agentprime: CWE-648

CVE-2026-112177: Ghostscript: reintroduction of .charkeys -dsafer bypass in rhel 8

Tue, 20 Oct 2026 07:25:16 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-76460: Cisco Identity Services Engine Authentication Bypass Vulnerability

Wed, 16 Sep 2026 20:12:02 GMT

CVSS 10.0 (Critical). Critical: In CISA’s KEV catalogue since 16 Sept 2026: it is known to be exploited. CVSS score 10.0: 9.0 or more. CVSS score 10.0 (7.0 or more) and EPSS 0.76 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-63727: Anchore Enterprise Privilege Escalation via User Management API

Tue, 28 Jul 2026 14:25:35 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-54424: Unity Parsec: An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads…

Sat, 04 Jul 2026 00:45:24 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-11877: Missing Authorization Vulnerability in OpenText Access Manager

Wed, 24 Jun 2026 14:01:38 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-9560: OS command injection in OpenVPN Inc OpenVPN Connect

Tue, 26 May 2026 17:39:57 GMT

CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-41225: iControl REST vulnerability

Wed, 13 May 2026 14:12:37 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-54502: Resource exposure in AMD EPYC™ 9004 Series Processors and others

Thu, 16 Apr 2026 18:46:13 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

Duplicate Advisory: OpenClaw Gateway: RCE and Privilege Escalation from operator.pairing to operator.admin via device.pair.approve

Fri, 10 Apr 2026 00:30:30 GMT

openclaw <2026.3.22, fixed in 2026.3.22. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Duplicate Advisory: OpenClaw: Gateway Plugin Subagent Fallback `deleteSession` Uses Synthetic `operator.admin`

Fri, 10 Apr 2026 00:30:30 GMT

openclaw <=2026.3.24, no fixed version yet. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw: Unbound bootstrap setup codes allow privilege escalation during pairing

Fri, 03 Apr 2026 03:19:33 GMT

openclaw <2026.3.22, fixed in 2026.3.22. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw: Heartbeat context inheritance bypasses sandbox via senderIsOwner escalation

Thu, 02 Apr 2026 20:59:29 GMT

openclaw <2026.3.31, fixed in 2026.3.31. CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw: Gateway Plugin Subagent Fallback `deleteSession` Uses Synthetic `operator.admin`

Sun, 29 Mar 2026 15:49:34 GMT

openclaw <2026.3.28, fixed in 2026.3.28. CVSS 6.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw: Gateway Plugin HTTP Auth Grants Unrestricted operator.admin Runtime Scope to All Callers

Fri, 27 Mar 2026 22:30:57 GMT

openclaw <=2026.3.24, no fixed version yet. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw: Silent privilege escalation via gateway shared-auth reconnect

Fri, 27 Mar 2026 22:29:47 GMT

openclaw <=2026.3.24, no fixed version yet. CVSS 8.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw: Gateway Backend Reconnect lets Non-Admin Operator Scopes Self-Claim operator.admin

Fri, 27 Mar 2026 22:29:12 GMT

openclaw <=2026.3.24, no fixed version yet. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw Gateway: RCE and Privilege Escalation from operator.pairing to operator.admin via device.pair.approve

Thu, 26 Mar 2026 21:40:57 GMT

openclaw <2026.3.22, fixed in 2026.3.22. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-20122: Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability

Wed, 25 Feb 2026 16:14:21 GMT

CVSS 5.4 (Medium). Critical: In CISA’s KEV catalogue since 20 Apr 2026: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-20126: Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability

Wed, 25 Feb 2026 16:13:58 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

Apache Airflow Has an Authorization Bypass That Allows Unauthorized Task Log Access

Mon, 09 Feb 2026 12:30:22 GMT

apache-airflow >=3.1.0, <3.1.7, fixed in 3.1.7. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-1161: Improper Authorization in Nomysoft Informatics' Nomysem

Wed, 10 Dec 2025 09:03:16 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-63291: When processing API requests, the Alteryx server 2022.1.1.42654 and 2024.1 used MongoDB object IDs to uniquely identify the data being requested by the caller.

Fri, 14 Nov 2025 00:00:00 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-32008: A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2).

Tue, 11 Nov 2025 20:20:13 GMT

CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-54769: KL-001-2025-016: Xorux LPAR2RRD File Upload Directory Traversal

Mon, 28 Jul 2025 23:34:38 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-54768: KL-001-2025-015: Xorux LPAR2RRD Read Only User Log Download Exposing Sensitive Information

Mon, 28 Jul 2025 23:31:09 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-54767: KL-001-2025-014: Xorux LPAR2RRD Read Only User Denial of Service

Mon, 28 Jul 2025 23:28:27 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-54765: KL-001-2025-013: Xorux XorMon-NG Web Application Privilege Escalation to Administrator

Mon, 28 Jul 2025 23:25:12 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-54766: KL-001-2025-012: Xorux XorMon-NG Read Only User Export Device Configuration Exposing Sensitive Information

Mon, 28 Jul 2025 23:16:13 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-5997: Privilege Escalation in Beamsec PhishPro

Mon, 28 Jul 2025 11:25:44 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-7344: Digiwin｜EAI - Privilege Escalation

Mon, 21 Jul 2025 06:55:35 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-23375: Dell PowerProtect Data Manager: Dell PowerProtect Data Manager Reporting, version(s) 19.17…

Mon, 28 Apr 2025 14:28:03 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2022-26323: Incorrect Use of Privileged vulnerability has been discovered on OpenText™ UCMDB and Operation Bridge Manager product.

Thu, 17 Apr 2025 14:29:44 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-2311: Authentication Bypass in Sechard Information Technologies' SecHard

Thu, 20 Mar 2025 11:55:51 GMT

CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-0589: Octopus Deploy Octopus Server: In affected versions of Octopus Deploy where customers are using Active Directory for…

Tue, 11 Feb 2025 08:59:51 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-53007: Bentley ProjectWise Integration Server: Bentley Systems ProjectWise Integration Server before 10.00.03.288 allows unintended SQL…

Fri, 31 Jan 2025 00:00:00 GMT

CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-8785: WhatsUp Gold Registry Overwrite Remote Code Execution Vulnerability

Mon, 02 Dec 2024 14:49:36 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-11068: D-Link DSL6740C - Incorrect Use of Privileged APIs

Mon, 11 Nov 2024 08:05:18 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

org.xwiki.platform:xwiki-platform-notifications-ui is missing checks for notification filter preferences editions

Wed, 18 Sep 2024 14:26:16 GMT

org.xwiki.platform:xwiki-platform-notifications-ui >=13.2-rc-1, <14.10.21 || >=15.0-rc-1, <15.5.5 || >=15.6-rc-1, <15.10.1, fixed in 14.10.21, 15.5.5, 15.10.1. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

Wed, 21 Aug 2024 16:04:01 GMT

github.com/usememos/memos <0.9.1, fixed in 0.9.1. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

Wed, 21 Aug 2024 16:03:59 GMT

github.com/usememos/memos <0.9.0, fixed in 0.9.0. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

Tue, 20 Aug 2024 20:25:58 GMT

github.com/usememos/memos <0.9.1, fixed in 0.9.1. CVSS 7.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-37018: The OpenDaylight 0.15.3 controller allows topology poisoning via API requests because an application can manipulate the path that is taken by discovery packets.

Fri, 31 May 2024 00:35:10 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-6522: Information Disclosure in ExtremePacs's Extreme XDS

Fri, 05 Apr 2024 11:33:30 GMT

CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-4993: Sensetive Data Exposure in Utarit's Soliclub

Thu, 15 Feb 2024 15:40:24 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-22042: A vulnerability has been identified in Unicam FX (All versions).

Tue, 13 Feb 2024 09:00:06 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-6151: Information Disclosure in Eskom E-municipality

Tue, 28 Nov 2023 09:29:12 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-6150: Information Disclosure in Eskom E-municipality

Tue, 28 Nov 2023 09:25:50 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-4972: Information Disclosure in Digital Yepas

Thu, 14 Sep 2023 19:03:37 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-4009: Privilege Escalation for Project Owner and Project User Admin Roles in Ops Manager

Tue, 08 Aug 2023 08:37:20 GMT

CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-20136: Cisco Secure Workload: A vulnerability in the OpenAPI of Cisco Secure Workload could allow an authenticated…

Wed, 28 Jun 2023 00:00:00 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.