# CWE-420.

Every Advisory and CVE whose sources give the weakness CWE-420, newest first.

## Records, newest first

- [Windows Schannel Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-105008.md)
  `CVE-2026-105008` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass, CWE-420
- [Kiteworks Core Unprotected Alternate Channel](https://agentprime.io/advisories/CVE-2026-102134.md)
  `CVE-2026-102134` · CVE record: Kiteworks Core · CVSS 5.4 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-420
- [An issue was discovered in Cyrus IMAP before 3.12.4.](https://agentprime.io/advisories/CVE-2026-61909.md)
  `CVE-2026-61909` · CVE record: cyrusimap Cyrus IMAP · CVSS 3.5 Low · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-420
- [Tor: Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could…](https://agentprime.io/advisories/CVE-2026-77639.md)
  `CVE-2026-77639` · CVE record: torproject Tor · CVSS 5.3 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-420
- [ComfyUI-Manager has an Unprotected Alternate Channel (CWE-420)](https://agentprime.io/advisories/GHSA-95pq-hr8p-f5g7.md)
  `GHSA-95pq-hr8p-f5g7`, `CVE-2025-67303`, `PYSEC-2026-2422` · PyPI `comfyui-manager`: affected `<3.38`, fixed in `3.38` · CVSS 7.5 High · Not analysed yet · Published 22 Jun 2026 · Tags: CWE-420
- [BIG-IP httpd access control vulnerability](https://agentprime.io/advisories/CVE-2026-40435.md)
  `CVE-2026-40435` · CVE record: F5 BIG-IP · CVSS 6.9 Medium · Not analysed yet · Published 13 May 2026 · Tags: CWE-420
- [LiteLLM has a sandbox escape in custom-code guardrail](https://agentprime.io/advisories/GHSA-wxxx-gvqv-xp7p.md)
  `GHSA-wxxx-gvqv-xp7p`, `CVE-2026-40217`, `PYSEC-2026-2601` · PyPI `litellm`: affected `>=1.81.8, <1.83.10`, fixed in `1.83.10` · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.17 · Not analysed yet · Published 11 May 2026 · Tags: Code injection, CWE-420, CWE-913
- [Prosody: An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5…](https://agentprime.io/advisories/CVE-2026-43505.md)
  `CVE-2026-43505` · CVE record: Prosody Prosody · CVSS 6.5 Medium · Not analysed yet · Published 1 May 2026 · Tags: CWE-420
- [Duplicate Advisory: LiteLLM has a sandbox escape in custom-code guardrail](https://agentprime.io/advisories/GHSA-3926-2jvf-fg29.md)
  `GHSA-3926-2jvf-fg29` · PyPI `litellm`: affected `>=1.81.8, <1.83.10`, fixed in `1.83.10` · CVSS 8.8 High · Withdrawn · Not analysed yet · Published 10 Apr 2026 · Tags: CWE-420
- [OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.](https://agentprime.io/advisories/CVE-2026-35388.md)
  `CVE-2026-35388` · CVE record: OpenBSD OpenSSH · CVSS 2.5 Low · Not analysed yet · Published 2 Apr 2026 · Tags: CWE-420
- [Roundcube Webmail: Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13…](https://agentprime.io/advisories/CVE-2026-25916.md)
  `CVE-2026-25916` · CVE record: Roundcube Webmail · CVSS 4.3 Medium · Not analysed yet · Published 9 Feb 2026 · Tags: CWE-420
- [Beckhoff: Performing privileged operations and gaining administrator access](https://agentprime.io/advisories/CVE-2025-41727.md)
  `CVE-2025-41727` · CVE record: Beckhoff Automation Beckhoff.Device.Manager.XAR and 2 more · CVSS 7.8 High · Not analysed yet · Published 27 Jan 2026 · Tags: CWE-420
- [Duplicate Advisory: ComfyUI-Manager has an Unprotected Alternate Channel (CWE-420)](https://agentprime.io/advisories/GHSA-2hc9-cc65-xwj8.md)
  `GHSA-2hc9-cc65-xwj8` · PyPI `comfyui-manager`: affected `<3.38`, fixed in `3.38` · CVSS 7.5 High · Withdrawn · Not analysed yet · Published 5 Jan 2026 · Tags: CWE-420
- [BullWall Ransomware Containment hard-coded folder exclusions](https://agentprime.io/advisories/CVE-2025-62001.md)
  `CVE-2025-62001` · CVE record: BullWall Ransomware Containment · CVSS 8.7 High · Not analysed yet · Published 18 Dec 2025 · Tags: CWE-420
- [In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date.](https://agentprime.io/advisories/CVE-2025-66432.md)
  `CVE-2025-66432` · CVE record: Oxide Omicron · CVSS 5.0 Medium · Not analysed yet · Published 30 Nov 2025 · Tags: CWE-420
- [Unauthenticated log access in Twonky Server](https://agentprime.io/advisories/CVE-2025-13315.md)
  `CVE-2025-13315` · CVE record: Lynxtechnology Twonky Server · CVSS 9.3 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.31 · Not analysed yet · Published 19 Nov 2025 · Tags: CWE-420
- [Dyson MQTT server: The Dyson MQTT server (2022 and possibly later) allows publications and subscriptions by…](https://agentprime.io/advisories/CVE-2025-56558.md)
  `CVE-2025-56558` · CVE record: Dyson MQTT server · CVSS 3.0 Low · Not analysed yet · Published 29 Oct 2025 · Tags: CWE-420
- [Slack Nebula may accept arbitrary source IP addresses](https://agentprime.io/advisories/GHSA-x6fh-7qmf-69xh.md)
  `GHSA-x6fh-7qmf-69xh`, `CVE-2025-62820`, `GO-2025-4068` · Go `github.com/slackhq/nebula`: affected `>=1.9.4, <1.9.7`, fixed in `1.9.7` · CVSS 4.9 Medium · Not analysed yet · Published 23 Oct 2025 · Tags: CWE-420
- [figma-developer-mcp vulnerable to command injection in get_figma_data tool](https://agentprime.io/advisories/GHSA-gxw4-4fc5-9gr5.md)
  `GHSA-gxw4-4fc5-9gr5`, `CVE-2025-15061`, `CVE-2025-53967` · npm `figma-developer-mcp`: affected `<0.6.3`, fixed in `0.6.3` · CVSS 8.0 High · Not analysed yet · Published 30 Sept 2025 · Tags: Command injection, CWE-420
- [Lenovo XClarity Orchestrator (LXCO): An internal product security audit of Lenovo XClarity Orchestrator (LXCO) discovered the…](https://agentprime.io/advisories/CVE-2025-8557.md)
  `CVE-2025-8557` · CVE record: Lenovo XClarity Orchestrator (LXCO) · CVSS 8.7 High · Not analysed yet · Published 11 Sept 2025 · Tags: CWE-420
- [Protection mechanism failure in Microsoft Windows](https://agentprime.io/advisories/CVE-2025-59033.md)
  `CVE-2025-59033` · CVE record: Microsoft Windows · CVSS 7.4 High · Not analysed yet · Published 8 Sept 2025 · Tags: CWE-420, CWE-693
- [In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv).](https://agentprime.io/advisories/CVE-2025-54351.md)
  `CVE-2025-54351` · CVE record: ES iperf3 · CVSS 8.9 High · Not analysed yet · Published 3 Aug 2025 · Tags: CWE-420
- [CrushFTP: CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23…](https://agentprime.io/advisories/CVE-2025-54309.md)
  `CVE-2025-54309` · CVE record: CrushFTP CrushFTP · CVSS 9.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.93 · Not analysed yet · Published 18 Jul 2025 · Tags: CWE-420
- [freedesktop xdg-utils: xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies…](https://agentprime.io/advisories/CVE-2025-52968.md)
  `CVE-2025-52968` · CVE record: freedesktop xdg-utils · CVSS 2.7 Low · Not analysed yet · Published 23 Jun 2025 · Tags: CWE-420
- [InnoShop: In Innoshop through 0.4.1, an authenticated attacker could exploit the File Manager…](https://agentprime.io/advisories/CVE-2025-52921.md)
  `CVE-2025-52921` · CVE record: InnoShop InnoShop · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Jun 2025 · Tags: CWE-420
- [IBM Personal Communications command execution](https://agentprime.io/advisories/CVE-2025-1095.md)
  `CVE-2025-1095` · CVE record: IBM Personal Communications · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-420
- [Intel(R) Processors: Unprotected alternative channel of return branch target prediction in some Intel(R)…](https://agentprime.io/advisories/CVE-2022-28693.md)
  `CVE-2022-28693` · CVE record: Intel(R) Processors · CVSS 4.7 Medium · Not analysed yet · Published 14 Feb 2025 · Tags: CWE-420
- [A connection hijacking vulnerability exists in some Huawei home routers.](https://agentprime.io/advisories/CVE-2023-52718.md)
  `CVE-2023-52718` · CVE record: Huawei PT9030-15 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 28 Dec 2024 · Tags: CWE-420
- [Some Huawei home routers have a connection hijacking vulnerability.](https://agentprime.io/advisories/CVE-2023-7266.md)
  `CVE-2023-7266` · CVE record: Huawei TC7001-10 and 2 more · CVSS 7.5 High · Not analysed yet · Published 28 Dec 2024 · Tags: CWE-420
- [codechecker vulnerable to authentication bypass when using specifically crafted URLs](https://agentprime.io/advisories/GHSA-f3f8-vx3w-hp5q.md)
  `GHSA-f3f8-vx3w-hp5q`, `CVE-2024-10081`, `PYSEC-2024-238` · PyPI `codechecker`: affected `<6.24.2`, fixed in `6.24.2` · CVSS 10.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.40 · Not analysed yet · Published 6 Nov 2024 · Tags: Authentication bypass, CWE-420
- [Vulnerable juju introspection abstract UNIX domain socket](https://agentprime.io/advisories/GHSA-xwgj-vpm9-q2rq.md)
  `GHSA-xwgj-vpm9-q2rq`, `CVE-2024-8038`, `GO-2024-3175` · Go `github.com/juju/juju`: affected `<0.0.0-20240829052008-43f0fc59790d`, fixed in `0.0.0-20240829052008-43f0fc59790d` · CVSS 7.9 High · Not analysed yet · Published 3 Oct 2024 · Tags: CWE-420
- [Duplicate Advisory: Juju Unprotected Alternate Channel vulnerability](https://agentprime.io/advisories/GHSA-85qf-6845-m8p2.md)
  `GHSA-85qf-6845-m8p2` · Go `github.com/juju/juju`: affected `<0.0.0-20241001032836-2af7bd8e310b`, fixed in `0.0.0-20241001032836-2af7bd8e310b` · CVSS 7.9 High · Withdrawn · Not analysed yet · Published 2 Oct 2024 · Tags: CWE-420
- [Rockwell Automation Chassis Restrictions Bypass Vulnerability in Select Logix Devices](https://agentprime.io/advisories/CVE-2024-6242.md)
  `CVE-2024-6242` · CVE record: Rockwell Automation ControlLogix® 5580 (1756-L8z) and 4 more · CVSS 7.3 High · Critical (CVSS 7+ and EPSS) · EPSS 0.11 · Not analysed yet · Published 1 Aug 2024 · Tags: CWE-420
- [LearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Unauthenticated Bypass to User Registration](https://agentprime.io/advisories/CVE-2024-6099.md)
  `CVE-2024-6099` · CVE record: thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses · CVSS 5.3 Medium · Not analysed yet · Published 2 Jul 2024 · Tags: CWE-420
- [LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Bypass to User Registration](https://agentprime.io/advisories/CVE-2024-4444.md)
  `CVE-2024-4444` · CVE record: thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses · CVSS 5.3 Medium · Not analysed yet · Published 10 May 2024 · Tags: CWE-420
- [Cisco IOS XE Software: Cisco is providing an update for the ongoing investigation into observed exploitation of…](https://agentprime.io/advisories/CVE-2023-20198.md)
  `CVE-2023-20198` · CVE record: Cisco Cisco IOS XE Software · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 1.00 · Not analysed yet · Published 16 Oct 2023 · Tags: CWE-420
- [NI MeasurementLink Python Services Improper Access Restriction vulnerability](https://agentprime.io/advisories/GHSA-3f48-9j7q-q2gv.md)
  `GHSA-3f48-9j7q-q2gv`, `CVE-2023-4570`, `PYSEC-2026-1695` · PyPI `ni-measurementlink-service`: affected `<1.1.1 || >=1.2.0.dev0, <1.2.0`, fixed in `1.1.1`, `1.2.0` · CVSS 8.8 High · Not analysed yet · Published 5 Oct 2023 · Tags: CWE-420
- [Issues notification metadata lacks authorization](https://agentprime.io/advisories/CVE-2023-30946.md)
  `CVE-2023-30946` · CVE record: Palantir com.palantir.issues:issues · CVSS 3.5 Low · Not analysed yet · Published 29 Jun 2023 · Tags: Authentication bypass, CWE-420
- [Snap One OvrC Cloud: Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements…](https://agentprime.io/advisories/CVE-2023-31241.md)
  `CVE-2023-31241` · CVE record: Snap One OvrC Cloud · CVSS 8.6 High · Not analysed yet · Published 22 May 2023 · Tags: CWE-420
- [GateManager debug interface is included in non-debug builds](https://agentprime.io/advisories/CVE-2023-0317.md)
  `CVE-2023-0317` · CVE record: Secomea GateManager · CVSS 4.9 Medium · Not analysed yet · Published 19 Apr 2023 · Tags: CWE-420
- [Docker Swarm encrypted overlay network may be unauthenticated](https://agentprime.io/advisories/GHSA-232p-vwff-86mp.md)
  `GHSA-232p-vwff-86mp`, `CVE-2023-28840`, `GO-2023-1699` · Go `github.com/docker/docker`: affected `>=1.12.0, <20.10.24 || >=23.0.0, <23.0.3`, fixed in `20.10.24`, `23.0.3` · CVSS 7.5 High · Not analysed yet · Published 4 Apr 2023 · Tags: CWE-420, CWE-636
- [Docker Swarm encrypted overlay network with a single endpoint is unauthenticated](https://agentprime.io/advisories/GHSA-6wrf-mxfj-pf5p.md)
  `GHSA-6wrf-mxfj-pf5p`, `CVE-2023-28842`, `GO-2023-1701` · Go `github.com/docker/docker`: affected `>=1.12.0, <20.10.24 || >=23.0.0, <23.0.3`, fixed in `20.10.24`, `23.0.3` · CVSS 6.8 Medium · Not analysed yet · Published 4 Apr 2023 · Tags: CWE-420, CWE-636
- [GateManager debug interface is included in production builds](https://agentprime.io/advisories/CVE-2022-25786.md)
  `CVE-2022-25786` · CVE record: Secomea GateManager · CVSS 4.9 Medium · Not analysed yet · Published 4 May 2022 · Tags: CWE-420
- [Improper Authentication in Kubernetes](https://agentprime.io/advisories/GHSA-wqv3-8cm6-h6wg.md)
  `GHSA-wqv3-8cm6-h6wg`, `CVE-2020-8558`, `GO-2022-0885` · Go `k8s.io/kubernetes`: affected `<1.16.11 || >=1.17.0, <1.17.7 || >=1.18.0, <1.18.4`, fixed in `1.16.11`, `1.17.7`, `1.18.4` · CVSS 5.4 Medium · Not analysed yet · Published 15 Feb 2022 · Tags: CWE-420

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-420>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-420/>. Everything for agents: <https://agentprime.io/llms.txt>.