CWE-346.

Mattermost Desktop local network access from server-rendered content

• Mattermost
• CWE-346

NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets

• ISC BIND 9
• CWE-346

ag-ui-protocol ag-ui Event Application Layer agent.ts prepareRunAgentInput origin validation

• ag-ui
• CWE-345
• CWE-346

ag-ui-protocol ag-ui CORSMiddleware utils.py create_strands_app cross-domain policy

• ag-ui
• CWE-346
• CWE-942

Apache Airflow FAB provider: FAB Authentik provider: id_token issuer/audience not validated

• Apache Software Foundation Apache Airflow FAB provider
• CWE-346

Site isolation issue in the Reader Mode component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-346

Site isolation issue in the Graphics component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-346

DocsGPT through 0.20.0 OAuth Token Disclosure via Wildcard postMessage

• arc53 DocsGPT
• CWE-346

Apache Storm Webapp: Authenticated API Responses Exposed to Arbitrary Web Origins

• Apache Software Foundation Apache Storm Webapp
• CWE-346
• CWE-942

Origin validation error in Samsung Exynos 1080 firmware

• Samsung Exynos 1080 firmware
• CWE-346

Mousehole: Unauthenticated HTTP/WebSocket boundary exposes and mutates MAM cookie state

• t-mart mousehole
• Information disclosure
• Authentication bypass

MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)

• Authentication bypass
• CWE-346

<0.4.2 · fixed in 0.4.2

An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA sel…

• CWE-346

Origin validation error in Google Chrome

• Google Chrome
• CWE-346

.NET Information Disclosure Vulnerability

• Microsoft .NET 10.0 runtime
• Microsoft .NET 11.0 runtime
• CWE-346

Microsoft Teams for Android Information Disclosure Vulnerability

• Microsoft Teams for Android
• CWE-346

Windows DNS Spoofing Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• CWE-346

Apache Airflow FAB provider: FAB Azure AD OAuth: id_token issuer/audience not validated — cross-tenant authentication bypass

• Apache Software Foundation Apache Airflow FAB provider
• CWE-346

WWBN AVideo Cross-Site Request Forgery via get_domain() validation

• WWBN AVideo
• CWE-346

TYPO3 CMS - Broken Access Control in Backend and Install Tool

• Cross-site request forgery (CSRF)
• CWE-346

>=13.0.0, <13.4.34 · fixed in 13.4.34

Site isolation issue in the DOM: Navigation component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-346

Site isolation issue in the DOM: Push Subscriptions component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-346

Site isolation issue in the DOM: Navigation component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-346

Toggl OÜ Toggl Track Extension postMessage origin validation

• Toggl OÜ Toggl Track Extension
• CWE-345
• CWE-346

MCP DNS-rebinding origin check in AshAi is bypassed by a spoofed X-Forwarded-Proto header

• CWE-346

>=0.8.0, <1.0.0 · fixed in 1.0.0

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

• Microsoft Edge (Chromium-based)
• CWE-346

Spring Cloud Function can incorrectly determine if URI is secure

• Spring Cloud Function
• CWE-346

Dropbox Dash MCP Server DNS Rebinding via Missing Host Header Validation

• dropbox mcp-server-dash
• CWE-346

Timescale tiger-gh-mcp-server DNS Rebinding via Disabled Host Header Allow-List

• timescale tiger-gh-mcp-server
• CWE-346

Timescale tiger-slack DNS Rebinding via Disabled Host Header Allow-List

• timescale tiger-slack
• CWE-346

Timescale pg-aiguide through 0.5.0 DNS Rebinding via Disabled Host Header Allow-List

• timescale pg-aiguide
• CWE-346

mcp-go before 0.56.0 Missing Host Header Validation Enables DNS Rebinding

• mark3labs mcp-go
• CWE-346

genieacs-mcp: DNS rebinding reaches local GenieACS MCP Streamable HTTP transport

• CWE-346

<0.3.2 · fixed in 0.3.2

PraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery against the PraisonAI MCP HTTP server

• Cross-site request forgery (CSRF)
• CWE-346

<4.6.58 · fixed in 4.6.58

PraisonAI has an origin validation bypass in MCP HTTP Stream transport that allows browser-mediated unauthenticated tool execution on local MCP server

• Authentication bypass
• CWE-346

<4.6.58 · fixed in 4.6.58

Duplicate Advisory: Grav: Origin validation bypass in Uri::referrer() and Pages::referrerRoute() via unanchored prefix match

• CWE-346

* · no fixed version yet

FORT-validator Vulnerable to RRDP Shared Snapshot Cache Poisoning

• NICMx FORT-validator
• CWE-346

Microsoft UFO: DNS Rebinding → Unauthenticated File Read / Command Execution

• microsoft UFO
• Information disclosure
• CWE-346

Mailpit: WebSocket origin check bypass via percent-encoded path (regression of CVE-2026-22689)

• Information disclosure
• CWE-177

>=1.29.0, <1.30.6 · fixed in 1.30.6

Site isolation issue in the Audio/Video: Web Codecs component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-346

Site isolation issue in the Graphics component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-346

Site isolation issue in the Graphics: WebRender component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-346

Same-origin policy bypass in the Graphics: ImageLib component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-346

Same-origin policy bypass in the Audio/Video: Playback component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-346

Same-origin policy bypass in the Networking: Cookies component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-346

Site isolation issue in the Networking: Cookies component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-346

Site isolation issue in the WebExtensions component

• Mozilla Firefox
• Mozilla Thunderbird
• Broken access control
• CWE-346

Site isolation issue in the Graphics: CanvasWebGL component

• Mozilla Firefox
• Mozilla Thunderbird
• Information disclosure
• Broken access control

Duplicate Advisory: SiYuan: Cross-Site WebSocket Hijacking on the admin-only network proxy endpoint (`/ws/network/proxy`) via explicit `CheckOrigin: true` bypass

• CWE-346

* · no fixed version yet

Referer Validation Bypass in TL-WR820N Web Management Interface

• TP-Link Systems Inc. TL-WR820N v2
• CWE-346

IBM i is Affected By Multiple Vulnerabilities in Navigator for i

• i
• CWE-346

IBM i is Affected By XML injection flaw in Navigator for i

• i
• CWE-346

Windows Network Address Translation (NAT) Spoofing Vulnerability

• Microsoft Windows 11 Version 24H2
• Microsoft Windows 11 Version 25H2
• CWE-346

Duplicate Advisory: TYPO3-CORE-SA-2026-021: Broken Access Control in Backend and Install Tool

• CWE-346

>=13.0.0, <13.4.34 || >=14.0.0, <14.3.6 · fixed in 13.4.34, 14.3.6

OpenYak local API: unauthenticated CSRF chain leads to Remote Code Execution

• openyak
• Code injection
• Authentication bypass

Frappe: Host header poisoning can redirect magic login links to an attacker-controlled domain

• frappe
• CWE-346

Sonic 3 A.I.R. Missing Source Address Validation in ConnectionManager

• Eukaryot sonic3air
• CWE-346

JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shortcuts

• CWE-346

>=0.5.0, <0.18.7 || >=0.19.0, <0.19.9 · fixed in 0.18.7, 0.19.9

Electron: Permission Check Handler Receives Main Frame Origin Instead of Requesting Iframe Origin

• CWE-346

<39.8.7 || >=40.0.0-alpha.1, <40.9.0 || >=41.0.0-alpha.1, <41.2.0 || >=42.0.0-alpha.1, <42.0.0-beta.1 · fixed in 39.8.7, 40.9.0, 41.2.0, 42.0.0-beta.1

Keycloak-services: keycloak-services: saml idp-initiated broker login bypasses link-only restriction

• Red Hat build of Keycloak 26.4
• Red Hat build of Keycloak 26.4.14
• CWE-346