# CWE-693.

Every Advisory and CVE whose sources give the weakness CWE-693, newest first.

## Records, newest first (an older page)

- [Protection mechanism failure in Jenkins Project Jenkins Violation Comments to GitLab Plugin](https://agentprime.io/advisories/CVE-2026-70444.md)
  `CVE-2026-70444` · CVE record: Jenkins Project Jenkins Violation Comments to GitLab Plugin · CVSS 4.3 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-693
- [Electron: Sandboxed iframe can bypass the allow-popups restriction via the OpenURL navigation path](https://agentprime.io/advisories/GHSA-9f4c-93c8-jc8g.md)
  `GHSA-9f4c-93c8-jc8g`, `CVE-2026-70608` · npm `electron`: affected `<39.8.10 || >=40.0.0-alpha.1, <41.10.3 || >=42.0.0-alpha.1, <42.0.1`, fixed in `39.8.10`, `41.10.3`, `42.0.1` · CVSS 7.2 High · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-693, CWE-1021
- [Electron: Context isolation bypass via Function.prototype.bind hijack](https://agentprime.io/advisories/GHSA-h7rp-cf8h-j98x.md)
  `GHSA-h7rp-cf8h-j98x`, `CVE-2026-70601` · npm `electron`: affected `<39.8.9 || >=40.0.0-alpha.1, <40.9.2 || >=41.0.0-alpha.1, <41.2.2 || >=42.0.0-alpha.1, <42.0.0-beta.5`, fixed in `39.8.9`, `40.9.2`, `41.2.2`, `42.0.0-beta.5` · CVSS 7.5 High · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-693
- [Ghost Content API filter bypass reveals private fields](https://agentprime.io/advisories/GHSA-jx35-x7fj-vgpr.md)
  `GHSA-jx35-x7fj-vgpr`, `BIT-ghost-2026-53949`, `CVE-2026-53949` · npm `ghost`: affected `>=5.46.1, <6.21.2`, fixed in `6.21.2` · CVSS 5.3 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: Information disclosure, CWE-693
- [Flyto2 Core: ${env.VAR} interpolation reads any env secret despite env.get being denylisted](https://agentprime.io/advisories/GHSA-hr7p-wg7r-hg9m.md)
  `GHSA-hr7p-wg7r-hg9m`, `CVE-2026-67427`, `PYSEC-2026-3570` · PyPI `flyto-core`: affected `<2.26.7`, fixed in `2.26.7` · CVSS 8.6 High · Not analysed yet · Published 30 Jul 2026 · Tags: Hard-coded credentials, Information disclosure, CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-18015.md)
  `CVE-2026-18015` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-17943.md)
  `CVE-2026-17943` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-693
- [Cross-site request forgery in Google Chrome](https://agentprime.io/advisories/CVE-2026-17936.md)
  `CVE-2026-17936` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Cross-site request forgery (CSRF), CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-17931.md)
  `CVE-2026-17931` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-17923.md)
  `CVE-2026-17923` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-17919.md)
  `CVE-2026-17919` · CVE record: Google Chrome · CVSS 6.8 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-17899.md)
  `CVE-2026-17899` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-17882.md)
  `CVE-2026-17882` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-17865.md)
  `CVE-2026-17865` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-17856.md)
  `CVE-2026-17856` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-17779.md)
  `CVE-2026-17779` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-17776.md)
  `CVE-2026-17776` · CVE record: Google Chrome · CVSS 5.8 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-17764.md)
  `CVE-2026-17764` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-17710.md)
  `CVE-2026-17710` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-17695.md)
  `CVE-2026-17695` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-17677.md)
  `CVE-2026-17677` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-17676.md)
  `CVE-2026-17676` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-17674.md)
  `CVE-2026-17674` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-17669.md)
  `CVE-2026-17669` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-17659.md)
  `CVE-2026-17659` · CVE record: Google Chrome · CVSS 4.2 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-693
- [netfoil: Incorrect block responses could lead to localhost traffic](https://agentprime.io/advisories/GHSA-xvg2-cgv6-6h7v.md)
  `GHSA-xvg2-cgv6-6h7v`, `GO-2026-6143` · Go `github.com/tinfoil-factory/netfoil`: affected `<0.4.0`, fixed in `0.4.0` · CVSS 4.0, no score published · Not analysed yet · Published 29 Jul 2026 · Tags: CWE-693
- [Authentication bypass by spoofing in Apple macOS](https://agentprime.io/advisories/CVE-2026-28900.md)
  `CVE-2026-28900` · CVE record: Apple macOS · CVSS 5.5 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: Authentication bypass, CWE-693
- [Authentication bypass by spoofing in Apple macOS](https://agentprime.io/advisories/CVE-2026-28849.md)
  `CVE-2026-28849` · CVE record: Apple macOS · CVSS 5.5 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: Authentication bypass, CWE-693
- [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2026-64708.md)
  `CVE-2026-64708` · CVE record: Apple macOS · CVSS 5.5 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: CWE-693
- [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2026-28912.md)
  `CVE-2026-28912` · CVE record: Apple macOS · CVSS 7.8 High · Not analysed yet · Published 27 Jul 2026 · Tags: CWE-693
- [Protection mechanism failure in Apple Safari and others](https://agentprime.io/advisories/CVE-2026-64728.md)
  `CVE-2026-64728` · CVE record: Apple Safari and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: CWE-693
- [Apache Wicket: leaked and missing CSP headers](https://agentprime.io/advisories/CVE-2026-66391.md)
  `CVE-2026-66391` · CVE record: Apache Software Foundation Apache Wicket · CVSS 6.5 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: Weak cryptography or TLS, CWE-693
- [Hubuum client library (Rust): Configured custom transports may be bypassed, exposing credentials and network traffic](https://agentprime.io/advisories/GHSA-qqc3-94qv-7fw3.md)
  `GHSA-qqc3-94qv-7fw3` · crates.io `hubuum_client`: affected `>=0.3.0, <0.6.1`, fixed in `0.6.1` · CVSS 4.0, no score published · Not analysed yet · Published 24 Jul 2026 · Tags: CWE-693
- [Open WebUI: \`WEB_FETCH_FILTER_LIST\` host allow/block filter bypassable via URL path and non-label-boundary matching](https://agentprime.io/advisories/GHSA-qg3f-8x3j-ggf2.md)
  `GHSA-qg3f-8x3j-ggf2`, `CVE-2026-59223`, `PYSEC-2026-3603` · PyPI `open-webui`: affected `<0.10.0`, fixed in `0.10.0` · CVSS 4.3 Medium · Not analysed yet · Published 24 Jul 2026 · Tags: CWE-693
- [n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector](https://agentprime.io/advisories/GHSA-h44j-f5r5-ph73.md)
  `GHSA-h44j-f5r5-ph73`, `CVE-2026-59207` · npm `n8n`: affected `<2.27.4 || >=2.28.0, <2.28.1`, fixed in `2.27.4`, `2.28.1` · CVSS 7.1 High · Not analysed yet · Published 22 Jul 2026 · Tags: CWE-693
- [An issue in ZipGenius Team ZipGenius v.6.3.2.3116 and before allows a remote attacker to escalate privileges and execute arbitrary code via the zipgenius.exe.](https://agentprime.io/advisories/CVE-2025-50330.md)
  `CVE-2025-50330` · CVE record · CVSS 8.8 High · Not analysed yet · Published 22 Jul 2026 · Tags: CWE-693
- [An issue in ConeXware, Inc Power Archiver v.22.00.11 and before allows a remote attacker to escalate privileges and execute arbitrary code via the powerarc.exe.](https://agentprime.io/advisories/CVE-2025-50329.md)
  `CVE-2025-50329` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Jul 2026 · Tags: CWE-693
- [An issue in Franco Corbelli ZPAQFRANZ v.61.3 and before allows a remote attacker to escalate privileges and execute arbitrary code via a bypass of the Mark-of-the-Web protection mechanism](https://agentprime.io/advisories/CVE-2025-50327.md)
  `CVE-2025-50327` · CVE record · CVSS 8.8 High · Not analysed yet · Published 22 Jul 2026 · Tags: CWE-693
- [BandiZip v.7.37 is affected by a Authentication Bypass Vulnerability.](https://agentprime.io/advisories/CVE-2025-50325.md)
  `CVE-2025-50325` · CVE record · CVSS 5.4 Medium · Not analysed yet · Published 22 Jul 2026 · Tags: CWE-693
- [An issue in Milos Paripovic OneCommander v.3.96.0.0 allows a remote attacker to execute arbitrary code via the OneCommander.exe component.](https://agentprime.io/advisories/CVE-2025-50324.md)
  `CVE-2025-50324` · CVE record · CVSS 8.8 High · Not analysed yet · Published 22 Jul 2026 · Tags: CWE-693
- [An issue in OhSoft CoffeeZip v4.8.0.0 allows attackers to execute arbitrary code via downloading and executing a crafted archive file.](https://agentprime.io/advisories/CVE-2025-44090.md)
  `CVE-2025-44090` · CVE record · CVSS 8.8 High · Not analysed yet · Published 22 Jul 2026 · Tags: CWE-693
- [An issue in NCH Software ExpressZip v11.29 allows attackers to execute arbitrary code via downloading and executing a crafted archive file.](https://agentprime.io/advisories/CVE-2025-44089.md)
  `CVE-2025-44089` · CVE record · CVSS 8.8 High · Not analysed yet · Published 22 Jul 2026 · Tags: CWE-693
- [Protection mechanism failure in Oracle Corporation Oracle Java SE](https://agentprime.io/advisories/CVE-2026-60166.md)
  `CVE-2026-60166` · CVE record: Oracle Corporation Oracle Java SE · CVSS 3.1 Low · Not analysed yet · Published 21 Jul 2026 · Tags: CWE-693
- [Protection mechanism failure in Oracle Corporation Oracle Java SE](https://agentprime.io/advisories/CVE-2026-60164.md)
  `CVE-2026-60164` · CVE record: Oracle Corporation Oracle Java SE · CVSS 3.1 Low · Not analysed yet · Published 21 Jul 2026 · Tags: CWE-693
- [DOMPurify: \`CUSTOM_ELEMENT_HANDLING\` bypasses \`afterSanitizeElements\` for allowed custom elements.](https://agentprime.io/advisories/GHSA-c2j3-45gr-mqc4.md)
  `GHSA-c2j3-45gr-mqc4`, `CVE-2026-66010` · npm `dompurify`: affected `<3.4.12`, fixed in `3.4.12` · CVSS 5.1 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Cross-site scripting (XSS), CWE-184, CWE-693
- [HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing](https://agentprime.io/advisories/CVE-2026-56585.md)
  `CVE-2026-56585` · CVE record: HCLSoftware IntelliOps Event Management · CVSS 3.1 Low · Not analysed yet · Published 21 Jul 2026 · Tags: CWE-693
- [Mitigation bypass in the DOM: Service Workers component](https://agentprime.io/advisories/CVE-2026-16407.md)
  `CVE-2026-16407` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: Broken access control, CWE-693
- [Mitigation bypass in the Networking component](https://agentprime.io/advisories/CVE-2026-16406.md)
  `CVE-2026-16406` · CVE record: Mozilla Firefox and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: CWE-693
- [Mitigation bypass in the DOM: Security component](https://agentprime.io/advisories/CVE-2026-16394.md)
  `CVE-2026-16394` · CVE record: Mozilla Firefox and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: CWE-693
- [Mitigation bypass in the Enterprise Policies component](https://agentprime.io/advisories/CVE-2026-16390.md)
  `CVE-2026-16390` · CVE record: Mozilla Firefox and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: CWE-693
- [Sandbox escape in the DOM: Networking component](https://agentprime.io/advisories/CVE-2026-16388.md)
  `CVE-2026-16388` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: CWE-693
- [Mitigation bypass in the DOM: Networking component](https://agentprime.io/advisories/CVE-2026-16383.md)
  `CVE-2026-16383` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: CWE-693
- [Mitigation bypass in the DOM: Service Workers component](https://agentprime.io/advisories/CVE-2026-16382.md)
  `CVE-2026-16382` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: CWE-693
- [Mitigation bypass in the Networking component](https://agentprime.io/advisories/CVE-2026-16380.md)
  `CVE-2026-16380` · CVE record: Mozilla Firefox and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: CWE-693
- [Mitigation bypass in the PDF Viewer component](https://agentprime.io/advisories/CVE-2026-16377.md)
  `CVE-2026-16377` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: CWE-693
- [Mitigation bypass in the DOM: Networking component](https://agentprime.io/advisories/CVE-2026-16370.md)
  `CVE-2026-16370` · CVE record: Mozilla Firefox and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: CWE-693
- [Sandbox escape due to use-after-free in the Disability Access APIs component](https://agentprime.io/advisories/CVE-2026-16356.md)
  `CVE-2026-16356` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: Memory corruption, CWE-693
- [Protection mechanism failure in Dell ThinOS 10](https://agentprime.io/advisories/CVE-2026-56087.md)
  `CVE-2026-56087` · CVE record: Dell ThinOS 10 · CVSS 6.1 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: CWE-693
- [Visual Studio Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-47305.md)
  `CVE-2026-47305` · CVE record: Microsoft Microsoft Visual Studio 2022 version 17.12 and 2 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-693
- [Windows BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-50661.md)
  `CVE-2026-50661` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-693

Newest: <https://agentprime.io/advisories/tag/cwe-693.md>
Older: <https://agentprime.io/advisories/tag/cwe-693.md?cursor=WyIyMDI2LTA3LTE0VDE3OjA4OjExLjQwMjAwMFoiLCJDVkUtMjAyNi01MDY2MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-693&cursor=WyIyMDI2LTA4LTA2VDA3OjMyOjU5LjI1NjAwMFoiLCJDVkUtMjAyNC02ODMyIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-693/?cursor=WyIyMDI2LTA4LTA2VDA3OjMyOjU5LjI1NjAwMFoiLCJDVkUtMjAyNC02ODMyIl0>. Everything for agents: <https://agentprime.io/llms.txt>.