agentprime: CWE-807

CVE-2026-17167: Multiple Vulnerabilities in IBM API Connect

Sat, 07 Nov 2026 04:32:07 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-77463: Remark42: Rate limit bypass via unconditional trust of X-Forwarded-For/X-Real-IP headers in direct-internet deployment

Thu, 05 Nov 2026 20:54:09 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-119148: Unvalidated parent-supplied AWS Region in AWS aws-nitro-enclaves-sdk-c allows impersonation of the enclave's AWS KMS endpoint

Fri, 30 Oct 2026 16:12:06 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

Authlib: ID token can disable its own nonce validation via the nonce_supported claim

Tue, 27 Oct 2026 15:39:13 GMT

authlib <1.9.0, fixed in 1.9.0. CVSS 4.2 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-116016: yudao-cloud through 2026.09 Data Permission Bypass via data-permission-enable Header

Sat, 24 Oct 2026 11:40:33 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-50106: Possible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent.

Wed, 21 Oct 2026 08:57:11 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

AIOHTTP: Absolute-form request targets can spoof Request.scheme

Tue, 20 Oct 2026 20:01:40 GMT

aiohttp <3.14.4, fixed in 3.14.4. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-111869: makeplane API Endpoint reliance on untrusted inputs in a security decision

Sun, 18 Oct 2026 02:45:15 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-108433: Microsoft Office Word Security Feature Bypass Vulnerability

Thu, 15 Oct 2026 20:57:20 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-110726: Resource allocation without limits in Eclipse Foundation Eclipse Connected Services Platform

Thu, 15 Oct 2026 11:58:03 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-53614: util-linux LIBMOUNT_FORCE_MOUNT2 allows nosuid and noexec bypass

Wed, 14 Oct 2026 15:40:53 GMT

CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-66874: Gitea required Actions check bypass through skipped workflows

Wed, 14 Oct 2026 14:36:06 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-96251: Microsoft PowerShell Remote Code Execution Vulnerability

Tue, 13 Oct 2026 19:01:17 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-88210: Microsoft Office Word Security Feature Bypass Vulnerability

Tue, 13 Oct 2026 19:01:14 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-83522: Windows IKE Extension Spoofing Vulnerability

Tue, 13 Oct 2026 19:00:47 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-85817: Microsoft PowerShell Remote Code Execution Vulnerability

Tue, 13 Oct 2026 19:00:06 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-102234: Visual Studio Code Security Feature Bypass Vulnerability

Tue, 13 Oct 2026 18:59:27 GMT

CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-105458: Reliance on Untrusted Inputs in a Security Decision in GitLab

Tue, 13 Oct 2026 01:04:51 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-108903: pH7Builder before 19.3.0 CAPTCHA Bypass via Client-Chosen Form ID

Sun, 11 Oct 2026 14:58:05 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-104658: Reliance on Untrusted Inputs in a Security Decision in hMailServer

Thu, 08 Oct 2026 10:52:45 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

KaTeX: Existing prototype pollution can bypass trust restrictions

Mon, 05 Oct 2026 23:41:05 GMT

katex >=0.11.0, <0.18.2, fixed in 0.18.2. CVSS 2.1 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-103267: Ghost 0.5.0 before 6.62.0 Arbitrary Email Registration via Staff Invite

Thu, 01 Oct 2026 10:42:08 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-76147: Genians, Inc Genian NAC/ZTNA Remote Code Execution

Thu, 01 Oct 2026 04:53:39 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-102117: Kiteworks Core Remote Code Execution

Wed, 30 Sep 2026 20:19:02 GMT

CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-101131: deepseek-ai deepseek-harness dsh index.ts reliance on untrusted inputs in a security decision

Mon, 28 Sep 2026 18:30:14 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-101079: agentverus agentverus-scanner context.js isSecurityDefenseSkill reliance on untrusted inputs in a security decision

Mon, 28 Sep 2026 15:45:10 GMT

CVSS 2.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-94606: authentik: MFA Bypass via State Confusion / Parameter Injection in AuthenticatorEmailStage

Thu, 24 Sep 2026 16:23:30 GMT

CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-84474: Automation-controller: automation-controller-container: automation-controller: view_jobtemplate to execute privilege escalation via host_config_key exposure and x-forwarded-for spoofing of provisioni…

Wed, 23 Sep 2026 18:41:18 GMT

CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

9Router has a Login Brute-Force Lockout Bypass via Spoofable X-9r-Real-Ip Header

Tue, 22 Sep 2026 16:34:18 GMT

9router <0.5.8, fixed in 0.5.8. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

9Router has an Authentication Bypass in Public LLM API via Spoofable X-9r-Real-Ip Header

Tue, 22 Sep 2026 16:34:06 GMT

9router <0.5.8, fixed in 0.5.8. CVSS 7.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-85751: Mailu: Authentication bypass in header-based proxy authentication via spoofable `X-Forwarded-By` trust

Mon, 21 Sep 2026 15:39:24 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-87858: Temporal Server completion callback source header can direct attacker-chosen requests to the internal frontend with administrator authorization

Mon, 21 Sep 2026 11:39:52 GMT

CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-81179: SysReptor: Host header injection might allow account takeover

Fri, 18 Sep 2026 17:45:58 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-86863: pgAdmin 4: Authentication bypass via a client-controlled identity header in Webserver authentication mode

Thu, 17 Sep 2026 15:30:58 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-78427: Admission Control Bypass via Hardcoded Sidecar Image Exemption

Thu, 17 Sep 2026 09:33:26 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-79701: Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass in Module Context in the Contact, Opt-in and Form Builder Addons in SP Page Builder Pro 3.2.6 - 5.6.1p2 and 6.0.0 - 6.9.0

Mon, 14 Sep 2026 11:03:13 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-79700: Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass via Request-Controlled CAPTCHA Configuration in SP Page Builder Pro 5.1.4 - 6.9.0

Mon, 14 Sep 2026 10:59:35 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Traefik entrypoint header-name sanitization bypassed via request trailers

Thu, 10 Sep 2026 23:04:21 GMT

github.com/traefik/traefik/v3 >=3.2.0, <3.7.13, fixed in 3.7.13. CVSS 7.0 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

webhookd: Unrestricted HTTP Header to Shell Variable Injection

Wed, 09 Sep 2026 23:47:03 GMT

github.com/ncarlier/webhookd <1.22.0, fixed in 1.22.0. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-87479: Google Chrome: Insufficient policy enforcement in Extensions in Google Chrome prior to 153.0.8010.36…

Wed, 09 Sep 2026 00:09:47 GMT

CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

DeepSeek Harness contains an authentication bypass vulnerability in local HTTP control-plane API

Tue, 08 Sep 2026 18:32:01 GMT

@deepseek-ai/dsh-client-connection <0.1.2-alpha.1, fixed in 0.1.2-alpha.1. CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-66768: Improper Access Control in SAP NetWeaver (SAP GUI for Java)

Tue, 08 Sep 2026 00:11:15 GMT

CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-85602: Grav Form Plugin before 9.1.20 reCAPTCHA v3 Authentication Bypass

Fri, 04 Sep 2026 11:30:04 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-63041: Apache APISIX: attach-consumer-label does not strip client-supplied consumer-label headers

Wed, 26 Aug 2026 11:34:59 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-54730: authentik: Authentication Flow Bypass via Unguarded challenge_valid() in AuthenticatorEndpointGDTCStage and GoogleChromeStageView

Tue, 18 Aug 2026 16:55:29 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-53789: rsync < 3.5.0 Arbitrary File Deletion via Malicious File List

Thu, 13 Aug 2026 14:37:14 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-64934: Mira Hormone Monitor, Mira Android App Reliance on untrusted inputs in a security decision

Tue, 11 Aug 2026 21:15:13 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-19579: Snipe-IT Checkout Request Cancellation IDOR

Tue, 11 Aug 2026 20:25:02 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-18705: Improper Authorization in MongoDB Atlas Vector Search Allows Unauthorized Access to Protected View Data

Tue, 11 Aug 2026 18:37:54 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-58239: Multiple vulnerabilities in SAP Business AI Platform (Approuter)

Tue, 11 Aug 2026 00:15:40 GMT

CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.