CWE-693.

Cisco IOS XR Software Security Hardening Release: September 2026

• Cisco IOS XR Software
• CWE-693

Protection mechanism failure in Dell PowerStore 500T and others

• Dell PowerStore 500T
• Dell PowerStore 1000T
• CWE-693

Protection mechanism failure in Dell PowerStore 500T and others

• Dell PowerStore 500T
• Dell PowerStore 1000T
• CWE-693

Protection mechanism failure in Dell PowerStore 500T and others

• Dell PowerStore 500T
• Dell PowerStore 1000T
• CWE-693

Sudo through 1.9.17p2 Intercept Policy Bypass via execveat

• sudo
• CWE-693

Sandbox Escape in ServiceNow AI Platform

• ServiceNow AI Platform
• Code injection
• CWE-693

Spring Security InetAddressMatchers Incomplete Internal Network Classification

• Spring Security
• CWE-693

Authenticated RCE through Twig sandbox escape

• cms
• CWE-693

Weblate path traversal allows a project administrator to read arbitrary files via App store metadata download (Incomplete Fix of CVE-2026-34242)

• weblate
• Path traversal
• CWE-693

Protection mechanism failure in Google Chrome

• Google Chrome
• CWE-693

Protection mechanism failure in Apple Safari and others

• Apple Safari
• Apple iOS and iPadOS
• CWE-693

Protection mechanism failure in NVIDIA DGX Spark

• NVIDIA DGX Spark
• CWE-693

mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server

• Code injection
• CWE-693

<1.0.2 · fixed in 1.0.2

VeraCrypt: Hidden volume quick format weakens plausible deniability

• VeraCrypt
• CWE-693

Winter: Authenticated Twig sandbox escape in CMS SecurityPolicy (bypass of CVE-2024-54149)

• CWE-693

>=1.2.7, <1.2.13 · fixed in 1.2.13

asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter

• CWE-693
• CWE-749

<1.0.9 · fixed in 1.0.9

Search-indexer: search-indexer: update/delete operations not scoped to caller's cluster (cross-tenant data tampering)

• Red Hat Advanced Cluster Management for Kubernetes 2.11
• Red Hat Advanced Cluster Management for Kubernetes 2.13
• CWE-693

Streambert: Global CSP Removal in Wyzie Redeem Window Enables Unconstrained XSS in Electron Renderer

• truelockmc streambert
• Cross-site scripting (XSS)
• CWE-693

Trilium: Stored XSS in note icon rendering leads to Remote Code Execution in Electron desktop app

• Trilium
• Cross-site scripting (XSS)
• CWE-693

Mitigation bypass in the JavaScript: GC component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-693

Sandbox escape in the Remote Settings Client component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-693

Mitigation bypass in the Data Loss Prevention component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-693

Mitigation bypass in the Storage: Cache API component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-693

Mitigation bypass in the Safe Browsing component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-693

Protection mechanism failure in Apple iOS and iPadOS and others

• Apple iOS and iPadOS
• Apple macOS
• CWE-693

Notepad++: shortcuts.xml Macro HMAC Bypass Enables Conditional Elevated Command Execution

• notepad-plus-plus
• Command injection
• CWE-345

VM2 has Missing Error.cause Sanitization that Enables Sandbox Escape to RCE

• CWE-693

<3.11.6 · fixed in 3.11.6

openssl_encrypt versions before 1.4.0 contain a sandbox escape vulnerability in the DangerousPatternVisitor AST analyzer that fails to detect dunder attribute traversal techniques. Attackers can us...

• CWE-693

<1.4.0 · fixed in 1.4.0

openssl_encrypt versions before 1.4.0 fail to apply sandbox restrictions in the default process isolation mode for plugin execution. Attackers can execute malicious plugins with unrestricted access...

• CWE-693

<1.4.0 · fixed in 1.4.0

openssl_encrypt versions before 1.4.0 contain a sandbox bypass vulnerability where the plugin sandbox fails to restrict alternative file access methods like pathlib.Path and io.open. Attackers can ...

• CWE-693

<1.4.0 · fixed in 1.4.0

IBM Db2 Mirror for i is affected by multiple vulnerabilities

• IBM Db2 Mirror for i
• CWE-693

SQL Query Validation Bypass in OpenSearch Direct Query

• AWS Opensearch
• Github Opensearch
• CWE-693

Prisma Access Agent: Anti-Tamper Protection Bypass on Windows

• Palo Alto Networks Prisma Access Agent
• CWE-693

RustFS: Object Lock (WORM) protections are treated as absent when bucket metadata cannot be read, allowing retained objects to be deleted

• rustfs
• CWE-693
• CWE-754

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to enforce IMA policy protections across temporary file systems, allowing for unsigned code to be executed from these locations.

• CWE-693

Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability

• Server-side request forgery (SSRF)
• CWE-693

>=8.0.0, <8.0.30 || >=9.0.0, <9.0.19 || >=10.0.0, <10.0.11 · fixed in 8.0.30, 9.0.19, 10.0.11

Cursor: Sandbox escape via tampered Python virtual environments

• cursor
• CWE-693

Visual Studio Code Python Extension Security Feature Bypass Vulnerability

• Microsoft Python extension for Visual Studio Code
• CWE-693
• CWE-829

Visual Studio Code Security Feature Bypass Vulnerability

• Microsoft Visual Studio Code
• Broken access control
• CWE-693

Activepieces: V8 Isolate Sandbox Bypass via importFresh Module Loading

• activepieces
• CWE-693

Protection mechanism failure in Intel(R) Transfer Learning Tool

• Intel(R) Transfer Learning Tool
• CWE-693

Protection mechanism failure in Intel(R) Workload Services Framework software

• Intel(R) Workload Services Framework software
• CWE-693

Protection mechanism failure in LLM-on-Ray

• LLM-on-Ray
• CWE-693

Protection mechanism failure in Intel(R) oneCCL Bindings for PyTorch

• Intel(R) oneCCL Bindings for PyTorch
• CWE-693

Protection mechanism failure in Intel(R) AI Reference Models

• Intel(R) AI Reference Models
• CWE-693

Protection mechanism failure in Intel(R) LLM Library for PyTorch

• Intel(R) LLM Library for PyTorch
• CWE-693

Protection mechanism failure in Intel(R) Neural Compressor software

• Intel(R) Neural Compressor software
• CWE-693

Protection mechanism failure in Intel(R) AI Containers

• Intel(R) AI Containers
• CWE-693

Protection mechanism failure in Cluster Management Toolkit for Kubernetes software

• Cluster Management Toolkit for Kubernetes software
• CWE-693

Protection mechanism failure in LLM Scaler software

• LLM Scaler software
• CWE-693

Protection mechanism failure in Intel Extension for TensorFlow software

• Intel Extension for TensorFlow software
• CWE-693

Protection mechanism failure in Intel(R) Data Center Attestation Primitives (Intel(R) DCAP) may allow…

• Intel(R) Data Center Attestation Primitives (Intel(R) DCAP) may allow information disclosure. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via network access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.
• CWE-693

Duplicate Advisory: Craft CMS: Authenticated RCE through Twig sandbox escape

• CWE-693

>=4.0.0-RC1 · no fixed version yet

Craft CMS: Authenticated RCE through Twig sandbox escape

• CWE-693

>=4.0.0-RC1, <4.18.3 || >=5.0.0-RC1, <5.10.7 · fixed in 4.18.3, 5.10.7

Protection mechanism failure in Google Chrome

• Google Chrome
• CWE-693

Protection mechanism failure in Google Chrome

• Google Chrome
• CWE-693

Protection mechanism failure in Google Chrome

• Google Chrome
• CWE-693

Security Optimizer – The All-In-One Protection Plugin < 1.6.5 - Login Access IP Allowlist Bypass via post_password

• Security Optimizer
• CWE-693

Account Takeover via Conditional Authentication Script Logic in Multiple WSO2 Products

• WSO2 Identity Server
• WSO2 API Manager
• CWE-693

Account Lockout Failure via Secondary User Store Inaccessibility in Multiple WSO2 Products Allows Brute Force Attacks

• WSO2 Enterprise Integrator
• WSO2 API Control Plane
• CWE-693