<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-939</title><description>Every new CWE-939 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-90631: Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables</title><link>https://agentprime.io/advisories/CVE-2026-90631/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90631/</guid><description>CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 04 Nov 2026 11:04:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-91901: Dell Alienware Command Center (AWCC): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0…</title><link>https://agentprime.io/advisories/CVE-2026-91901/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-91901/</guid><description>CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 02 Nov 2026 20:11:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-91900: Dell Alienware Command Center (AWCC): Dell Alienware Command Center (AWCC), version(s) Versions up to and including 6.14.20.0…</title><link>https://agentprime.io/advisories/CVE-2026-91900/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-91900/</guid><description>CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 02 Nov 2026 20:04:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-118677: n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instance</title><link>https://agentprime.io/advisories/CVE-2026-118677/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-118677/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 18:59:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-113411: Nerimity Desktop Window Open mainWindow.js shell.openExternal improper authorization in handler for custom url scheme</title><link>https://agentprime.io/advisories/CVE-2026-113411/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-113411/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Oct 2026 14:30:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-96614: &quot;ゲオアプリ&quot; provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme.</title><link>https://agentprime.io/advisories/CVE-2026-96614/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-96614/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 15 Oct 2026 08:25:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-53418: Zoom Communications Zoom Workplace: Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android…</title><link>https://agentprime.io/advisories/CVE-2026-53418/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-53418/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 14:15:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-92862: Wavedash Co., Ltd. Ticket Ryutsu Center: The Android application &quot;Ticket Ryutsu Center&quot; improperly handles custom URL schemes…</title><link>https://agentprime.io/advisories/CVE-2026-92862/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-92862/</guid><description>CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Oct 2026 02:54:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73335: Android application &quot;Myna Point&quot; is vulnerable to Improper Authorization in Handler for Custom URL Scheme (CWE-939).</title><link>https://agentprime.io/advisories/CVE-2026-73335/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73335/</guid><description>CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 26 Aug 2026 04:54:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-21075: Samsung Mobile My Galaxy: Improper authorization in handler for custom URL scheme in My Galaxy prior to version 6.3…</title><link>https://agentprime.io/advisories/CVE-2026-21075/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-21075/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 10 Aug 2026 07:42:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-21062: Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data.</title><link>https://agentprime.io/advisories/CVE-2026-21062/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-21062/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 10 Aug 2026 07:40:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-59717: Home Assistant Companion: `homeassistant://invite` Deep Link Credential Phishing</title><link>https://agentprime.io/advisories/CVE-2026-59717/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59717/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Aug 2026 20:19:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12190: Genspark AI Workspace App ai.mainfunc.genspark improper authorization in handler for custom url scheme</title><link>https://agentprime.io/advisories/CVE-2026-12190/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12190/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 14 Jun 2026 22:45:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12189: Moovit Bus &amp; Public Transit App com.tranzmate improper authorization in handler for custom url scheme</title><link>https://agentprime.io/advisories/CVE-2026-12189/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12189/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 14 Jun 2026 22:30:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-53408: Zoom Communications Zoom Workplace: Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version…</title><link>https://agentprime.io/advisories/CVE-2026-53408/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-53408/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 12 Jun 2026 17:57:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-53407: Zoom Communications Zoom Workplace: Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version…</title><link>https://agentprime.io/advisories/CVE-2026-53407/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-53407/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 12 Jun 2026 17:56:26 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12065: Groww Stock, Mutual Fund, Gold App WebView URL improper authorization in handler for custom url scheme</title><link>https://agentprime.io/advisories/CVE-2026-12065/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12065/</guid><description>CVSS 1.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 12 Jun 2026 12:30:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-6445: Everpure FlashArray: A flaw exists in FlashArray Purity where insufficient filtering of certain data paths…</title><link>https://agentprime.io/advisories/CVE-2026-6445/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-6445/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Jun 2026 18:40:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-3471: Opening a window with {{javascript:alert()}} as URL causes crash in the Mattermost Desktop App</title><link>https://agentprime.io/advisories/CVE-2026-3471/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3471/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 18 May 2026 08:45:44 GMT</pubDate><category>CVE</category></item><item><title>@mobilenext/mobile-mcp: Arbitrary Android Intent Execution via mobile_open_url</title><link>https://agentprime.io/advisories/GHSA-5qhv-x9j4-c3vm/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-5qhv-x9j4-c3vm/</guid><description>@mobilenext/mobile-mcp &lt;0.0.50, fixed in 0.0.50. CVSS 8.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Sat, 04 Apr 2026 05:37:10 GMT</pubDate><category>npm</category><category>@mobilenext/mobile-mcp</category></item><item><title>CVE-2026-33335: Vikunja Desktop allows arbitrary local application invocation via unvalidated shell.openExternal</title><link>https://agentprime.io/advisories/CVE-2026-33335/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33335/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 24 Mar 2026 15:07:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-26123: Microsoft Authenticator Information Disclosure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-26123/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-26123/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 10 Mar 2026 19:01:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-1046: Arbitrary application execution via unvalidated server-controlled URLs in Help menu</title><link>https://agentprime.io/advisories/CVE-2026-1046/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-1046/</guid><description>CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 16 Feb 2026 12:10:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-67739: JetBrains TeamCity: In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to…</title><link>https://agentprime.io/advisories/CVE-2025-67739/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-67739/</guid><description>CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 11 Dec 2025 15:19:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-41408: Improper authorization in handler for custom URL scheme issue in &quot;Yahoo!</title><link>https://agentprime.io/advisories/CVE-2025-41408/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-41408/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 05 Sep 2025 05:25:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-5020: Links using non-HTTP schemes opened from other apps such as Safari could have allowed spoofing of website addresses</title><link>https://agentprime.io/advisories/CVE-2025-5020/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-5020/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 21 May 2025 17:18:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-54125: SHUEISHA INC. &quot;Shonen Jump+&quot; App for Android: Improper authorization in handler for custom URL scheme issue in &quot;Shonen Jump+&quot; App for…</title><link>https://agentprime.io/advisories/CVE-2024-54125/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-54125/</guid><description>CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 17 Dec 2024 05:36:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-54014: SKYLARK HOLDINGS CO., LTD. &apos;Skylark&apos; App for Android: Improper authorization in handler for custom URL scheme issue in &apos;Skylark&apos; App for…</title><link>https://agentprime.io/advisories/CVE-2024-54014/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-54014/</guid><description>CVSS 3.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 05 Dec 2024 02:42:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-45203: istyle Inc. &quot;@cosme&quot; App for Android: Improper authorization in handler for custom URL scheme issue in &quot;@cosme&quot; App for Android…</title><link>https://agentprime.io/advisories/CVE-2024-45203/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-45203/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 09 Sep 2024 06:42:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-41918: Rakuten Group, Inc. &apos;Rakuten Ichiba App&apos; for Android: &apos;Rakuten Ichiba App&apos; for Android 12.4.0 and earlier and &apos;Rakuten Ichiba App&apos; for iOS…</title><link>https://agentprime.io/advisories/CVE-2024-41918/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-41918/</guid><description>CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Aug 2024 02:47:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-35298: ZOZO, Inc. &apos;ZOZOTOWN&apos; App for Android: Improper authorization in handler for custom URL scheme issue in &apos;ZOZOTOWN&apos; App for…</title><link>https://agentprime.io/advisories/CVE-2024-35298/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-35298/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Jun 2024 05:07:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-33606: MicroDicom DICOM Viewer Improper Authorization in Handler for Custom URL Scheme</title><link>https://agentprime.io/advisories/CVE-2024-33606/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-33606/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Jun 2024 20:17:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-43582: Zoom Video Communications, Inc. Zoom Clients: Improper authorization in some Zoom clients may allow an authorized user to conduct an…</title><link>https://agentprime.io/advisories/CVE-2023-43582/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-43582/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Nov 2023 23:12:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-20736: Cisco AppDynamics Controller Authorization Bypass Vulnerability</title><link>https://agentprime.io/advisories/CVE-2022-20736/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-20736/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 15 Jun 2022 17:55:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-31384: Junos OS: SRX Series: Under a specific device configuration an attacker can access the devices J-Web management services from any interface, regardless of security settings protecting the service</title><link>https://agentprime.io/advisories/CVE-2021-31384/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-31384/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 19 Oct 2021 18:17:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-11000: Improper URL validation in GreenBrowser</title><link>https://agentprime.io/advisories/CVE-2020-11000/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-11000/</guid><description>CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Apr 2020 16:30:15 GMT</pubDate><category>CVE</category></item></channel></rss>