# CWE-408.

Every Advisory and CVE whose sources give the weakness CWE-408, newest first.

## Records, newest first

- [Sssd: sssd: denial of service via unprivileged autofs cache invalidation](https://agentprime.io/advisories/CVE-2026-104032.md)
  `CVE-2026-104032` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-408
- [Unnecessary validation of DNSSEC signed records](https://agentprime.io/advisories/CVE-2026-11605.md)
  `CVE-2026-11605` · CVE record: ISC BIND 9 · CVSS 7.5 High · Not analysed yet · Published 22 Jul 2026 · Tags: CWE-408
- [tcp: call sk_data_ready() after listener migration](https://agentprime.io/advisories/CVE-2026-46015.md)
  `CVE-2026-46015` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 27 May 2026 · Tags: CWE-408
- [Amplification vulnerabilities via self-pointed glue records](https://agentprime.io/advisories/CVE-2026-3592.md)
  `CVE-2026-3592` · CVE record: ISC BIND 9 · CVSS 5.3 Medium · Not analysed yet · Published 20 May 2026 · Tags: CWE-408
- [OpenClaw: Telegram audio preflight transcription enables resource consumption by unauthorized senders](https://agentprime.io/advisories/GHSA-m6fx-m8hc-572m.md)
  `GHSA-m6fx-m8hc-572m`, `CVE-2026-41331` · npm `openclaw`: affected `<2026.3.31`, fixed in `2026.3.31` · CVSS 6.9 Medium · Not analysed yet · Published 3 Apr 2026 · Tags: Denial of service, CWE-408
- [OpenClaw runs Discord audio preflight transcription before member authorization](https://agentprime.io/advisories/GHSA-hhff-fj5f-qg48.md)
  `GHSA-hhff-fj5f-qg48`, `CVE-2026-41374` · npm `openclaw`: affected `<2026.3.31`, fixed in `2026.3.31` · CVSS 6.9 Medium · Not analysed yet · Published 3 Apr 2026 · Tags: Denial of service, CWE-408
- [OpenClaw: MS Teams webhook parses body before JWT validation, enabling unauthenticated resource exhaustion](https://agentprime.io/advisories/GHSA-p464-m8x6-vhv8.md)
  `GHSA-p464-m8x6-vhv8`, `CVE-2026-41405` · npm `openclaw`: affected `<2026.3.31`, fixed in `2026.3.31` · CVSS 8.7 High · Not analysed yet · Published 3 Apr 2026 · Tags: Denial of service, CWE-408
- [Eclipse Californium denial of service (DoS) via Datagram Transport Layer Security (DTLS) handshake on parameter mismatch](https://agentprime.io/advisories/GHSA-qq3j-44gw-cf6r.md)
  `GHSA-qq3j-44gw-cf6r`, `CVE-2022-2576` · Maven `org.eclipse.californium:californium-core`: affected `>=2.0.0, <2.7.3 || >=3.0.0, <3.6.0`, fixed in `2.7.3`, `3.6.0` · CVSS 7.5 High · Not analysed yet · Published 30 Jul 2022 · Tags: CWE-408
- [Junos OS: SRX Series: An attacker sending spoofed packets to IPSec peers may cause a Denial of Service.](https://agentprime.io/advisories/CVE-2020-1657.md)
  `CVE-2020-1657` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2020 · Tags: CWE-408

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-408>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-408/>. Everything for agents: <https://agentprime.io/llms.txt>.