device identity on device-less allow paths</title><link>https://agentprime.io/advisories/GHSA-48vw-m3qc-wr99/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-48vw-m3qc-wr99/</guid><description>openclaw &lt;2026.3.22, fixed in 2026.3.22. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 26 Mar 2026 19:50:59 GMT</pubDate><category>npm</category><category>openclaw</category></item><item><title>Weblate has improper validation upon invitation acceptance</title><link>https://agentprime.io/advisories/GHSA-m6hq-f4w9-qrjj/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-m6hq-f4w9-qrjj/</guid><description>weblate &lt;5.15, fixed in 5.15. CVSS 1.0 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 15 Dec 2025 19:58:09 GMT</pubDate><category>PyPI</category><category>weblate</category></item><item><title>CVE-2025-63563: Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 does not properly invalidate active user sessions after a password change.</title><link>https://agentprime.io/advisories/CVE-2025-63563/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-63563/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 31 Oct 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>phpMyFAQ duplicate email registration allows multiple accounts with the same email</title><link>https://agentprime.io/advisories/GHSA-9wj2-4hcm-r74j/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-9wj2-4hcm-r74j/</guid><description>thorsten/phpmyfaq &gt;=4.0.7, &lt;4.0.13, fixed in 4.0.13. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 03 Oct 2025 14:52:33 GMT</pubDate><category>Packagist</category><category>thorsten/phpmyfaq</category></item><item><title>CVE-2025-7972: Rockwell Automation FactoryTalk® Linx Network Browser Security Bypass Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-7972/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-7972/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 14 Aug 2025 14:47:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-48853: Authenticated Escalation to guest to root</title><link>https://agentprime.io/advisories/CVE-2024-48853/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-48853/</guid><description>CVSS 9.5 (Critical). Critical: CVSS score 9.5: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 May 2025 16:38:34 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-46671: Fortinet FortiWeb: An Incorrect User Management vulnerability [CWE-286] in FortiWeb version 7.6.2 and below…</title><link>https://agentprime.io/advisories/CVE-2024-46671/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-46671/</guid><description>CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 08 Apr 2025 14:02:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-58105: Trend Micro, Inc. Trend Micro Apex One: A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager…</title><link>https://agentprime.io/advisories/CVE-2024-58105/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-58105/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 25 Mar 2025 17:37:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-45425: Zoom Workplace Apps - Incorrect User Management</title><link>https://agentprime.io/advisories/CVE-2024-45425/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-45425/</guid><description>CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 25 Feb 2025 19:38:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-6356: Incorrect User Management in GitLab</title><link>https://agentprime.io/advisories/CVE-2024-6356/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-6356/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 05 Feb 2025 10:02:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-13041: Incorrect User Management in GitLab</title><link>https://agentprime.io/advisories/CVE-2024-13041/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-13041/</guid><description>CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Jan 2025 06:33:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-52359: IBM Concert Software improper access controls</title><link>https://agentprime.io/advisories/CVE-2024-52359/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-52359/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 19 Nov 2024 19:39:28 GMT</pubDate><category>CVE</category></item><item><title>Authd allows attacker-controlled usernames to yield controllable UIDs in github.com/ubuntu/authd</title><link>https://agentprime.io/advisories/GHSA-4gfw-wf7c-w6g2/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-4gfw-wf7c-w6g2/</guid><description>github.com/ubuntu/authd &lt;0.3.6, fixed in 0.3.6. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 11 Oct 2024 14:32:39 GMT</pubDate><category>Go</category><category>github.com/ubuntu/authd</category></item><item><title>CVE-2023-26689: An issue discovered in CS-Cart MultiVendor 4.16.1 allows attackers to alter arbitrary user account profiles via crafted post request.</title><link>https://agentprime.io/advisories/CVE-2023-26689/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-26689/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 24 Sep 2024 00:00:00 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-28020: A user/password reuse vulnerability exists in the FOXMAN-UN/UNEM application and server management.</title><link>https://agentprime.io/advisories/CVE-2024-28020/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-28020/</guid><description>CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Jun 2024 18:20:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-27269: IBM QRadar SIEM information disclosure</title><link>https://agentprime.io/advisories/CVE-2024-27269/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-27269/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 10 May 2024 16:58:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-35503: Improper verification of a user input in Open Source MANO v7-v12 allows an authenticated attacker to execute arbitrary code within the LCM module container via a Virtual Network Function (VNF) descri…</title><link>https://agentprime.io/advisories/CVE-2022-35503/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-35503/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 22 Apr 2024 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>Portainer CE allows username enumeration through authentication response timing</title><link>https://agentprime.io/advisories/GHSA-87x6-8m9v-g8c2/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-87x6-8m9v-g8c2/</guid><description>github.com/portainer/portainer &lt;0.6.1-0.20240417040827-48bc7d0d92f0, fixed in 0.6.1-0.20240417040827-48bc7d0d92f0. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 10 Apr 2024 15:30:40 GMT</pubDate><category>Go</category><category>github.com/portainer/portainer</category></item><item><title>CVE-2023-51750: ScaleFusion 10.5.2 does not properly limit users to the Edge application because file downloads can occur.</title><link>https://agentprime.io/advisories/CVE-2023-51750/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-51750/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 11 Jan 2024 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-3907: Improper User Management in GitLab</title><link>https://agentprime.io/advisories/CVE-2023-3907/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-3907/</guid><description>CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 17 Dec 2023 23:02:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-3115: Incorrect User Management in GitLab</title><link>https://agentprime.io/advisories/CVE-2023-3115/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-3115/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 29 Sep 2023 06:02:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-3914: Incorrect User Management in GitLab</title><link>https://agentprime.io/advisories/CVE-2023-3914/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-3914/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 29 Sep 2023 06:02:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-20253: Cisco SD-WAN vManage: A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN…</title><link>https://agentprime.io/advisories/CVE-2023-20253/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-20253/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 27 Sep 2023 17:12:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-25519: NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit contains a vulnerability where a restricted host may cause an incorrect user management error.</title><link>https://agentprime.io/advisories/CVE-2023-25519/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-25519/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 12 Sep 2023 00:49:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-3932: Incorrect User Management in GitLab</title><link>https://agentprime.io/advisories/CVE-2023-3932/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-3932/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 03 Aug 2023 04:01:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-0857: Unintentional change of settings during initial registration of system administrators which uses control protocols.</title><link>https://agentprime.io/advisories/CVE-2023-0857/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-0857/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 11 May 2023 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-45857: Fortinet FortiManager: An incorrect user management vulnerability [CWE-286] in the FortiManager version 6.4.6…</title><link>https://agentprime.io/advisories/CVE-2022-45857/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-45857/</guid><description>CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 05 Jan 2023 07:37:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-32260: A vulnerability has been identified in SINEMA Remote Connect Server (All versions &lt; V3.2 SP1).</title><link>https://agentprime.io/advisories/CVE-2022-32260/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-32260/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Jun 2022 09:22:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-26262: Philips MRI 1.5T and 3T Improper Access Control</title><link>https://agentprime.io/advisories/CVE-2021-26262/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-26262/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 19 Nov 2021 18:35:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-21553: Dell PowerScale OneFS: Dell PowerScale OneFS versions 8.1.0-9.1.0 contain an Incorrect User Management…</title><link>https://agentprime.io/advisories/CVE-2021-21553/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-21553/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 02 Aug 2021 23:45:14 GMT</pubDate><category>CVE</category></item></channel></rss>