Skip to content
OpenAdvisories

Weakness (CWE)

CWE-393: Return of Wrong Status Code

Base Draft

A function or operation returns an incorrect return value or status code that does not indicate the true result of execution, causing the product to modify its behavior based on the incorrect result.

Source: MITRE CWE-393

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-97381

    Legacy Update ActiveX control accepts unauthorized hosting origins

    Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted method of its ActiveX control. After successfully reading the hosting document's ho…

    LegacyUpdate LegacyUpdate
  • Critical 9.3
    CVE-2026-9058

    Improper Certificate Verification in Szafir SDK

    For untrusted certificates that contain the "Authority Information Access - caIssuers URI" extension, Szafir SDK will automatically download the parent CA certificate from the specified URL and will import it to its trust store as a "nonqualified" certificate…

    Krajowa Izba Rozliczeniowa Szafir SDK