CWE-346

Everything Threat Times has reported about CWE-346: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Critical TLS Attestation Flaw in CCC Project Allows Workload Impersonation

Threat TimesOct 19, 2026

A critical vulnerability in the CCC Attestation SIG’s attested-tls-poc allows attackers to relay evidence and impersonate workloads.

Vulnerabilities

Critical MarkLogic Server Flaw CVE-2026-9191 Allows Session Hijacking

Threat TimesOct 12, 2026

Progress MarkLogic Server versions before 12.1.0 and 11.3.7 contain a critical isolation flaw that permits attackers to compromise authenticated sessions.