agentprime: CWE-749

CVE-2026-116779: FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands

Thu, 05 Nov 2026 19:30:25 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-92704: SharpEmu: Cross-site request forgery in the debugger frontend leads to arbitrary process execution

Wed, 04 Nov 2026 15:24:16 GMT

CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121145: Insecure Configuration Vulnerability in Tata Motors iRA and iRA.ev mobile application

Wed, 04 Nov 2026 12:34:14 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

Elo backends have code injection via unvalidated emission of programmatic AST fields

Tue, 03 Nov 2026 17:48:09 GMT

@enspirit/elo <1.0.1, fixed in 1.0.1. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-120091: Temporal Server Kubernetes compute provider builds a client from caller-supplied configuration and runs a caller-chosen command on the Worker Service host

Mon, 02 Nov 2026 21:19:19 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-66088: Unrestricted Command Execution via system.execute

Thu, 29 Oct 2026 01:35:46 GMT

CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-118606: Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability

Wed, 28 Oct 2026 16:50:23 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-118602: Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability

Wed, 28 Oct 2026 16:50:03 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-113775: Dynamic Library Loading Process Control in Autodesk Fusion Desktop

Tue, 27 Oct 2026 16:06:22 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-116019: Grav 2.0.15 before 2.2.13 Allowlist Bypass via Flex Form Override Directives

Sat, 24 Oct 2026 11:40:35 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites

Wed, 21 Oct 2026 17:23:29 GMT

storybook >=8.0.0, <8.6.19 || >=9.0.0, <9.1.21 || >=10.0.0, <10.6.2 || >=11.0.0-alpha.0, <11.0.0-alpha.6, fixed in 8.6.19, 9.1.21, 10.6.2, 11.0.0-alpha.6. CVSS 8.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-76487: Cisco Unified Communications Manager Improper Access Control Vulnerability

Wed, 21 Oct 2026 16:16:54 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-70387: OnePlus OxygenOS exposed dangerous method vulnerability

Wed, 21 Oct 2026 09:07:56 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-77926: Aix-DB 1.2.4 Authenticated RCE via ChatBI Common Agent Execute Tool

Tue, 20 Oct 2026 00:46:09 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-112780: Grav 2.0.15 before 2.2.2 Arbitrary Static Method Call via Flex Form replace-name@

Mon, 19 Oct 2026 19:10:56 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-54702: Markdown Preview Enhanced: Blind Command Dispatch via Unvalidated Webview Message Handler

Wed, 14 Oct 2026 19:13:58 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-109412: Ivanti Neurons Patch for Intune: An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote…

Tue, 13 Oct 2026 16:23:41 GMT

CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-89110: Broken Access Control in SAP NetWeaver Visual Composer

Tue, 13 Oct 2026 00:24:17 GMT

CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-109556: EdgeEver Desktop 1.92.0 through 1.112.0 Local Program Execution via ACP IPC

Mon, 12 Oct 2026 20:55:12 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-109422: NetEase Cloud Music RCE via os.navigateExternal IPC

Mon, 12 Oct 2026 19:33:32 GMT

CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-108897: Smart Media4U Technology SHAREit App WebView JS Bridge syncInvoke routine

Mon, 12 Oct 2026 14:45:11 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium

Wed, 07 Oct 2026 16:17:02 GMT

flowise <3.1.3, fixed in 3.1.3. CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-106513: MISP: Site-Admin Can Repoint Redis Workers to Attacker-Controlled Server via UI/API Configuration Change

Tue, 06 Oct 2026 18:58:53 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Payload: Insufficient Access Control in Stripe REST Proxy

Tue, 06 Oct 2026 16:09:46 GMT

@payloadcms/plugin-stripe <3.90.0 || >=4.0.0-canary.0, <4.0.0-canary.34, fixed in 3.90.0, 4.0.0-canary.34. CVSS 6.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-102667: Joyland AI WebView command injection

Thu, 01 Oct 2026 19:42:24 GMT

CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-96430: Flowring Agentflow 4.0 - Exposed Dangerous Method or Function

Tue, 29 Sep 2026 08:20:57 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-86157: Exposure of Privileged IPC Functionality in Progress Telerik Fiddler Everywhere

Tue, 29 Sep 2026 06:34:17 GMT

CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-25255: Exposed function in Qualcomm Package Manager and Qualcomm Software Center.

Tue, 22 Sep 2026 09:45:14 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-77521: MaxKB: Prompt-injectable agent can lead to command execution

Mon, 21 Sep 2026 20:45:14 GMT

CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-89139: Temporal Server worker deployment compute provider executes a caller-supplied command on the Worker Service host

Mon, 21 Sep 2026 11:41:23 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-68928: Acode: Exported TerminalService (bundled terminal plugin) lets any installed app execute arbitrary shell commands as Acode

Fri, 18 Sep 2026 20:40:12 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

Unsoundness in UTF-8 'String' trait

Fri, 18 Sep 2026 12:00:00 GMT

iceoryx2-bb-container >=0.0.0-0, <0.10.0 || >=0.11.0-0, fixed in 0.10.0. CVSS 1.0 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter

Thu, 17 Sep 2026 14:48:55 GMT

nuxt-og-image >=6.0.2, <6.7.0, fixed in 6.7.0. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-20293: Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability

Tue, 08 Sep 2026 16:04:40 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-86711: electerm before 5.3.15 Arbitrary Command Execution via Unvalidated runGlobalAsync IPC Bridge

Tue, 08 Sep 2026 11:23:04 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-75810: ASUS Armoury Crate: Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a…

Tue, 08 Sep 2026 02:00:45 GMT

CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter

Thu, 20 Aug 2026 17:26:52 GMT

asteval <1.0.9, fixed in 1.0.9. CVSS 5.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-18263: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability

Thu, 20 Aug 2026 16:26:03 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-18262: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability

Thu, 20 Aug 2026 16:25:54 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-13121: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability

Thu, 20 Aug 2026 16:25:44 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

GeoServer has a Server-Side Template Injection (SSTI) vulnerability in processing FreeMarker templates

Wed, 19 Aug 2026 19:31:54 GMT

org.geoserver:gs-main <2.27.0, fixed in 2.27.0. CVSS 7.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-52877: Streambert : Insecure Protocol Execution in open-external IPC Handler

Tue, 18 Aug 2026 21:27:23 GMT

CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-66781: Submariner-operator: pprof debug endpoint enabled by default on 0.0.0.0:8082 without authentication

Tue, 18 Aug 2026 17:05:52 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-48056: Streambert Vulnerable to Arbitrary Binary Execution via Downloader IPC Handler

Tue, 11 Aug 2026 13:52:45 GMT

CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-68823: Azure Confidential Ledger Remote Code Execution Vulnerability

Thu, 06 Aug 2026 22:37:41 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-18901: H3C NX15 Web API esps service.add routine

Wed, 05 Aug 2026 04:00:10 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-20467: In apusys, there is a possible escalation of privilege due to a missing bounds check.

Mon, 03 Aug 2026 02:05:18 GMT

CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

`nx graph` dev server permissive CORS policy

Fri, 31 Jul 2026 16:50:24 GMT

nx >=17.0.4, <22.7.2 || >=23.0.0-beta.0, <23.0.0-beta.2, fixed in 22.7.2, 23.0.0-beta.2. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-44107: Exposed Reboot via Modbus

Thu, 30 Jul 2026 06:53:28 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints

Mon, 20 Jul 2026 22:01:56 GMT

webpack-dev-server <5.2.6, fixed in 5.2.6. CVSS 4.7 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.