# CWE-345.

Every Advisory and CVE whose sources give the weakness CWE-345, newest first.

## Records, newest first (an older page)

- [Notepad++: Shortcuts.xml macro HMAC bypass still reachable via the "Run a Macro Multiple Times" dialog](https://agentprime.io/advisories/CVE-2026-85288.md)
  `CVE-2026-85288` · CVE record: notepad-plus-plus notepad-plus-plus · CVSS 6.7 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Command injection, CWE-345, CWE-693
- [Unauthenticated /enterprise/create-user mints lifetime top-tier organizations and discloses their API key](https://agentprime.io/advisories/CVE-2026-94455.md)
  `CVE-2026-94455` · CVE record: GitroomHQ postiz-app · CVSS 7.1 High · Not analysed yet · Published 22 Sept 2026 · Tags: Authentication bypass, Denial of service, CWE-345
- [Joplin desktop Windows auto-updater accepts signed installer from any publisher because app-update.yml has no publisherName](https://agentprime.io/advisories/CVE-2026-49450.md)
  `CVE-2026-49450` · CVE record: laurent22 joplin · CVSS 7.1 High · Not analysed yet · Published 21 Sept 2026 · Tags: CWE-345, CWE-353, CWE-494
- [Insufficient verification of data authenticity in Eclipse Foundation Eclipse Open VSX](https://agentprime.io/advisories/CVE-2025-12999.md)
  `CVE-2025-12999` · CVE record: Eclipse Foundation Eclipse Open VSX · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Sept 2026 · Tags: CWE-345
- [Payment Gateway for PayPal on WooCommerce < 9.2.1 - Unauthenticated Payment Bypass via Sandbox IPN Environment Confusion](https://agentprime.io/advisories/CVE-2026-92400.md)
  `CVE-2026-92400` · CVE record: Unknown Payment Gateway for PayPal on WooCommerce · CVSS 5.3 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: CWE-345
- [Meow Gallery < 5.5.5 - Unauthenticated Arbitrary Shortcode Execution via load_gallery_collection REST Route](https://agentprime.io/advisories/CVE-2026-92422.md)
  `CVE-2026-92422` · CVE record: Unknown Meow Gallery · CVSS 6.5 Medium · Not analysed yet · Published 20 Sept 2026 · Tags: CWE-345
- [AnyCable: Pusher REST API Does Not Verify Request Body MD5 Enabling Signed-Request Replay with Arbitrary Body](https://agentprime.io/advisories/GHSA-5p54-whvp-x327.md)
  `GHSA-5p54-whvp-x327`, `CVE-2026-63405`, `GO-2026-6516` · Go `github.com/anycable/anycable`: affected `<1.6.15`, fixed in `1.6.15` · CVSS 5.9 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-345
- [Azure Billing Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-62874.md)
  `CVE-2026-62874` · CVE record: Microsoft Azure Billing · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-345
- [MythicalDash: Unauthenticated payment bypass in Stripe success-redirect endpoint allows arbitrary free credit top-up](https://agentprime.io/advisories/CVE-2026-54608.md)
  `CVE-2026-54608` · CVE record: MythicalLTD MythicalDash · CVSS 7.1 High · Not analysed yet · Published 17 Sept 2026 · Tags: Broken access control, CWE-345
- [FaustWP — Authentication Bypass via Initialization Vector Modification in Token Envelope](https://agentprime.io/advisories/CVE-2026-54239.md)
  `CVE-2026-54239` · CVE record: wpengine faustjs · CVSS 8.8 High · Not analysed yet · Published 17 Sept 2026 · Tags: Broken access control, CWE-345
- [libp2p: PeerStore accepts attacker-signed PeerRecords for a victim peer ID and stores certified attacker addresses](https://agentprime.io/advisories/GHSA-vrf4-mx87-p53w.md)
  `GHSA-vrf4-mx87-p53w`, `CVE-2026-86039` · npm `@libp2p/peer-store`: affected `>=8.0.0, <12.0.24`, fixed in `12.0.24` · CVSS 8.2 High · Not analysed yet · Published 17 Sept 2026 · Tags: Authentication bypass, CWE-345
- [libp2p: Gossipsub StrictSign accepts attacker-signed messages as a victim RSA peer ID](https://agentprime.io/advisories/GHSA-c3gv-825q-fvmp.md)
  `GHSA-c3gv-825q-fvmp`, `CVE-2026-86038` · npm `@libp2p/gossipsub`: affected `>=15.0.0, <16.0.5`, fixed in `16.0.5` · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS, CWE-345
- [mport mirror-selection ping accepts insufficiently validated ICMP replies](https://agentprime.io/advisories/CVE-2026-54579.md)
  `CVE-2026-54579` · CVE record: MidnightBSD mport · CVSS 2.3 Low · Not analysed yet · Published 17 Sept 2026 · Tags: Memory corruption, CWE-345
- [mport permits repository and package mirror fetches over insecure transport](https://agentprime.io/advisories/CVE-2026-54586.md)
  `CVE-2026-54586` · CVE record: MidnightBSD mport · CVSS 6.0 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS, CWE-345
- [mport bootstrap index fetch can continue after hash verification failure](https://agentprime.io/advisories/CVE-2026-54581.md)
  `CVE-2026-54581` · CVE record: MidnightBSD mport · CVSS 8.3 High · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS, CWE-345
- [Insufficient verification of data authenticity in Dell SmartFabric Manager](https://agentprime.io/advisories/CVE-2026-26950.md)
  `CVE-2026-26950` · CVE record: Dell SmartFabric Manager · CVSS 8.1 High · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-345
- [WordPress FluentAuth plugin <= 2.1.2 - Email Verification Bypass vulnerability](https://agentprime.io/advisories/CVE-2026-78296.md)
  `CVE-2026-78296` · CVE record: WP ManageNinja LLC FluentAuth · CVSS 5.3 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-345
- [Robokassa payment gateway for Woocommerce < 1.8.9 - Unauthenticated Payment Bypass via Forged JWT Callback](https://agentprime.io/advisories/CVE-2026-91017.md)
  `CVE-2026-91017` · CVE record: Unknown Robokassa payment gateway for Woocommerce · CVSS 3.7 Low · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-345
- [RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery](https://agentprime.io/advisories/GHSA-33f5-2c5q-wgwj.md)
  `GHSA-33f5-2c5q-wgwj`, `CVE-2026-63127` · crates.io `rmcp`: affected `<2.0.0`, fixed in `2.0.0` · CVSS 8.2 High · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-345
- [djust: Unsigned client state snapshot is restored as trusted view state (privilege escalation / state injection)](https://agentprime.io/advisories/GHSA-c67v-vqrp-m5wj.md)
  `GHSA-c67v-vqrp-m5wj`, `CVE-2026-61591`, `PYSEC-2026-4040` · PyPI `djust`: affected `<1.0.7`, fixed in `1.0.7` · CVSS 8.1 High · Not analysed yet · Published 16 Sept 2026 · Tags: Broken access control, CWE-345
- [Insufficient verification of data authenticity in Jenkins Project Jenkins Bitbucket Server Integration Plugin](https://agentprime.io/advisories/CVE-2026-92138.md)
  `CVE-2026-92138` · CVE record: Jenkins Project Jenkins Bitbucket Server Integration Plugin · CVSS 4.2 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-345
- [checkwildcard() accepts an out-of-zone NSEC as a wildcard-nonexistence proof](https://agentprime.io/advisories/CVE-2026-19941.md)
  `CVE-2026-19941` · CVE record: ISC BIND 9 · CVSS 5.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-345
- [Insufficient verification of data authenticity in Advantech EKI-1242IEIMS and others](https://agentprime.io/advisories/CVE-2026-73177.md)
  `CVE-2026-73177` · CVE record: Advantech EKI-1242IEIMS and 1 more · CVSS 8.6 High · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-345
- [ag-ui-protocol ag-ui Event Application Layer agent.ts prepareRunAgentInput origin validation](https://agentprime.io/advisories/CVE-2026-92360.md)
  `CVE-2026-92360` · CVE record: ag-ui-protocol ag-ui · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-345, CWE-346
- [Security Advisory 0171](https://agentprime.io/advisories/CVE-2026-73435.md)
  `CVE-2026-73435` · CVE record: Arista Networks EOS · CVSS 7.0 High · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-345
- [Possible ZONEMD verification bypass window](https://agentprime.io/advisories/CVE-2026-77955.md)
  `CVE-2026-77955` · CVE record: NLnet Labs Unbound · CVSS 4.4 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-345
- [Eventin < 4.1.24 - Unauthenticated Payment Bypass via Stripe and PayPal Cross-Order Transaction Replay](https://agentprime.io/advisories/CVE-2026-84906.md)
  `CVE-2026-84906` · CVE record: Unknown Eventin · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-345
- [Formidable Forms 6.34 - Unauthenticated Stored Content Injection via 'updated_by' Parameter](https://agentprime.io/advisories/CVE-2026-85641.md)
  `CVE-2026-85641` · CVE record: Unknown Formidable Forms · CVSS 4.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-345
- [Security Advisory 0161](https://agentprime.io/advisories/CVE-2026-73450.md)
  `CVE-2026-73450` · CVE record: Arista Networks EOS · CVSS 7.0 High · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-345
- [kkFileView >= 4.2.0 is vulnerable to Server-Side Request Forgery (SSRF).](https://agentprime.io/advisories/CVE-2026-88592.md)
  `CVE-2026-88592` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-345
- [On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay configured, an unauthenticated attacker with network access could send a crafted DHCP reply packet from…](https://agentprime.io/advisories/CVE-2026-73437.md)
  `CVE-2026-73437` · CVE record: Arista Networks EOS · CVSS 6.5 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-345
- [Authentication bypass by spoofing in Eclipse Foundation Eclipse Data Plane Core](https://agentprime.io/advisories/CVE-2026-88819.md)
  `CVE-2026-88819` · CVE record: Eclipse Foundation Eclipse Data Plane Core · CVSS 6.3 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Authentication bypass, CWE-345
- [Quads Ads Manager for Google AdSense < 3.0.5 - Subscriber+ Ad-Selling Payment Bypass via Unverified Success Return URL](https://agentprime.io/advisories/CVE-2026-89050.md)
  `CVE-2026-89050` · CVE record: Unknown Quads Ads Manager for Google AdSense · CVSS 4.3 Medium · Not analysed yet · Published 13 Sept 2026 · Tags: CWE-345
- [AVideo Missing Authorization via AD_Server log.php Wallet Credit](https://agentprime.io/advisories/CVE-2026-89251.md)
  `CVE-2026-89251` · CVE record: WWBN AVideo · CVSS 7.1 High · Not analysed yet · Published 11 Sept 2026 · Tags: CWE-345
- [Persian Elementor < 2.8.2 - Unauthenticated ZarinPal Payment Callback Authority Bypass](https://agentprime.io/advisories/CVE-2026-86809.md)
  `CVE-2026-86809` · CVE record: Unknown Persian Elementor · CVSS 5.3 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: CWE-345
- [WC PayPay Gateway 0.5 - 0.9.3 - Unauthenticated Payment Bypass via Unverified Webhook](https://agentprime.io/advisories/CVE-2026-82215.md)
  `CVE-2026-82215` · CVE record: Unknown Payment Gateway PayPay for WooCommerce · CVSS 5.9 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: CWE-345
- [Insufficient verification of data authenticity in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-80172.md)
  `CVE-2026-80172` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-345
- [WP Express Checkout < 2.5.0 - Unauthenticated Payment Bypass via wpec_process_empty_payment](https://agentprime.io/advisories/CVE-2026-83537.md)
  `CVE-2026-83537` · CVE record: Unknown WP Express Checkout · CVSS 5.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-345
- [XenForo < 2.3.13 Payment Replay via PayPal REST Payment Provider](https://agentprime.io/advisories/CVE-2026-73316.md)
  `CVE-2026-73316` · CVE record: XenForo XenForo · CVSS 8.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-345
- [LobeChat 2.2.1 Webhook Signature Verification Bypass QQ Feishu](https://agentprime.io/advisories/CVE-2026-85621.md)
  `CVE-2026-85621` · CVE record: lobehub lobehub · CVSS 6.9 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: CWE-345
- [ePayco Payment Gateway for WooCommerce < 8.4.7 - Unauthenticated Payment Confirmation Bypass](https://agentprime.io/advisories/CVE-2026-84043.md)
  `CVE-2026-84043` · CVE record: Unknown ePayco Payment Gateway for WooCommerce · CVSS 5.3 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: CWE-345
- [MOOS-IvP through 24.8.1 uFldNodeBroker Unauthenticated Shore Route Enrollment](https://agentprime.io/advisories/CVE-2026-85435.md)
  `CVE-2026-85435` · CVE record: moos-ivp moos-ivp · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2026 · Tags: CWE-345
- [MOOS-IvP through 24.8.1 uFldShoreBroker Bridge Route Injection via Unverified Node Ping](https://agentprime.io/advisories/CVE-2026-85434.md)
  `CVE-2026-85434` · CVE record: moos-ivp moos-ivp · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2026 · Tags: CWE-345
- [MOOS essential-moos through 10.0.1 pMOOSBridge Unauthenticated UDP Packet Injection](https://agentprime.io/advisories/CVE-2026-85431.md)
  `CVE-2026-85431` · CVE record: themoos essential-moos · CVSS 8.7 High · Not analysed yet · Published 3 Sept 2026 · Tags: CWE-345
- [MOOS essential-moos through 10.0.1 pShare Unauthenticated UDP Datagram Republishing](https://agentprime.io/advisories/CVE-2026-85430.md)
  `CVE-2026-85430` · CVE record: themoos essential-moos · CVSS 8.8 High · Not analysed yet · Published 3 Sept 2026 · Tags: CWE-345
- [MOOS-IvP through 24.8.1 uFldNodeComms Node Message Source Spoofing](https://agentprime.io/advisories/CVE-2026-85429.md)
  `CVE-2026-85429` · CVE record: moos-ivp moos-ivp · CVSS 8.7 High · Not analysed yet · Published 3 Sept 2026 · Tags: CWE-345
- [WordPress BookIt plugin <= 2.6.0.3 - Bypass Vulnerability vulnerability](https://agentprime.io/advisories/CVE-2026-84767.md)
  `CVE-2026-84767` · CVE record: Nexcess BookIt · CVSS 5.3 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: CWE-345
- [CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning](https://agentprime.io/advisories/GHSA-78x9-fhhx-v2g6.md)
  `GHSA-78x9-fhhx-v2g6`, `CVE-2026-73846` · npm `@aborruso/ckan-mcp-server`: affected `<0.4.112`, fixed in `0.4.112` · CVSS 6.5 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: CWE-345, CWE-436
- [OpenChoreo: Unauthenticated build/workflow trigger via git-provider confusion (webhook signature bypass)](https://agentprime.io/advisories/GHSA-c5f6-2rm9-2w8g.md)
  `GHSA-c5f6-2rm9-2w8g`, `CVE-2026-73840`, `GO-2026-6360` · Go `github.com/openchoreo/openchoreo`: affected `<1.0.3 || >=1.1.0, <1.1.3 || >=1.2.0-rc.1, <1.2.0-rc.2`, fixed in `1.0.3`, `1.1.3`, `1.2.0-rc.2` · CVSS 5.3 Medium · Not analysed yet · Published 2 Sept 2026 · Tags: Authentication bypass, CWE-345
- [Insufficient verification of data authenticity in AMD Ryzen™ 3000 Series Desktop Processors and others](https://agentprime.io/advisories/CVE-2023-20576.md)
  `CVE-2023-20576` · CVE record: AMD AMD Ryzen™ 3000 Series Desktop Processors and 4 more · CVSS 7.7 High · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-345
- [Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty](https://agentprime.io/advisories/CVE-2026-20355.md)
  `CVE-2026-20355` · CVE record: Cisco Cisco Secure Email · CVSS 5.9 Medium · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-345
- [WP Express Checkout < 2.4.9 - Unauthenticated Payment Bypass via wpec_process_payment](https://agentprime.io/advisories/CVE-2026-83533.md)
  `CVE-2026-83533` · CVE record: Unknown WP Express Checkout · CVSS 5.3 Medium · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-345
- [CVE-2026-100872: Order total can be inflated after a Payment Request has started a gateway transaction, marking the order fully paid](https://agentprime.io/advisories/GHSA-vv4h-q2x8-74g4.md)
  `GHSA-vv4h-q2x8-74g4`, `CVE-2026-100872`, `PKSA-mhzj-n1yw-fvjm` · Packagist `sylius/sylius`: affected `>=2.0.0, <2.1.0 || >=2.1.0, <2.1.16 || >=2.2.0, <2.2.9`, fixed in `2.1.0`, `2.1.16`, `2.2.9` · CVSS 8.7 High · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-345
- [DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX](https://agentprime.io/advisories/CVE-2026-19219.md)
  `CVE-2026-19219` · CVE record: Progress Software Telerik UI for ASP.NET AJAX · CVSS 8.1 High · Not analysed yet · Published 2 Sept 2026 · Tags: Unrestricted file upload, CWE-345
- [CatalogX < 6.1.3 - Unauthenticated Email Content Injection via Shared Transient](https://agentprime.io/advisories/CVE-2026-79621.md)
  `CVE-2026-79621` · CVE record: Unknown CatalogX · CVSS 4.3 Medium · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-345
- [BEN Group TubeBuddy for YouTube Extension tubebuddymaster1.js TBGlobal.GetToken data authenticity](https://agentprime.io/advisories/CVE-2026-82813.md)
  `CVE-2026-82813` · CVE record: BEN Group TubeBuddy for YouTube Extension · CVSS 5.3 Medium · Not analysed yet · Published 31 Aug 2026 · Tags: CWE-345
- [Toggl OÜ Toggl Track Extension postMessage origin validation](https://agentprime.io/advisories/CVE-2026-82811.md)
  `CVE-2026-82811` · CVE record: Toggl OÜ Toggl Track Extension · CVSS 5.3 Medium · Not analysed yet · Published 31 Aug 2026 · Tags: CWE-345, CWE-346
- [Google Cloud Build Comment Control Bypass via Webhook Suppression](https://agentprime.io/advisories/CVE-2026-19410.md)
  `CVE-2026-19410` · CVE record: Google Cloud Google Cloud Build · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Race condition, CWE-345
- [Linux Foundation Magma SecurityModeComplete integrity check](https://agentprime.io/advisories/CVE-2026-82549.md)
  `CVE-2026-82549` · CVE record: Linux Foundation Magma · CVSS 6.9 Medium · Not analysed yet · Published 30 Aug 2026 · Tags: CWE-345, CWE-354
- [pac4j-saml before 6.5.6 Session Destruction via Unsigned LogoutRequest](https://agentprime.io/advisories/CVE-2026-82465.md)
  `CVE-2026-82465` · CVE record: pac4j pac4j · CVSS 6.9 Medium · Not analysed yet · Published 29 Aug 2026 · Tags: CWE-345

Newest: <https://agentprime.io/advisories/tag/cwe-345.md>
Older: <https://agentprime.io/advisories/tag/cwe-345.md?cursor=WyIyMDI2LTA4LTI5VDE2OjM1OjI4LjMyMTAwMFoiLCJDVkUtMjAyNi04MjQ2NSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-345&cursor=WyIyMDI2LTA5LTIyVDE5OjExOjMzLjk5NzAwMFoiLCJDVkUtMjAyNi0yODMyNCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-345/?cursor=WyIyMDI2LTA5LTIyVDE5OjExOjMzLjk5NzAwMFoiLCJDVkUtMjAyNi0yODMyNCJd>. Everything for agents: <https://agentprime.io/llms.txt>.