# CWE-693.

Every Advisory and CVE whose sources give the weakness CWE-693, newest first.

## Records, newest first

- [Zebra 4.5.0 before 7.0.0 Honest Peer Ban via Mempool Lock-Time Scoring](https://agentprime.io/advisories/CVE-2026-123556.md)
  `CVE-2026-123556` · CVE record: ZcashFoundation zebra · CVSS 6.9 Medium · Not analysed yet · Published 8 Nov 2026 · Tags: CWE-693
- [JupyterLab Desktop: TCC Bypass via Misconfigured Node Fuses](https://agentprime.io/advisories/CVE-2025-55002.md)
  `CVE-2025-55002` · CVE record: jupyterlab jupyterlab-desktop · CVSS 5.5 Medium · Not analysed yet · Published 6 Nov 2026 · Tags: Code injection, Privilege escalation, CWE-693
- [JupyterLab Desktop: TCC Bypass via Insecure Entitlements (macOS)](https://agentprime.io/advisories/CVE-2025-54991.md)
  `CVE-2025-54991` · CVE record: jupyterlab jupyterlab-desktop · CVSS 5.5 Medium · Not analysed yet · Published 6 Nov 2026 · Tags: Privilege escalation, CWE-693
- [Regression in FIPS enforcement of hash algorithms affecting only Python 3.14.10](https://agentprime.io/advisories/CVE-2026-119170.md)
  `CVE-2026-119170` · CVE record: Python Software Foundation CPython · CVSS 8.2 High · Not analysed yet · Published 6 Nov 2026 · Tags: CWE-693
- [Training-operator: pytorchjob validateupdate casts oldjob from newobj, bypassing managedby immutability (asvs v5.1.3; upstream bug)](https://agentprime.io/advisories/CVE-2026-83494.md)
  `CVE-2026-83494` · CVE record: Red Hat Red Hat OpenShift AI (RHOAI) · No CVSS score · Not analysed yet · Published 6 Nov 2026 · Tags: CWE-693
- [Apache Sling Engine: Include-protection mitigations bypassable via uncovered response-wrapper paths](https://agentprime.io/advisories/CVE-2026-103863.md)
  `CVE-2026-103863` · CVE record: Apache Software Foundation Apache Sling Engine · No CVSS score · Not analysed yet · Published 5 Nov 2026 · Tags: Cross-site scripting (XSS), CWE-693
- [Multiple vulnerabilities that affects IBM Db2 Genius Hub](https://agentprime.io/advisories/CVE-2026-105991.md)
  `CVE-2026-105991` · CVE record: IBM Db2 Genius Hub · CVSS 3.5 Low · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-693
- [Multiple vulnerabilities that affects IBM Db2 Genius Hub](https://agentprime.io/advisories/CVE-2026-108588.md)
  `CVE-2026-108588` · CVE record: IBM Db2 Genius Hub · CVSS 5.4 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-693
- [arbitrary read/write via grant copy](https://agentprime.io/advisories/CVE-2026-102704.md)
  `CVE-2026-102704` · CVE record: Xen Xen · CVSS 4.4 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-693
- [Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx](https://agentprime.io/advisories/CVE-2026-93325.md)
  `CVE-2026-93325` · CVE record: Docker Docker Buildx · CVSS 7.3 High · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-693
- [Elo JavaScript emitter has sandbox escape to arbitrary Node.js / browser code execution via unfiltered \`.constructor\` member access](https://agentprime.io/advisories/GHSA-33r5-xmm8-v6x5.md)
  `GHSA-33r5-xmm8-v6x5`, `CVE-2026-44267` · npm `@enspirit/elo`: affected `<1.0.1`, fixed in `1.0.1` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Cross-site scripting (XSS), Code injection, CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-59031.md)
  `CVE-2026-59031` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-59002.md)
  `CVE-2026-59002` · CVE record: Google Android · CVSS 2.4 Low · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58979.md)
  `CVE-2026-58979` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58978.md)
  `CVE-2026-58978` · CVE record: Google Android · CVSS 6.8 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58961.md)
  `CVE-2026-58961` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58956.md)
  `CVE-2026-58956` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58946.md)
  `CVE-2026-58946` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58934.md)
  `CVE-2026-58934` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58883.md)
  `CVE-2026-58883` · CVE record: Google Android · CVSS 7.5 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58847.md)
  `CVE-2026-58847` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58837.md)
  `CVE-2026-58837` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58836.md)
  `CVE-2026-58836` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-49912.md)
  `CVE-2026-49912` · CVE record: Google Android · CVSS 4.0 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-45514.md)
  `CVE-2026-45514` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-28645.md)
  `CVE-2026-28645` · CVE record: Google Android · CVSS 6.8 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-28632.md)
  `CVE-2026-28632` · CVE record: Google Android · CVSS 4.0 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-693
- [Apache Wicket: CSP headers silently omitted for pages served through nested request handler delegates](https://agentprime.io/advisories/CVE-2026-87718.md)
  `CVE-2026-87718` · CVE record: Apache Software Foundation Apache Wicket · CVSS 2.3 Low · Not analysed yet · Published 1 Nov 2026 · Tags: CWE-693
- [Prefab UI Pyodide sandbox escape to host RCE](https://agentprime.io/advisories/CVE-2026-120338.md)
  `CVE-2026-120338` · CVE record: PrefectHQ prefab-ui · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Nov 2026 · Tags: Code injection, Privilege escalation, CWE-693
- [Highflame ramparts 0.8.1 through 0.8.10 Skill Bundle Scan Bypass via Nested .pyc](https://agentprime.io/advisories/CVE-2026-120202.md)
  `CVE-2026-120202` · CVE record: highflame-ai ramparts · CVSS 7.1 High · Not analysed yet · Published 31 Oct 2026 · Tags: CWE-693
- [Fickling check_safety() bypass: likely_safe_imports grants module-origin trust to unvalidated standard library callables](https://agentprime.io/advisories/CVE-2026-16760.md)
  `CVE-2026-16760` · CVE record: trailofbits fickling · CVSS 8.8 High · Not analysed yet · Published 30 Oct 2026 · Tags: Insecure deserialization, CWE-693
- [Kirki WordPress Plugin < 6.2.5 reCAPTCHA Bypass via Missing Token](https://agentprime.io/advisories/CVE-2026-112348.md)
  `CVE-2026-112348` · CVE record: Themeum Kirki · CVSS 6.9 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-693
- [PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox](https://agentprime.io/advisories/GHSA-26mh-57q7-jfvr.md)
  `GHSA-26mh-57q7-jfvr`, `CVE-2026-61438` · PyPI `praisonai`: affected `<4.6.78`, fixed in `4.6.78` · CVSS 7.0 High · Not analysed yet · Published 29 Oct 2026 · Tags: Command injection, CWE-184, CWE-693
- [PostgreSQL Anonymizer: anon.partial() and anon.partial_email() can reveal the whole data](https://agentprime.io/advisories/CVE-2026-110182.md)
  `CVE-2026-110182` · CVE record: DALIBO PostgreSQL Anonymizer · CVSS 4.3 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-693
- [PostgreSQL Anonymizer: Function declared with SQL-standard syntax leak anonymized data](https://agentprime.io/advisories/CVE-2026-110181.md)
  `CVE-2026-110181` · CVE record: DALIBO PostgreSQL Anonymizer · CVSS 6.5 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-693
- [Protection mechanism failure in Acronis Cyber Protect 17](https://agentprime.io/advisories/CVE-2026-87878.md)
  `CVE-2026-87878` · CVE record: Acronis Acronis Cyber Protect 17 · CVSS 6.3 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-693
- [Protection mechanism failure in Acronis Cyber Protect 17](https://agentprime.io/advisories/CVE-2026-87100.md)
  `CVE-2026-87100` · CVE record: Acronis Acronis Cyber Protect 17 · CVSS 3.6 Low · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-693
- [Authlib: is_secure_transport() loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback hosts](https://agentprime.io/advisories/GHSA-jj7h-c3hg-m23x.md)
  `GHSA-jj7h-c3hg-m23x`, `CVE-2026-114614`, `PYSEC-2026-4354` · PyPI `authlib`: affected `<1.8.0`, fixed in `1.8.0` · CVSS 2.6 Low · Not analysed yet · Published 27 Oct 2026 · Tags: Weak cryptography or TLS, Open redirect, CWE-693
- [Mitigation bypass in the DOM: Push Subscriptions component](https://agentprime.io/advisories/CVE-2026-117998.md)
  `CVE-2026-117998` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-693
- [Mitigation bypass in the DOM: Security component](https://agentprime.io/advisories/CVE-2026-117967.md)
  `CVE-2026-117967` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-693
- [Sandbox escape in the DOM: Networking component](https://agentprime.io/advisories/CVE-2026-117868.md)
  `CVE-2026-117868` · CVE record: Mozilla Firefox and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-693
- [Sandbox escape in the Form Manager component](https://agentprime.io/advisories/CVE-2026-117864.md)
  `CVE-2026-117864` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-693
- [Sandbox escape in the DOM: Navigation component](https://agentprime.io/advisories/CVE-2026-117861.md)
  `CVE-2026-117861` · CVE record: Mozilla Firefox and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-693
- [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2026-65327.md)
  `CVE-2026-65327` · CVE record: Apple macOS · CVSS 8.4 High · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-693
- [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2026-112568.md)
  `CVE-2026-112568` · CVE record: Apple macOS · CVSS 5.5 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-693
- [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2026-112437.md)
  `CVE-2026-112437` · CVE record: Apple macOS · CVSS 7.8 High · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-693
- [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2026-112498.md)
  `CVE-2026-112498` · CVE record: Apple macOS · CVSS 8.2 High · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-693
- [Protection mechanism failure in Apple Safari and others](https://agentprime.io/advisories/CVE-2026-113952.md)
  `CVE-2026-113952` · CVE record: Apple Safari and 2 more · CVSS 5.4 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-693
- [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2026-112523.md)
  `CVE-2026-112523` · CVE record: Apple macOS · CVSS 5.5 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-693
- [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2026-112534.md)
  `CVE-2026-112534` · CVE record: Apple macOS · CVSS 8.2 High · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-693
- [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2026-86937.md)
  `CVE-2026-86937` · CVE record: Apple macOS · CVSS 5.5 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-693
- [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2026-112428.md)
  `CVE-2026-112428` · CVE record: Apple macOS · CVSS 5.5 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-693
- [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2026-86936.md)
  `CVE-2026-86936` · CVE record: Apple macOS · CVSS 7.8 High · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-693
- [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2026-112541.md)
  `CVE-2026-112541` · CVE record: Apple macOS · CVSS 7.8 High · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-693
- [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2026-112668.md)
  `CVE-2026-112668` · CVE record: Apple macOS · CVSS 7.8 High · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-693
- [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2026-112434.md)
  `CVE-2026-112434` · CVE record: Apple macOS · CVSS 7.8 High · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-693
- [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2026-112530.md)
  `CVE-2026-112530` · CVE record: Apple macOS · CVSS 7.8 High · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-693
- [Protection mechanism failure in Apple Safari and others](https://agentprime.io/advisories/CVE-2026-113897.md)
  `CVE-2026-113897` · CVE record: Apple Safari and 3 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-693
- [ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 Security Policy Bypass via Incomplete Fix](https://agentprime.io/advisories/CVE-2026-116145.md)
  `CVE-2026-116145` · CVE record: ImageMagick ImageMagick · CVSS 1.8 Low · Not analysed yet · Published 25 Oct 2026 · Tags: CWE-693
- [baserCMS: Public Web API mail-form submission bypasses image CAPTCHA](https://agentprime.io/advisories/CVE-2026-115480.md)
  `CVE-2026-115480` · CVE record: baserproject basercms · CVSS 5.3 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: CWE-693, CWE-799

Older: <https://agentprime.io/advisories/tag/cwe-693.md?cursor=WyIyMDI2LTEwLTIzVDEzOjM3OjMyLjE4NDAwMFoiLCJDVkUtMjAyNi0xMTU0ODAiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-693>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-693/>. Everything for agents: <https://agentprime.io/llms.txt>.