# CWE-754.

Every Advisory and CVE whose sources give the weakness CWE-754, newest first.

## Records, newest first (an older page)

- [Improper check for unusual conditions in Forcepoint F1E mac](https://agentprime.io/advisories/CVE-2026-11970.md)
  `CVE-2026-11970` · CVE record: Forcepoint F1E mac · CVSS 4.8 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: CWE-754
- [RustFS: Object Lock (WORM) protections are treated as absent when bucket metadata cannot be read, allowing retained objects to be deleted](https://agentprime.io/advisories/CVE-2026-73288.md)
  `CVE-2026-73288` · CVE record: rustfs rustfs · CVSS 6.1 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: CWE-693, CWE-754
- [Improper check for unusual conditions in Intel(R) NPU Driver](https://agentprime.io/advisories/CVE-2026-20783.md)
  `CVE-2026-20783` · CVE record: Intel(R) NPU Driver · CVSS 6.9 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-754
- [Improper check for unusual conditions in Intel(R) PROSet/Wireless WiFi Software](https://agentprime.io/advisories/CVE-2026-20776.md)
  `CVE-2026-20776` · CVE record: Intel(R) PROSet/Wireless WiFi Software · CVSS 8.3 High · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-754
- [Improper check for unusual conditions in Intel(R) NPU Driver](https://agentprime.io/advisories/CVE-2026-20769.md)
  `CVE-2026-20769` · CVE record: Intel(R) NPU Driver · CVSS 6.9 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-754
- [Improper check for unusual conditions in Intel(R) PROSet/Wireless WiFi Software](https://agentprime.io/advisories/CVE-2026-20747.md)
  `CVE-2026-20747` · CVE record: Intel(R) PROSet/Wireless WiFi Software · CVSS 7.1 High · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-754
- [Improper check for unusual conditions in Intel(R) PROSet/Wireless WiFi Software for Windows](https://agentprime.io/advisories/CVE-2026-20739.md)
  `CVE-2026-20739` · CVE record: Intel(R) PROSet/Wireless WiFi Software for Windows · CVSS 7.1 High · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-754
- [Improper check for unusual conditions in Siemens Desigo DXR2 and others](https://agentprime.io/advisories/CVE-2026-59693.md)
  `CVE-2026-59693` · CVE record: Siemens Desigo DXR2 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-754
- [Multiple vulnerabilities in SAP Business AI Platform (Approuter)](https://agentprime.io/advisories/CVE-2026-66774.md)
  `CVE-2026-66774` · CVE record: SAP_SE SAP Business AI Platform (Approuter) · CVSS 3.7 Low · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-754
- [Signature validation vulnerability affecting DigiDoc applications](https://agentprime.io/advisories/CVE-2026-59112.md)
  `CVE-2026-59112` · CVE record: Estonian Information System Authority (RIA) libdigidocpp and 2 more · CVSS 4.4 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: Weak cryptography or TLS, CWE-754
- [In CPDLC, False Emergency or Status Messages Will be Accepted as Legitimate](https://agentprime.io/advisories/CVE-2025-71412.md)
  `CVE-2025-71412` · CVE record: ATN-B1 CPDLC · CVSS 7.1 High · Not analysed yet · Published 7 Aug 2026 · Tags: CWE-754
- [In CPDLC, Malformed or Out of Sequence Frames Can Cause Resets](https://agentprime.io/advisories/CVE-2025-71413.md)
  `CVE-2025-71413` · CVE record: ATN-B1 CPDLC · CVSS 6.0 Medium · Not analysed yet · Published 7 Aug 2026 · Tags: CWE-754
- [epsilla-cloud vectordb Filter expr.cpp ShuntingYard unusual condition](https://agentprime.io/advisories/CVE-2026-18852.md)
  `CVE-2026-18852` · CVE record: epsilla-cloud vectordb · CVSS 4.8 Medium · Not analysed yet · Published 4 Aug 2026 · Tags: CWE-754
- [Socket.IO: Zero-attachment Memory Exhaustion](https://agentprime.io/advisories/GHSA-2m8v-j782-fhvr.md)
  `GHSA-2m8v-j782-fhvr`, `CVE-2026-69185` · npm `socket.io-parser`: affected `<3.3.6 || >=3.4.0, <3.4.5 || >=4.0.0, <4.2.7`, fixed in `3.3.6`, `3.4.5`, `4.2.7` · CVSS 7.5 High · Not analysed yet · Published 3 Aug 2026 · Tags: CWE-20, CWE-754
- [Improper check for unusual conditions in MediaTek, Inc. MediaTek chipset](https://agentprime.io/advisories/CVE-2026-20486.md)
  `CVE-2026-20486` · CVE record: MediaTek, Inc. MediaTek chipset · CVSS 6.7 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: CWE-754
- [Improper check for unusual conditions in Schneider Electric SCADAPack 47x and others](https://agentprime.io/advisories/CVE-2026-0667.md)
  `CVE-2026-0667` · CVE record: Schneider Electric SCADAPack 47x and 3 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jul 2026 · Tags: CWE-754
- [Russh: client wrong-length X25519 \`clone_from_slice\` panic (pre-auth DoS)](https://agentprime.io/advisories/GHSA-g9hv-x236-4qp3.md)
  `GHSA-g9hv-x236-4qp3`, `CVE-2026-73429` · crates.io `russh`: affected `<0.62.4`, fixed in `0.62.4` · CVSS 5.3 Medium · Not analysed yet · Published 24 Jul 2026 · Tags: CWE-704, CWE-754
- [Russh: Pre-auth remote panic via all-zero Curve25519 peer public value (encode_mpint OOB)](https://agentprime.io/advisories/GHSA-5xvq-cp9x-6p6r.md)
  `GHSA-5xvq-cp9x-6p6r`, `CVE-2026-73430` · crates.io `russh`: affected `<0.62.4`, fixed in `0.62.4` · CVSS 5.3 Medium · Not analysed yet · Published 24 Jul 2026 · Tags: CWE-754
- [DOMPurify through 3.3.3 Cross-Site Scripting via IN_PLACE mode](https://agentprime.io/advisories/CVE-2026-65904.md)
  `CVE-2026-65904` · CVE record: cure53 DOMPurify · CVSS 2.3 Low · Not analysed yet · Published 23 Jul 2026 · Tags: CWE-754
- [Libunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminated](https://agentprime.io/advisories/CVE-2026-44621.md)
  `CVE-2026-44621` · CVE record: NLnet Labs Unbound · CVSS 5.9 Medium · Not analysed yet · Published 22 Jul 2026 · Tags: CWE-754
- [Skipper: Incomplete fix for CVE-2026-50197: an oversized body can bypass OPA deny-on-presence Rego policies](https://agentprime.io/advisories/GHSA-8qqm-fp2q-v734.md)
  `GHSA-8qqm-fp2q-v734`, `CVE-2026-65838`, `GO-2026-6019` · Go `github.com/zalando/skipper`: affected `<0.27.26`, fixed in `0.27.26` · CVSS 8.2 High · Not analysed yet · Published 17 Jul 2026 · Tags: HTTP request smuggling, CWE-754
- [Insufficient Input Validation in DevOps Loop](https://agentprime.io/advisories/CVE-2026-21764.md)
  `CVE-2026-21764` · CVE record: HCLSoftware DevOps Loop · CVSS 3.1 Low · Not analysed yet · Published 17 Jul 2026 · Tags: CWE-754
- [Posting a malicious markdown image crashes the Mattermost Desktop App](https://agentprime.io/advisories/CVE-2026-8075.md)
  `CVE-2026-8075` · CVE record: Mattermost Mattermost · CVSS 6.5 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: CWE-754
- [Junos OS: MX Series: For subscribers configured on static interfaces, input filters are not in effect](https://agentprime.io/advisories/CVE-2026-57031.md)
  `CVE-2026-57031` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-754
- [Junos OS: MX Series with SPC3, SRX Series: Specific packet in response to a TCP connection establishment by the affected device can crash the PFE](https://agentprime.io/advisories/CVE-2026-57022.md)
  `CVE-2026-57022` · CVE record: Juniper Networks Junos OS · CVSS 8.2 High · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-754
- [Junos OS: QFX10000 Series: IPv6 multicast traffic received on non-IRB interfaces causes a multicast flood](https://agentprime.io/advisories/CVE-2026-57020.md)
  `CVE-2026-57020` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-754
- [Junos OS and Junos OS Evolved: When a specifically malformed BGP route update is received RPD crashes](https://agentprime.io/advisories/CVE-2026-33801.md)
  `CVE-2026-33801` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-754
- [Junos OS Evolved: PTX Series: Receipt of repeated ECMP routing updates results in PFE crash](https://agentprime.io/advisories/CVE-2026-33794.md)
  `CVE-2026-33794` · CVE record: Juniper Networks Junos OS Evolved · CVSS 8.2 High · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-754
- [PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing](https://agentprime.io/advisories/CVE-2026-0287.md)
  `CVE-2026-0287` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 6.6 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-754
- [Phoenix JavaScript presence client crashes on presence keys colliding with Object.prototype members in Presence.syncState/syncDiff](https://agentprime.io/advisories/GHSA-63mc-hw7g-86rr.md)
  `GHSA-63mc-hw7g-86rr`, `CVE-2026-56812`, `EEF-CVE-2026-56812` · Hex `phoenix` and 1 more: affected `>=1.2.0-rc.0, <1.5.15 || >=1.6.0-rc.0, <1.6.17 || >=1.7.0-rc.0, <1.7.24 || >=1.8.0-rc.0, <1.8.9`, fixed in `1.5.15`, `1.6.17`, `1.7.24`, `1.8.9` · CVSS 6.3 Medium · Not analysed yet · Published 7 Jul 2026 · Tags: CWE-754
- [FOSSBilling: Payment amount not validated in PayPalEmail adapter allows invoice underpayment](https://agentprime.io/advisories/CVE-2026-43928.md)
  `CVE-2026-43928` · CVE record: FOSSBilling FOSSBilling · CVSS 2.3 Low · Not analysed yet · Published 6 Jul 2026 · Tags: CWE-754, CWE-1284
- [printenv: environment variables with invalid UTF-8 are silently skipped (evades inspection)](https://agentprime.io/advisories/GHSA-p7h3-7q52-72w8.md)
  `GHSA-p7h3-7q52-72w8`, `CVE-2026-35366` · crates.io `uu_printenv`: affected `<0.6.0`, fixed in `0.6.0` · CVSS 4.4 Medium · Not analysed yet · Published 6 Jul 2026 · Tags: CWE-116, CWE-754
- [kill: 'kill -1' parsed as PID -1, sending SIGTERM to all processes (system crash / DoS)](https://agentprime.io/advisories/GHSA-p6rv-2qpm-fwvg.md)
  `GHSA-p6rv-2qpm-fwvg`, `CVE-2026-35369` · crates.io `uu_kill`: affected `<0.6.0`, fixed in `0.6.0` · CVSS 5.5 Medium · Not analysed yet · Published 6 Jul 2026 · Tags: CWE-20, CWE-754
- [zebrad vulnerable to full node denial of service via crafted Sapling receiver in z_listunifiedreceivers](https://agentprime.io/advisories/GHSA-c8w6-x74f-vmg3.md)
  `GHSA-c8w6-x74f-vmg3`, `CVE-2026-104434` · crates.io `zebrad` and 1 more: affected `<4.5.0`, fixed in `4.5.0` · CVSS 7.1 High · Not analysed yet · Published 2 Jul 2026 · Tags: Denial of service, CWE-20, CWE-248, CWE-754
- [SurrealDB: Crafting malicious LIVE queries writes to the database, resulting in DoS, without permission to the table required](https://agentprime.io/advisories/GHSA-4v76-cw68-4vc9.md)
  `GHSA-4v76-cw68-4vc9`, `CVE-2026-63754` · crates.io `surrealdb`: affected `<3.1.0`, fixed in `3.1.0` · CVSS 7.1 High · Not analysed yet · Published 1 Jul 2026 · Tags: CWE-754
- [SurrealDB has unauthenticated remote DoS via malformed RPC \`use\` call](https://agentprime.io/advisories/GHSA-wjjj-24cx-f28g.md)
  `GHSA-wjjj-24cx-f28g`, `CVE-2026-63747` · crates.io `surrealdb`: affected `<3.1.0`, fixed in `3.1.0` · CVSS 8.7 High · Not analysed yet · Published 1 Jul 2026 · Tags: CWE-248, CWE-754
- [ImageMagick: Heap Buffer Overflow in ImageMagick MVG decoder](https://agentprime.io/advisories/CVE-2026-55577.md)
  `CVE-2026-55577` · CVE record: ImageMagick ImageMagick · CVSS 5.9 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Memory corruption, CWE-754, CWE-755
- [CoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service.](https://agentprime.io/advisories/GHSA-m744-jhq9-ppw6.md)
  `GHSA-m744-jhq9-ppw6`, `CVE-2026-54775` · NuGet `CoreWCF.Kafka`: affected `<1.8.1 || >=1.9.0, <1.9.1`, fixed in `1.8.1`, `1.9.1` · CVSS 6.5 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: CWE-248, CWE-754, CWE-755
- [protobufjs : Schema-derived names can shadow runtime-significant properties](https://agentprime.io/advisories/GHSA-f38q-mgvj-vph7.md)
  `GHSA-f38q-mgvj-vph7`, `CVE-2026-54269` · npm `protobufjs` and 1 more: affected `<7.6.3 || >=8.0.0, <8.6.0`, fixed in `7.6.3`, `8.6.0` · CVSS 5.3 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Denial of service, CWE-754
- [Typesense: Unauthenticated Denial of Service in the Typesense /multi_search Endpoint](https://agentprime.io/advisories/CVE-2026-47216.md)
  `CVE-2026-47216` · CVE record: typesense typesense · CVSS 8.7 High · Not analysed yet · Published 12 Jun 2026 · Tags: CWE-754
- [PAN-OS: Denial of Service (DoS) in Tunnel Traffic Processing](https://agentprime.io/advisories/CVE-2026-0269.md)
  `CVE-2026-0269` · CVE record: Palo Alto Networks Cloud NGFW and 3 more · CVSS 4.6 Medium · Not analysed yet · Published 10 Jun 2026 · Tags: CWE-754
- [Nimiq network-libp2p: DHT query poisoning via first-record verification failure](https://agentprime.io/advisories/CVE-2026-46541.md)
  `CVE-2026-46541` · CVE record: nimiq core-rs-albatross · CVSS 7.5 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-754
- [Indian Scout Bobber 2025 Infotainment Digital Round skips PIN entry when WCM is silent at boot](https://agentprime.io/advisories/CVE-2026-49318.md)
  `CVE-2026-49318` · CVE record: Indian Motorcycle Scout Bobber + Tech · CVSS 1.0 Low · Not analysed yet · Published 29 May 2026 · Tags: CWE-636, CWE-696, CWE-754
- [Indian Scout Bobber 2025 Infotainment Digital Round skips PIN entry when WCM is silent at boot](https://agentprime.io/advisories/CVE-2026-49317.md)
  `CVE-2026-49317` · CVE record: Indian Motorcycle Scout Bobber + Tech · CVSS 1.0 Low · Not analysed yet · Published 29 May 2026 · Tags: CWE-636, CWE-696, CWE-754
- [Indian Scout Bobber 2025 WCM CAN bus-off attack silently bypasses anti-theft shutdown](https://agentprime.io/advisories/CVE-2026-49316.md)
  `CVE-2026-49316` · CVE record: Indian Motorcycle Scout Bobber + Tech · CVSS 4.1 Medium · Not analysed yet · Published 29 May 2026 · Tags: CWE-440, CWE-693, CWE-754
- [Indian Scout Bobber 2025 WCM voltage-based shutdown](https://agentprime.io/advisories/CVE-2026-49325.md)
  `CVE-2026-49325` · CVE record: Indian Motorcycle Scout Bobber + Tech · CVSS 4.1 Medium · Not analysed yet · Published 29 May 2026 · Tags: CWE-693, CWE-754, CWE-1384
- [SAML SSO - Service Provider - Critical - Authentication bypass - SA-CONTRIB-2026-031](https://agentprime.io/advisories/CVE-2026-5343.md)
  `CVE-2026-5343` · CVE record: Drupal SAML SSO - Service Provider · CVSS 7.4 High · Not analysed yet · Published 28 May 2026 · Tags: CWE-754
- [Lakeside SysTrack Agent LsiAgent.exe Out-of-Bounds Read via UDP](https://agentprime.io/advisories/CVE-2026-39929.md)
  `CVE-2026-39929` · CVE record: Lakeside Software, LLC. SysTrack Agent · CVSS 8.7 High · Not analysed yet · Published 28 May 2026 · Tags: Memory corruption, CWE-754
- [Improper check for unusual conditions in Synology DiskStation Manager (DSM)](https://agentprime.io/advisories/CVE-2025-13392.md)
  `CVE-2025-13392` · CVE record: Synology DiskStation Manager (DSM) · CVSS 8.1 High · Not analysed yet · Published 27 May 2026 · Tags: CWE-754
- [Mattermost doesn't filter nil elements from outgoing webhook attachment payloads before processing](https://agentprime.io/advisories/GHSA-5gmf-x7hg-97wf.md)
  `GHSA-5gmf-x7hg-97wf`, `CVE-2026-4915`, `GO-2026-5845` · Go `github.com/mattermost/mattermost-server` and 1 more: affected `>=10.11.0, <10.11.15 || >=11.4.0, <11.4.5 || >=11.5.0, <11.5.4 || >=11.6.0, <11.6.1`, fixed in `10.11.15`, `11.4.5`, `11.5.4`, `11.6.1` · CVSS 6.5 Medium · Not analysed yet · Published 26 May 2026 · Tags: CWE-754
- [nimiq-blockchain: network-libp2p untrusted peer can crash address book via empty peer contact addresses](https://agentprime.io/advisories/CVE-2026-40094.md)
  `CVE-2026-40094` · CVE record: nimiq core-rs-albatross · CVSS 4.3 Medium · Not analysed yet · Published 20 May 2026 · Tags: CWE-754
- [Invalid handling of CLASS != IN](https://agentprime.io/advisories/CVE-2026-5946.md)
  `CVE-2026-5946` · CVE record: ISC BIND 9 · CVSS 7.5 High · Not analysed yet · Published 20 May 2026 · Tags: Memory corruption, Denial of service, CWE-20, CWE-754
- [Node View Permissions - Moderately critical - Access bypass - SA-CONTRIB-2026-034](https://agentprime.io/advisories/CVE-2026-8491.md)
  `CVE-2026-8491` · CVE record: Drupal Node View Permissions · CVSS 3.7 Low · Not analysed yet · Published 19 May 2026 · Tags: CWE-754
- [Improper check for unusual conditions in Samsung Open Source Escargot](https://agentprime.io/advisories/CVE-2026-47315.md)
  `CVE-2026-47315` · CVE record: Samsung Open Source Escargot · CVSS 5.5 Medium · Not analysed yet · Published 19 May 2026 · Tags: CWE-754
- [OpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloads](https://agentprime.io/advisories/GHSA-pgvv-q3wf-mm9m.md)
  `GHSA-pgvv-q3wf-mm9m`, `CVE-2026-45678`, `GO-2026-5539` · Go `go.opentelemetry.io/obi`: affected `<0.9.0`, fixed in `0.9.0` · CVSS 7.5 High · Not analysed yet · Published 18 May 2026 · Tags: CWE-20, CWE-754
- [Calling window.close() from server-side content causes crash in the Mattermost Desktop App](https://agentprime.io/advisories/CVE-2026-4643.md)
  `CVE-2026-4643` · CVE record: Mattermost Mattermost · CVSS 3.5 Low · Not analysed yet · Published 18 May 2026 · Tags: CWE-754
- [Mattermost doesn't validate the response body of proxied images](https://agentprime.io/advisories/GHSA-j76w-p754-g2w7.md)
  `GHSA-j76w-p754-g2w7`, `CVE-2026-4054`, `GO-2026-5454` · Go `github.com/mattermost/mattermost-server`: affected `>=0.0.0-20250731163400-5b955468ea1e, <0.0.0-20260414103857-b21ef302025e || >=11.4.0, <11.4.4 || >=11.5.0, <11.5.2`, fixed in `0.0.0-20260414103857-b21ef302025e`, `11.4.4`, `11.5.2` · CVSS 4.3 Medium · Not analysed yet · Published 15 May 2026 · Tags: CWE-754
- [Trust Protection Foundation: Multiple Authorization Bypass Vulnerabilities](https://agentprime.io/advisories/CVE-2026-0241.md)
  `CVE-2026-0241` · CVE record: Palo Alto Networks Trust Protection Foundation · CVSS 5.1 Medium · Not analysed yet · Published 13 May 2026 · Tags: CWE-754
- [Prisma Browser: Access and Data Rule Bypass](https://agentprime.io/advisories/CVE-2026-0235.md)
  `CVE-2026-0235` · CVE record: Palo Alto Networks Prisma Browser · CVSS 5.8 Medium · Not analysed yet · Published 13 May 2026 · Tags: CWE-754
- [PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing](https://agentprime.io/advisories/CVE-2026-0262.md)
  `CVE-2026-0262` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 6.6 Medium · Not analysed yet · Published 13 May 2026 · Tags: CWE-754

Newest: <https://agentprime.io/advisories/tag/cwe-754.md>
Older: <https://agentprime.io/advisories/tag/cwe-754.md?cursor=WyIyMDI2LTA1LTEzVDE3OjQ5OjQzLjYyMDAwMFoiLCJDVkUtMjAyNi0wMjYyIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-754&cursor=WyIyMDI2LTA4LTE1VDA1OjUyOjIwLjI2ODAwMFoiLCJDVkUtMjAyNi03MjA2NyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-754/?cursor=WyIyMDI2LTA4LTE1VDA1OjUyOjIwLjI2ODAwMFoiLCJDVkUtMjAyNi03MjA2NyJd>. Everything for agents: <https://agentprime.io/llms.txt>.