# CWE-836.

Every Advisory and CVE whose sources give the weakness CWE-836, newest first.

## Records, newest first

- [Omnispace Agora Project < 26.10.0 Pass-the-Hash Authentication Bypass via Cookies](https://agentprime.io/advisories/CVE-2026-63158.md)
  `CVE-2026-63158` · CVE record: Omnispace Agora Project · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-836
- [motionEye: Authentication possible via password hash](https://agentprime.io/advisories/GHSA-r3cw-c95m-wfh9.md)
  `GHSA-r3cw-c95m-wfh9`, `CVE-2026-46488`, `PYSEC-2026-428` · PyPI `motioneye`: affected `<0.44.0`, fixed in `0.44.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jun 2026 · Tags: Authentication bypass, Weak cryptography or TLS, CWE-256, CWE-836
- [OpenProject: Relations API Filter Bypasses Visibility Scope, Leaking Cross-Project Work Package Subjects](https://agentprime.io/advisories/CVE-2026-44736.md)
  `CVE-2026-44736` · CVE record: opf openproject · CVSS 6.5 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Information disclosure, Broken access control, CWE-836
- [Setracker2 Children's Smartwatch Ecosystem Use of password hash instead of password for authentication](https://agentprime.io/advisories/CVE-2026-9222.md)
  `CVE-2026-9222` · CVE record: Shenzhen i365-Tech Co. Ltd. Setracker2 Parental Control App (Android) package com.tgelec.setracker · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Jun 2026 · Tags: CWE-836
- [Vikunja: Scoped API tokens with projects.background permission can delete project backgrounds](https://agentprime.io/advisories/GHSA-v479-vf79-mg83.md)
  `GHSA-v479-vf79-mg83`, `CVE-2026-40103`, `GO-2026-5650` · Go `code.vikunja.io/api`: affected `<2.3.0`, fixed in `2.3.0` · CVSS 4.3 Medium · Not analysed yet · Published 10 Apr 2026 · Tags: Broken access control, CWE-836
- [CEWE PHOTO SHOW 6.4.3 Denial of Service via Password Field](https://agentprime.io/advisories/CVE-2019-25552.md)
  `CVE-2019-25552` · CVE record: Cewe-Photoworld CEWE PHOTO SHOW · CVSS 8.7 High · Not analysed yet · Published 21 Mar 2026 · Tags: CWE-836
- [Fortinet FortiWeb: A use of password hash instead of password for authentication vulnerability \[CWE-836\]…](https://agentprime.io/advisories/CVE-2025-64471.md)
  `CVE-2025-64471` · CVE record: Fortinet FortiWeb · CVSS 4.4 Medium · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-836
- [ELOG file upload stored XSS](https://agentprime.io/advisories/CVE-2025-62618.md)
  `CVE-2025-62618` · CVE record: ELOG ELOG · CVSS 8.6 High · Not analysed yet · Published 31 Oct 2025 · Tags: Cross-site scripting (XSS), Unrestricted file upload, CWE-836
- [Login to the application services using only the password hash](https://agentprime.io/advisories/CVE-2025-52543.md)
  `CVE-2025-52543` · CVE record: Copeland LP E3 Supervisory Control · CVSS 5.3 Medium · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-836
- [TeleMessage service: The TeleMessage service through 2025-05-05 relies on the client side (e.g…](https://agentprime.io/advisories/CVE-2025-48925.md)
  `CVE-2025-48925` · CVE record: TeleMessage service · CVSS 4.3 Medium · Not analysed yet · Published 28 May 2025 · Tags: CWE-836
- [CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to t…](https://agentprime.io/advisories/CVE-2023-39546.md)
  `CVE-2023-39546` · CVE record: NEC Corporation CLUSTERPRO X (EXPRESSCLUSTER X) and 1 more · No CVSS score · Not analysed yet · Published 17 Nov 2023 · Tags: CWE-836
- [Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication](https://agentprime.io/advisories/CVE-2023-4299.md)
  `CVE-2023-4299` · CVE record: Digi International Digi RealPort and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2023 · Tags: CWE-836
- [SonicWall GMS: Use of password hash instead of password for authentication vulnerability in SonicWall…](https://agentprime.io/advisories/CVE-2023-34132.md)
  `CVE-2023-34132` · CVE record: SonicWall GMS and 1 more · No CVSS score · Not analysed yet · Published 13 Jul 2023 · Tags: CWE-836
- [Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote a…](https://agentprime.io/advisories/CVE-2023-23450.md)
  `CVE-2023-23450` · CVE record: SICK AG SICK FTMG-ESD15AXX AIR FLOW SENSOR and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 15 May 2023 · Tags: CWE-836
- [Improper session handling of "Remember me for 7 days" functionality](https://agentprime.io/advisories/CVE-2023-23614.md)
  `CVE-2023-23614` · CVE record: pi-hole AdminLTE · CVSS 8.8 High · Not analysed yet · Published 26 Jan 2023 · Tags: Authentication bypass, CWE-836
- [WWBN AVideo: An improper password check exists in the login functionality of WWBN AVideo 11.6 and dev…](https://agentprime.io/advisories/CVE-2022-32282.md)
  `CVE-2022-32282` · CVE record: WWBN AVideo · CVSS 7.2 High · Not analysed yet · Published 22 Aug 2022 · Tags: CWE-836
- [Login with hash](https://agentprime.io/advisories/CVE-2021-23857.md)
  `CVE-2021-23857` · CVE record: Rexroth IndraMotion MLC L25, L45, L65, L75, L85, XM21, XM22, XM41 and XM42 IndraMotion XLC and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Oct 2021 · Tags: CWE-836
- [A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH…](https://agentprime.io/advisories/CVE-2017-7927.md)
  `CVE-2017-7927` · CVE record: Dahua Technology Co., Ltd Digital Video Recorders and IP Cameras · No CVSS score · EPSS 0.37 · Not analysed yet · Published 6 May 2017 · Tags: CWE-836

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-836>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-836/>. Everything for agents: <https://agentprime.io/llms.txt>.