Advisories · Weakness
CWE-940.
Every Advisory and CVE whose sources give the weakness CWE-940, newest first.
- CVSS 9.1 CriticalCritical · CVSS 9+
vsftpd through 3.0.5 require_ssl_reuse Bypass via FTPS Data Channel Hijacking
- vsftpd
- CWE-940
- CVSS 5.3 Medium
Unvalidated ZWAVE_CMD_NODES_EXIST May Cause Deletion of End Nodes
- Silicon Labs Z-Wave SDK
- CWE-940
- CVSS 7.2 High
Dis-connect vulnerability in Connect Stack
- Silicon Labs Connect SDK
- CWE-940
- CVSS 9.4 CriticalCritical · CVSS 9+
Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()
- AWS Amazon SageMaker Python SDK
- CWE-940
- CVSS 3.1 Low
ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)
- CWE-345
- CWE-940
<0.4.112 · fixed in 0.4.112
GHSA-vqff-r82h-9crc · CVE-2026-76894 - CVSS 8.2 High
Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP DNS resolver
- FreeRTOS-Plus-TCP
- CWE-940
- CVSS 9.2 CriticalCritical · CVSS 9+
Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling
- FreeRTOS-Plus-TCP
- CWE-940
- CVSS 5.1 Medium
Angular DevTools (Local DoS)
- angular
- angular DevTools
- CWE-346
- CWE-441
- CVSS 7.4 High
Windows Hyper-V Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-940
- CVSS 6.5 Medium
WordPress Sell Downloads plugin <= 1.2.3 - Broken Access Control vulnerability
- CodePeople2 Sell Downloads
- CWE-940
- CVSS 6.9 Medium
Active agent heartbeat missing TLS check
- Zabbix
- CWE-940
- CVSS 7.2 High
Kiteworks Core Remote Code Execution
- Kiteworks Core
- CWE-807
- CWE-940
- CVSS 8.5 High
Apache PLC4X, Apache PLC4X, Apache PLC4X, Apache PLC4X: ADS discovery accepts spoofed responses and derives the connection target from them
- Apache Software Foundation Apache PLC4X
- Denial of service
- CWE-129
- CVSS 5.1 Medium
YAMAP INC. YAMAP -Social Trekking GPS App: The Android application "YAMAP -Social Trekking GPS App" contains an improper access…
- YAMAP INC. YAMAP -Social Trekking GPS App
- CWE-940
- CVSS 8.7 High
Howyar｜WeenyGenius - Origin Validation Error
- Howyar WeenyGenius
- CWE-940
- CVSS 9.6 CriticalCritical · CVSS 9+
Canva: The Canva Android App before 2.376.0 allowed an external origin to be loaded in a…
- Canva
- CWE-940
- CVSS 8.6 High
Le-yan｜Medical Practice Management System - Remote Code Execution
- Le-yan Medical Practice Management System
- CWE-940
- CVSS 6.8 Medium
Auth.js: OAuth state, nonce, and PKCE check cookies are not bound to the provider that created them
- CWE-345
- CWE-346
<0.41.3 · fixed in 0.41.3
GHSA-x445-f3h2-j279 · CVE-2026-73419 - CVSS 7.6 High
TinaCMS: Cross-origin postMessage handlers and rich-text URL-sanitization bypass enable stored XSS and session takeover
- Cross-site scripting (XSS)
- Open redirect
<3.9.3 · fixed in 3.9.3
GHSA-g5qx-h5f3-mp2f · CVE-2026-55660 - CVSS 7.5 High
undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse
- CWE-346
- CWE-940
>=7.23.0, <7.28.0 || >=8.0.0, <8.2.0 · fixed in 7.28.0, 8.2.0
GHSA-hm92-r4w5-c3mj · CVE-2026-6734 - CVSS 5.1 Medium
U.S. GAO EPDS and CBCA EDS network access control bypass
- Government Accountability Office Electronic Protest Docketing System (EPDS)
- Civilian Board of Contract Appeals Electronic Docketing System (EDS)
- CWE-940
- CVSS 9.3 CriticalCritical · CVSS 9+
Traccar Client: silent configuration hijack via unverified deep link redirects all GPS telemetry
- traccar-client
- CWE-940
- CVSS 6.5 Medium
@hapi/wreck: Sensitive credential headers leak across cross-port and cross-scheme redirects
- Information disclosure
- Weak cryptography or TLS
<18.1.2 · fixed in 18.1.2
GHSA-x426-x7cc-3fpc · CVE-2026-48022 - CVSS 7.5 High
Netty's Default QUIC token handler accepts any client-supplied token
- CWE-346
- CWE-940
>=4.2.0.Final, <4.2.15.Final · fixed in 4.2.15.Final
GHSA-cmm3-54f8-px4j · CVE-2026-44894 - CVSS 8.3 High
Home Assistant: Cross-origin iframe access token exfiltration via WebView JS bridge callback injection
- home-assistant core
- Home Assistant Companion app (iOS)
- Code injection
- CWE-346
- CVSS 9.6 CriticalCritical · CVSS 9+
MLflow: Improper Origin Validation in MLflow Assistant /ajax-api Endpoints Enables Browser-Mediated Local Command Execution
- CWE-346
- CWE-940
>=3.9.0, <3.10.0 · fixed in 3.10.0
GHSA-67c5-x5mf-rppq · CVE-2026-2611 - CVSS 4.6 Medium
Summarize's hover summary feature allows malicious pages to dispatch synthetic mouseover events over attacker-controlled links
- Server-side request forgery (SSRF)
- CWE-940
<0.15.1 · fixed in 0.15.1
GHSA-2r69-qgv3-hr65 · CVE-2026-45245 - CVSS 9.3 CriticalCritical · CVSS 9+
Electerm Local code through electerm's single-instance socket
- Code injection
- Broken access control
>=3.0.6, <3.9.0 · fixed in 3.9.0
GHSA-7p5m-v798-f8vv · CVE-2026-45353 - CVSS 5.3 Medium
AVideo: Unauthenticated Arbitrary Email Sending via sendEmail.json.php Enables Phishing from the Site’s Legitimate From Address
- CWE-940
<=29.0 · no fixed version yet
GHSA-5hgj-7gm9-cff5 · CVE-2026-43880 - CVSS 4.3 Medium
Facebook WhatsApp for Android: Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for…
- Facebook WhatsApp for Android
- Facebook WhatsApp for iOS
- CWE-940
- CVSS 8.1 High
Anviz CrossChex Standard Improper Verification of Source of a Communication Channel
- Anviz CrossChex Standard
- CWE-940
- CVSS 9.3 CriticalCritical · CVSS 9+
Authenticator Vulnerable to Authentication Flow Hijack
- gematik app-Authenticator
- CWE-940
- CVSS 8.6 High
OpenClaw: Arbitrary code execution via unvalidated WebView JavascriptInterface
- Command injection
- CWE-940
<2026.3.22 · fixed in 2026.3.22
GHSA-cxmw-p77q-wchg · CVE-2026-35643 - CVSS 8.7 High
Easy Chat Server 3.1 Denial of Service via message Parameter
- Echatserver Easy Chat
- CWE-940
- CVSS 6.3 Medium
Cesanta Mongoose TCP Sequence Number net_builtin.c getpeer verification of source
- Cesanta Mongoose
- CWE-940
- CVSS 4.7 Medium
Dell PowerProtect Data Manager: Dell PowerProtect Data Manager, version(s) prior to 19.22…
- Dell PowerProtect Data Manager
- CWE-940
- CVSS 3.8 Low
Fortinet FortiOS: An Improper Verification of Source of a Communication Channel vulnerability [CWE-940]…
- Fortinet FortiOS
- CWE-940
- CVSS 8.7 High
Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range.
- Siemens SIDOOR ATD430W
- Siemens SIDOOR ATE530G COATED
- CWE-940
- CVSS 4.6 Medium
OpenVPN: Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and…
- OpenVPN
- CWE-940
- CVSS 5.3 Medium
Due to a firewall misconfiguration, Kerlink devices running KerOS prior to 5.12 incorrectly accept specially crafted UDP packets.
- CWE-402
- CWE-940
- CVSS 9.3 CriticalCritical · KEV, CVSS 9+KEV
MOTEX Inc. Lanscope Endpoint Manager (On-Premises) (Client…: Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA))…
- MOTEX Inc. Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA))
- CWE-940
- CVSS 4.7 Medium
The issue was resolved by not loading remote images.
- Apple iOS and iPadOS
- CWE-940
- CVSS 9.7 CriticalCritical · CVSS 9+
SillyTavern Web Interface Vulnerable DNS Rebinding
- CWE-346
- CWE-940
<1.13.4 · fixed in 1.13.4
GHSA-7cxj-w27x-x78q · CVE-2025-59159 - CVSS 4.3 Medium
A vulnerability in the IPv6 Router Advertisement (RA) packet processing of Cisco Access Point Software could allow an unauthenticated, adjacent attacker to modify the IPv6 gateway on an affected devi…
- Cisco Aironet Access Point Software (IOS XE Controller)
- CWE-940
- CVSS 7.6 High
Improper validation of payload elements
- arcinfo PcVue
- CWE-940
- CWE-1288
- CVSS 3.5 Low
Insufficiently Secure Hostname Verification for Outbound TLS Connections in SAP NetWeaver Application Server Java
- SAP_SE SAP NetWeaver Application Server Java
- CWE-940
- CVSS 3.2 Low
Incorrect calculation in AMD Versal Adaptive SoC Devices and others
- AMD Versal Adaptive SoC Devices
- AMD Versal RF Series
- Information disclosure
- Denial of service
- CVSS 7.0 High
Home Assistant does not correctly validate SSL for outgoing requests in core and used libs
- Weak cryptography or TLS
- CWE-940
<2024.1.6 · fixed in 2024.1.6
GHSA-m3pm-rpgg-5wj6 · CVE-2025-25305 - CVSS 8.4 High
Deepin dde-api-proxy: An issue was discovered in Deepin dde-api-proxy through 1.0.19 in which unprivileged…
- Deepin dde-api-proxy
- CWE-940
- CVSS 5.8 Medium
Dos in ZigBee device due to unsolicited encrypted rejoin response
- silabs.com EmberZNet
- CWE-940
- CVSS 3.5 Low
Fortinet FortiClientEMS: An improper verification of source of a communication channel vulnerability [CWE-940] in…
- Fortinet FortiClientEMS
- CWE-940
- CVSS 5.4 Medium
IETF IPv6: IPv6-in-IPv4 tunneling (RFC 4213) allows an attacker to spoof and route traffic via an…
- IETF IPv6
- CWE-940
- CVSS 5.4 Medium
IETF IPv6: IPv4-in-IPv6 and IPv6-in-IPv6 tunneling (RFC 2473) do not require the validation or…
- IETF IPv6
- CWE-940
- CVSS 8.1 High
JetBrains YouTrack: In JetBrains YouTrack before 2024.3.47197 insecure plugin iframe allowed arbitrary…
- JetBrains YouTrack
- CWE-940
- CVSS 5.3 Medium
Cisco IOS XR Software Dedicated XML Agent TCP Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-940
- CVSS 8.3 High
uniFLOW Online device registration susceptible to compromise
- NT-ware uniFLOW Online
- CWE-940
- CVSS 8.6 High
usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos
- CWE-940
<0.9.1 · fixed in 0.9.1
GHSA-vh43-cc6x-prpr · CVE-2022-4848 - CVSS 8.6 High
usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos
- CWE-940
<0.9.1 · fixed in 0.9.1
GHSA-mfvq-m3jj-8864 · CVE-2022-4800 - CVSS 9.8 CriticalCritical · CVSS 9+
An issue in Horizon Business Services Inc.
- CWE-940
- CVSS 8.8 High
An issue in H3C Technologies Co., Limited H3C Magic RC3000 RC3000V100R009 allows a remote attacker to execute arbitrary code via the Routing functionality.
- CWE-940