Fallos del tipo CWE-396

2 resultados
CVE-2026-27482MEDIUMRay: Dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)EPSS 0.3%CVE-2026-40149HIGHPraisonAI has an Unauthenticated Allow-List Manipulation Bypasses Agent Tool Approval Safety ControlsEPSS 0.2%