agentprime: CWE-799

CVE-2026-122049: Campcodes Bitcoin Wallet System ForgotPasswordController.php random_int excessive authentication

Wed, 04 Nov 2026 23:15:11 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121535: miroslavpejic85 MiroTalk P2P Room Action server.js checkPassword excessive authentication

Tue, 03 Nov 2026 22:15:19 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-5617: Account Lock Bypass via User Store Synchronization in Multiple WSO2 Products Allows Brute Force Attacks

Mon, 02 Nov 2026 05:57:28 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-63399: Coop: Unauthenticated org provisioning via GraphQL Mutation.createOrg

Fri, 30 Oct 2026 22:40:29 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-116123: NocoDB signup validatePassword excessive authentication

Mon, 26 Oct 2026 05:45:14 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-116007: YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification SmsCodeServiceImpl.java SmsCodeServiceImpl.validateSmsCode0 excessive authentication

Sun, 25 Oct 2026 03:45:16 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-115480: baserCMS: Public Web API mail-form submission bypasses image CAPTCHA

Fri, 23 Oct 2026 13:37:32 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-115359: OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Role-Based Rate Limit Quota Bypass via Request Parsing

Thu, 22 Oct 2026 19:13:34 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-96364: Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171

Thu, 22 Oct 2026 01:21:36 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-111874: OpenCATS Career Portal CareersUI.php processLogin excessive authentication

Sun, 18 Oct 2026 05:15:11 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-107830: Jivejdon through commit ee67a65e Missing Rate Limiting via /account/smsVRAction SMS Endpoint

Thu, 08 Oct 2026 21:51:34 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-82924: PII Enumeration via Missing Rate Limiting in Pusula Communication's Expert Mail

Tue, 06 Oct 2026 13:33:39 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-97300: WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability

Tue, 06 Oct 2026 05:14:51 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-105237: linlinjava litemall Login Endpoint AdminAuthController.java excessive authentication

Mon, 05 Oct 2026 06:00:11 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-100603: ClawHub before 8c2de6c506 Skill Hiding via Coordinated Reports

Sat, 26 Sep 2026 13:22:47 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-84461: Zammad: Missing rate limiting allows password brute-forcing during two-factor login

Fri, 25 Sep 2026 18:21:20 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-93650: Saleor throttling.py get_client_ip excessive authentication

Fri, 18 Sep 2026 18:15:10 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-36045: TS4300 Tape Library addresses security vulnerability

Fri, 18 Sep 2026 15:41:01 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-13882: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.

Fri, 18 Sep 2026 14:33:52 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-54594: OmniBlocks: Spamming in Discussions tab possible via disc.yml

Thu, 17 Sep 2026 19:51:32 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-85586: phpMyFAQ before 4.1.8 CAPTCHA Bypass via store parameter

Fri, 04 Sep 2026 11:29:53 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-54738: Lemmy: Rate limit bypass via X-Forwarded-For header spoofing in actix-web ConnectionInfo

Wed, 19 Aug 2026 20:27:45 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-75773: karakeep-app karakeep Login Endpoint auth.ts authorize excessive authentication

Tue, 18 Aug 2026 11:00:12 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-19898: VictoriaMetrics VMAuth Authentication Endpoint main.go requestHandler excessive authentication

Sat, 15 Aug 2026 15:45:10 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-19897: mangroup dtale Login Endpoint auth.py login excessive authentication

Sat, 15 Aug 2026 15:30:08 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-19895: opensourcepos Open Source Point of Sale Login Endpoint Filters.php index excessive authentication

Sat, 15 Aug 2026 13:30:08 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-23565: HCLSoftware Aftermarket EPC: HCL Aftermarket EPC is vulnerable to email flooding as the application does not have a…

Fri, 17 Jul 2026 13:36:31 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-33434: Wazuh: Rate Limit Bypass via /events Endpoint

Thu, 16 Jul 2026 23:36:33 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-5233: Missing Rate Limiting in Mia Technologies' Pizzy Library

Mon, 15 Jun 2026 12:42:34 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-10216: unitedbyai droidclaw claim Endpoint pairing.ts excessive authentication

Mon, 01 Jun 2026 02:30:10 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-7671: CodeWise Tornet Scooter Mobile App TwoFactor excessive authentication

Sat, 02 May 2026 23:30:13 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-7402: Improper Rate Limiting in MeWare Software's PDKS

Thu, 30 Apr 2026 12:48:09 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

Duplicate Advisory: OpenClaw: Fake DeviceToken Bypasses Shared Auth Rate Limiting

Fri, 24 Apr 2026 00:31:51 GMT

openclaw <2026.3.31, fixed in 2026.3.31. CVSS 3.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Duplicate Advisory: OpenClaw: Pairing pending-request caps were enforced per channel instead of per account

Fri, 24 Apr 2026 00:31:51 GMT

openclaw >=2026.2.26, <2026.3.31, fixed in 2026.3.31. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Duplicate Advisory: OpenClaw: LINE webhook handler lacks shared pre-auth concurrency budget before signature verification

Fri, 24 Apr 2026 00:31:51 GMT

openclaw <2026.3.31, fixed in 2026.3.31. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw: Pairing pending-request caps were enforced per channel instead of per account

Tue, 07 Apr 2026 18:14:44 GMT

openclaw >=2026.2.26, <2026.3.31, fixed in 2026.3.31. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw: Fake DeviceToken Bypasses Shared Auth Rate Limiting

Fri, 03 Apr 2026 03:09:18 GMT

openclaw <2026.3.31, fixed in 2026.3.31. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw: LINE webhook handler lacks shared pre-auth concurrency budget before signature verification

Thu, 02 Apr 2026 21:01:08 GMT

openclaw <2026.3.31, fixed in 2026.3.31. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-55268: HCL Aftermarket DPC is affected by Spamming Vulnerability

Thu, 26 Mar 2026 13:00:58 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-32729: Runtipi has a TOTP two-factor authentication bypass via unrestricted brute-force on `/api/auth/verify-totp`

Fri, 13 Mar 2026 21:41:11 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-13212: IBM Aspera Console Denial of Service

Fri, 13 Mar 2026 19:54:10 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-22216: wpDiscuz before 7.6.47 - No Rate Limiting on Subscription Endpoints with LIKE Wildcard Bypass

Fri, 13 Mar 2026 01:18:16 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Parse Server has a rate limit bypass via batch request endpoint

Wed, 11 Mar 2026 00:21:51 GMT

parse-server <8.6.23 || >=9.0.0-alpha.1, <9.5.2-alpha.10, fixed in 8.6.23, 9.5.2-alpha.10. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-24017: Fortinet FortiWeb: An Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in…

Tue, 10 Mar 2026 16:44:19 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

OpenClaw's hooks count non-POST requests toward auth lockout

Mon, 09 Mar 2026 19:52:47 GMT

openclaw <2026.3.7, fixed in 2026.3.7. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-2110: Tasin1025 SwiftBuy login.php excessive authentication

Sat, 07 Feb 2026 20:02:07 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-1685: D-Link DIR-823X Login sub_40AC74 excessive authentication

Fri, 30 Jan 2026 14:32:10 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-1409: Beetel 777VR1 UART excessive authentication

Sun, 25 Jan 2026 23:32:06 GMT

CVSS 1.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-13211: IBM Aspera Orchestrator Denial of Service

Thu, 11 Dec 2025 19:45:46 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-54321: In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability.

Tue, 18 Nov 2025 00:00:00 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.