agentprime: CWE-302

CVE-2026-114277: Apache OFBiz: Janrain Engage Social Login Improperly Binds External Identities to Local Accounts

Thu, 05 Nov 2026 13:33:35 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-80092: Microsoft Identity Web Elevation of Privilege Vulnerability

Fri, 16 Oct 2026 17:12:01 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-84731: Pre-Authentication Admin Bypass and Remote Code Execution in Nutanix Prism Gateway inside AOS

Thu, 15 Oct 2026 17:10:29 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace

Fri, 18 Sep 2026 17:15:49 GMT

github.com/kcp-dev/kcp <0.31.4 || >=0.32.0, <0.32.2, fixed in 0.31.4, 0.32.2. CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-77508: Weblate: Unverified REST API email changes

Wed, 26 Aug 2026 19:56:59 GMT

CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-13267: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

Wed, 12 Aug 2026 19:58:23 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-5423: Subscription Authentication Bypass via Unverified connectionParams.jwt

Thu, 06 Aug 2026 15:15:29 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-47303 – .NET Elevation of Privilege Vulnerability

Tue, 21 Jul 2026 16:07:53 GMT

Microsoft.AspNetCore.Authentication.Negotiate >=8.0.0, <8.0.29 || >=9.0.0, <9.0.18 || >=10.0.0, <10.0.10, fixed in 8.0.29, 9.0.18, 10.0.10. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-50528 – .NET Security Feature Bypass Vulnerability

Mon, 20 Jul 2026 22:52:09 GMT

Microsoft.NetCore.App.Runtime.linux-arm >=8.0.0, <8.0.29 || >=9.0.0, <9.0.18 || >=10.0.0, <10.0.10, fixed in 8.0.29, 9.0.18, 10.0.10. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-48117: DroneAware's Improper Account Activation in Registration and SSO Flows Leads to Account Takeover

Wed, 17 Jun 2026 14:02:39 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-48781: Postiz has cross-tenant SUPERADMIN takeover via Skool-provider JWT forgery

Tue, 16 Jun 2026 21:31:28 GMT

CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-34460: NamelessMC: OAuth callback `state` is not validated, allowing login CSRF / session swapping

Tue, 02 Jun 2026 15:29:14 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-43992: Dell ECS: Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0…

Mon, 11 May 2026 09:27:36 GMT

CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-28510: elabftw allows MFA bypass during login

Tue, 05 May 2026 12:28:10 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-40285: WeGIA has SQL Injection via Session Variable Override in DespachoControle.php

Fri, 17 Apr 2026 20:25:33 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

kcp's cache server is accessible without authentication or authorization checks

Wed, 08 Apr 2026 15:04:22 GMT

github.com/kcp-dev/kcp <0.29.3 || >=0.30.0, <0.30.3, fixed in 0.29.3, 0.30.3. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

ZITADEL's truncated opaque tokens are still valid

Fri, 27 Feb 2026 21:22:00 GMT

github.com/zitadel/zitadel <1.80.0-v2.20.0.20260216092519-feab8e1fa371 || >=2.31.0, <=2.71.19 || >=3.0.0, <3.4.7 || >=4.0.0, <4.11.0, fixed in 1.80.0-v2.20.0.20260216092519-feab8e1fa371, 3.4.7, 4.11.0. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-45370: Socomec Easy Config System: An authentication bypass vulnerability exists in the User profile management…

Mon, 01 Dec 2025 15:25:42 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-63210: The Newtec Celox UHD (models: CELOXA504, CELOXA820) running firmware version celox-21.6.13 is vulnerable to an authentication bypass.

Wed, 19 Nov 2025 00:00:00 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-8855: 2FA Expiry Bypass in Optimus Software's Brokerage Automation

Fri, 14 Nov 2025 12:39:46 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-47158: Azure DevOps Server Elevation of Privilege Vulnerability

Fri, 18 Jul 2025 17:04:45 GMT

CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-20285: Cisco Identity Services Engine IP Filter Access Restriction for Admin Access Configuration Bypass Vulnerability

Wed, 16 Jul 2025 16:16:56 GMT

CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-46647: Apache APISIX: improper validation of issuer from introspection discovery url in plugin openid-connect

Wed, 02 Jul 2025 11:08:47 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-29813: Azure DevOps Elevation of Privilege Vulnerability

Thu, 08 May 2025 22:17:26 GMT

CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-26522: Authentication Bypass Vulnerability in RupeeWeb trading platform

Fri, 14 Feb 2025 11:24:17 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

Authentication bypass in @sap/approuter

Tue, 11 Feb 2025 03:30:56 GMT

@sap/approuter >=2.6.1, <16.7.2, fixed in 16.7.2. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-56404: OneIdentity Identity Manager: In One Identity Identity Manager 9.x before 9.3…

Fri, 24 Jan 2025 00:00:00 GMT

CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-12838: Changing Information Technology CGFIDO - Authentication Bypass

Tue, 31 Dec 2024 01:24:48 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

Apache HugeGraph-Server: Fixed JWT Token (Secret)

Tue, 24 Dec 2024 12:30:42 GMT

org.apache.hugegraph:hugegraph-server >=1.0.0, <1.5.0, fixed in 1.5.0. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.73 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-8475: Protection Mechanism Failure in Digital Operation Services' WiFiBurada

Tue, 17 Dec 2024 11:42:03 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-49056: Airlift.microsoft.com Elevation of Privilege Vulnerability

Tue, 12 Nov 2024 17:53:57 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-47086: OTP Bypass Vulnerability

Thu, 19 Sep 2024 06:03:10 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

Ant Media Server does not properly authorize non-administrative API calls

Tue, 14 May 2024 18:30:52 GMT

io.antmedia:ant-media-server <=2.9.0, no fixed version yet. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-4024: Authentication Bypass by Assumed-Immutable Data in GitLab

Thu, 25 Apr 2024 13:30:46 GMT

CVSS 7.3 (High). Critical: CVSS score 7.3 (7.0 or more) and EPSS 0.15 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-22179: Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data

Thu, 18 Apr 2024 22:06:26 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-3741: Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data

Thu, 18 Apr 2024 22:04:46 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

TYPO3 vulnerable to Weak Authentication in Session Handling

Tue, 14 Nov 2023 18:30:21 GMT

typo3/cms-core >=8.0.0, <8.7.55 || >=9.0.0, <9.5.44 || >=10.0.0, <10.4.41 || >=11.0.0, <11.5.33 || >=12.0.0, <12.4.8, fixed in 8.7.55, 9.5.44, 10.4.41, 11.5.33, 12.4.8. CVSS 4.2 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2023-4612: MFA bypass in Apereo CAS

Thu, 09 Nov 2023 13:41:38 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-4669: Authentication Bypass in Exagate SYSGuard 3001

Thu, 14 Sep 2023 18:34:40 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2022-3875: Click Studios Passwordstate API authentication bypass by assumed-immutable data

Mon, 19 Dec 2022 00:00:00 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

TYPO3 CMS vulnerable to Weak Authentication in Frontend Login

Tue, 13 Dec 2022 17:04:02 GMT

typo3/cms >=10.0.0, <10.4.33 || >=11.0.0, <11.5.20 || >=12.0.0, <12.1.1, fixed in 10.4.33, 11.5.20, 12.1.1. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2022-40703: AliveCor Kardia App: CWE-302 Authentication Bypass by Assumed-Immutable Data in AliveCor Kardia App version…

Wed, 26 Oct 2022 20:02:06 GMT

CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2022-2503: Linux Kernel LoadPin bypass via dm-verity table reload

Fri, 12 Aug 2022 00:00:00 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2022-22729: Yokogawa Electric Corporation CENTUM CS 3000: CAMS for HIS Server contained in the following Yokogawa Electric products improperly…

Fri, 11 Mar 2022 09:10:50 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2021-1561: Cisco Secure Email and Web Manager Spam Quarantine Unauthorized Access Vulnerability

Wed, 18 Aug 2021 19:40:10 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2021-1399: Cisco Unified Communications Manager Self Care Portal Authorization Bypass Vulnerability

Thu, 08 Apr 2021 04:05:51 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2020-15074: OpenVPN Access Server: OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user…

Tue, 14 Jul 2020 17:27:31 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2016-9482: PHP FormMail Generator generates PHP code for standard web forms, and the code generated is vulnerable to authentication bypass

Fri, 13 Jul 2018 20:00:00 GMT

Published by the CVE Program. Not analysed by agentprime yet.