# CWE-696.

Every Advisory and CVE whose sources give the weakness CWE-696, newest first.

## Records, newest first

- [Apache Wicket: A cross-origin listener invocation stopped by a login wall is replayed after the user signs in](https://agentprime.io/advisories/CVE-2026-82898.md)
  `CVE-2026-82898` · CVE record: Apache Software Foundation Apache Wicket · CVSS 2.1 Low · Not analysed yet · Published 1 Nov 2026 · Tags: CWE-696
- [Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability](https://agentprime.io/advisories/CVE-2026-65219.md)
  `CVE-2026-65219` · CVE record: SMCI MBD-X12SPI · CVSS 7.4 High · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-696
- [GitPython validates a submodule's ".git" path only after cloning into it (RCE)](https://agentprime.io/advisories/GHSA-83vg-56qc-22m7.md)
  `GHSA-83vg-56qc-22m7`, `CVE-2026-114145` · PyPI `gitpython`: affected `<3.2.1`, fixed in `3.2.1` · CVSS 7.5 High · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-696
- [Gitea second-factor bypass through OpenID identity linking](https://agentprime.io/advisories/CVE-2026-73535.md)
  `CVE-2026-73535` · CVE record: Gitea Gitea · CVSS 8.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Authentication bypass, CWE-696
- [Nix: Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation…](https://agentprime.io/advisories/CVE-2026-110450.md)
  `CVE-2026-110450` · CVE record: NixOS Nix · CVSS 8.0 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-696
- [TYPO3-CORE-SA-2026-024: Security Misconfiguration in Form Framework](https://agentprime.io/advisories/PKSA-fykt-pmbg-txnv.md)
  `PKSA-fykt-pmbg-txnv`, `CVE-2026-109162` · Packagist `typo3/cms-form`: affected `>=14.0.0, <14.3.9`, fixed in `14.3.9` · CVSS 6.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure, CWE-696
- [Docling imports plugin entry points before the allow_external_plugins check](https://agentprime.io/advisories/GHSA-9jxx-vjrv-h2rq.md)
  `GHSA-9jxx-vjrv-h2rq`, `CVE-2026-105745`, `PYSEC-2026-4192`, `PYSEC-2026-4210` · PyPI `docling` and 1 more: affected `>=2.27.0, <2.131.0`, fixed in `2.131.0` · CVSS 6.7 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-696, CWE-829
- [External Secrets Operator: label enforcement bypass in webhook generator enables secret exfiltration](https://agentprime.io/advisories/GHSA-q7hv-xx6h-q2x8.md)
  `GHSA-q7hv-xx6h-q2x8`, `CVE-2026-26287`, `GO-2026-6667` · Go `github.com/external-secrets/external-secrets`: affected `>=0.10.0, <1.3.2`, fixed in `1.3.2` · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-696
- [WordPress FluentForm plugin <= 6.2.14 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2026-103353.md)
  `CVE-2026-103353` · CVE record: WP ManageNinja LLC FluentForm · CVSS 5.3 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-696
- [Claude Code selected an API key stored by Claude Code, for example from an earlier \`/login\` or written directly to its configuration, ahead of the user's valid Claude Enterprise or Team sign-in when…](https://agentprime.io/advisories/CVE-2026-103012.md)
  `CVE-2026-103012` · CVE record: Anthropic @anthropic-ai/claude-code · CVSS 2.0 Low · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-696
- [adm-zip: Duplicate ZIP entry names: getEntry() and extractAllTo() resolve to different content](https://agentprime.io/advisories/GHSA-p634-w6r4-rjp2.md)
  `GHSA-p634-w6r4-rjp2`, `CVE-2026-114104` · npm `adm-zip`: affected `<0.6.1`, fixed in `0.6.1` · CVSS 8.2 High · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-436, CWE-696
- [Devolutions Server: Improper rule enforcement in the PAM Active Directory provider in Devolutions Server…](https://agentprime.io/advisories/CVE-2026-93330.md)
  `CVE-2026-93330` · CVE record: Devolutions Server · CVSS 4.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-696
- [(D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchange](https://agentprime.io/advisories/CVE-2026-93304.md)
  `CVE-2026-93304` · CVE record: wolfSSL wolfSSL · CVSS 6.3 Medium · Not analysed yet · Published 27 Sept 2026 · Tags: CWE-696
- [Security Advisory 0160](https://agentprime.io/advisories/CVE-2026-73446.md)
  `CVE-2026-73446` · CVE record: Arista Networks EOS · CVSS 7.0 High · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-696
- [Partition interceptor may be improperly added while sending message](https://agentprime.io/advisories/CVE-2026-59305.md)
  `CVE-2026-59305` · CVE record: Spring Spring Cloud Stream · CVSS 3.1 Low · Not analysed yet · Published 27 Aug 2026 · Tags: CWE-696
- [Russh: Channel-scoped server callbacks can be reached without an open channel](https://agentprime.io/advisories/GHSA-m65r-rprj-r5rg.md)
  `GHSA-m65r-rprj-r5rg`, `CVE-2026-68930` · crates.io `russh`: affected `<0.62.5`, fixed in `0.62.5` · CVSS 6.5 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: Broken access control, CWE-666, CWE-696
- [Firewall bypass during shutdown](https://agentprime.io/advisories/CVE-2026-44108.md)
  `CVE-2026-44108` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-696
- [cJSON JSON Patch Non-Atomic Application Destroys Data Before Validation](https://agentprime.io/advisories/CVE-2026-67217.md)
  `CVE-2026-67217` · CVE record: DaveGamble cJSON · CVSS 6.9 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: CWE-696
- [Apache Traffic Server: HPACK encoder desynchronizes from the decoder after a failed header encode](https://agentprime.io/advisories/CVE-2026-65100.md)
  `CVE-2026-65100` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 6.3 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: CWE-696
- [ads-tec Industrial IT: Account lockout via non-atomic user creation](https://agentprime.io/advisories/CVE-2026-14169.md)
  `CVE-2026-14169` · CVE record: ads-tec Industrial IT DVG-IRF1401 and 4 more · CVSS 8.1 High · Not analysed yet · Published 28 Jul 2026 · Tags: CWE-696
- [GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.](https://agentprime.io/advisories/CVE-2026-56355.md)
  `CVE-2026-56355` · CVE record: GNU Savane · CVSS 3.7 Low · Not analysed yet · Published 20 Jun 2026 · Tags: CWE-696
- [Indian Scout Bobber 2025 Infotainment Digital Round skips PIN entry when WCM is silent at boot](https://agentprime.io/advisories/CVE-2026-49318.md)
  `CVE-2026-49318` · CVE record: Indian Motorcycle Scout Bobber + Tech · CVSS 1.0 Low · Not analysed yet · Published 29 May 2026 · Tags: CWE-636, CWE-696, CWE-754
- [Indian Scout Bobber 2025 Infotainment Digital Round skips PIN entry when WCM is silent at boot](https://agentprime.io/advisories/CVE-2026-49317.md)
  `CVE-2026-49317` · CVE record: Indian Motorcycle Scout Bobber + Tech · CVSS 1.0 Low · Not analysed yet · Published 29 May 2026 · Tags: CWE-636, CWE-696, CWE-754
- [OpenStack Ironic: Pre-Validation Checksum Calculation allows Denial of Service (DoS) via Infinite Block Devices](https://agentprime.io/advisories/GHSA-4g73-w726-53h3.md)
  `GHSA-4g73-w726-53h3`, `CVE-2026-44919`, `PYSEC-2026-2524` · PyPI `ironic`: affected `<=36.0.0`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 14 May 2026 · Tags: CWE-696
- [GitHub Copilot CLI: Nested Bare Repository Can Execute Arbitrary Commands via core.fsmonitor](https://agentprime.io/advisories/GHSA-9ccr-r5hg-74gf.md)
  `GHSA-9ccr-r5hg-74gf`, `CVE-2026-45033` · npm `@github/copilot`: affected `<1.0.43`, fixed in `1.0.43` · CVSS 8.5 High · Not analysed yet · Published 11 May 2026 · Tags: CWE-696
- [Tor: Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the…](https://agentprime.io/advisories/CVE-2026-44600.md)
  `CVE-2026-44600` · CVE record: torproject Tor · CVSS 3.7 Low · Not analysed yet · Published 7 May 2026 · Tags: CWE-696
- [kanidmd_lib: Image upload validators run before authorization; PNG validator panics on malformed input](https://agentprime.io/advisories/GHSA-84jc-3hj2-hwc7.md)
  `GHSA-84jc-3hj2-hwc7` · crates.io `kanidmd_lib`: affected `<1.9.3`, fixed in `1.9.3` · CVSS 4.0, no score published · Not analysed yet · Published 6 May 2026 · Tags: Memory corruption, CWE-20, CWE-696
- [OpenStack Horizon has Incorrect Behavior Order](https://agentprime.io/advisories/GHSA-vxvf-xvm3-p8j5.md)
  `GHSA-vxvf-xvm3-p8j5`, `CVE-2026-43002`, `PYSEC-2026-2520` · PyPI `horizon`: affected `>=25.6, <25.7.3`, fixed in `25.7.3` · CVSS 5.3 Medium · Not analysed yet · Published 5 May 2026 · Tags: CWE-696
- [UltraDAG: SmartOp Vote Path Triggers Fatal Supply Invariant Halt](https://agentprime.io/advisories/CVE-2026-40583.md)
  `CVE-2026-40583` · CVE record: UltraDAGcom core · CVSS 8.8 High · Not analysed yet · Published 21 Apr 2026 · Tags: CWE-460, CWE-696
- [Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.](https://agentprime.io/advisories/CVE-2026-41254.md)
  `CVE-2026-41254` · CVE record: littlecms little cms color engine · CVSS 4.0 Medium · Not analysed yet · Published 18 Apr 2026 · Tags: CWE-696
- [systemd: In systemd 258 before 260, a local unprivileged user can trigger an assert when a…](https://agentprime.io/advisories/CVE-2026-40223.md)
  `CVE-2026-40223` · CVE record: systemd systemd · CVSS 4.7 Medium · Not analysed yet · Published 10 Apr 2026 · Tags: CWE-696
- [Duplicate Advisory: OpenClaw: Tlon cite expansion happens before channel and DM authorization is complete](https://agentprime.io/advisories/GHSA-p6j4-wvmc-vx2h.md)
  `GHSA-p6j4-wvmc-vx2h` · npm `openclaw`: affected `<2026.3.22`, fixed in `2026.3.22` · CVSS 7.3 High · Withdrawn · Not analysed yet · Published 10 Apr 2026 · Tags: CWE-696
- [Duplicate Advisory: OpenClaw: Feishu webhook reads and parses unauthenticated request bodies before signature validation](https://agentprime.io/advisories/GHSA-8f9r-gr6r-x63q.md)
  `GHSA-8f9r-gr6r-x63q` · npm `openclaw`: affected `<2026.3.28`, fixed in `2026.3.28` · CVSS 5.3 Medium · Withdrawn · Not analysed yet · Published 10 Apr 2026 · Tags: CWE-696
- [Duplicate Advisory: OpenClaw: Nostr inbound DMs could trigger unauthenticated crypto work before sender policy enforcement](https://agentprime.io/advisories/GHSA-2j53-2c28-g9v2.md)
  `GHSA-2j53-2c28-g9v2` · npm `openclaw`: affected `<2026.3.22`, fixed in `2026.3.22` · CVSS 6.5 Medium · Withdrawn · Not analysed yet · Published 10 Apr 2026 · Tags: CWE-696
- [OpenBSD OpenSSH: In OpenSSH before 10.3, command execution can occur via shell metacharacters in a…](https://agentprime.io/advisories/CVE-2026-35386.md)
  `CVE-2026-35386` · CVE record: OpenBSD OpenSSH · CVSS 3.6 Low · Not analysed yet · Published 2 Apr 2026 · Tags: CWE-696
- [OpenClaw: Feishu webhook reads and parses unauthenticated request bodies before signature validation](https://agentprime.io/advisories/GHSA-3h52-cx59-c456.md)
  `GHSA-3h52-cx59-c456`, `CVE-2026-35640` · npm `openclaw`: affected `<2026.3.28`, fixed in `2026.3.28` · CVSS 6.9 Medium · Not analysed yet · Published 29 Mar 2026 · Tags: Denial of service, CWE-696
- [OpenClaw: \`session_status\` sessionId resolution bypasses sandboxed session-tree visibility](https://agentprime.io/advisories/GHSA-q2qc-744p-66r2.md)
  `GHSA-q2qc-744p-66r2`, `CVE-2026-35636` · npm `openclaw`: affected `>=2026.3.11, <2026.3.28`, fixed in `2026.3.28` · CVSS 7.1 High · Not analysed yet · Published 29 Mar 2026 · Tags: Broken access control, CWE-696
- [OpenClaw: Tlon cite expansion happens before channel and DM authorization is complete](https://agentprime.io/advisories/GHSA-vfg3-pqpq-93m4.md)
  `GHSA-vfg3-pqpq-93m4`, `CVE-2026-35637` · npm `openclaw`: affected `<2026.3.22`, fixed in `2026.3.22` · CVSS 6.9 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Broken access control, CWE-696
- [OpenClaw: Mattermost callback dispatch allowed non-allowlisted sender actions](https://agentprime.io/advisories/GHSA-8883-9w57-vwv6.md)
  `GHSA-8883-9w57-vwv6`, `CVE-2026-35652` · npm `openclaw`: affected `<2026.3.22`, fixed in `2026.3.22` · CVSS 6.9 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Broken access control, CWE-696
- [OpenClaw: Nostr inbound DMs could trigger unauthenticated crypto work before sender policy enforcement](https://agentprime.io/advisories/GHSA-65h8-27jh-q8wv.md)
  `GHSA-65h8-27jh-q8wv`, `CVE-2026-35627` · npm `openclaw`: affected `<2026.3.22`, fixed in `2026.3.22` · CVSS 6.9 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Broken access control, CWE-696
- [OpenEMR has Authorization Bypass in FaxSMS AppDispatch Constructor](https://agentprime.io/advisories/CVE-2026-33305.md)
  `CVE-2026-33305` · CVE record: openemr openemr · CVSS 5.4 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: Broken access control, CWE-696
- [Canon Inc. Generic Plus PCL6 Printer Driver: Unallocated memory access vulnerability in print processing of Generic Plus PCL6 Printer…](https://agentprime.io/advisories/CVE-2025-9904.md)
  `CVE-2025-9904` · CVE record: Canon Inc. Generic Plus PCL6 Printer Driver and 4 more · CVSS 6.9 Medium · Not analysed yet · Published 29 Sept 2025 · Tags: CWE-696
- [BMC Control-M/Agent improper IP address filtering order](https://agentprime.io/advisories/CVE-2025-55114.md)
  `CVE-2025-55114` · CVE record: BMC Control-M/Agent · CVSS 6.9 Medium · Not analysed yet · Published 16 Sept 2025 · Tags: CWE-696
- [mbedtls: Mbed TLS before 3.6.4 has a NULL pointer dereference because…](https://agentprime.io/advisories/CVE-2025-48965.md)
  `CVE-2025-48965` · CVE record: Mbed mbedtls · CVSS 4.0 Medium · Not analysed yet · Published 20 Jul 2025 · Tags: CWE-696
- [WhiteBeam: In WhiteBeam 0.2.0 through 0.2.1 before 0.2.2…](https://agentprime.io/advisories/CVE-2021-47688.md)
  `CVE-2021-47688` · CVE record: WhiteBeam WhiteBeam · CVSS 5.7 Medium · Not analysed yet · Published 23 Jun 2025 · Tags: CWE-696
- [Intel(R) Core™ Ultra Processors: Incorrect behavior order for some Intel(R) Core™ Ultra Processors may allow an…](https://agentprime.io/advisories/CVE-2025-20012.md)
  `CVE-2025-20012` · CVE record: Intel(R) Core™ Ultra Processors · CVSS 4.1 Medium · Not analysed yet · Published 13 May 2025 · Tags: CWE-696
- [GraphQL grant on a property might be cached with different objects](https://agentprime.io/advisories/GHSA-428q-q3vv-3fq3.md)
  `GHSA-428q-q3vv-3fq3`, `CVE-2025-31485`, `PKSA-9x6b-qjnh-k9nj`, `PKSA-gs8r-6kz6-pp56` · Packagist `api-platform/core` and 1 more: affected `<3.4.17 || >=4.0.0-alpha.1, <4.0.22 || >=4.1.0-alpha.1, <4.1.5`, fixed in `3.4.17`, `4.0.22`, `4.1.5` · CVSS 7.5 High · Not analysed yet · Published 4 Apr 2025 · Tags: CWE-696
- [Zoom Workplace Apps for iOS - Incorrect Behavior Order](https://agentprime.io/advisories/CVE-2025-0150.md)
  `CVE-2025-0150` · CVE record: Zoom Communications, Inc Zoom Workplace Apps for iOS · CVSS 7.1 High · Not analysed yet · Published 11 Mar 2025 · Tags: CWE-696
- [MariaDB: MariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17…](https://agentprime.io/advisories/CVE-2023-52968.md)
  `CVE-2023-52968` · CVE record: MariaDB MariaDB · CVSS 4.9 Medium · Not analysed yet · Published 8 Mar 2025 · Tags: CWE-696
- [An issue was discovered in Mbed TLS before 2.28.9 and 3.x before 3.6.1, in which the user-selected algorithm is not used.](https://agentprime.io/advisories/CVE-2024-45157.md)
  `CVE-2024-45157` · CVE record · CVSS 5.1 Medium · Not analysed yet · Published 5 Sept 2024 · Tags: CWE-696
- [Intel(R) Processor: Incorrect behavior order in transition between executive monitor and SMI transfer monitor…](https://agentprime.io/advisories/CVE-2024-24853.md)
  `CVE-2024-24853` · CVE record: Intel(R) Processor · CVSS 7.3 High · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-696
- [ZKsync Era evaluation order of Yul function arguments](https://agentprime.io/advisories/CVE-2024-35229.md)
  `CVE-2024-35229` · CVE record: matter-labs era-compiler-solidity · CVSS 5.3 Medium · Not analysed yet · Published 27 May 2024 · Tags: CWE-696
- [Junos OS: EX4300 Series: Firewall filter not blocking egress traffic](https://agentprime.io/advisories/CVE-2024-30389.md)
  `CVE-2024-30389` · CVE record: Juniper Networks Junos OS · CVSS 6.9 Medium · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-696
- [Junos OS: EX4300 Series: Loopback filter not blocking traffic despite having discard term.](https://agentprime.io/advisories/CVE-2024-30410.md)
  `CVE-2024-30410` · CVE record: Juniper Networks Junos · CVSS 6.9 Medium · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-696
- [Potential DoS via the Tudoor mechanism in eventlet and dnspython](https://agentprime.io/advisories/GHSA-3rq5-2g8h-59hc.md)
  `GHSA-3rq5-2g8h-59hc`, `CVE-2023-29483`, `PYSEC-2026-1307`, `PYSEC-2026-2472` · PyPI `dnspython` and 1 more: affected `<2.6.1`, fixed in `2.6.1` · CVSS 5.9 Medium · Not analysed yet · Published 11 Apr 2024 · Tags: CWE-292, CWE-696
- [Gallagher Command Centre Server: Incorrect behavior order in the Command Centre Server could allow privileged users to…](https://agentprime.io/advisories/CVE-2023-23576.md)
  `CVE-2023-23576` · CVE record: Gallagher Command Centre Server · CVSS 4.3 Medium · Not analysed yet · Published 18 Dec 2023 · Tags: CWE-696
- [Authorization bypass in Quarkus](https://agentprime.io/advisories/GHSA-mvc8-6ffp-jrx5.md)
  `GHSA-mvc8-6ffp-jrx5`, `CVE-2023-6394` · Maven `io.quarkus:quarkus-smallrye-graphql-client`: affected `>=2.14.0, <3.5.3 || <2.13.9.Final`, fixed in `3.5.3`, `2.13.9.Final` · CVSS 7.4 High · Not analysed yet · Published 9 Dec 2023 · Tags: Broken access control, CWE-551, CWE-696
- [Incorrect request error handling triggers server crash in Vapor](https://agentprime.io/advisories/CVE-2023-44386.md)
  `CVE-2023-44386` · CVE record: vapor vapor · CVSS 5.3 Medium · Not analysed yet · Published 5 Oct 2023 · Tags: Denial of service, CWE-231, CWE-696
- [SolarWinds Platform Incorrect Behavior Order Vulnerability](https://agentprime.io/advisories/CVE-2023-33224.md)
  `CVE-2023-33224` · CVE record: SolarWinds SolarWinds Platform · CVSS 7.2 High · Not analysed yet · Published 26 Jul 2023 · Tags: CWE-696
- [skylot jadx affected by Incorrect Behavior Order in vulnerable dependency](https://agentprime.io/advisories/GHSA-fjh6-p566-wr6q.md)
  `GHSA-fjh6-p566-wr6q` · Maven `io.github.skylot:jadx-core`: affected `<1.4.3`, fixed in `1.4.3` · No CVSS score · Not analysed yet · Published 21 Jul 2022 · Tags: CWE-696

Older: <https://agentprime.io/advisories/tag/cwe-696.md?cursor=WyIyMDIyLTA3LTIxVDIyOjM1OjEyLjAwMDAwMFoiLCJHSFNBLWZqaDYtcDU2Ni13cjZxIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-696>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-696/>. Everything for agents: <https://agentprime.io/llms.txt>.