# CWE-778.

Every Advisory and CVE whose sources give the weakness CWE-778, newest first.

## Records, newest first

- [Tanium addressed an insufficient logging vulnerability in Tanium Server.](https://agentprime.io/advisories/CVE-2026-108311.md)
  `CVE-2026-108311` · CVE record: Tanium Tanium Server · CVSS 2.7 Low · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-778
- [OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Improper Audit Logging of Root Generation and Rekey Responses](https://agentprime.io/advisories/CVE-2026-115357.md)
  `CVE-2026-115357` · CVE record: openbao openbao · CVSS 2.1 Low · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-778
- [Insufficient authentication logging in Progress MarkLogic Server](https://agentprime.io/advisories/CVE-2026-85959.md)
  `CVE-2026-85959` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 7.5 High · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-778
- [Apache log4net: Oversize EventLogAppender record silently discarded](https://agentprime.io/advisories/CVE-2026-105243.md)
  `CVE-2026-105243` · CVE record: Apache Software Foundation Apache log4net · CVSS 5.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-778
- [IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities](https://agentprime.io/advisories/CVE-2026-18161.md)
  `CVE-2026-18161` · CVE record: IBM Financial Transaction Manager (FTM) for RedHat OpenShift · CVSS 4.3 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: CWE-778
- [MISP: Authentication failure logging suppressed during Redis unavailability](https://agentprime.io/advisories/CVE-2026-92002.md)
  `CVE-2026-92002` · CVE record: MISP MISP · CVSS 5.1 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-778
- [MISP Access Log Entry Overwritten by Error Controller's Second beforeFilter Pass](https://agentprime.io/advisories/CVE-2026-91859.md)
  `CVE-2026-91859` · CVE record: MISP MISP · CVSS 5.3 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-223, CWE-778
- [MISP CLI Shell Audit Logs Lose User Identity and CLI Marker After First Lazy Model Load](https://agentprime.io/advisories/CVE-2026-90955.md)
  `CVE-2026-90955` · CVE record: MISP MISP · CVSS 4.6 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: CWE-223, CWE-778
- [CyberPanel: CyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the…](https://agentprime.io/advisories/CVE-2026-29812.md)
  `CVE-2026-29812` · CVE record: CyberPanel CyberPanel · CVSS 4.3 Medium · Not analysed yet · Published 13 Sept 2026 · Tags: CWE-778
- [Microsoft SQL Server Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-66816.md)
  `CVE-2026-66816` · CVE record: Microsoft Microsoft SQL Server 2022 (CU 26) and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-778
- [Coq and Rocq Prover Print Assumptions Omits Unsafe Universe Checking Inlined Through Parameter Inline](https://agentprime.io/advisories/CVE-2020-37268.md)
  `CVE-2020-37268` · CVE record: rocq-prover rocq · CVSS 6.8 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: CWE-778
- [HCL IntelliOps Event Management is affected by multiple security vulnerabilities.](https://agentprime.io/advisories/CVE-2025-62307.md)
  `CVE-2025-62307` · CVE record: HCL Software IEM · CVSS 5.4 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-778
- [phpMyFAQ 3.1.0 through 4.1.6 Authentication Bypass via LDAP](https://agentprime.io/advisories/CVE-2026-76208.md)
  `CVE-2026-76208` · CVE record: thorsten phpMyFAQ · CVSS 8.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: CWE-778
- [ESX insufficient logging vulnerability](https://agentprime.io/advisories/CVE-2026-41709.md)
  `CVE-2026-41709` · CVE record: VMware Cloud Foundation and 3 more · CVSS 2.7 Low · Critical (KEV) · In CISA KEV · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-778
- [Devolutions Server: Insufficient logging in the entry export feature in Devolutions Server allows an…](https://agentprime.io/advisories/CVE-2026-9247.md)
  `CVE-2026-9247` · CVE record: Devolutions Server · CVSS 2.4 Low · Not analysed yet · Published 22 May 2026 · Tags: CWE-778
- [@hulumi/baseline: CloudTrail selector tampering events were not fully detected](https://agentprime.io/advisories/GHSA-gfp8-mp24-5vxg.md)
  `GHSA-gfp8-mp24-5vxg`, `CVE-2026-82863` · npm `@hulumi/baseline`: affected `<1.3.2`, fixed in `1.3.2` · CVSS 8.7 High · Not analysed yet · Published 21 May 2026 · Tags: CWE-778
- [Dell PowerScale OneFS: Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.6, 9.6.0.0 through 9.7.1.13…](https://agentprime.io/advisories/CVE-2026-32803.md)
  `CVE-2026-32803` · CVE record: Dell PowerScale OneFS · CVSS 3.3 Low · Not analysed yet · Published 8 May 2026 · Tags: CWE-778
- [Juju has unauthorized access to out-of-scope Kubernetes secrets](https://agentprime.io/advisories/GHSA-439w-v2p7-pggc.md)
  `GHSA-439w-v2p7-pggc`, `CVE-2026-32693`, `GO-2026-4777` · Go `github.com/juju/juju`: affected `>=0.0.0-20221021155847-35c560704ee2, <0.0.0-20260319091847-d06919eb03ec`, fixed in `0.0.0-20260319091847-d06919eb03ec` · CVSS 8.8 High · Not analysed yet · Published 19 Mar 2026 · Tags: Broken access control, CWE-778
- [HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged.](https://agentprime.io/advisories/CVE-2025-52644.md)
  `CVE-2025-52644` · CVE record: HCL AION · CVSS 5.8 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: CWE-778
- [MariaDB Server Audit Plugin Comment Handling Bypass](https://agentprime.io/advisories/CVE-2026-3494.md)
  `CVE-2026-3494` · CVE record: MariaDB Foundation MariaDB Server and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 3 Mar 2026 · Tags: CWE-778
- [Bypassing Logging of Outbound Connections Using sendto, sendmsg, and sendmmsg in Harden-Runner (Community Tier)](https://agentprime.io/advisories/CVE-2026-25598.md)
  `CVE-2026-25598` · CVE record: step-security harden-runner · CVSS 6.3 Medium · Not analysed yet · Published 9 Feb 2026 · Tags: CWE-778
- [Dell PowerScale OneFS, versions prior 9.13.0.0, contains an insufficient logging vulnerability.](https://agentprime.io/advisories/CVE-2026-22279.md)
  `CVE-2026-22279` · CVE record: Dell PowerScale OneFS · CVSS 4.3 Medium · Not analysed yet · Published 22 Jan 2026 · Tags: CWE-778
- [Nextcloud Server admin_audit does not log all actions on files in groupfolders](https://agentprime.io/advisories/CVE-2025-66552.md)
  `CVE-2025-66552` · CVE record: nextcloud security-advisories · CVSS 4.3 Medium · Not analysed yet · Published 5 Dec 2025 · Tags: CWE-778
- [Lack of Audit Logging in AbuseFilter](https://agentprime.io/advisories/CVE-2025-53498.md)
  `CVE-2025-53498` · CVE record: Wikimedia Foundation Mediawiki - AbuseFilter Extension · CVSS 5.3 Medium · Not analysed yet · Published 7 Jul 2025 · Tags: CWE-778
- [OpenEMR doesn't log password administration properly](https://agentprime.io/advisories/CVE-2025-32967.md)
  `CVE-2025-32967` · CVE record: openemr openemr · CVSS 5.4 Medium · Not analysed yet · Published 23 May 2025 · Tags: CWE-778
- [Devolutions Remote Desktop Manager: Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on…](https://agentprime.io/advisories/CVE-2025-2562.md)
  `CVE-2025-2562` · CVE record: Devolutions Remote Desktop Manager · CVSS 5.4 Medium · Not analysed yet · Published 26 Mar 2025 · Tags: CWE-778
- [Client-side audit exclusion vulnerability](https://agentprime.io/advisories/CVE-2024-10863.md)
  `CVE-2024-10863` · CVE record: OpenText Secure Content Manager · CVSS 5.1 Medium · Not analysed yet · Published 22 Nov 2024 · Tags: CWE-778
- [Life2000 ventilator and Service PC lack sufficient audit logging capabilities](https://agentprime.io/advisories/CVE-2024-48967.md)
  `CVE-2024-48967` · CVE record: Baxter Life2000 Ventilation System · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Nov 2024 · Tags: CWE-778
- [MOVEit Transfer Logging Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-2291.md)
  `CVE-2024-2291` · CVE record: Progress Software MOVEit Transfer · CVSS 4.3 Medium · Not analysed yet · Published 20 Mar 2024 · Tags: CWE-778
- [Dell PowerScale OneFS 8.2.x through 9.6.0.x contain an insufficient logging vulnerability.](https://agentprime.io/advisories/CVE-2024-24901.md)
  `CVE-2024-24901` · CVE record: Dell PowerScale OneFS · CVSS 3.0 Low · Not analysed yet · Published 4 Mar 2024 · Tags: CWE-778
- [An Information Disclosure vulnerability exists in Opay Mobile application 1.5.1.26 and maybe be higher in the logcat app.](https://agentprime.io/advisories/CVE-2021-43419.md)
  `CVE-2021-43419` · CVE record · CVSS 7.5 High · Not analysed yet · Published 7 Nov 2023 · Tags: CWE-778
- [Insufficient Logging Vulnerability in HiRDB](https://agentprime.io/advisories/CVE-2023-1995.md)
  `CVE-2023-1995` · CVE record: Hitachi HiRDB Server and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 29 Aug 2023 · Tags: CWE-778
- [Fortinet FortiSandbox: An insufficient logging \[CWE-778\] vulnerability in FortiSandbox versions 4.0.0 to 4.0.2…](https://agentprime.io/advisories/CVE-2022-30305.md)
  `CVE-2022-30305` · CVE record: Fortinet FortiSandbox and 1 more · CVSS 3.6 Low · Not analysed yet · Published 6 Dec 2022 · Tags: CWE-778
- [Federated share accepting/declining is not logged in audit log in Nextcloud Server](https://agentprime.io/advisories/CVE-2022-31120.md)
  `CVE-2022-31120` · CVE record: nextcloud security-advisories · CVSS 2.1 Low · Not analysed yet · Published 4 Aug 2022 · Tags: CWE-778
- [Magento 2 Community Edition Insufficient Logging](https://agentprime.io/advisories/GHSA-fp5m-4mqh-849p.md)
  `GHSA-fp5m-4mqh-849p`, `CVE-2019-8123`, `PKSA-1dvf-5zm6-yvz8`, `PKSA-348q-5ryz-52qp`, `PKSA-7wvv-kkd7-mcg3`, `PKSA-fdk6-2v1x-rbvv` · Packagist `magento/community-edition`: affected `>=2.1.0, <2.1.19 || >=2.2.0, <2.2.10 || >=2.3.0, <2.3.3`, fixed in `2.1.19`, `2.2.10`, `2.3.3` · CVSS 5.3 Medium · Not analysed yet · Published 24 May 2022 · Tags: CWE-778
- [Hacking attempts from logged-in users are not properly logged by GM](https://agentprime.io/advisories/CVE-2022-25783.md)
  `CVE-2022-25783` · CVE record: Secomea GateManager · CVSS 4.3 Medium · Not analysed yet · Published 4 May 2022 · Tags: CWE-778
- [When user with insufficient privileges tries to access any application in SAP NetWeaver Administrator (Administrator applications), version - 7.50, no security audit log is created.](https://agentprime.io/advisories/CVE-2021-33689.md)
  `CVE-2021-33689` · CVE record: SAP SE SAP NetWeaver AS JAVA (Administrator applications) · CVSS 3.5 Low · Not analysed yet · Published 14 Jul 2021 · Tags: CWE-778
- [Audit log is not properly logging unsetting of share expiration date](https://agentprime.io/advisories/CVE-2021-32680.md)
  `CVE-2021-32680` · CVE record: nextcloud security-advisories · CVSS 3.3 Low · Not analysed yet · Published 12 Jul 2021 · Tags: CWE-778
- [A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0).](https://agentprime.io/advisories/CVE-2019-19295.md)
  `CVE-2019-19295` · CVE record: Siemens Control Center Server (CCS) · CVSS 4.3 Medium · Not analysed yet · Published 10 Mar 2020 · Tags: CWE-778
- [A vulnerability has been identified in SIPORT MP (All versions < 3.1.4).](https://agentprime.io/advisories/CVE-2019-19277.md)
  `CVE-2019-19277` · CVE record: Siemens AG SIPORT MP · No CVSS score · Not analysed yet · Published 10 Mar 2020 · Tags: CWE-778
- [Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw.](https://agentprime.io/advisories/CVE-2019-7613.md)
  `CVE-2019-7613` · CVE record: Elastic Logstash · No CVSS score · Not analysed yet · Published 25 Mar 2019 · Tags: CWE-778

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-778>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-778/>. Everything for agents: <https://agentprime.io/llms.txt>.