# CWE-567.

Every Advisory and CVE whose sources give the weakness CWE-567, newest first.

## Records, newest first

- [Traefik 3.2.0 before 3.7.15 FastProxy Data Race Denial of Service](https://agentprime.io/advisories/CVE-2026-119574.md)
  `CVE-2026-119574` · CVE record: traefik traefik · CVSS 8.2 High · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-567
- [A malicious frontend can cause a daemon panic](https://agentprime.io/advisories/CVE-2026-93319.md)
  `CVE-2026-93319` · CVE record: moby BuildKit · CVSS 5.7 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-567
- [Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Concurrent Execution using Shared Resource with Improper Synchronization ('Ra…](https://agentprime.io/advisories/CVE-2026-79962.md)
  `CVE-2026-79962` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-567
- [Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Concurrent Execution using Shared Resource with Improper Synchronization ('Ra…](https://agentprime.io/advisories/CVE-2026-79969.md)
  `CVE-2026-79969` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-567
- [Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Unsynchronized Access to Shared Data in a Multithreaded Context vulnerabilit…](https://agentprime.io/advisories/CVE-2026-79973.md)
  `CVE-2026-79973` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-567
- [Apache Struts: Shared serialization state in the JSON plugin](https://agentprime.io/advisories/CVE-2026-73632.md)
  `CVE-2026-73632` · CVE record: Apache Software Foundation Apache Struts · CVSS 4.3 Medium · Not analysed yet · Published 15 Aug 2026 · Tags: CWE-567
- [Apache Struts: Shared parsing state in the JSON plugin](https://agentprime.io/advisories/CVE-2026-73631.md)
  `CVE-2026-73631` · CVE record: Apache Software Foundation Apache Struts · CVSS 4.3 Medium · Not analysed yet · Published 15 Aug 2026 · Tags: CWE-567
- [OliveTin has a Concurrent Template Parsing Race Condition which Leads to Cross-Request Command Contamination](https://agentprime.io/advisories/GHSA-7fq5-7wr8-rjwj.md)
  `GHSA-7fq5-7wr8-rjwj`, `CVE-2026-48708`, `GO-2026-5216` · Go `github.com/OliveTin/OliveTin`: affected `<0.0.0-20260521225117-d74da9314005`, fixed in `0.0.0-20260521225117-d74da9314005` · CVSS 7.5 High · Not analysed yet · Published 24 Jun 2026 · Tags: Race condition, CWE-567
- [ImageMagick: Race Condition in distributed pixel cache server can result in file descriptor hijacking](https://agentprime.io/advisories/GHSA-4g75-9r48-jf92.md)
  `GHSA-4g75-9r48-jf92`, `CVE-2026-46693` · NuGet `Magick.NET-Q16-AnyCPU` and 16 more: affected `<14.12.0`, fixed in `14.12.0` · CVSS 4.1 Medium · Not analysed yet · Published 22 May 2026 · Tags: Race condition, CWE-567
- [broken TLS options for threaded LDAPS](https://agentprime.io/advisories/CVE-2025-14017.md)
  `CVE-2025-14017` · CVE record: curl curl · CVSS 6.3 Medium · Not analysed yet · Published 8 Jan 2026 · Tags: CWE-567
- [Ability Auto Startup service vulnerability in the foundation process Impact: Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2025-48908.md)
  `CVE-2025-48908` · CVE record: Huawei HarmonyOS · CVSS 6.7 Medium · Not analysed yet · Published 6 Jun 2025 · Tags: CWE-567
- [Siemens RUGGEDCOM RM1224 LTE(4G) EU: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)…](https://agentprime.io/advisories/CVE-2023-44374.md)
  `CVE-2023-44374` · CVE record: Siemens RUGGEDCOM RM1224 LTE(4G) EU and 4 more · CVSS 7.1 High · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-567
- [Unsynchronized Access to Shared Data in a Multithreaded Context in RESTEasy](https://agentprime.io/advisories/GHSA-9699-gm7f-cmjv.md)
  `GHSA-9699-gm7f-cmjv`, `CVE-2020-25724` · Maven `org.jboss.resteasy:resteasy-bom`: affected `<2.0-beta-2`, fixed in `2.0-beta-2` · CVSS 4.3 Medium · Not analysed yet · Published 8 Jun 2021 · Tags: CWE-567

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-567>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-567/>. Everything for agents: <https://agentprime.io/llms.txt>.
