# CWE-912.

Every Advisory and CVE whose sources give the weakness CWE-912, newest first.

## Records, newest first

- [D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor](https://agentprime.io/advisories/CVE-2026-118579.md)
  `CVE-2026-118579` · CVE record: D-Link DIR-505 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-912
- [DJI CrystalSky ZS600C USB-gadget backdoor allows root command execution](https://agentprime.io/advisories/CVE-2026-114353.md)
  `CVE-2026-114353` · CVE record: DJI CrystalSky ZS600C · CVSS 7.0 High · Not analysed yet · Published 23 Oct 2026 · Tags: CWE-912
- [Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd.](https://agentprime.io/advisories/CVE-2026-97627.md)
  `CVE-2026-97627` · CVE record: Atsumi Electric Co., Ltd. ADX5004 and 4 more · CVSS 8.6 High · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-912
- [Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd.](https://agentprime.io/advisories/CVE-2026-100737.md)
  `CVE-2026-100737` · CVE record: Atsumi Electric Co., Ltd. ADX5004 and 4 more · CVSS 6.9 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-912
- [Netis EAP930 CGI Endpoint debug return200 backdoor](https://agentprime.io/advisories/CVE-2026-112360.md)
  `CVE-2026-112360` · CVE record: Netis EAP930 · CVSS 8.9 High · Not analysed yet · Published 19 Oct 2026 · Tags: CWE-912
- [Hidden accounts or hard-coded credentials may permit unauthorized access without the legitimate authentication process](https://agentprime.io/advisories/CVE-2026-82829.md)
  `CVE-2026-82829` · CVE record: Hitachi Industrial Equipment Systems Hitachi Coding Software Suite · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-912
- [LITE-ON Technology Corporation FF-RFI079I4: Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4…](https://agentprime.io/advisories/CVE-2026-80217.md)
  `CVE-2026-80217` · CVE record: LITE-ON Technology Corporation FF-RFI079I4 and 1 more · CVSS 8.7 High · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-912
- [Link Factory - Backdoor](https://agentprime.io/advisories/CVE-2026-15413.md)
  `CVE-2026-15413` · CVE record: Unknown Link Factory · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: CWE-912
- [Pulsetto Vagus Nerve Stimulator Hidden Functionality](https://agentprime.io/advisories/CVE-2026-18844.md)
  `CVE-2026-18844` · CVE record: Pulsetto Vagus Nerve Stimulator · CVSS 7.2 High · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-912
- [Supsystic Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server](https://agentprime.io/advisories/CVE-2026-17032.md)
  `CVE-2026-17032` · CVE record: Unknown google-maps-easy-pro and 2 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Aug 2026 · Tags: CWE-912
- [Premium SEO - Unauthenticated Backdoor (Admin Creation / RCE / SSRF / Content Injection)](https://agentprime.io/advisories/CVE-2026-14812.md)
  `CVE-2026-14812` · CVE record: Unknown Premium SEO · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Aug 2026 · Tags: CWE-912
- [MonsterInsights Pro 10.2.0/10.2.2 - Backdoored via AWS S3 bucket compromise](https://agentprime.io/advisories/CVE-2026-11976.md)
  `CVE-2026-11976` · CVE record: Unknown MonsterInsights Pro · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Aug 2026 · Tags: CWE-912
- [Puwell IP Camera 2.x - 4.x Unauthenticated Command Injection via DebugShell](https://agentprime.io/advisories/CVE-2026-61515.md)
  `CVE-2026-61515` · CVE record: Puwell Technology Inc. IP Camera · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Aug 2026 · Tags: CWE-912
- [Vacron｜IP Camera - Hidden Functionality](https://agentprime.io/advisories/CVE-2026-18191.md)
  `CVE-2026-18191` · CVE record: Vacron VIN-DS783E-E6 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jul 2026 · Tags: CWE-912
- [Unauthenticated Access to Internal Diagnostic Interface](https://agentprime.io/advisories/CVE-2026-4769.md)
  `CVE-2026-4769` · CVE record: WAGO 0765-110x/0100-0000 and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Jul 2026 · Tags: CWE-912
- [Persistent undocumented backdoor access in Yarbo robot](https://agentprime.io/advisories/CVE-2026-7413.md)
  `CVE-2026-7413` · CVE record: Yarbo Firmware · CVSS 7.2 High · Not analysed yet · Published 7 May 2026 · Tags: CWE-912
- [WattBox 800 & 820 Series < 2.10.0.0 RCE via Diagnostic Endpoints](https://agentprime.io/advisories/CVE-2026-41446.md)
  `CVE-2026-41446` · CVE record: Snap One, LLC WattBox 800 and 1 more · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Apr 2026 · Tags: Hard-coded credentials, CWE-912
- [Denial of service via the undocumented subfunction in AS320T](https://agentprime.io/advisories/CVE-2026-1952.md)
  `CVE-2026-1952` · CVE record: DeltaWW AS320T · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Apr 2026 · Tags: CWE-912
- [Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference](https://agentprime.io/advisories/GHSA-9wfr-w7mm-pc7f.md)
  `GHSA-9wfr-w7mm-pc7f`, `CVE-2026-34769` · npm `electron`: affected `<38.8.6 || >=39.0.0-alpha.1, <39.8.0 || >=40.0.0-alpha.1, <40.7.0 || >=41.0.0-alpha.1, <41.0.0-beta.8`, fixed in `38.8.6`, `39.8.0`, `40.7.0`, `41.0.0-beta.8` · CVSS 7.8 High · Not analysed yet · Published 3 Apr 2026 · Tags: Command injection, CWE-912
- [Hidden Functionality vulnerability in NEC Platforms, Ltd.](https://agentprime.io/advisories/CVE-2026-4621.md)
  `CVE-2026-4621` · CVE record: NEC Platforms, Ltd. Aterm W1200EX(-MS) and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 27 Mar 2026 · Tags: CWE-912
- [BUFFALO INC. BUFFALO Wi-Fi router products: Hidden functionality issue exists in BUFFALO Wi-Fi router products…](https://agentprime.io/advisories/CVE-2026-33280.md)
  `CVE-2026-33280` · CVE record: BUFFALO INC. BUFFALO Wi-Fi router products · CVSS 8.6 High · Not analysed yet · Published 27 Mar 2026 · Tags: CWE-912
- [Hidden Functionality Enables Remote Telnet Activation via /goform/setSysTools in Nexxt Nebula 300+](https://agentprime.io/advisories/CVE-2026-31847.md)
  `CVE-2026-31847` · CVE record: Nexxt Solutions Nebula 300+ · CVSS 8.5 High · Not analysed yet · Published 23 Mar 2026 · Tags: CWE-912
- [Hidden CLI Function Allows Root Access](https://agentprime.io/advisories/CVE-2026-3587.md)
  `CVE-2026-3587` · CVE record: WAGO Lean Managed Switch 852-1812 and 4 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Mar 2026 · Tags: CWE-912
- [The WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) exposes an unprotected UART interface through accessible hardware pads on the PCB](https://agentprime.io/advisories/CVE-2026-30704.md)
  `CVE-2026-30704` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Mar 2026 · Tags: CWE-912
- [Fortinet FortiAnalyzer: A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3…](https://agentprime.io/advisories/CVE-2025-48418.md)
  `CVE-2025-48418` · CVE record: Fortinet FortiAnalyzer and 3 more · CVSS 6.4 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: CWE-912
- [EFM ipTIME A8004T Debug d.cgi httpcon_check_session_url backdoor](https://agentprime.io/advisories/CVE-2026-1741.md)
  `CVE-2026-1741` · CVE record: EFM ipTIME A8004T · CVSS 7.5 High · Not analysed yet · Published 2 Feb 2026 · Tags: CWE-912
- [Brother Industries, Ltd. Multiple MFPs: Hidden functionality issue exists in multiple MFPs provided by Brother Industries, Ltd…](https://agentprime.io/advisories/CVE-2025-55704.md)
  `CVE-2025-55704` · CVE record: Brother Industries, Ltd. Multiple MFPs and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 29 Jan 2026 · Tags: CWE-912
- [Improper Validation of Integrity Check Value vulnerability in Sharp Display Solutions projectors allows a attacker may create and run unauthorized firmware.](https://agentprime.io/advisories/CVE-2025-11544.md)
  `CVE-2025-11544` · CVE record: Sharp Display Solutions, Ltd. NP-P627UL, NP-P627ULG, NP-P627UL+, NP-P547UL, NP-P547ULG, NP-P607UL+, NP-CG6600UL, NP-H6271UL, NP-H5471UL, NP-P627ULH, NP-P547ULH, NP-PE455UL, NP-PE455ULG, NP-PE455WL, NP-PE455WLG, NP-PE505XLG, NP-CG6500XL, NP-CG6400UL, NP-CG6400WL, NP-CB4500XL, NP-CA4120X, NP-CA4160W, NP-CA4160X, NP-CA4200U, NP-CA4200W, NP-CA4202W, NP-CA4260X, NP-CA4300X, NP-CA4355X, NP-CD2100U, NP-CD2120X, NP-CD2300X, NP-CR2100X, NP-CR2170W, NP-CR2170X, NP-CR2200U, NP-CR2200W, NP-CR2280X, NP-CR2310X, NP-CR2350X, NP-MC302XG, NP-MC332WG, NP-MC342XG, NP-MC372X, NP-MC372XG, NP-MC382W, NP-MC382WG, NP-MC422XG, NP-ME342UG, NP-ME372W, NP-ME372WG, NP-ME382U, NP-ME382UG, NP-ME402X, NP-ME402XG, NP-P525UL, NP-P525ULG, NP-P525UL+, NP-P525WL, NP-P525WLG, NP-P525WL+, NP-P605UL, NP-P605ULG, NP-P605UL+, NP-CG6500UL, NP-CG6500WL, NP-CB4500UL, NP-CB4500WL, NP-P525ULH, NP-P525WLH, NP-P605ULH, NP-P554U, NP-P554UG, NP-P554U+, NP-P554W, NP-P554WG, NP-P554W+, NP-P474U, NP-P474UG, NP-P474W, NP-P474WG, NP-P604XG, NP-P604X+, NP-P603XG, NP-P523X+, NP-PE523XG, NP-PE523X+, NP-CF6600U, NP-CF6600W, NP-CF6700X, NP-CF6500X, NP-CB4600U, NP-P554UH, NP-P554WH, NP-P474UH, NP-P474WH, NP-P604XH, NP-P603XH, NP-PE523XH, NP-P502HL-2, NP-P502WL-2, NP-P502HLG-2, NP-P502WLG ,NP-ME401W, NP-ME361W, NP-ME331W, NP-ME301W, NP-ME401X, NP-ME361X, NP-ME331X, NP-ME301X, NP-ME401WG, NP-ME361WG, NP-ME331WG, NP-ME301WG, NP-ME401XG, NP-ME361XG, NP-ME331XG, NP-ME301XG, NP-CA4155W, NP-CA4350X, NP-CA4255X, NP-CA4155X, NP-CA4115X, NP-MC331WG, NP-MC421XG, NP-MC401XG, NP-MC371XG, NP-MC331XG, NP-MC301XG, NP-CK4155W, NP-CK4255X, NP-CK4155X, NP-CK4055X, NP-CM4150X, NP-CM4050X, NP-CK4155WG, NP-CK4255XG, NP-CK4155XG, NP-CR2165W, NP-CR2305X, NP-CR2275X, NP-CR2165X, NP-CR2155X, NP-CD2115X, NP-CD2105X, NP-CM4151X, NP-CR2276X, NP-CD2116X, NP-P502H, NP-P502W, NP-P452H, NP-P452W and 1 more · CVSS 9.5 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Dec 2025 · Tags: CWE-912
- [Mercku M6a: Mercku M6a devices through 2.1.0 allow TELNET sessions via a router.telnet.enabled.update…](https://agentprime.io/advisories/CVE-2025-62773.md)
  `CVE-2025-62773` · CVE record: Mercku M6a · CVSS 2.4 Low · Not analysed yet · Published 22 Oct 2025 · Tags: CWE-912
- [Multiple versions of RG-EST300 provided by Ruijie Networks provide SSH server functionality.](https://agentprime.io/advisories/CVE-2025-58778.md)
  `CVE-2025-58778` · CVE record: Ruijie Networks Co., Ltd. RG-EST300 · CVSS 8.6 High · Not analysed yet · Published 16 Oct 2025 · Tags: CWE-912
- [PiExtract ｜SOOP-CLM - Hidden Functionality](https://agentprime.io/advisories/CVE-2025-11673.md)
  `CVE-2025-11673` · CVE record: PiExtract SOOP-CLM · CVSS 8.6 High · Not analysed yet · Published 13 Oct 2025 · Tags: CWE-912
- [Hidden functionality issue exists in WN-7D36QR and WN-7D36QR/UE.](https://agentprime.io/advisories/CVE-2025-55075.md)
  `CVE-2025-55075` · CVE record: I-O DATA DEVICE, INC. WN-7D36QR and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 17 Sept 2025 · Tags: CWE-912
- [Possibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT key](https://agentprime.io/advisories/CVE-2025-30064.md)
  `CVE-2025-30064` · CVE record: CGM CGM CLININET · CVSS 8.8 High · Not analysed yet · Published 27 Aug 2025 · Tags: Weak cryptography or TLS, CWE-912
- [FNKvision Y215 CCTV Camera Telnet Sevice s1_rf_test_config backdoor](https://agentprime.io/advisories/CVE-2025-9382.md)
  `CVE-2025-9382` · CVE record: FNKvision Y215 CCTV Camera · CVSS 5.4 Medium · Not analysed yet · Published 24 Aug 2025 · Tags: CWE-912
- [ProFTPD 1.3.3c Backdoor Command Execution](https://agentprime.io/advisories/CVE-2010-20103.md)
  `CVE-2010-20103` · CVE record: ProFTPD Project ProFTPD (Professional FTP Daemon) · CVSS 9.3 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.14 · Not analysed yet · Published 20 Aug 2025 · Tags: CWE-912
- [TOTOLINK N350R Telnet Service formSysTel backdoor](https://agentprime.io/advisories/CVE-2025-8938.md)
  `CVE-2025-8938` · CVE record: TOTOLINK N350R · CVSS 5.3 Medium · Not analysed yet · Published 14 Aug 2025 · Tags: CWE-912
- [myBB 1.6.4 Backdoor Arbitrary Command Execution](https://agentprime.io/advisories/CVE-2011-10018.md)
  `CVE-2011-10018` · CVE record: myBB Group Forum Software · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2025 · Tags: Code injection, CWE-912
- [Hidden functionality issue exists in WRC-BE36QS-B and WRC-W701-B.](https://agentprime.io/advisories/CVE-2025-46267.md)
  `CVE-2025-46267` · CVE record: ELECOM CO.,LTD. WRC-BE36QS-B and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 22 Jul 2025 · Tags: CWE-912
- [Netcore / Netis Routers RCE via UDP Port 53413 Backdoor](https://agentprime.io/advisories/CVE-2025-34117.md)
  `CVE-2025-34117` · CVE record: Netcore Technology Router firmware and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.21 · Not analysed yet · Published 16 Jul 2025 · Tags: Command injection, Authentication bypass, CWE-912
- [Conjure Position Department Service Quality Evaluation System head.php eval backdoor](https://agentprime.io/advisories/CVE-2025-6839.md)
  `CVE-2025-6839` · CVE record: Conjure Position Department Service Quality Evaluation System · CVSS 5.3 Medium · Not analysed yet · Published 29 Jun 2025 · Tags: CWE-912
- [Undocumented Root Shell Access in SIMCom SIM7600G Modem](https://agentprime.io/advisories/CVE-2025-26412.md)
  `CVE-2025-26412` · CVE record: SIMCom SIM7600G Modem · CVSS 6.8 Medium · Not analysed yet · Published 11 Jun 2025 · Tags: CWE-912
- [Backdoor Functionality via SSH in eCharge Hardy Barth cPH2 / cPP2 charging stations](https://agentprime.io/advisories/CVE-2025-48416.md)
  `CVE-2025-48416` · CVE record: eCharge Hardy Barth cPH2 / cPP2 charging stations · CVSS 8.1 High · Not analysed yet · Published 21 May 2025 · Tags: CWE-912
- [TeleMessage archiving backend: The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages…](https://agentprime.io/advisories/CVE-2025-47729.md)
  `CVE-2025-47729` · CVE record: TeleMessage archiving backend · CVSS 1.9 Low · Critical (KEV) · In CISA KEV · Not analysed yet · Published 8 May 2025 · Tags: CWE-912
- [Kentico Xperience: Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file…](https://agentprime.io/advisories/CVE-2025-32370.md)
  `CVE-2025-32370` · CVE record: Kentico Xperience · CVSS 7.2 High · Not analysed yet · Published 6 Apr 2025 · Tags: CWE-912
- [Unitree Go1 Robot Dog Backdoor Control Channel](https://agentprime.io/advisories/CVE-2025-2894.md)
  `CVE-2025-2894` · CVE record: Unitree Go1 · CVSS 6.6 Medium · Not analysed yet · Published 28 Mar 2025 · Tags: CWE-912
- [Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).](https://agentprime.io/advisories/CVE-2025-27840.md)
  `CVE-2025-27840` · CVE record: Espressif ESP32 · CVSS 6.8 Medium · Not analysed yet · Published 8 Mar 2025 · Tags: CWE-912
- [The "update" binary in the firmware of the affected product sends attempts to mount to a hard-coded, routable IP address, bypassing existing device network settings to do so.](https://agentprime.io/advisories/CVE-2025-1204.md)
  `CVE-2025-1204` · CVE record: Contec Health CMS8000 Patient Monitor · CVSS 7.7 High · Not analysed yet · Published 25 Feb 2025 · Tags: CWE-912
- [Elber Communications Equipment Hidden Functionality](https://agentprime.io/advisories/CVE-2025-0675.md)
  `CVE-2025-0675` · CVE record: Elber Signum DVB-S/S2 IRD and 4 more · CVSS 8.7 High · Not analysed yet · Published 6 Feb 2025 · Tags: CWE-912
- [Hidden Functionality vulnerability in Contec Health CMS8000 Patient Monitor](https://agentprime.io/advisories/CVE-2025-0626.md)
  `CVE-2025-0626` · CVE record: Contec Health CMS8000 Patient Monitor · CVSS 7.7 High · Not analysed yet · Published 30 Jan 2025 · Tags: CWE-912
- [Wavlink AC3000: A static login vulnerability exists in the wctrls functionality of Wavlink AC3000…](https://agentprime.io/advisories/CVE-2024-39754.md)
  `CVE-2024-39754` · CVE record: Wavlink Wavlink AC3000 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-912
- [Command injection in ASUS Router](https://agentprime.io/advisories/CVE-2024-13062.md)
  `CVE-2024-13062` · CVE record: ASUS Router · CVSS 7.2 High · Not analysed yet · Published 2 Jan 2025 · Tags: Command injection, CWE-912
- [SICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for pass-the-hash attacks](https://agentprime.io/advisories/CVE-2024-10773.md)
  `CVE-2024-10773` · CVE record: SICK AG SICK InspectorP61x and 2 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Dec 2024 · Tags: CWE-912
- [Hidden functionality issue in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remote authenticated attacker to execute an arbitrary OS command on the device or al…](https://agentprime.io/advisories/CVE-2024-47001.md)
  `CVE-2024-47001` · CVE record: TAKENAKA ENGINEERING CO., LTD. HDVR-400 and 4 more · CVSS 8.8 High · Not analysed yet · Published 18 Sept 2024 · Tags: CWE-912
- [D-Link WiFi router - Hidden Functionality](https://agentprime.io/advisories/CVE-2024-45697.md)
  `CVE-2024-45697` · CVE record: D-Link DIR-X4860 A1 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2024 · Tags: CWE-912
- [D-Link WiFi router - Hidden Functionality](https://agentprime.io/advisories/CVE-2024-45696.md)
  `CVE-2024-45696` · CVE record: D-Link DIR-X4860 A1 and 1 more · CVSS 8.8 High · Not analysed yet · Published 16 Sept 2024 · Tags: CWE-912
- [Siemens SIMATIC Reader RF610R CMIIT: A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0)…](https://agentprime.io/advisories/CVE-2024-37994.md)
  `CVE-2024-37994` · CVE record: Siemens SIMATIC Reader RF610R CMIIT and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-912
- [Siemens SIMATIC Reader RF610R CMIIT: A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0)…](https://agentprime.io/advisories/CVE-2024-37990.md)
  `CVE-2024-37990` · CVE record: Siemens SIMATIC Reader RF610R CMIIT and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-912
- [A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an affected system by using a static administrative credential.](https://agentprime.io/advisories/CVE-2024-20439.md)
  `CVE-2024-20439` · CVE record: Cisco Cisco Smart License Utility · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.97 · Not analysed yet · Published 4 Sept 2024 · Tags: CWE-912
- [Longse Technology LBH30FE200W: Longse model LBH30FE200W cameras, as well as products based on this device…](https://agentprime.io/advisories/CVE-2024-5633.md)
  `CVE-2024-5633` · CVE record: Longse Technology LBH30FE200W and 1 more · CVSS 7.5 High · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-912
- [D-Link router - Hidden Backdoor](https://agentprime.io/advisories/CVE-2024-6045.md)
  `CVE-2024-6045` · CVE record: D-Link G403 and 4 more · CVSS 8.8 High · Not analysed yet · Published 17 Jun 2024 · Tags: Hard-coded credentials, CWE-912

Older: <https://agentprime.io/advisories/tag/cwe-912.md?cursor=WyIyMDI0LTA2LTE3VDAzOjEyOjE0LjEzNzAwMFoiLCJDVkUtMjAyNC02MDQ1Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-912>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-912/>. Everything for agents: <https://agentprime.io/llms.txt>.
