# CWE-648.

Every Advisory and CVE whose sources give the weakness CWE-648, newest first.

## Records, newest first

- [Ghostscript: reintroduction of .charkeys -dsafer bypass in rhel 8](https://agentprime.io/advisories/CVE-2026-112177.md)
  `CVE-2026-112177` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.3 High · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-648
- [Cisco Identity Services Engine Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-76460.md)
  `CVE-2026-76460` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.76 · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-648
- [Anchore Enterprise Privilege Escalation via User Management API](https://agentprime.io/advisories/CVE-2026-63727.md)
  `CVE-2026-63727` · CVE record: Anchore Anchore Enterprise · CVSS 8.7 High · Not analysed yet · Published 28 Jul 2026 · Tags: CWE-648
- [Unity Parsec: An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads…](https://agentprime.io/advisories/CVE-2026-54424.md)
  `CVE-2026-54424` · CVE record: Unity Parsec · CVSS 8.4 High · Not analysed yet · Published 4 Jul 2026 · Tags: CWE-648
- [Missing Authorization Vulnerability in OpenText Access Manager](https://agentprime.io/advisories/CVE-2026-11877.md)
  `CVE-2026-11877` · CVE record: OpenText Access Manager · CVSS 6.3 Medium · Not analysed yet · Published 24 Jun 2026 · Tags: CWE-648
- [OS command injection in OpenVPN Inc OpenVPN Connect](https://agentprime.io/advisories/CVE-2026-9560.md)
  `CVE-2026-9560` · CVE record: OpenVPN Inc OpenVPN Connect · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 May 2026 · Tags: Command injection, Privilege escalation, CWE-648
- [iControl REST vulnerability](https://agentprime.io/advisories/CVE-2026-41225.md)
  `CVE-2026-41225` · CVE record: F5 BIG-IP · CVSS 8.6 High · Not analysed yet · Published 13 May 2026 · Tags: CWE-648
- [Resource exposure in AMD EPYC™ 9004 Series Processors and others](https://agentprime.io/advisories/CVE-2025-54502.md)
  `CVE-2025-54502` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 7.1 High · Not analysed yet · Published 16 Apr 2026 · Tags: Information disclosure, CWE-648
- [Duplicate Advisory: OpenClaw Gateway: RCE and Privilege Escalation from operator.pairing to operator.admin via device.pair.approve](https://agentprime.io/advisories/GHSA-r3v5-2grc-429h.md)
  `GHSA-r3v5-2grc-429h` · npm `openclaw`: affected `<2026.3.22`, fixed in `2026.3.22` · CVSS 8.8 High · Withdrawn · Not analysed yet · Published 10 Apr 2026 · Tags: CWE-648
- [Duplicate Advisory: OpenClaw: Gateway Plugin Subagent Fallback \`deleteSession\` Uses Synthetic \`operator.admin\`](https://agentprime.io/advisories/GHSA-m5jp-p3r5-mfqp.md)
  `GHSA-m5jp-p3r5-mfqp` · npm `openclaw`: affected `<=2026.3.24`, no fixed version yet · CVSS 8.1 High · Withdrawn · Not analysed yet · Published 10 Apr 2026 · Tags: Broken access control, CWE-648
- [OpenClaw: Unbound bootstrap setup codes allow privilege escalation during pairing](https://agentprime.io/advisories/GHSA-gg9v-mgcp-v6m7.md)
  `GHSA-gg9v-mgcp-v6m7`, `CVE-2026-41386` · npm `openclaw`: affected `<2026.3.22`, fixed in `2026.3.22` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Apr 2026 · Tags: Privilege escalation, CWE-648
- [OpenClaw: Heartbeat context inheritance bypasses sandbox via senderIsOwner escalation](https://agentprime.io/advisories/GHSA-g5cg-8x5w-7jpm.md)
  `GHSA-g5cg-8x5w-7jpm`, `CVE-2026-41329` · npm `openclaw`: affected `<2026.3.31`, fixed in `2026.3.31` · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Apr 2026 · Tags: Broken access control, CWE-648
- [OpenClaw: Gateway Plugin Subagent Fallback \`deleteSession\` Uses Synthetic \`operator.admin\`](https://agentprime.io/advisories/GHSA-h4jx-hjr3-fhgc.md)
  `GHSA-h4jx-hjr3-fhgc`, `CVE-2026-35645` · npm `openclaw`: affected `<2026.3.28`, fixed in `2026.3.28` · CVSS 6.1 Medium · Not analysed yet · Published 29 Mar 2026 · Tags: Privilege escalation, Broken access control, CWE-648
- [OpenClaw: Gateway Plugin HTTP Auth Grants Unrestricted operator.admin Runtime Scope to All Callers](https://agentprime.io/advisories/GHSA-qm2m-28pf-hgjw.md)
  `GHSA-qm2m-28pf-hgjw`, `CVE-2026-35669` · npm `openclaw`: affected `<=2026.3.24`, no fixed version yet · CVSS 8.7 High · Not analysed yet · Published 27 Mar 2026 · Tags: Privilege escalation, Broken access control, CWE-648
- [OpenClaw: Silent privilege escalation via gateway shared-auth reconnect](https://agentprime.io/advisories/GHSA-fqw4-mph7-2vr8.md)
  `GHSA-fqw4-mph7-2vr8`, `CVE-2026-35625` · npm `openclaw`: affected `<=2026.3.24`, no fixed version yet · CVSS 8.5 High · Not analysed yet · Published 27 Mar 2026 · Tags: Broken access control, CWE-648
- [OpenClaw: Gateway Backend Reconnect lets Non-Admin Operator Scopes Self-Claim operator.admin](https://agentprime.io/advisories/GHSA-9hjh-fr4f-gxc4.md)
  `GHSA-9hjh-fr4f-gxc4`, `CVE-2026-35663` · npm `openclaw`: affected `<=2026.3.24`, no fixed version yet · CVSS 8.7 High · Not analysed yet · Published 27 Mar 2026 · Tags: Privilege escalation, Broken access control, CWE-648
- [OpenClaw Gateway: RCE and Privilege Escalation from operator.pairing to operator.admin via device.pair.approve](https://agentprime.io/advisories/GHSA-hf68-49fm-59cq.md)
  `GHSA-hf68-49fm-59cq`, `CVE-2026-35639` · npm `openclaw`: affected `<2026.3.22`, fixed in `2026.3.22` · CVSS 8.7 High · Not analysed yet · Published 26 Mar 2026 · Tags: Privilege escalation, CWE-648
- [Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability](https://agentprime.io/advisories/CVE-2026-20122.md)
  `CVE-2026-20122` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 5.4 Medium · Critical (KEV) · In CISA KEV · EPSS 0.26 · Not analysed yet · Published 25 Feb 2026 · Tags: CWE-648
- [Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2026-20126.md)
  `CVE-2026-20126` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 8.8 High · Not analysed yet · Published 25 Feb 2026 · Tags: CWE-648
- [Apache Airflow Has an Authorization Bypass That Allows Unauthorized Task Log Access](https://agentprime.io/advisories/GHSA-pm44-x5x7-24c4.md)
  `GHSA-pm44-x5x7-24c4`, `BIT-airflow-2026-22922`, `CVE-2026-22922`, `PYSEC-2026-11` · PyPI `apache-airflow`: affected `>=3.1.0, <3.1.7`, fixed in `3.1.7` · CVSS 6.5 Medium · Not analysed yet · Published 9 Feb 2026 · Tags: CWE-648
- [Improper Authorization in Nomysoft Informatics' Nomysem](https://agentprime.io/advisories/CVE-2025-1161.md)
  `CVE-2025-1161` · CVE record: NomySoft Information Technology Training and Consulting Inc. Nomysem · CVSS 7.1 High · Not analysed yet · Published 10 Dec 2025 · Tags: CWE-648
- [When processing API requests, the Alteryx server 2022.1.1.42654 and 2024.1 used MongoDB object IDs to uniquely identify the data being requested by the caller.](https://agentprime.io/advisories/CVE-2025-63291.md)
  `CVE-2025-63291` · CVE record · CVSS 5.4 Medium · Not analysed yet · Published 14 Nov 2025 · Tags: CWE-648
- [A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2).](https://agentprime.io/advisories/CVE-2024-32008.md)
  `CVE-2024-32008` · CVE record: Siemens Spectrum Power 4 · CVSS 8.5 High · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-648
- [KL-001-2025-016: Xorux LPAR2RRD File Upload Directory Traversal](https://agentprime.io/advisories/CVE-2025-54769.md)
  `CVE-2025-54769` · CVE record: Xorux LPAR2RRD · CVSS 8.8 High · Not analysed yet · Published 28 Jul 2025 · Tags: Path traversal, Unrestricted file upload, CWE-648
- [KL-001-2025-015: Xorux LPAR2RRD Read Only User Log Download Exposing Sensitive Information](https://agentprime.io/advisories/CVE-2025-54768.md)
  `CVE-2025-54768` · CVE record: Xorux LPAR2RRD · CVSS 5.3 Medium · Not analysed yet · Published 28 Jul 2025 · Tags: CWE-648
- [KL-001-2025-014: Xorux LPAR2RRD Read Only User Denial of Service](https://agentprime.io/advisories/CVE-2025-54767.md)
  `CVE-2025-54767` · CVE record: Xorux LPAR2RRD · CVSS 6.5 Medium · Not analysed yet · Published 28 Jul 2025 · Tags: CWE-648
- [KL-001-2025-013: Xorux XorMon-NG Web Application Privilege Escalation to Administrator](https://agentprime.io/advisories/CVE-2025-54765.md)
  `CVE-2025-54765` · CVE record: Xorux XorMon-NG · CVSS 5.3 Medium · EPSS 0.10 · Not analysed yet · Published 28 Jul 2025 · Tags: CWE-648
- [KL-001-2025-012: Xorux XorMon-NG Read Only User Export Device Configuration Exposing Sensitive Information](https://agentprime.io/advisories/CVE-2025-54766.md)
  `CVE-2025-54766` · CVE record: Xorux XorMon-NG · CVSS 5.3 Medium · EPSS 0.10 · Not analysed yet · Published 28 Jul 2025 · Tags: CWE-648
- [Privilege Escalation in Beamsec PhishPro](https://agentprime.io/advisories/CVE-2025-5997.md)
  `CVE-2025-5997` · CVE record: Beamsec PhishPro · CVSS 8.8 High · Not analysed yet · Published 28 Jul 2025 · Tags: CWE-648
- [Digiwin｜EAI - Privilege Escalation](https://agentprime.io/advisories/CVE-2025-7344.md)
  `CVE-2025-7344` · CVE record: Digiwin EAI · CVSS 8.7 High · Not analysed yet · Published 21 Jul 2025 · Tags: CWE-648
- [Dell PowerProtect Data Manager: Dell PowerProtect Data Manager Reporting, version(s) 19.17…](https://agentprime.io/advisories/CVE-2025-23375.md)
  `CVE-2025-23375` · CVE record: Dell PowerProtect Data Manager · CVSS 7.8 High · Not analysed yet · Published 28 Apr 2025 · Tags: CWE-648
- [Incorrect Use of Privileged vulnerability has been discovered on OpenText™ UCMDB and Operation Bridge Manager product.](https://agentprime.io/advisories/CVE-2022-26323.md)
  `CVE-2022-26323` · CVE record: OpenText™ Operations Bridge Manager and 2 more · CVSS 8.7 High · Not analysed yet · Published 17 Apr 2025 · Tags: CWE-648
- [Authentication Bypass in Sechard Information Technologies' SecHard](https://agentprime.io/advisories/CVE-2025-2311.md)
  `CVE-2025-2311` · CVE record: Sechard Information Technologies SecHard · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Mar 2025 · Tags: Weak cryptography or TLS, Hard-coded credentials, CWE-648
- [Octopus Deploy Octopus Server: In affected versions of Octopus Deploy where customers are using Active Directory for…](https://agentprime.io/advisories/CVE-2025-0589.md)
  `CVE-2025-0589` · CVE record: Octopus Deploy Octopus Server · CVSS 6.9 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: CWE-648
- [Bentley ProjectWise Integration Server: Bentley Systems ProjectWise Integration Server before 10.00.03.288 allows unintended SQL…](https://agentprime.io/advisories/CVE-2024-53007.md)
  `CVE-2024-53007` · CVE record: Bentley ProjectWise Integration Server · CVSS 6.4 Medium · Not analysed yet · Published 31 Jan 2025 · Tags: CWE-648
- [WhatsUp Gold Registry Overwrite Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-8785.md)
  `CVE-2024-8785` · CVE record: Progress Software Corporation WhatsUp Gold · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Dec 2024 · Tags: CWE-648
- [D-Link DSL6740C - Incorrect Use of Privileged APIs](https://agentprime.io/advisories/CVE-2024-11068.md)
  `CVE-2024-11068` · CVE record: D-Link DSL6740C · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Nov 2024 · Tags: CWE-648
- [org.xwiki.platform:xwiki-platform-notifications-ui is missing checks for notification filter preferences editions](https://agentprime.io/advisories/GHSA-r95w-889q-x2gx.md)
  `GHSA-r95w-889q-x2gx`, `CVE-2024-46978` · Maven `org.xwiki.platform:xwiki-platform-notifications-ui`: affected `>=13.2-rc-1, <14.10.21 || >=15.0-rc-1, <15.5.5 || >=15.6-rc-1, <15.10.1`, fixed in `14.10.21`, `15.5.5`, `15.10.1` · CVSS 6.5 Medium · Not analysed yet · Published 18 Sept 2024 · Tags: CWE-648
- [usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos](https://agentprime.io/advisories/GHSA-ghx2-6v4g-9wmm.md)
  `GHSA-ghx2-6v4g-9wmm`, `CVE-2022-4796`, `GO-2022-1236` · Go `github.com/usememos/memos`: affected `<0.9.1`, fixed in `0.9.1` · CVSS 8.1 High · Not analysed yet · Published 21 Aug 2024 · Tags: CWE-648
- [usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos](https://agentprime.io/advisories/GHSA-fv6c-rfg3-gvjw.md)
  `GHSA-fv6c-rfg3-gvjw`, `CVE-2022-4687`, `GO-2022-1217` · Go `github.com/usememos/memos`: affected `<0.9.0`, fixed in `0.9.0` · CVSS 8.1 High · Not analysed yet · Published 21 Aug 2024 · Tags: CWE-648
- [usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos](https://agentprime.io/advisories/GHSA-mq5q-gpgv-pwxw.md)
  `GHSA-mq5q-gpgv-pwxw`, `CVE-2022-4805`, `GO-2023-1292` · Go `github.com/usememos/memos`: affected `<0.9.1`, fixed in `0.9.1` · CVSS 7.3 High · Not analysed yet · Published 20 Aug 2024 · Tags: CWE-648
- [The OpenDaylight 0.15.3 controller allows topology poisoning via API requests because an application can manipulate the path that is taken by discovery packets.](https://agentprime.io/advisories/CVE-2024-37018.md)
  `CVE-2024-37018` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 May 2024 · Tags: CWE-648
- [Information Disclosure in ExtremePacs's Extreme XDS](https://agentprime.io/advisories/CVE-2023-6522.md)
  `CVE-2023-6522` · CVE record: ExtremePacs Extreme XDS · CVSS 7.2 High · Not analysed yet · Published 5 Apr 2024 · Tags: CWE-648
- [Sensetive Data Exposure in Utarit's Soliclub](https://agentprime.io/advisories/CVE-2023-4993.md)
  `CVE-2023-4993` · CVE record: Utarit Information Technologies SoliPay Mobile App · CVSS 7.5 High · Not analysed yet · Published 15 Feb 2024 · Tags: CWE-648
- [A vulnerability has been identified in Unicam FX (All versions).](https://agentprime.io/advisories/CVE-2024-22042.md)
  `CVE-2024-22042` · CVE record: Siemens Unicam FX · CVSS 7.8 High · Not analysed yet · Published 13 Feb 2024 · Tags: CWE-648
- [Information Disclosure in Eskom E-municipality](https://agentprime.io/advisories/CVE-2023-6151.md)
  `CVE-2023-6151` · CVE record: ESKOM Computer e-municipality module · CVSS 7.5 High · Not analysed yet · Published 28 Nov 2023 · Tags: CWE-648
- [Information Disclosure in Eskom E-municipality](https://agentprime.io/advisories/CVE-2023-6150.md)
  `CVE-2023-6150` · CVE record: ESKOM Computer e-municipality module · CVSS 7.5 High · Not analysed yet · Published 28 Nov 2023 · Tags: CWE-648
- [Information Disclosure in Digital Yepas](https://agentprime.io/advisories/CVE-2023-4972.md)
  `CVE-2023-4972` · CVE record: Yepas Digital Yepas · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Sept 2023 · Tags: CWE-648
- [Privilege Escalation for Project Owner and Project User Admin Roles in Ops Manager](https://agentprime.io/advisories/CVE-2023-4009.md)
  `CVE-2023-4009` · CVE record: MongoDB Inc. MongoDB Ops Manager · CVSS 7.2 High · Not analysed yet · Published 8 Aug 2023 · Tags: CWE-648
- [Cisco Secure Workload: A vulnerability in the OpenAPI of Cisco Secure Workload could allow an authenticated…](https://agentprime.io/advisories/CVE-2023-20136.md)
  `CVE-2023-20136` · CVE record: Cisco Cisco Secure Workload · CVSS 4.3 Medium · Not analysed yet · Published 28 Jun 2023 · Tags: CWE-648
- [org.xwiki.platform:xwiki-platform-oldcore makes Incorrect Use of Privileged APIs with DocumentAuthors](https://agentprime.io/advisories/GHSA-pwfv-3cvg-9m4c.md)
  `GHSA-pwfv-3cvg-9m4c`, `CVE-2023-29507` · Maven `org.xwiki.platform:xwiki-platform-oldcore`: affected `>=14.5, <14.10 || >=14.4.1, <14.4.7`, fixed in `14.10`, `14.4.7` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Apr 2023 · Tags: CWE-648
- [Dell PPDM versions 19.12, 19.11 and 19.10, contain an improper access control vulnerability.](https://agentprime.io/advisories/CVE-2023-28062.md)
  `CVE-2023-28062` · CVE record: Dell PPDM Reporting (PowerProtect Data Manager) · CVSS 8.8 High · Not analysed yet · Published 11 Apr 2023 · Tags: CWE-648
- [A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to take privileges actions within the web-based management interf…](https://agentprime.io/advisories/CVE-2022-20965.md)
  `CVE-2022-20965` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.3 Medium · Not analysed yet · Published 18 Jan 2023 · Tags: CWE-648
- [A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to bypass authorization and access system files.](https://agentprime.io/advisories/CVE-2022-20956.md)
  `CVE-2022-20956` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 7.1 High · Not analysed yet · Published 3 Nov 2022 · Tags: CWE-648
- [PingID Windows Login prior to 2.8 does not alert or halt operation if it has been provisioned with the full permissions PingID properties file](https://agentprime.io/advisories/CVE-2022-23720.md)
  `CVE-2022-23720` · CVE record: Ping Identity PingID Windows Login · CVSS 7.5 High · Not analysed yet · Published 30 Jun 2022 · Tags: Authentication bypass, CWE-648
- [Incorrect Use of Privileged APIs in polonel/trudesk](https://agentprime.io/advisories/CVE-2022-2023.md)
  `CVE-2022-2023` · CVE record: polonel polonel/trudesk · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Jun 2022 · Tags: CWE-648
- [Incorrect Use of Privileged APIs in org.xwiki.platform.skin.skinx](https://agentprime.io/advisories/GHSA-ghcq-472w-vf4h.md)
  `GHSA-ghcq-472w-vf4h`, `CVE-2022-24821` · Maven `org.xwiki.platform:xwiki-platform-skin-skinx`: affected `>=13.5.0, <13.10 || <12.10.11 || >=13.0.0, <13.4.6`, fixed in `13.10`, `12.10.11`, `13.4.6` · CVSS 6.8 Medium · Not analysed yet · Published 8 Apr 2022 · Tags: CWE-648
- [The Web Request API in Whale browser before 3.12.129.18 allowed to deny access to the extension store or redirect to any URL when users access the store.](https://agentprime.io/advisories/CVE-2022-24073.md)
  `CVE-2022-24073` · CVE record: NAVER NAVER Whale browser · No CVSS score · Not analysed yet · Published 17 Mar 2022 · Tags: CWE-648
- [A Built-in extension in Whale browser before 3.12.129.46 allows attackers to compromise the rendering process which could lead to controlling browser internal APIs.](https://agentprime.io/advisories/CVE-2022-24071.md)
  `CVE-2022-24071` · CVE record: NAVER NAVER Whale browser · No CVSS score · Not analysed yet · Published 28 Jan 2022 · Tags: CWE-648
- [Potential privilege escalation in Ops Manager API](https://agentprime.io/advisories/CVE-2020-7927.md)
  `CVE-2020-7927` · CVE record: MongoDB Inc. MongoDB Ops Manager · CVSS 8.1 High · Not analysed yet · Published 23 Nov 2020 · Tags: CWE-648

Older: <https://agentprime.io/advisories/tag/cwe-648.md?cursor=WyIyMDIwLTExLTIzVDE5OjAwOjE4LjI0NDAwMFoiLCJDVkUtMjAyMC03OTI3Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-648>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-648/>. Everything for agents: <https://agentprime.io/llms.txt>.