CWE-1289 — Vulnerability Class 11

11 vulnerabilities classified as CWE-1289. AI Chinese analysis included.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-39972	Mercure has a Topic Selector Cache Key Collision — mercure	7.6^AI	High^AI	2026-04-09
CVE-2026-34080	xdg-dbus-proxy has an eavesdrop filter bypass allowing message interception — xdg-dbus-proxy	5.3^AI	Medium^AI	2026-04-07
CVE-2026-22569	Incorrect startup configuration in ZCC — Zscaler Client Connector	5.4	Medium	2026-03-31
CVE-2026-33496	Ory Oathkeeper has an authentication bypass by cache key confusion — oathkeeper	8.1	High	2026-03-26
CVE-2026-3563	Devolutions PowerShell Universal 安全漏洞 — PowerShell Universal	7.1^AI	High^AI	2026-03-17
CVE-2026-27610	Parse Dashboard Has a Cache Key Collision that Leaks Master Key to Read-Only Sessions — parse-dashboard	5.3^AI	Medium^AI	2026-02-25
CVE-2026-1094	Improper Validation of Unsafe Equivalence in Input in GitLab — GitLab	4.6	Medium	2026-02-11
CVE-2024-12224	idna accepts Punycode labels that do not produce any non-ASCII when decoded — rust-url	5.3^AI	Medium^AI	2025-05-30
CVE-2024-8372	AngularJS improper sanitization in 'srcset' attribute — AngularJS	4.8	Medium	2024-09-09
CVE-2024-45308	MySQL & free URL mode allows to hide existing notes in hedgedoc — hedgedoc	6.5	Medium	2024-09-02
CVE-2022-0675	Puppet Firewall Module May Leave Unmanaged Rules — Firewall Module	5.6	Medium	2022-03-02

Vulnerabilities classified as CWE-1289 represent 11 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.