<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-291</title><description>Every new CWE-291 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-86485: JetBrains YouTrack: In JetBrains YouTrack before 2026.2.18634 iP spoofing via HTTP headers allowed forged…</title><link>https://agentprime.io/advisories/CVE-2026-86485/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-86485/</guid><description>CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 07 Sep 2026 16:26:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-4252: Tenda AC8 IPv6 check_is_ipv6 ip address for authentication</title><link>https://agentprime.io/advisories/CVE-2026-4252/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-4252/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 16 Mar 2026 16:32:10 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>OpenClaw Canvas Authentication Bypass Vulnerability</title><link>https://agentprime.io/advisories/GHSA-vvjh-f6p9-5vcf/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-vvjh-f6p9-5vcf/</guid><description>openclaw &lt;2026.2.19, fixed in 2026.2.19. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 04 Mar 2026 19:17:36 GMT</pubDate><category>npm</category><category>openclaw</category></item><item><title>CVE-2025-66602: A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.</title><link>https://agentprime.io/advisories/CVE-2025-66602/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-66602/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 09 Feb 2026 03:16:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-59101: Insufficient Session Management in dormakaba access manager</title><link>https://agentprime.io/advisories/CVE-2025-59101/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-59101/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 26 Jan 2026 10:05:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-34202: Vasion Print (formerly PrinterLogic) Insecure Access to Docker Instances WAN</title><link>https://agentprime.io/advisories/CVE-2025-34202/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-34202/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 19 Sep 2025 18:50:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-23309: LevelOne WBR-6012: The LevelOne WBR-6012 router with firmware R0.40e6 has an authentication bypass…</title><link>https://agentprime.io/advisories/CVE-2024-23309/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-23309/</guid><description>CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Oct 2024 13:35:15 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-32765: QTS, QuTS hero</title><link>https://agentprime.io/advisories/CVE-2024-32765/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-32765/</guid><description>CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 09 Aug 2024 17:09:46 GMT</pubDate><category>CVE</category></item><item><title>Symfony2 improper IP based access control</title><link>https://agentprime.io/advisories/GHSA-hx53-jchx-cr52/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-hx53-jchx-cr52/</guid><description>symfony/symfony &gt;=2.0.0, &lt;2.0.19 || &gt;=2.1.0, &lt;2.1.4, fixed in 2.0.19, 2.1.4. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 30 May 2024 12:35:51 GMT</pubDate><category>Packagist</category><category>symfony/symfony</category></item><item><title>CVE-2023-7211: Uniway Router Administrative Web Interface reliance on ip address for authentication</title><link>https://agentprime.io/advisories/CVE-2023-7211/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-7211/</guid><description>CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 07 Jan 2024 10:00:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-35906: IBM Aspera Faspex security bypass</title><link>https://agentprime.io/advisories/CVE-2023-35906/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-35906/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 05 Sep 2023 00:52:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-46415: DJI Spark 01.00.0900 allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool.</title><link>https://agentprime.io/advisories/CVE-2022-46415/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-46415/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 27 Mar 2023 00:00:00 GMT</pubDate><category>CVE</category><category>critical</category></item></channel></rss>