CWE-353

CWE-353 · 4 records · 2 with a public proof-of-concept

Records the NVD classes under CWE-353, highest CVSS first.

  1. CRITICAL 9.8CVE-2026-798012026-10-06

    A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to introduce untrusted code. Successful exploitation could allow an attacker to execute arbitr…

    AI risk analysis on Exploit-DB.ai →

  2. CRITICAL 9.8CVE-2026-767512026-10-06

    A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an unauthenticated, remote attacker to execute arbitrary code on the affected endpoint with the elevated privileges of t…

    AI risk analysis on Exploit-DB.ai →

  3. HIGH 8.1CVE-2026-76853public PoC2026-09-15

    Netcore NR268 firmware version 1.7.121109 contains a security check bypass vulnerability in the parame_put_file.cgi restore archive prefix validation. Attackers can exploit the flawed prefix check in put_parame_file_cgi.c to bypass restricted restore archive h…

    AI risk analysis on Exploit-DB.ai →

  4. HIGH 7.1CVE-2026-49450public PoC2026-09-21

    Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Desktop for Windows omits publisherName from packages/app-desktop/package.json, so the generated app-update.yml causes NsisUpdater.…

    AI risk analysis on Exploit-DB.ai →