CWE-1289 (CWE-1289) — 3 disclosed vulnerabilities

Records the NVD classes under CWE-1289, highest CVSS first.

HIGH 7.3CVE-2026-1010152026-09-28
A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is some unknown functionality of the file policy.c of the component Domain Handler. Executing a manipulation can lead to improper validation of unsafe equivalence in …
AI risk analysis on Exploit-DB.ai →
LOW 3.7CVE-2026-100837public PoC2026-09-27
Contrast (Edgeless Systems) through 1.20.0 performs unanchored suffix matching when selecting per-registry configuration in the imagepuller. Config.registryFor strips a single trailing dot and then uses strings.HasSuffix(hostname, fqdn) without requiring a DNS…
AI risk analysis on Exploit-DB.ai →
UNSCOREDCVE-2026-88255public PoC2026-09-16
Improper Validation of Unsafe Equivalence in Input in ZenHive mpp allows an unauthenticated remote client to pass the Tempo duplicate-submission gate twice with one signed transaction. MPP.Methods.Tempo reserves the pre-broadcast dedup slot on the caller-supp…
AI risk analysis on Exploit-DB.ai →