# CWE-940.

Every Advisory and CVE whose sources give the weakness CWE-940, newest first.

## Records, newest first

- [vsftpd through 3.0.5 require_ssl_reuse Bypass via FTPS Data Channel Hijacking](https://agentprime.io/advisories/CVE-2026-119568.md)
  `CVE-2026-119568` · CVE record: vsftpd vsftpd · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-940
- [Unvalidated ZWAVE_CMD_NODES_EXIST May Cause Deletion of End Nodes](https://agentprime.io/advisories/CVE-2026-89409.md)
  `CVE-2026-89409` · CVE record: Silicon Labs Z-Wave SDK · CVSS 5.3 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-940
- [Dis-connect vulnerability in Connect Stack](https://agentprime.io/advisories/CVE-2026-66279.md)
  `CVE-2026-66279` · CVE record: Silicon Labs Connect SDK · CVSS 7.2 High · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-940
- [Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()](https://agentprime.io/advisories/CVE-2026-112408.md)
  `CVE-2026-112408` · CVE record: AWS Amazon SageMaker Python SDK · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-940
- [ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "\*" (out)](https://agentprime.io/advisories/GHSA-vqff-r82h-9crc.md)
  `GHSA-vqff-r82h-9crc`, `CVE-2026-76894` · npm `@aborruso/ckan-mcp-server`: affected `<0.4.112`, fixed in `0.4.112` · CVSS 3.1 Low · Not analysed yet · Published 16 Oct 2026 · Tags: CWE-345, CWE-940
- [Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP DNS resolver](https://agentprime.io/advisories/CVE-2026-102552.md)
  `CVE-2026-102552` · CVE record: FreeRTOS FreeRTOS-Plus-TCP · CVSS 8.2 High · Not analysed yet · Published 16 Oct 2026 · Tags: CWE-940
- [Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling](https://agentprime.io/advisories/CVE-2026-102551.md)
  `CVE-2026-102551` · CVE record: FreeRTOS FreeRTOS-Plus-TCP · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Oct 2026 · Tags: CWE-940
- [Angular DevTools (Local DoS)](https://agentprime.io/advisories/CVE-2026-101897.md)
  `CVE-2026-101897` · CVE record: angular angular and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-346, CWE-441, CWE-940
- [Windows Hyper-V Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-87705.md)
  `CVE-2026-87705` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.4 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-940
- [WordPress Sell Downloads plugin <= 1.2.3 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2026-94590.md)
  `CVE-2026-94590` · CVE record: CodePeople2 Sell Downloads · CVSS 6.5 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: CWE-940
- [Active agent heartbeat missing TLS check](https://agentprime.io/advisories/CVE-2026-59786.md)
  `CVE-2026-59786` · CVE record: Zabbix Zabbix · CVSS 6.9 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-940
- [Kiteworks Core Remote Code Execution](https://agentprime.io/advisories/CVE-2026-102117.md)
  `CVE-2026-102117` · CVE record: Kiteworks Core · CVSS 7.2 High · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-807, CWE-940
- [Apache PLC4X, Apache PLC4X, Apache PLC4X, Apache PLC4X: ADS discovery accepts spoofed responses and derives the connection target from them](https://agentprime.io/advisories/CVE-2026-102511.md)
  `CVE-2026-102511` · CVE record: Apache Software Foundation Apache PLC4X · CVSS 8.5 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service, CWE-129, CWE-248, CWE-940
- [YAMAP INC. YAMAP -Social Trekking GPS App: The Android application "YAMAP -Social Trekking GPS App" contains an improper access…](https://agentprime.io/advisories/CVE-2026-85125.md)
  `CVE-2026-85125` · CVE record: YAMAP INC. YAMAP -Social Trekking GPS App · CVSS 5.1 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: CWE-940
- [Howyar｜WeenyGenius - Origin Validation Error](https://agentprime.io/advisories/CVE-2026-89178.md)
  `CVE-2026-89178` · CVE record: Howyar WeenyGenius · CVSS 8.7 High · Not analysed yet · Published 11 Sept 2026 · Tags: CWE-940
- [Canva: The Canva Android App before 2.376.0 allowed an external origin to be loaded in a…](https://agentprime.io/advisories/CVE-2026-85085.md)
  `CVE-2026-85085` · CVE record: Canva Canva · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2026 · Tags: CWE-940
- [Le-yan｜Medical Practice Management System - Remote Code Execution](https://agentprime.io/advisories/CVE-2026-78685.md)
  `CVE-2026-78685` · CVE record: Le-yan Medical Practice Management System · CVSS 8.6 High · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-940
- [Auth.js: OAuth state, nonce, and PKCE check cookies are not bound to the provider that created them](https://agentprime.io/advisories/GHSA-x445-f3h2-j279.md)
  `GHSA-x445-f3h2-j279`, `CVE-2026-73419` · npm `@auth/core` and 1 more: affected `<0.41.3`, fixed in `0.41.3` · CVSS 6.8 Medium · Not analysed yet · Published 23 Jul 2026 · Tags: CWE-345, CWE-346, CWE-940
- [TinaCMS: Cross-origin postMessage handlers and rich-text URL-sanitization bypass enable stored XSS and session takeover](https://agentprime.io/advisories/GHSA-g5qx-h5f3-mp2f.md)
  `GHSA-g5qx-h5f3-mp2f`, `CVE-2026-55660` · npm `tinacms` and 1 more: affected `<3.9.3`, fixed in `3.9.3` · CVSS 7.6 High · Not analysed yet · Published 19 Jun 2026 · Tags: Cross-site scripting (XSS), Open redirect, CWE-346, CWE-940
- [undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse](https://agentprime.io/advisories/GHSA-hm92-r4w5-c3mj.md)
  `GHSA-hm92-r4w5-c3mj`, `CVE-2026-6734` · npm `undici`: affected `>=7.23.0, <7.28.0 || >=8.0.0, <8.2.0`, fixed in `7.28.0`, `8.2.0` · CVSS 7.5 High · Not analysed yet · Published 19 Jun 2026 · Tags: CWE-346, CWE-940
- [U.S. GAO EPDS and CBCA EDS network access control bypass](https://agentprime.io/advisories/CVE-2026-54106.md)
  `CVE-2026-54106` · CVE record: Government Accountability Office Electronic Protest Docketing System (EPDS) and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 18 Jun 2026 · Tags: CWE-940
- [Traccar Client: silent configuration hijack via unverified deep link redirects all GPS telemetry](https://agentprime.io/advisories/CVE-2026-48745.md)
  `CVE-2026-48745` · CVE record: traccar traccar-client · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2026 · Tags: CWE-940
- [@hapi/wreck: Sensitive credential headers leak across cross-port and cross-scheme redirects](https://agentprime.io/advisories/GHSA-x426-x7cc-3fpc.md)
  `GHSA-x426-x7cc-3fpc`, `CVE-2026-48022` · npm `@hapi/wreck`: affected `<18.1.2`, fixed in `18.1.2` · CVSS 6.5 Medium · Not analysed yet · Published 11 Jun 2026 · Tags: Information disclosure, Weak cryptography or TLS, Hard-coded credentials, CWE-346
- [Netty's Default QUIC token handler accepts any client-supplied token](https://agentprime.io/advisories/GHSA-cmm3-54f8-px4j.md)
  `GHSA-cmm3-54f8-px4j`, `CVE-2026-44894` · Maven `io.netty:netty-codec-classes-quic`: affected `>=4.2.0.Final, <4.2.15.Final`, fixed in `4.2.15.Final` · CVSS 7.5 High · Not analysed yet · Published 8 Jun 2026 · Tags: CWE-346, CWE-940
- [Home Assistant: Cross-origin iframe access token exfiltration via WebView JS bridge callback injection](https://agentprime.io/advisories/CVE-2026-44698.md)
  `CVE-2026-44698` · CVE record: home-assistant core and 2 more · CVSS 8.3 High · Not analysed yet · Published 29 May 2026 · Tags: Code injection, CWE-346, CWE-749, CWE-940
- [MLflow: Improper Origin Validation in MLflow Assistant /ajax-api Endpoints Enables Browser-Mediated Local Command Execution](https://agentprime.io/advisories/GHSA-67c5-x5mf-rppq.md)
  `GHSA-67c5-x5mf-rppq`, `BIT-mlflow-2026-2611`, `CVE-2026-2611`, `PYSEC-2026-418` · PyPI `mlflow`: affected `>=3.9.0, <3.10.0`, fixed in `3.10.0` · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 May 2026 · Tags: CWE-346, CWE-940
- [Summarize's hover summary feature allows malicious pages to dispatch synthetic mouseover events over attacker-controlled links](https://agentprime.io/advisories/GHSA-2r69-qgv3-hr65.md)
  `GHSA-2r69-qgv3-hr65`, `CVE-2026-45245` · npm `@steipete/summarize`: affected `<0.15.1`, fixed in `0.15.1` · CVSS 4.6 Medium · Not analysed yet · Published 18 May 2026 · Tags: Server-side request forgery (SSRF), CWE-940
- [Electerm Local code through electerm's single-instance socket](https://agentprime.io/advisories/GHSA-7p5m-v798-f8vv.md)
  `GHSA-7p5m-v798-f8vv`, `CVE-2026-45353` · npm `electerm`: affected `>=3.0.6, <3.9.0`, fixed in `3.9.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 May 2026 · Tags: Code injection, Broken access control, CWE-940
- [AVideo: Unauthenticated Arbitrary Email Sending via sendEmail.json.php Enables Phishing from the Site’s Legitimate From Address](https://agentprime.io/advisories/GHSA-5hgj-7gm9-cff5.md)
  `GHSA-5hgj-7gm9-cff5`, `CVE-2026-43880`, `PKSA-7c98-nyt4-qt25` · Packagist `wwbn/avideo`: affected `<=29.0`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 5 May 2026 · Tags: CWE-940
- [Facebook WhatsApp for Android: Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for…](https://agentprime.io/advisories/CVE-2026-23866.md)
  `CVE-2026-23866` · CVE record: Facebook WhatsApp for Android and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 1 May 2026 · Tags: CWE-940
- [Anviz CrossChex Standard Improper Verification of Source of a Communication Channel](https://agentprime.io/advisories/CVE-2026-40434.md)
  `CVE-2026-40434` · CVE record: Anviz Anviz CrossChex Standard · CVSS 8.1 High · Not analysed yet · Published 17 Apr 2026 · Tags: CWE-940
- [Authenticator Vulnerable to Authentication Flow Hijack](https://agentprime.io/advisories/CVE-2026-33875.md)
  `CVE-2026-33875` · CVE record: gematik app-Authenticator · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Mar 2026 · Tags: CWE-940
- [OpenClaw: Arbitrary code execution via unvalidated WebView JavascriptInterface](https://agentprime.io/advisories/GHSA-cxmw-p77q-wchg.md)
  `GHSA-cxmw-p77q-wchg`, `CVE-2026-35643` · npm `openclaw`: affected `<2026.3.22`, fixed in `2026.3.22` · CVSS 8.6 High · Not analysed yet · Published 26 Mar 2026 · Tags: Command injection, CWE-940
- [Easy Chat Server 3.1 Denial of Service via message Parameter](https://agentprime.io/advisories/CVE-2019-25613.md)
  `CVE-2019-25613` · CVE record: Echatserver Easy Chat · CVSS 8.7 High · Not analysed yet · Published 22 Mar 2026 · Tags: CWE-940
- [Cesanta Mongoose TCP Sequence Number net_builtin.c getpeer verification of source](https://agentprime.io/advisories/CVE-2026-2967.md)
  `CVE-2026-2967` · CVE record: Cesanta Mongoose · CVSS 6.3 Medium · Not analysed yet · Published 23 Feb 2026 · Tags: CWE-940
- [Dell PowerProtect Data Manager: Dell PowerProtect Data Manager, version(s) prior to 19.22…](https://agentprime.io/advisories/CVE-2026-22269.md)
  `CVE-2026-22269` · CVE record: Dell PowerProtect Data Manager · CVSS 4.7 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: CWE-940
- [Fortinet FortiOS: An Improper Verification of Source of a Communication Channel vulnerability \[CWE-940\]…](https://agentprime.io/advisories/CVE-2025-62439.md)
  `CVE-2025-62439` · CVE record: Fortinet FortiOS · CVSS 3.8 Low · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-940
- [Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range.](https://agentprime.io/advisories/CVE-2025-40820.md)
  `CVE-2025-40820` · CVE record: Siemens SIDOOR ATD430W and 4 more · CVSS 8.7 High · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-940
- [OpenVPN: Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and…](https://agentprime.io/advisories/CVE-2025-13086.md)
  `CVE-2025-13086` · CVE record: OpenVPN OpenVPN · CVSS 4.6 Medium · Not analysed yet · Published 3 Dec 2025 · Tags: CWE-940
- [Due to a firewall misconfiguration, Kerlink devices running KerOS prior to 5.12 incorrectly accept specially crafted UDP packets.](https://agentprime.io/advisories/CVE-2024-32388.md)
  `CVE-2024-32388` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 1 Dec 2025 · Tags: CWE-402, CWE-940
- [MOTEX Inc. Lanscope Endpoint Manager (On-Premises) (Client…: Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA))…](https://agentprime.io/advisories/CVE-2025-61932.md)
  `CVE-2025-61932` · CVE record: MOTEX Inc. Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) · CVSS 9.3 Critical · Critical (KEV, CVSS 9+) · In CISA KEV · Not analysed yet · Published 20 Oct 2025 · Tags: CWE-940
- [The issue was resolved by not loading remote images.](https://agentprime.io/advisories/CVE-2025-43280.md)
  `CVE-2025-43280` · CVE record: Apple iOS and iPadOS · CVSS 4.7 Medium · Not analysed yet · Published 15 Oct 2025 · Tags: CWE-940
- [SillyTavern Web Interface Vulnerable DNS Rebinding](https://agentprime.io/advisories/GHSA-7cxj-w27x-x78q.md)
  `GHSA-7cxj-w27x-x78q`, `CVE-2025-59159` · npm `sillytavern`: affected `<1.13.4`, fixed in `1.13.4` · CVSS 9.7 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2025 · Tags: CWE-346, CWE-940
- [A vulnerability in the IPv6 Router Advertisement (RA) packet processing of Cisco Access Point Software could allow an unauthenticated, adjacent attacker to modify the IPv6 gateway on an affected devi…](https://agentprime.io/advisories/CVE-2025-20365.md)
  `CVE-2025-20365` · CVE record: Cisco Cisco Aironet Access Point Software (IOS XE Controller) · CVSS 4.3 Medium · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-940
- [Improper validation of payload elements](https://agentprime.io/advisories/CVE-2025-9999.md)
  `CVE-2025-9999` · CVE record: arcinfo PcVue · CVSS 7.6 High · Not analysed yet · Published 5 Sept 2025 · Tags: CWE-940, CWE-1288
- [Insufficiently Secure Hostname Verification for Outbound TLS Connections in SAP NetWeaver Application Server Java](https://agentprime.io/advisories/CVE-2025-42978.md)
  `CVE-2025-42978` · CVE record: SAP_SE SAP NetWeaver Application Server Java · CVSS 3.5 Low · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-940
- [Incorrect calculation in AMD Versal Adaptive SoC Devices and others](https://agentprime.io/advisories/CVE-2025-0036.md)
  `CVE-2025-0036` · CVE record: AMD Versal Adaptive SoC Devices and 4 more · CVSS 3.2 Low · Not analysed yet · Published 9 Jun 2025 · Tags: Information disclosure, Denial of service, CWE-682, CWE-940
- [Home Assistant does not correctly validate SSL for outgoing requests in core and used libs](https://agentprime.io/advisories/GHSA-m3pm-rpgg-5wj6.md)
  `GHSA-m3pm-rpgg-5wj6`, `CVE-2025-25305`, `PYSEC-2026-1452` · PyPI `homeassistant`: affected `<2024.1.6`, fixed in `2024.1.6` · CVSS 7.0 High · Not analysed yet · Published 18 Feb 2025 · Tags: Weak cryptography or TLS, CWE-940
- [Deepin dde-api-proxy: An issue was discovered in Deepin dde-api-proxy through 1.0.19 in which unprivileged…](https://agentprime.io/advisories/CVE-2025-23222.md)
  `CVE-2025-23222` · CVE record: Deepin dde-api-proxy · CVSS 8.4 High · Not analysed yet · Published 24 Jan 2025 · Tags: CWE-940
- [Dos in ZigBee device due to unsolicited encrypted rejoin response](https://agentprime.io/advisories/CVE-2024-7322.md)
  `CVE-2024-7322` · CVE record: silabs.com EmberZNet · CVSS 5.8 Medium · Not analysed yet · Published 15 Jan 2025 · Tags: CWE-940
- [Fortinet FortiClientEMS: An improper verification of source of a communication channel vulnerability \[CWE-940\] in…](https://agentprime.io/advisories/CVE-2024-36506.md)
  `CVE-2024-36506` · CVE record: Fortinet FortiClientEMS · CVSS 3.5 Low · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-940
- [IETF IPv6: IPv6-in-IPv4 tunneling (RFC 4213) allows an attacker to spoof and route traffic via an…](https://agentprime.io/advisories/CVE-2025-23019.md)
  `CVE-2025-23019` · CVE record: IETF IPv6 · CVSS 5.4 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-940
- [IETF IPv6: IPv4-in-IPv6 and IPv6-in-IPv6 tunneling (RFC 2473) do not require the validation or…](https://agentprime.io/advisories/CVE-2025-23018.md)
  `CVE-2025-23018` · CVE record: IETF IPv6 · CVSS 5.4 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-940
- [JetBrains YouTrack: In JetBrains YouTrack before 2024.3.47197 insecure plugin iframe allowed arbitrary…](https://agentprime.io/advisories/CVE-2024-49579.md)
  `CVE-2024-49579` · CVE record: JetBrains YouTrack · CVSS 8.1 High · Not analysed yet · Published 17 Oct 2024 · Tags: CWE-940
- [Cisco IOS XR Software Dedicated XML Agent TCP Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-20390.md)
  `CVE-2024-20390` · CVE record: Cisco Cisco IOS XR Software · CVSS 5.3 Medium · Not analysed yet · Published 11 Sept 2024 · Tags: CWE-940
- [uniFLOW Online device registration susceptible to compromise](https://agentprime.io/advisories/CVE-2024-1621.md)
  `CVE-2024-1621` · CVE record: NT-ware uniFLOW Online · CVSS 8.3 High · Not analysed yet · Published 2 Sept 2024 · Tags: CWE-940
- [usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos](https://agentprime.io/advisories/GHSA-vh43-cc6x-prpr.md)
  `GHSA-vh43-cc6x-prpr`, `CVE-2022-4848`, `GO-2022-1266` · Go `github.com/usememos/memos`: affected `<0.9.1`, fixed in `0.9.1` · CVSS 8.6 High · Not analysed yet · Published 21 Aug 2024 · Tags: CWE-940
- [usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos](https://agentprime.io/advisories/GHSA-mfvq-m3jj-8864.md)
  `GHSA-mfvq-m3jj-8864`, `CVE-2022-4800`, `GO-2022-1240` · Go `github.com/usememos/memos`: affected `<0.9.1`, fixed in `0.9.1` · CVSS 8.6 High · Not analysed yet · Published 21 Aug 2024 · Tags: CWE-940
- [An issue in Horizon Business Services Inc.](https://agentprime.io/advisories/CVE-2024-38886.md)
  `CVE-2024-38886` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Aug 2024 · Tags: CWE-940
- [An issue in H3C Technologies Co., Limited H3C Magic RC3000 RC3000V100R009 allows a remote attacker to execute arbitrary code via the Routing functionality.](https://agentprime.io/advisories/CVE-2024-40516.md)
  `CVE-2024-40516` · CVE record · CVSS 8.8 High · Not analysed yet · Published 16 Jul 2024 · Tags: CWE-940

Older: <https://agentprime.io/advisories/tag/cwe-940.md?cursor=WyIyMDI0LTA3LTE2VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyNC00MDUxNiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-940>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-940/>. Everything for agents: <https://agentprime.io/llms.txt>.