CWE-636.

free5gc UDR improper path validation allows unauthenticated access to Traffic Influence Subscriptions

• Broken access control
• CWE-636

<=1.4.2 · no fixed version yet

Helm's plugin verification fails open when .prov is missing, allowing unsigned plugin install

• Weak cryptography or TLS
• CWE-636

>=4.0.0, <4.1.4 · fixed in 4.1.4

OpenClaw: strictInlineEval explicit-approval boundary bypassed by approval-timeout fallback on gateway and node exec hosts

• CWE-20
• CWE-636

<2026.4.8 · fixed in 2026.4.8

fast-jwt accepts unknown `crit` header extensions (RFC 7515 violation)

• CWE-345
• CWE-636

<=6.1.0 · no fixed version yet

OpenClaw: Image pixel-limit guard can fail open on sips and allow decompression-bomb DoS

• Denial of service
• CWE-636

<2026.3.31 · fixed in 2026.3.31

OpenClaw: Security Scan Failure Does Not Block Plugin Installation (Fail-Open)

• CWE-636
• CWE-754

<2026.3.31 · fixed in 2026.3.31

Duplicate Advisory: OpenClaw: Unavailable local auth SecretRefs could fall through to remote credentials in local mode

• CWE-636

<2026.3.11 · fixed in 2026.3.11

pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback

• CWE-636

>=0.14.0, <26.0.0 · fixed in 26.0.0

OpenClaw: Unavailable local auth SecretRefs could fall through to remote credentials in local mode

• CWE-636

<2026.3.11 · fixed in 2026.3.11

Pass filter with Empty Table

• MBS UBR-01 Mk II
• MBS UBR-02
• CWE-636

Use of wildcard (“*” or “all”) in Block list

• MBS UBR-01 Mk II
• MBS UBR-02
• CWE-636

Snuffleupagus vulnerable to RCE on instances with upload validation enabled but without the VLD package

• jvoisin snuffleupagus
• CWE-636

VTun-ng's failure to initialize encryption modules may cause reversion to plaintext

• leakingmemory vtun-ng
• CWE-636

Windows BitLocker Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1507
• Microsoft Windows 10 Version 1607
• CWE-636

Hashicorp Vault vulnerable to denial of service through memory exhaustion

• CWE-636

>=1.2.0, <1.18.1 · fixed in 1.18.1

Remote Registry Service Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1507
• Microsoft Windows 10 Version 1607
• CWE-636

Frontend Admin by DynamiApps <= 3.19.4 - Improper Missing Encryption Exception Handling to Form Manipulation

• shabti Frontend Admin by DynamiApps
• CWE-636

HashiCorpVault does not correctly validate OCSP responses

• CWE-636
• CWE-703

<1.16.0 · fixed in 1.16.0

Lenovo ThinkPad: A vulnerability was reported in BIOS for ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2…

• Lenovo ThinkPad
• CWE-636

Docker Swarm encrypted overlay network may be unauthenticated

• CWE-420
• CWE-636

>=1.12.0, <20.10.24 || >=23.0.0, <23.0.3 · fixed in 20.10.24, 23.0.3

Docker Swarm encrypted overlay network traffic may be unencrypted

• Weak cryptography or TLS
• CWE-636

>=1.12.0, <20.10.24 || >=23.0.0, <23.0.3 · fixed in 20.10.24, 23.0.3

Docker Swarm encrypted overlay network with a single endpoint is unauthenticated

• CWE-420
• CWE-636

>=1.12.0, <20.10.24 || >=23.0.0, <23.0.3 · fixed in 20.10.24, 23.0.3

Modular Input REST API Requests Connect via HTTP after Certificate Validation Failure in Splunk Add-on Builder and Splunk CloudConnect SDK

• Splunk Add-on Builder
• Splunk CloudConnect SDK
• CWE-636

Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability

• Cisco Application Policy Infrastructure Controller (APIC)
• CWE-636

A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to elevate privileges under certain conditions during a BIOS update performed by Lenovo…

• Lenovo Notebook BIOS
• CWE-636