CWE-396

2 CVEs classified under CWE-396. Browse by severity and year.

Top CVEs for CWE-396
CVESeverityScorePublishedSummary
CVE-2026-40149High7.92026-04-09PraisonAI is a multi-agent teams system. Prior to 4.5.128, the gateway's /api/approval/allow-list endpoint permits unauthenticated modification of the tool app…
CVE-2026-27482Medium5.92026-02-21Ray is an AI compute engine. In versions 2.53.0 and below, thedashboard HTTP server blocks browser-origin POST/PUT but does not cover DELETE, and key DELETE en…
All CVEs classified under CWE-396 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-40149High7.92026-04-09PraisonAI is a multi-agent teams system. Prior to 4.5.128, the gateway's /api/approval/allow-list endpoint permits unauthenticated modification of the tool app…
CVE-2026-27482Medium5.92026-02-21Ray is an AI compute engine. In versions 2.53.0 and below, thedashboard HTTP server blocks browser-origin POST/PUT but does not cover DELETE, and key DELETE en…