# CWE-565.

Every Advisory and CVE whose sources give the weakness CWE-565, newest first.

## Records, newest first

- [ZITADEL 4.0.0 before 4.19.5 Login V2 Account Takeover via Forgeable verificationCheck Cookie](https://agentprime.io/advisories/CVE-2026-119128.md)
  `CVE-2026-119128` · CVE record: zitadel zitadel · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-565
- [Happy DOM has cookie scope forgery: no DNS-label boundary on Domain= matching , attacker origin sets victim cookies](https://agentprime.io/advisories/GHSA-5fpq-26gf-qwcr.md)
  `GHSA-5fpq-26gf-qwcr`, `CVE-2026-118661` · npm `happy-dom`: affected `<20.14.6`, fixed in `20.14.6` · CVSS 6.5 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-565
- [Sunhillo SureLine Authentication Bypass via Session Cookie](https://agentprime.io/advisories/CVE-2026-112352.md)
  `CVE-2026-112352` · CVE record: Sunhillo Corporation SureLine · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-565
- [AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies](https://agentprime.io/advisories/GHSA-gx76-c99x-2c96.md)
  `GHSA-gx76-c99x-2c96`, `CVE-2026-111749` · PyPI `aiohttp`: affected `<3.14.4`, fixed in `3.14.4` · CVSS 2.3 Low · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-565
- [Authentication bypass in Stela by Diaple Networking](https://agentprime.io/advisories/CVE-2026-101287.md)
  `CVE-2026-101287` · CVE record: Diaple Stela · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-565
- [Apache Airflow Keycloak provider: Keycloak token cookies not bound to Airflow session identity](https://agentprime.io/advisories/CVE-2026-76186.md)
  `CVE-2026-76186` · CVE record: Apache Software Foundation Apache Airflow Keycloak provider · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-565
- [Http4s: CookieJar middleware matches by substring, leaking cookies cross-origin](https://agentprime.io/advisories/GHSA-grh8-3p95-f9rr.md)
  `GHSA-grh8-3p95-f9rr`, `CVE-2026-69215` · Maven `org.http4s:http4s-client_2.12` and 2 more: affected `<0.23.35`, fixed in `0.23.35` · CVSS 6.8 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-565, CWE-1275
- [Http4s: CookieJar middleware accepts arbitrary Set-Cookie domain](https://agentprime.io/advisories/GHSA-wv64-j4fq-5f9x.md)
  `GHSA-wv64-j4fq-5f9x`, `CVE-2026-69214` · Maven `org.http4s:http4s-client_2.12` and 2 more: affected `<0.23.35`, fixed in `0.23.35` · CVSS 6.8 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass, CWE-565
- [CAT through 3.1.0 Session Cookie Forgery via Unkeyed hashCode Checksum](https://agentprime.io/advisories/CVE-2026-85181.md)
  `CVE-2026-85181` · CVE record: dianping cat · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2026 · Tags: CWE-565
- [AshAdmin cookie reader matches names by substring, enabling actor/session shadowing from a sibling subdomain](https://agentprime.io/advisories/GHSA-3259-55fp-w94j.md)
  `GHSA-3259-55fp-w94j`, `CVE-2026-75757`, `EEF-CVE-2026-75757` · Hex `ash_admin`: affected `>=0.9.1, <1.3.1`, fixed in `1.3.1` · CVSS 8.3 High · Not analysed yet · Published 31 Aug 2026 · Tags: CWE-565
- [Hermes WebUI < 0.51.368 - Profile-Scoped Authorization Bypass via Forged hermes_profile Cookie](https://agentprime.io/advisories/CVE-2026-53871.md)
  `CVE-2026-53871` · CVE record: nesquena hermes-webui · CVSS 8.6 High · Not analysed yet · Published 17 Jun 2026 · Tags: CWE-565
- [Concrete CMS is vulnerable to IDOR in surveys](https://agentprime.io/advisories/GHSA-8c7c-h7px-267g.md)
  `GHSA-8c7c-h7px-267g`, `CVE-2026-8337`, `PKSA-wqcg-9fxw-b667` · Packagist `concrete5/concrete5`: affected `<9.5.1`, fixed in `9.5.1` · CVSS 6.3 Medium · Not analysed yet · Published 22 May 2026 · Tags: Broken access control, CWE-565
- [PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities](https://agentprime.io/advisories/CVE-2026-0257.md)
  `CVE-2026-0257` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.96 · Not analysed yet · Published 13 May 2026 · Tags: CWE-565
- [Serendipity has a Host Header Injection allows authentication cookie scoping to attacker-controlled domain in functions_config.inc.php](https://agentprime.io/advisories/GHSA-4m6c-649p-f6gf.md)
  `GHSA-4m6c-649p-f6gf`, `CVE-2026-39963`, `PKSA-vfgc-2rdq-w256` · Packagist `s9y/serendipity`: affected `<2.6.0`, fixed in `2.6.0` · CVSS 6.9 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: CWE-565
- [Rack::Session::Cookie secrets: decrypt failure fallback enables secretless session forgery and Marshal deserialization](https://agentprime.io/advisories/GHSA-33qg-7wpp-89cq.md)
  `GHSA-33qg-7wpp-89cq`, `CVE-2026-39324` · RubyGems `rack-session`: affected `>=2.0.0, <2.1.2`, fixed in `2.1.2` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Apr 2026 · Tags: Authentication bypass, Insecure deserialization, CWE-345, CWE-565
- [Debugger & Troubleshooter <= 1.3.2 - Unauthenticated Privilege Escalation to Administrator via Cookie Manipulation](https://agentprime.io/advisories/CVE-2026-5130.md)
  `CVE-2026-5130` · CVE record: jhimross Debugger & Troubleshooter · CVSS 8.8 High · Not analysed yet · Published 30 Mar 2026 · Tags: CWE-565
- [Plack::Middleware::Session::Cookie versions through 0.21 for Perl allows remote code execution](https://agentprime.io/advisories/CVE-2014-125112.md)
  `CVE-2014-125112` · CVE record: MIYAGAWA Plack::Middleware::Session::Cookie · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Mar 2026 · Tags: CWE-565
- [WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalation](https://agentprime.io/advisories/CVE-2022-50926.md)
  `CVE-2022-50926` · CVE record: Wago WAGO 750-8212 PFC200 · CVSS 8.7 High · Not analysed yet · Published 13 Jan 2026 · Tags: CWE-565
- [An issue was discovered in NJHYST HY511 POE core before 2.1 and plugins before 0.1.](https://agentprime.io/advisories/CVE-2025-65212.md)
  `CVE-2025-65212` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Jan 2026 · Tags: CWE-565
- [JAY Login & Register <= 2.4.01 - Authentication Bypass via Cookie](https://agentprime.io/advisories/CVE-2025-14440.md)
  `CVE-2025-14440` · CVE record: jayarsiech JAY Login & Register · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Dec 2025 · Tags: CWE-565
- [COMMAX Biometric Access Control System Authentication Bypass](https://agentprime.io/advisories/CVE-2021-47706.md)
  `CVE-2021-47706` · CVE record: COMMAX Co., Ltd. COMMAX Biometric Access Control System · CVSS 8.7 High · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-565
- [Fortinet FortiWeb: A reliance on cookies without validation and integrity checking vulnerability in Fortinet…](https://agentprime.io/advisories/CVE-2025-64447.md)
  `CVE-2025-64447` · CVE record: Fortinet FortiWeb · CVSS 7.1 High · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-565
- [In Brave Browser Desktop versions prior to 1.83.10 that have the split view feature enabled, the "Open Link in Split View" context menu item did not respect the SameSite cookie attribute.](https://agentprime.io/advisories/CVE-2025-48980.md)
  `CVE-2025-48980` · CVE record: Brave Desktop Browser · CVSS 6.5 Medium · Not analysed yet · Published 30 Oct 2025 · Tags: CWE-565
- [Azure PlayFab Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-59247.md)
  `CVE-2025-59247` · CVE record: Microsoft Azure PlayFab · CVSS 8.8 High · Not analysed yet · Published 9 Oct 2025 · Tags: Privilege escalation, CWE-565
- [NamelessMC Vulnerable to Cookie-Based View Count Manipulation](https://agentprime.io/advisories/CVE-2025-31120.md)
  `CVE-2025-31120` · CVE record: NamelessMC Nameless · CVSS 5.3 Medium · Not analysed yet · Published 18 Apr 2025 · Tags: CWE-565
- [An issue in Think Router Tk-Rt-Wr135G V3.0.2-X000 allows attackers to bypass authentication via a crafted cookie.](https://agentprime.io/advisories/CVE-2024-55211.md)
  `CVE-2024-55211` · CVE record · CVSS 8.4 High · Not analysed yet · Published 17 Apr 2025 · Tags: CWE-565
- [e-Excellence U-Office Force - Improper Authentication](https://agentprime.io/advisories/CVE-2025-2395.md)
  `CVE-2025-2395` · CVE record: e-Excellence U-Office Force · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Mar 2025 · Tags: CWE-565
- [NewType FlowMaster BPM Plus - Privilege Escalation](https://agentprime.io/advisories/CVE-2024-9970.md)
  `CVE-2024-9970` · CVE record: NewType FlowMaster BPM Plus · CVSS 8.8 High · Not analysed yet · Published 15 Oct 2024 · Tags: CWE-565
- [github.com/gitpod-io/gitpod vulnerable to Cookie Tossing](https://agentprime.io/advisories/GHSA-8pgc-65mj-53h5.md)
  `GHSA-8pgc-65mj-53h5`, `CVE-2024-21583`, `GO-2024-2997` · Go `github.com/gitpod-io/gitpod`: affected `<=0.8.0`, no fixed version yet · CVSS 4.1 Medium · Not analysed yet · Published 19 Jul 2024 · Tags: CWE-15, CWE-565
- [Cookies Manipulation in Talya Informatics' Elektraweb](https://agentprime.io/advisories/CVE-2024-0947.md)
  `CVE-2024-0947` · CVE record: Talya Informatics Elektraweb · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Jun 2024 · Tags: CWE-565
- [IBM Cognos Controller information disclosure](https://agentprime.io/advisories/CVE-2021-20450.md)
  `CVE-2021-20450` · CVE record: IBM Cognos Controller · CVSS 4.3 Medium · Not analysed yet · Published 3 May 2024 · Tags: CWE-565
- [Electrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking](https://agentprime.io/advisories/CVE-2024-21872.md)
  `CVE-2024-21872` · CVE record: Electrolink Compact DAB Transmitter and 4 more · CVSS 8.7 High · Not analysed yet · Published 18 Apr 2024 · Tags: CWE-565
- [Electrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking](https://agentprime.io/advisories/CVE-2024-22186.md)
  `CVE-2024-22186` · CVE record: Electrolink Compact DAB Transmitter and 4 more · CVSS 8.7 High · Not analysed yet · Published 18 Apr 2024 · Tags: CWE-565
- [Ruijie RG-NBR700GW 10.3(4b12) router lacks cookie verification when resetting the password, resulting in an administrator password reset vulnerability.](https://agentprime.io/advisories/CVE-2024-28288.md)
  `CVE-2024-28288` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Mar 2024 · Tags: CWE-565
- [Cross site scripting (XSS) in JupyterHub via Self-XSS leveraged by Cookie Tossing](https://agentprime.io/advisories/GHSA-7r3h-4ph8-w38g.md)
  `GHSA-7r3h-4ph8-w38g`, `BIT-jupyterhub-2024-28233`, `CVE-2024-28233`, `PYSEC-2026-1480` · PyPI `jupyterhub`: affected `<4.1.0`, fixed in `4.1.0` · CVSS 8.1 High · Not analysed yet · Published 28 Mar 2024 · Tags: Cross-site scripting (XSS), Cross-site request forgery (CSRF), CWE-565
- [Set-Cookie response headers were being incorrectly honored in multipart HTTP responses.](https://agentprime.io/advisories/CVE-2024-1551.md)
  `CVE-2024-1551` · CVE record: Mozilla Firefox and 2 more · CVSS 6.1 Medium · Not analysed yet · Published 20 Feb 2024 · Tags: CWE-565
- [Leak of zbx_session cookie when using a scheduled report that includes a dashboard with a URL widget.](https://agentprime.io/advisories/CVE-2023-32725.md)
  `CVE-2023-32725` · CVE record: Zabbix Zabbix · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Dec 2023 · Tags: CWE-565
- [CSRF token reuse vulnerability in github.com/gofiber/fiber/v2](https://agentprime.io/advisories/GHSA-94w9-97p3-p368.md)
  `GHSA-94w9-97p3-p368`, `CVE-2023-45128`, `GO-2023-2115` · Go `github.com/gofiber/fiber/v2`: affected `<2.50.0`, fixed in `2.50.0` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Oct 2023 · Tags: Cross-site request forgery (CSRF), CWE-20, CWE-565, CWE-807
- [Go Fiber CSRF Token Validation Vulnerability](https://agentprime.io/advisories/GHSA-mv73-f69x-444p.md)
  `GHSA-mv73-f69x-444p`, `CVE-2023-45141`, `GO-2023-2116` · Go `github.com/gofiber/fiber/v2`: affected `<2.50.0`, fixed in `2.50.0` · CVSS 8.6 High · Not analysed yet · Published 17 Oct 2023 · Tags: Cross-site request forgery (CSRF), CWE-565
- [Socomec MOD3GP-SY-120K Reliance on Cookies without Validation and Integrity Checking](https://agentprime.io/advisories/CVE-2023-41084.md)
  `CVE-2023-41084` · CVE record: Socomec MODULYS GP (MOD3GP-SY-120K) · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2023 · Tags: CWE-565
- [WAVLINK TECHNOLOGY Ltd. WL-WN531AX2: Client-side enforcement of server-side security issue exists in WL-WN531AX2 firmware…](https://agentprime.io/advisories/CVE-2023-32612.md)
  `CVE-2023-32612` · CVE record: WAVLINK TECHNOLOGY Ltd. WL-WN531AX2 · No CVSS score · Not analysed yet · Published 30 Jun 2023 · Tags: CWE-565
- [CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.](https://agentprime.io/advisories/CVE-2023-35885.md)
  `CVE-2023-35885` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.74 · Not analysed yet · Published 20 Jun 2023 · Tags: CWE-565
- [ReactPHP's HTTP server parses encoded cookie names so malicious \`\_\_Host-\` and \`\_\_Secure-\` cookies can be sent](https://agentprime.io/advisories/GHSA-w3w9-vrf5-8mx8.md)
  `GHSA-w3w9-vrf5-8mx8`, `CVE-2022-36032`, `PKSA-kwfb-dvpm-qtpb` · Packagist `react/http`: affected `>=0.7.0, <1.7.0`, fixed in `1.7.0` · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2022 · Tags: CWE-20, CWE-565
- [Centreon Does Not Set HTTPOnly Flag](https://agentprime.io/advisories/GHSA-j224-7qr4-8646.md)
  `GHSA-j224-7qr4-8646`, `CVE-2019-17104`, `PKSA-67tg-vwgz-vd3z` · Packagist `centreon/centreon`: affected `<=19.04.3`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 24 May 2022 · Tags: CWE-565
- [Cookie Prefix Spoofing in CGI::Cookie.parse](https://agentprime.io/advisories/GHSA-4vf4-qmvg-mh7h.md)
  `GHSA-4vf4-qmvg-mh7h`, `BIT-ruby-2021-41819`, `BIT-ruby-min-2021-41819`, `CVE-2021-41819` · RubyGems `cgi`: affected `<0.1.0.1 || >=0.2.0, <0.2.1 || >=0.3.0, <0.3.1`, fixed in `0.1.0.1`, `0.2.1`, `0.3.1` · CVSS 7.5 High · Not analysed yet · Published 21 Jan 2022 · Tags: CWE-565
- [Rails Multisite secure/signed cookies share secrets between sites in a multi-site application](https://agentprime.io/advisories/GHSA-844m-cpr9-jcmh.md)
  `GHSA-844m-cpr9-jcmh`, `CVE-2021-41263` · RubyGems `rails_multisite`: affected `<4.0.0`, fixed in `4.0.0` · CVSS 8.3 High · Not analysed yet · Published 15 Nov 2021 · Tags: Information disclosure, Weak cryptography or TLS, CWE-565
- [Reliance on Cookies without Validation and Integrity Checking in getgrav/grav](https://agentprime.io/advisories/GHSA-cg3q-59w7-rvc2.md)
  `GHSA-cg3q-59w7-rvc2`, `CVE-2021-3818`, `PKSA-4ky1-h6sk-d69f` · Packagist `getgrav/grav`: affected `<1.7.21`, fixed in `1.7.21` · CVSS 6.3 Medium · Not analysed yet · Published 29 Sept 2021 · Tags: CWE-565
- [Circutor SGE-PLC1000 improper authentication](https://agentprime.io/advisories/CVE-2021-33842.md)
  `CVE-2021-33842` · CVE record: Circutor SGE-PLC1000 · CVSS 8.8 High · Not analysed yet · Published 9 Jun 2021 · Tags: CWE-565
- [Lack of protection against cookie tossing attacks in fastify-csrf](https://agentprime.io/advisories/GHSA-rc4q-9m69-gqp8.md)
  `GHSA-rc4q-9m69-gqp8`, `CVE-2021-29624` · npm `fastify-csrf`: affected `<3.1.0`, fixed in `3.1.0` · CVSS 6.5 Medium · Not analysed yet · Published 17 May 2021 · Tags: Cross-site request forgery (CSRF), CWE-565
- [Reliance on Cookies without validation in OctoberCMS](https://agentprime.io/advisories/GHSA-55mm-5399-7r63.md)
  `GHSA-55mm-5399-7r63`, `CVE-2020-15128`, `PKSA-sq51-nv4y-j4xf` · Packagist `october/rain`: affected `>=1.0.319, <1.0.468`, fixed in `1.0.468` · CVSS 6.1 Medium · Not analysed yet · Published 5 Aug 2020 · Tags: Weak cryptography or TLS, CWE-565
- [Moxa OnCell G3100-HSPA Series: A Reliance on Cookies without Validation and Integrity Checking issue was discovered in…](https://agentprime.io/advisories/CVE-2018-5455.md)
  `CVE-2018-5455` · CVE record: Moxa OnCell G3100-HSPA Series · No CVSS score · Not analysed yet · Published 5 Mar 2018 · Tags: CWE-565

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-565>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-565/>. Everything for agents: <https://agentprime.io/llms.txt>.