# CWE-603.

Every Advisory and CVE whose sources give the weakness CWE-603, newest first.

## Records, newest first

- [Use of Client-Side Authentication in Płatnik](https://agentprime.io/advisories/CVE-2026-110972.md)
  `CVE-2026-110972` · CVE record: Zakład Ubezpieczeń Społecznych Płatnik · CVSS 8.6 High · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-603
- [OTP Code Exposure in Hayat Hospital's Hayat Mobile](https://agentprime.io/advisories/CVE-2026-90983.md)
  `CVE-2026-90983` · CVE record: Hayat Health Facilities Inc. (Hayat Hospital) Hayat Mobile · CVSS 8.2 High · Not analysed yet · Published 9 Oct 2026 · Tags: CWE-603
- [Reverse Tabnabbing via New Tab Navigation in Multiple WSO2 Products Allows Phishing and Credential Theft](https://agentprime.io/advisories/CVE-2026-3096.md)
  `CVE-2026-3096` · CVE record: WSO2 WSO2 API Control Plane and 1 more · CVSS 4.7 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: CWE-20, CWE-603
- [Skype for Business Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-66305.md)
  `CVE-2026-66305` · CVE record: Microsoft Skype for Business Server 2015 CU13 and 2 more · CVSS 7.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-603
- [Ebyte NE2-D11 Use of Client-Side Authentication](https://agentprime.io/advisories/CVE-2026-76945.md)
  `CVE-2026-76945` · CVE record: Ebyte Ebyte NE2-D11 Firmware · CVSS 8.7 High · Not analysed yet · Published 27 Aug 2026 · Tags: CWE-603
- [Ebyte NA111-M Use of Client-Side Authentication](https://agentprime.io/advisories/CVE-2026-71187.md)
  `CVE-2026-71187` · CVE record: Ebyte Ebyte NA111-M Firmware · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: CWE-603
- [Authorization Bypass in Sparx Enterprise Architect](https://agentprime.io/advisories/CVE-2026-42098.md)
  `CVE-2026-42098` · CVE record: Sparx Systems Enterprise Architect · CVSS 8.7 High · Not analysed yet · Published 19 May 2026 · Tags: CWE-603
- [Keycloak: Policy bypass during WebAuthn credential registration via client-side JavaScript manipulation](https://agentprime.io/advisories/GHSA-g8vr-x4qh-25qg.md)
  `GHSA-g8vr-x4qh-25qg`, `CVE-2026-8830` · Maven `org.keycloak:keycloak-services`: affected `<26.6.3`, fixed in `26.6.3` · CVSS 4.3 Medium · Not analysed yet · Published 19 May 2026 · Tags: CWE-603
- [Use of Client-Side Authentication in multiple BinSoft products](https://agentprime.io/advisories/CVE-2026-40551.md)
  `CVE-2026-40551` · CVE record: BinSoft mpGabinet and 4 more · CVSS 8.4 High · Not analysed yet · Published 28 Apr 2026 · Tags: CWE-603
- [Session generation possible with certificate number only](https://agentprime.io/advisories/CVE-2025-30042.md)
  `CVE-2025-30042` · CVE record: CGM CGM CLININET · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-603
- [JNC｜IAQS and I6 - Client-Side Enforcement of Server-Side Security](https://agentprime.io/advisories/CVE-2026-1363.md)
  `CVE-2026-1363` · CVE record: JNC IAQS and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Jan 2026 · Tags: CWE-603
- [Nuvation Energy BMS Client-side Authentication](https://agentprime.io/advisories/CVE-2025-64119.md)
  `CVE-2025-64119` · CVE record: Nuvation Energy Battery Management System · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Jan 2026 · Tags: CWE-603
- [Mirion Medical EC2 Software NMIS BioDose Use of Client-Side Authentication](https://agentprime.io/advisories/CVE-2025-61940.md)
  `CVE-2025-61940` · CVE record: Mirion Medical EC2 Software NMIS BioDose · CVSS 8.7 High · Not analysed yet · Published 2 Dec 2025 · Tags: CWE-603
- [CyberTutor｜New Site Server - Use of Client-Side Authentication](https://agentprime.io/advisories/CVE-2025-12868.md)
  `CVE-2025-12868` · CVE record: CyberTutor New Site Server · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Nov 2025 · Tags: CWE-603
- [Restaurant Brands International assistant platform: The Restaurant Brands International (RBI) assistant platform through 2025-09-06 relies on…](https://agentprime.io/advisories/CVE-2025-62650.md)
  `CVE-2025-62650` · CVE record: Restaurant Brands International assistant platform · CVSS 8.3 High · Not analysed yet · Published 17 Oct 2025 · Tags: CWE-603
- [Restaurant Brands International assistant platform: The Restaurant Brands International (RBI) assistant platform through 2025-09-06 relies on…](https://agentprime.io/advisories/CVE-2025-62649.md)
  `CVE-2025-62649` · CVE record: Restaurant Brands International assistant platform · CVSS 5.8 Medium · Not analysed yet · Published 17 Oct 2025 · Tags: CWE-603
- [Use of client-side authentication issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions.](https://agentprime.io/advisories/CVE-2025-24517.md)
  `CVE-2025-24517` · CVE record: Inaba Denki Sangyo Co., Ltd. CHOCO TEI WATCHER mini (IB-MCT001) · CVSS 7.5 High · Not analysed yet · Published 31 Mar 2025 · Tags: CWE-603
- [ECOVACS lawnmower and vacuum cloud service live video PIN bypass](https://agentprime.io/advisories/CVE-2024-52327.md)
  `CVE-2024-52327` · CVE record: ECOVACS ECOVACS HOME and 1 more · CVSS 6.0 Medium · Not analysed yet · Published 23 Jan 2025 · Tags: CWE-603, CWE-807
- [MUSASI version 3 contains an issue with use of client-side authentication.](https://agentprime.io/advisories/CVE-2024-45785.md)
  `CVE-2024-45785` · CVE record: NEUMANN CO.LTD. MUSASI · CVSS 7.5 High · Not analysed yet · Published 25 Oct 2024 · Tags: CWE-603
- [Use of Client-Side Authentication in TELSAT marKoni FM Transmitter](https://agentprime.io/advisories/CVE-2024-39375.md)
  `CVE-2024-39375` · CVE record: marKoni Markoni-D (Compact) FM Transmitters and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Jun 2024 · Tags: CWE-603
- [An issue in Flipsnack v.18/03/2024 allows a local attacker to obtain sensitive information via the reader.gz.js file.](https://agentprime.io/advisories/CVE-2024-28627.md)
  `CVE-2024-28627` · CVE record · CVSS 7.5 High · Not analysed yet · Published 23 Apr 2024 · Tags: Broken access control, CWE-603
- [Necta WiFi Mouse (Mouse Server) client-side authentication bypass](https://agentprime.io/advisories/CVE-2022-3218.md)
  `CVE-2022-3218` · CVE record: Necta LLC WiFi Mouse (Mouse Server) · No CVSS score · EPSS 0.74 · Not analysed yet · Published 19 Sept 2022 · Tags: CWE-603
- [Siemens Cerberus DMS: A vulnerability has been identified in Cerberus DMS (All versions)…](https://agentprime.io/advisories/CVE-2022-33139.md)
  `CVE-2022-33139` · CVE record: Siemens Cerberus DMS and 4 more · No CVSS score · Not analysed yet · Published 21 Jun 2022 · Tags: CWE-603
- [Fresenius Kabi Agilia Connect Infusion System use of client side authentication](https://agentprime.io/advisories/CVE-2021-43355.md)
  `CVE-2021-43355` · CVE record: Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) · CVSS 7.3 High · Not analysed yet · Published 21 Jan 2022 · Tags: CWE-603
- [SOOIL Developments Co., Ltd Diabecare RS…: In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A…](https://agentprime.io/advisories/CVE-2020-27266.md)
  `CVE-2020-27266` · CVE record: SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A · No CVSS score · Not analysed yet · Published 19 Jan 2021 · Tags: CWE-603
- [A vulnerability has been identified in SIPORT MP (All versions < 3.2.1).](https://agentprime.io/advisories/CVE-2020-7591.md)
  `CVE-2020-7591` · CVE record: Siemens SIPORT MP · No CVSS score · Not analysed yet · Published 15 Oct 2020 · Tags: CWE-603
- [Rockwell Automation MicroLogix 1400 Controllers Series B…: Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A…](https://agentprime.io/advisories/CVE-2020-6988.md)
  `CVE-2020-6988` · CVE record: Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior · CVSS 7.5 High · Not analysed yet · Published 16 Mar 2020 · Tags: CWE-603
- [Advantech B+B SmartWorx MESR901: A Use of Client-Side Authentication issue was discovered in Advantech B+B SmartWorx…](https://agentprime.io/advisories/CVE-2017-7909.md)
  `CVE-2017-7909` · CVE record: Advantech B+B SmartWorx MESR901 · No CVSS score · Not analysed yet · Published 6 May 2017 · Tags: CWE-603

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-603>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-603/>. Everything for agents: <https://agentprime.io/llms.txt>.