agentprime: CWE-494

CVE-2026-121750: nvm install --offline installs a cached tarball that previously failed checksum verification

Wed, 04 Nov 2026 21:28:43 GMT

CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-110022: Signed plug-in validation bypass

Wed, 04 Nov 2026 09:19:51 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-92092: Openshift-ansible: openshift-ansible: installer container downloads and executes remote inventory script without integrity verification

Thu, 29 Oct 2026 19:51:44 GMT

CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-113957: Download of code without integrity check in Apple container and others

Thu, 29 Oct 2026 00:01:44 GMT

CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

virtualenv: Pip seeding with download omits wheel digest verification

Fri, 23 Oct 2026 22:26:04 GMT

virtualenv <21.14.9, fixed in 21.14.9. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-55981: Firmware verification vulnerability

Fri, 23 Oct 2026 06:47:05 GMT

CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-105036: EnergizeLab Firmware Updates Downloaded over HTTP Without Integrity Checks

Thu, 15 Oct 2026 20:43:04 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning

Thu, 15 Oct 2026 20:22:07 GMT

@anthropic-ai/claude-code <2.1.179, fixed in 2.1.179. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-93649: Download of code without integrity check in Eclipse Foundation Adoptium Temurin

Thu, 15 Oct 2026 13:28:42 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-110102: powerlevel10k through 1.20.0 Download of Code Without Integrity Check in gitstatus Installer

Tue, 13 Oct 2026 16:53:05 GMT

CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

Nginx UI: Self-upgrade runs an unsigned binary verified only by a same-origin digest → RCE via a compromised mirror or MITM

Fri, 09 Oct 2026 17:08:21 GMT

github.com/0xJacky/Nginx-UI >=1.9.10-0.20250517140552-daee3ac7ade1, <1.9.10-0.20260728114330-580585516dd8, fixed in 1.9.10-0.20260728114330-580585516dd8. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-108160: AstronRPA through 1.1.6 Unsigned Update Installation via Plain-HTTP Feed

Fri, 09 Oct 2026 16:04:44 GMT

CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-29797: Red Lion Controls N-Tron 700 Series Download of Code Without Integrity Check

Fri, 09 Oct 2026 14:40:20 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-104809: Mitel MiVoice Office 400 Shared Object Hijacking Leading to Arbitrary Code Execution

Mon, 05 Oct 2026 08:32:14 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-104805: Mitel MiVoice Office 400 Backup Restoration Arbitrary File Write Leading to Root Code Execution

Mon, 05 Oct 2026 08:22:08 GMT

CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-105295: GitAhead 2.5.0 through 2.7.1 Unverified Update Installation and TLS Bypass

Mon, 05 Oct 2026 00:44:19 GMT

CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-105137: Laradock Build Process Dockerfile code download

Sun, 04 Oct 2026 07:30:11 GMT

CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-55251: NetBox Device Type Library: Arbitrary Code Execution on CI Runner Through Malicious requirements.txt, .pre-commit-hooks-config.yaml, and .gitmodules Files

Thu, 01 Oct 2026 19:49:32 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use

Wed, 30 Sep 2026 23:54:13 GMT

virtualenv <21.7.12, fixed in 21.7.12. CVSS 7.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-100265: Download of code without integrity check in JetBrains Rider

Wed, 30 Sep 2026 15:17:50 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-73595: Download of code without integrity check in Dell Secure Connect Gateway (SCG) Policy Manager

Tue, 29 Sep 2026 11:39:50 GMT

CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-96455: Reachy Mini daemon allows unauthenticated remote code execution through the app installation endpoint

Wed, 23 Sep 2026 10:01:15 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-49450: Joplin desktop Windows auto-updater accepts signed installer from any publisher because app-update.yml has no publisherName

Mon, 21 Sep 2026 20:49:04 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-93534: spatie Scotty Self Update SelfUpdater.php update code download

Fri, 18 Sep 2026 16:30:13 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-7006: Sublime Text 4192/3207 Local Privilege Escalation via Update Staging Mechanism

Fri, 18 Sep 2026 15:01:22 GMT

CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-92128: Download of code without integrity check in Jenkins Project Jenkins Script Security Plugin

Wed, 16 Sep 2026 13:53:06 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-63696: Download of code without integrity check in Dell SmartFabric OS10 Software

Tue, 15 Sep 2026 14:51:33 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-81052: Download of code without integrity check in Dell ThinOS 10

Thu, 10 Sep 2026 15:32:32 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-79963: Download of code without integrity check in Dell Secure Connect Gateway 5.0 - Application and others

Wed, 09 Sep 2026 11:02:59 GMT

CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection

Tue, 08 Sep 2026 15:27:55 GMT

nltk <3.9.3, fixed in 3.9.3. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-62654: Download of code without integrity check in Siemens Reyrolle 7SR5

Tue, 08 Sep 2026 08:11:35 GMT

CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-85427: MOOS essential-moos through 10.0.1 pAntler Remote Code Execution via Unauthenticated MISSION_FILE

Thu, 03 Sep 2026 22:38:22 GMT

CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-84666: Improper input validation in Jenkins Project Jenkins Job Configuration History Plugin

Wed, 02 Sep 2026 15:40:52 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-84664: Download of code without integrity check in Jenkins Project Jenkins GitLab Plugin

Wed, 02 Sep 2026 15:40:50 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Hugging Face Transformers downloads custom generation code before trust consent

Tue, 01 Sep 2026 15:31:13 GMT

transformers >=4.49.0, <=5.8.1, no fixed version yet. CVSS 7.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-82021: Hermes Agent 0.18.2 < 0.19.0 MCP Catalog Supply Chain RCE via Mutable Branch Reference

Fri, 28 Aug 2026 18:50:38 GMT

CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-59286: Spring for GraphQL loads Untrusted Resources in GraphiQL support

Thu, 27 Aug 2026 17:57:44 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-30612: An issue in Time4 Popcorn for Windows <= 6.2.1.18 and Time4Popcorn for MacOS <= 6.2.1.17 and Time4Popcorn for Android <= 3.5.0.173 allows a remote attacker to execute arbitrary code via the updater.e…

Thu, 27 Aug 2026 00:00:00 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-21810: HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and downloading code without integrity checking

Wed, 26 Aug 2026 21:55:07 GMT

CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-65081: Download of code without integrity check in NVIDIA NemoClaw

Tue, 25 Aug 2026 20:15:26 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-65097: Download of code without integrity check in NVIDIA NemoClaw

Tue, 25 Aug 2026 20:15:21 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-57910: WatchGuard Agent improper authentication allows unauthenticated remote code execution

Tue, 25 Aug 2026 11:47:49 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-22306: Critical flaw impacting OZOLS ERP's automatic update channel

Wed, 19 Aug 2026 19:25:10 GMT

CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

atomic-agents-stack: HTTP MCP catalog accepts cleartext http and spawns catalog-supplied commands (MITM to RCE)

Mon, 17 Aug 2026 21:49:55 GMT

atomic-agents-stack <1.1.0, fixed in 1.1.0. CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-53970: ZeroBrew version 0.3.1 and prior Missing Checksum Verification RCE via shim.rb

Fri, 14 Aug 2026 15:32:29 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-13433: IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

Wed, 12 Aug 2026 20:44:47 GMT

CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-48046: Streambert Vulnerable to Remote Code Execution (RCE) via Unvalidated Auto-Updater IPC Handler

Tue, 11 Aug 2026 13:08:45 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-0392: eParakstītājs 3.0 for Windows – remote code execution via unauthenticated auto-update

Mon, 03 Aug 2026 09:56:31 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

Duplicate Advisory: NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection

Mon, 03 Aug 2026 09:32:37 GMT

nltk <=3.9.2, no fixed version yet. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-66398: phpMyFAQ before 4.1.6 Remote Code Execution via Configuration API

Mon, 27 Jul 2026 15:43:48 GMT

CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.