rainbutterfly/cve_corpus huggingface dataset:
CVE-2026-0247 Prisma Access Agent Endpoint DLP: Authorization Bypass Vulnerabilities
Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent® allow a local attacker to bypass authentication controls and execute privileged operations.
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: Palo Alto Networks
product: Prisma Access Agent
default_status: unaffected
Credits: lang: en
value: Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue.
Published: 2026-05-13T18:46:31.633Z
CVE-2026-0248 Prisma Access Agent: Improper Certificate Validation Vulnerability
An improper certificate validation vulnerability in the Prisma Access Agent® for Android and Chrome OS enables an attacker to perform a man-in-the-middle (MitM) attack to intercept VPN traffic. By presenting a certificate for any domain issued by a trusted Certificate Authority, the attacker can capture sensitive device information.



The Prisma Access Agent on macOS, Windows, Linux and iOS are not affected.
Problem types: cwe_id: CWE-295
description: CWE-295 Improper Certificate Validation
Affected products: vendor: Palo Alto Networks
product: Prisma Access Agent
default_status: unaffected
vendor: Palo Alto Networks
product: Prisma Access Agent
default_status: unaffected
Credits: lang: en
value: Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue.
Published: 2026-05-13T19:05:00.190Z
CVE-2026-0249 GlobalProtect App: Certificate Validation Bypass Vulnerabilities
Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating system user or an attacker on the same subnet to redirect traffic to an unauthorized server and facilitate the installation of malicious software.

The GlobalProtect app on Linux, Windows, iOS and GlobalProtect UWP app are not affected.
Problem types: cwe_id: CWE-295
description: CWE-295 Improper Certificate Validation
Affected products: vendor: Palo Alto Networks
product: GlobalProtect App
default_status: unaffected
vendor: Palo Alto Networks
product: GlobalProtect App
default_status: unaffected
vendor: Palo Alto Networks
product: GlobalProtect App
default_status: unaffected
vendor: Palo Alto Networks
product: GlobalProtect App
default_status: unaffected
Credits: lang: en
value: Palo Alto Networks thanks Kakao Corp. Service Security Team and our internal security research teams for discovering and reporting this issue.
Published: 2026-05-13T18:32:12.091Z
CVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway
A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway.



The GlobalProtect app on iOS is not affected.
Problem types: cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: Palo Alto Networks
product: GlobalProtect App
default_status: unaffected
vendor: Palo Alto Networks
product: GlobalProtect App
default_status: unaffected
vendor: Palo Alto Networks
product: GlobalProtect App
default_status: unaffected
vendor: Palo Alto Networks
product: GlobalProtect App
default_status: unaffected
vendor: Palo Alto Networks
product: GlobalProtect App
default_status: unaffected
vendor: Palo Alto Networks
product: GlobalProtect UWP App
default_status: unaffected
vendor: Palo Alto Networks
product: GlobalProtect App
default_status: unaffected
Credits: lang: en
value: our internal security research teams
Published: 2026-05-13T18:26:51.927Z
CVE-2026-0259 WildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B)
An arbitrary File Read and Delete Vulnerability in Palo Alto Networks WildFire® WF-500 and WF-500-B appliances enables users to read sensitive information and delete arbitrary files. This vulnerability affects WF-500 and WF-500-B appliances running in the default non-FIPS configuration mode.



The WildFire Appliance (WF-500, WF-500-B) software update is now available to customers that use the WildFire Appliance (WF-500, WF-500-B) for on-premise sandboxing.



Please note that customers using the WildFire Public cloud service are NOT impacted by this vulnerability.
Problem types: cwe_id: CWE-73
description: CWE-73 External Control of File Name or Path
Affected products: vendor: Palo Alto Networks
product: WildFire WF-500 and WF-500-B
default_status: unaffected
Credits: lang: en
value: Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue.
Published: 2026-05-13T18:05:45.862Z
CVE-2026-0383 Information disclosure in Brocade Fabric OS before 9.2.1c2, 9.2.2 through 9.2.2a and 10.0.0
A vulnerability in Brocade Fabric OS could allow an authenticated, local attacker with privileges to access the Bash shell to access insecurely stored file contents including the history command.
Problem types: cwe_id: CWE-78
description: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: Brocade
product: Fabric OS
default_status: unaffected
Published: 2026-02-03T03:55:44.788Z
CVE-2026-0385 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
Problem types: cwe_id: CWE-451
description: CWE-451: User Interface (UI) Misrepresentation of Critical Information
Affected products: vendor: Microsoft
product: Microsoft Edge for Android
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 5
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C
Published: 2026-03-13T21:55:20.781Z
CVE-2026-0386 Windows Deployment Services Remote Code Execution Vulnerability
Problem types: cwe_id: CWE-284
description: CWE-284: Improper Access Control
Affected products: vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1 (Server Core installation)
vendor: Microsoft
product: Windows Server 2008 Service Pack 2
vendor: Microsoft
product: Windows Server 2008 Service Pack 2 (Server Core installation)
vendor: Microsoft
product: Windows Server 2012
vendor: Microsoft
product: Windows Server 2012 (Server Core installation)
vendor: Microsoft
product: Windows Server 2012 R2
vendor: Microsoft
product: Windows Server 2012 R2 (Server Core installation)
vendor: Microsoft
product: Windows Server 2016
vendor: Microsoft
product: Windows Server 2016 (Server Core installation)
vendor: Microsoft
product: Windows Server 2019
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
vendor: Microsoft
product: Windows Server 2022
vendor: Microsoft
product: Windows Server 2022, 23H2 Edition (Server Core installation)
vendor: Microsoft
product: Windows Server 2025
vendor: Microsoft
product: Windows Server 2025 (Server Core installation)
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2026-01-13T17:56:05.035Z
CVE-2026-0390 UEFI Secure Boot Security Feature Bypass Vulnerability
Problem types: cwe_id: CWE-807
description: CWE-807: Reliance on Untrusted Inputs in a Security Decision
Affected products: vendor: Microsoft
product: Windows 10 Version 1607
vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows 10 Version 21H2
vendor: Microsoft
product: Windows 10 Version 22H2
vendor: Microsoft
product: Windows Server 2016
vendor: Microsoft
product: Windows Server 2016 (Server Core installation)
vendor: Microsoft
product: Windows Server 2019
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
vendor: Microsoft
product: Windows Server 2022
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 6.7
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2026-04-14T16:57:29.034Z
CVE-2026-0391 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
Problem types: cwe_id: CWE-451
description: CWE-451: User Interface (UI) Misrepresentation of Critical Information
Affected products: vendor: Microsoft
product: Microsoft Edge (Chromium-based)
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 6.5
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C
Published: 2026-02-05T22:13:26.387Z
CVE-2026-0393 CODESYS Visualization - Insufficiently Protected Credentials
The affected product may expose credentials remotely between low privileged visualization users during concurrent login operations due to insufficient isolation of authentication data. The vulnerability affects only login operations within an active visualization session.
Problem types: cwe_id: CWE-522
description: CWE-522 Insufficiently Protected Credentials
Affected products: vendor: CODESYS
product: Visualization
default_status: unaffected
Credits: lang: en
value: Silvan Schweizer from CTA AG
Published: 2026-05-21T10:44:42.517Z
CVE-2026-0394 
When dovecot has been configured to use per-domain passwd files, and they are placed one path component above /etc, or slash has been added to allowed characters, path traversal can happen if the domain component is directory partial. This allows inadvertently reading /etc/passwd (or some other path which ends with passwd). If this file contains passwords, it can be used to authenticate wrongly, or if this is userdb, it can unexpectly make system users appear valid users.  Upgrade to fixed version, or use different authentication scheme that does not rely on paths. Alternatively you can also ensure that the per-domain passwd files are in some other location, such as /etc/dovecot/auth/%d. No publicly available exploits are known.
Problem types: cwe_id: CWE-22
description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: Open-Xchange GmbH
product: OX Dovecot Pro
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Published: 2026-03-27T08:10:17.375Z
CVE-2026-0396 HTML injection in the web dashboard
An attacker might be able to inject HTML content into the internal web dashboard by sending crafted DNS queries to a DNSdist instance where domain-based dynamic rules have been enabled via either DynBlockRulesGroup:setSuffixMatchRule or DynBlockRulesGroup:setSuffixMatchRuleFFI.
Problem types: description: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Affected products: vendor: PowerDNS
product: DNSdist
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 3.1
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
version: 3.1
Credits: lang: en
value: Aisle Research
Published: 2026-03-31T11:50:51.442Z
CVE-2026-0397 Information disclosure via CORS misconfiguration
When the internal webserver is enabled (default is disabled), an attacker might be able to trick an administrator logged to the dashboard into visiting a malicious website and extract information about the running configuration from the dashboard. The root cause of the issue is a misconfiguration of the Cross-Origin Resource Sharing (CORS) policy.
Problem types: description: Overly Permissive Cross-domain Whitelist
Affected products: vendor: PowerDNS
product: DNSdist
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 3.1
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
version: 3.1
Credits: lang: en
value: Surya Narayan Kushwaha (aka Cavid)
Published: 2026-03-31T11:53:13.444Z
CVE-2026-0398 Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor
Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor.
Problem types: description: Allocation of Resources Without Limits or Throttling
Affected products: vendor: PowerDNS
product: Recursor
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
version: 3.1
Credits: lang: en
value: Yufan You from Tsinghua University
lang: en
value: TaoFei Guo from Peking University
lang: en
value: Yang Luo from Tsinghua University
lang: en
value: JianJun Chen from Tsinghua University
Published: 2026-02-09T14:20:46.592Z
CVE-2026-0399 
Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API endpoint.
Problem types: cwe_id: CWE-121
description: CWE-121 Stack-based Buffer Overflow
Affected products: vendor: SonicWall
product: SonicOS
default_status: unknown
Credits: lang: en
value: Vang3lis, Heuzoo and Moyushui of VARAS@IIE
Published: 2026-02-24T14:52:10.841Z
CVE-2026-0400 
A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall.
Problem types: cwe_id: CWE-134
description: CWE-134 Use of Externally-Controlled Format String
Affected products: vendor: SonicWall
product: SonicOS
default_status: unknown
Credits: lang: en
value: Vang3lis and Heuzoo of VARAS@IIE
Published: 2026-02-24T14:54:15.394Z
CVE-2026-0401 
A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.
Problem types: cwe_id: CWE-476
description: CWE-476 NULL Pointer Dereference
Affected products: vendor: SonicWall
product: SonicOS
default_status: unknown
Credits: lang: en
value: Vang3lis of VARAS@IIE
lang: en
value: N3vv of Red-Shield Security Lab
Published: 2026-02-24T14:55:57.545Z
CVE-2026-0402 
A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall.
Problem types: cwe_id: CWE-125
description: CWE-125 Out-of-bounds Read
Affected products: vendor: SonicWall
product: SonicOS
default_status: unknown
Credits: lang: en
value: Vang3lis of VARAS@IIE
lang: en
value: N3vv of Red-Shield Security Lab
Published: 2026-02-24T14:58:37.608Z
CVE-2026-0403 Insufficient input validation in NETGEAR Orbi routers
An insufficient input validation vulnerability in NETGEAR Orbi routers 
allows attackers connected to the router's LAN to execute OS command 
injections.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: NETGEAR
product: RBR750
default_status: unaffected
vendor: NETGEAR
product: RBS750
default_status: unaffected
vendor: NETGEAR
product: RBRE960
default_status: unaffected
vendor: NETGEAR
product: RBSE960
default_status: unaffected
vendor: NETGEAR
product: RBR850
default_status: unaffected
vendor: NETGEAR
product: RBS850
default_status: unaffected
vendor: NETGEAR
product: RBE971
default_status: unaffected
vendor: NETGEAR
product: RBE970
default_status: unaffected
vendor: NETGEAR
product: RBR860
default_status: unaffected
vendor: NETGEAR
product: RBS860
default_status: unaffected
Credits: lang: en
value: fxc233
Published: 2026-01-13T16:00:25.831Z
CVE-2026-0404 Insufficient input validation in NETGEAR Orbi routers
An insufficient input validation vulnerability in NETGEAR Orbi devices' 
DHCPv6 functionality allows network adjacent attackers authenticated 
over WiFi or on LAN to execute OS command injections on the router. 
DHCPv6 is not enabled by default.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: NETGEAR
product: RBRE960
default_status: unaffected
vendor: NETGEAR
product: RBSE960
default_status: unaffected
vendor: NETGEAR
product: RBR850
default_status: unaffected
vendor: NETGEAR
product: RBS850
default_status: unaffected
vendor: NETGEAR
product: RBR860
default_status: unaffected
vendor: NETGEAR
product: RBS860
default_status: unaffected
vendor: NETGEAR
product: RBRE950
default_status: unaffected
vendor: NETGEAR
product: RBSE950
default_status: unaffected
vendor: NETGEAR
product: RBR750
default_status: unaffected
vendor: NETGEAR
product: RBS750
default_status: unaffected
vendor: NETGEAR
product: RBR840
default_status: unaffected
vendor: NETGEAR
product: RBS840
default_status: unaffected
Credits: lang: en
value: Hyunseok Yun
Published: 2026-01-13T16:01:14.944Z
CVE-2026-0405 Authentication Bypass in NETGEAR Orbi Devices
An authentication bypass vulnerability in NETGEAR Orbi devices allows 
users connected to the local network to access the router web interface 
as an admin.
Problem types: cwe_id: CWE-287
description: CWE-287 Improper Authentication
Affected products: vendor: NETGEAR
product: RBE970
default_status: unaffected
vendor: NETGEAR
product: RBE971
default_status: unaffected
vendor: NETGEAR
product: CBR750
default_status: unaffected
vendor: NETGEAR
product: NBR750
default_status: unaffected
vendor: NETGEAR
product: RBE770
default_status: unaffected
vendor: NETGEAR
product: RBE771
default_status: unaffected
vendor: NETGEAR
product: RBE772
default_status: unaffected
vendor: NETGEAR
product: RBE773
default_status: unaffected
vendor: NETGEAR
product: RBR750
default_status: unaffected
vendor: NETGEAR
product: RBS750
default_status: unaffected
vendor: NETGEAR
product: RBR840
default_status: unaffected
vendor: NETGEAR
product: RBS840
default_status: unaffected
vendor: NETGEAR
product: RBR850
default_status: unaffected
vendor: NETGEAR
product: RBS850
default_status: unaffected
vendor: NETGEAR
product: RBR860
default_status: unaffected
vendor: NETGEAR
product: RBS860
default_status: unaffected
vendor: NETGEAR
product: RBRE950
default_status: unaffected
vendor: NETGEAR
product: RBSE950
default_status: unaffected
vendor: NETGEAR
product: RBRE960
default_status: unaffected
vendor: NETGEAR
product: RBSE960
default_status: unaffected
vendor: NETGEAR
product: RBE370
default_status: unaffected
vendor: NETGEAR
product: RBE371
default_status: unaffected
vendor: NETGEAR
product: RBE372
default_status: unaffected
vendor: NETGEAR
product: RBE373
default_status: unaffected
vendor: NETGEAR
product: RBE374
default_status: unaffected
Credits: lang: en
value: Fulaige
Published: 2026-01-13T16:00:48.296Z
CVE-2026-0406 Insufficient input validation in NETGEAR Nighthawk router XR1000v2
An insufficient input validation vulnerability in the NETGEAR XR1000v2 
allows attackers connected to the router's LAN to execute OS command 
injections.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: NETGEAR
product: XR1000v2
default_status: unaffected
Credits: lang: en
value: o4ncL1
Published: 2026-01-13T16:00:59.458Z
CVE-2026-0407 Authentication bypass in NETGEAR WiFi Range Extenders via network adjacent attacks
An insufficient authentication vulnerability in NETGEAR WiFi range 
extenders allows a network adjacent attacker with WiFi authentication or
 a physical Ethernet port connection to bypass the authentication 
process and access the admin panel.
Problem types: cwe_id: CWE-287
description: CWE-287 Improper Authentication
Affected products: vendor: NETGEAR
product: EX5000
default_status: unaffected
vendor: NETGEAR
product: EX3110
default_status: unaffected
vendor: NETGEAR
product: EX6110
default_status: unaffected
vendor: NETGEAR
product: EX2800
default_status: unaffected
Credits: lang: en
value: Mad_Max
Published: 2026-01-13T16:01:04.157Z
CVE-2026-0408 Path traversal vulnerability in Netgear WiFi Range Extenders
A path traversal vulnerability in NETGEAR WiFi range extenders allows
 an attacker with LAN authentication to access the router's IP and 
review the contents of the dynamically generated webproc file, which 
records the username and password submitted to the router GUI.
Problem types: cwe_id: CWE-287
description: CWE-287 Improper Authentication
Affected products: vendor: NETGEAR
product: EX5000
default_status: unaffected
vendor: NETGEAR
product: EX3110
default_status: unaffected
vendor: NETGEAR
product: EX6110
default_status: unaffected
vendor: NETGEAR
product: EX2800
default_status: unaffected
Credits: lang: en
value: chiphazard
Published: 2026-01-13T16:01:11.201Z
CVE-2026-0421 
A potential vulnerability was reported in the BIOS of L13 Gen 6, L13 Gen 6 2-in-1, L14 Gen 6, and L16 Gen 2 ThinkPads which could result in Secure Boot being disabled even when configured as “On” in the BIOS setup menu. This issue only affects systems where Secure Boot is set to User Mode.
Problem types: cwe_id: CWE-252
description: CWE-252: Unchecked Return Value
Affected products: vendor: Lenovo
product: ThinkPad L13 Gen 6 BIOS
default_status: unaffected
vendor: Lenovo
product: ThinkPad L13 Gen 6 2 in 1 BIOS
default_status: unaffected
vendor: Lenovo
product: ThinkPad L14 Gen 6 BIOS
default_status: unaffected
vendor: Lenovo
product: ThinkPad L16 Gen 2 BIOS
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Published: 2026-01-14T22:18:56.115Z
CVE-2026-0427 
Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virtual machine (VM) to access these shared resources from another Guest VM, potentially resulting in the loss of confidentiality, integrity, or availability.
Problem types: cwe_id: CWE-459
description: CWE-459  Incomplete Cleanup
Affected products: vendor: AMD
product: AMD Instinct™ MI210
default_status: affected
vendor: AMD
product: AMD Instinct™ MI300X
default_status: affected
vendor: AMD
product: AMD Instinct™ MI325X
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO V710
default_status: affected
Published: 2026-05-15T02:51:22.457Z
CVE-2026-0428 
Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS to write invalid data to a remote Die, potentially resulting in unexpected behavior.
Problem types: cwe_id: CWE-1284
description: CWE-1284  Improper Validation of Specified Quantity in Input
Affected products: vendor: AMD
product: AMD Instinct™ MI300A
default_status: affected
vendor: AMD
product: AMD Instinct™ MI300X
default_status: affected
vendor: AMD
product: AMD Instinct™ MI308X
default_status: affected
vendor: AMD
product: AMD Instinct™ MI325X
default_status: affected
Published: 2026-05-15T02:41:13.879Z