# CWE-346.

Every Advisory and CVE whose sources give the weakness CWE-346, newest first.

## Records, newest first (an older page)

- [Privilege Escalation in Google SecOps (Chronicle SOAR) via Crafted Authentication Header](https://agentprime.io/advisories/CVE-2026-15587.md)
  `CVE-2026-15587` · CVE record: Google Cloud Google SecOps (Chronicle SOAR) · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-346
- [Microsoft Edge (Chromium-based) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-66322.md)
  `CVE-2026-66322` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 7.1 High · Not analysed yet · Published 3 Aug 2026 · Tags: CWE-346
- [Microsoft Edge (Chromium-based) Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-66317.md)
  `CVE-2026-66317` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 5.4 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: CWE-346
- [Microsoft Edge (Chromium-based) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-66316.md)
  `CVE-2026-66316` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 5.4 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: CWE-346
- [Microsoft Edge (Chromium-based) Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-66313.md)
  `CVE-2026-66313` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 6.8 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: CWE-346
- [Microsoft Edge (Chromium-based) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-66318.md)
  `CVE-2026-66318` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 8.1 High · Not analysed yet · Published 3 Aug 2026 · Tags: CWE-346
- [Guzzle: Noncanonical cookie domain keeps subdomain scope](https://agentprime.io/advisories/GHSA-f7vp-7xgx-4w4r.md)
  `GHSA-f7vp-7xgx-4w4r`, `CVE-2026-69245`, `PKSA-cnw1-2ytm-cgr8` · Packagist `guzzlehttp/guzzle`: affected `<7.15.2 || >=8.0.0, <8.0.1`, fixed in `7.15.2`, `8.0.1` · CVSS 6.5 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: Authentication bypass, CWE-180, CWE-346
- [MeshCentral Cross-Site WebSocket Hijacking via Origin Validation Bypass on Self-Signed Certificate Deployments](https://agentprime.io/advisories/CVE-2026-66420.md)
  `CVE-2026-66420` · CVE record: Ylianst MeshCentral · CVSS 8.6 High · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [MCP Ruby SDK: Streamable HTTP transport lacks DNS-rebinding (Host/Origin) protection](https://agentprime.io/advisories/GHSA-rjr6-rcgv-9m7m.md)
  `GHSA-rjr6-rcgv-9m7m`, `CVE-2026-63118` · RubyGems `mcp`: affected `<0.23.0`, fixed in `0.23.0` · CVSS 6.9 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346, CWE-350
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-18016.md)
  `CVE-2026-18016` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-18000.md)
  `CVE-2026-18000` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17997.md)
  `CVE-2026-17997` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17984.md)
  `CVE-2026-17984` · CVE record: Google Chrome · CVSS 3.3 Low · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17981.md)
  `CVE-2026-17981` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17977.md)
  `CVE-2026-17977` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17963.md)
  `CVE-2026-17963` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17959.md)
  `CVE-2026-17959` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17957.md)
  `CVE-2026-17957` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17954.md)
  `CVE-2026-17954` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17933.md)
  `CVE-2026-17933` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17927.md)
  `CVE-2026-17927` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17925.md)
  `CVE-2026-17925` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17916.md)
  `CVE-2026-17916` · CVE record: Google Chrome · CVSS 7.5 High · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17911.md)
  `CVE-2026-17911` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17910.md)
  `CVE-2026-17910` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17905.md)
  `CVE-2026-17905` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17904.md)
  `CVE-2026-17904` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17900.md)
  `CVE-2026-17900` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17897.md)
  `CVE-2026-17897` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17895.md)
  `CVE-2026-17895` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17885.md)
  `CVE-2026-17885` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17883.md)
  `CVE-2026-17883` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17880.md)
  `CVE-2026-17880` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17879.md)
  `CVE-2026-17879` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17876.md)
  `CVE-2026-17876` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17871.md)
  `CVE-2026-17871` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17857.md)
  `CVE-2026-17857` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17854.md)
  `CVE-2026-17854` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17852.md)
  `CVE-2026-17852` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17850.md)
  `CVE-2026-17850` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17846.md)
  `CVE-2026-17846` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17843.md)
  `CVE-2026-17843` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17842.md)
  `CVE-2026-17842` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17833.md)
  `CVE-2026-17833` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17829.md)
  `CVE-2026-17829` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17826.md)
  `CVE-2026-17826` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17823.md)
  `CVE-2026-17823` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17820.md)
  `CVE-2026-17820` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17817.md)
  `CVE-2026-17817` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17815.md)
  `CVE-2026-17815` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17798.md)
  `CVE-2026-17798` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17788.md)
  `CVE-2026-17788` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17787.md)
  `CVE-2026-17787` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17783.md)
  `CVE-2026-17783` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17777.md)
  `CVE-2026-17777` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17775.md)
  `CVE-2026-17775` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17765.md)
  `CVE-2026-17765` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17763.md)
  `CVE-2026-17763` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17762.md)
  `CVE-2026-17762` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17754.md)
  `CVE-2026-17754` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346

Newest: <https://agentprime.io/advisories/tag/cwe-346.md>
Older: <https://agentprime.io/advisories/tag/cwe-346.md?cursor=WyIyMDI2LTA3LTMwVDAwOjE5OjEyLjQ1MjAwMFoiLCJDVkUtMjAyNi0xNzc1NCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-346&cursor=WyIyMDI2LTA4LTA1VDE1OjAwOjM5LjIzNjAwMFoiLCJDVkUtMjAyNi0xNjQ0MiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-346/?cursor=WyIyMDI2LTA4LTA1VDE1OjAwOjM5LjIzNjAwMFoiLCJDVkUtMjAyNi0xNjQ0MiJd>. Everything for agents: <https://agentprime.io/llms.txt>.