Skip to content
OpenAdvisories

Weakness (CWE)

CWE-841: Improper Enforcement of Behavioral Workflow

Class Incomplete

The product supports a session in which more than one behavior must be performed by an actor, but it does not properly ensure that the actor performs the behaviors in the required sequence or timeframe.

Source: MITRE CWE-841

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.3
    CVE-2026-124576 Public exploit

    BeikeShop Guest Order Lookup OrderRepo.php getOrderByNumber behavioral workflow

    A security flaw has been discovered in BeikeShop up to 2.0.0.31. Impacted is the function OrderRepo::getOrderByNumber of the file beike/Repositories/OrderRepo.php of the component Guest Order Lookup. Performing a manipulation of the argument order_number resu…

  • High 8.1
    CVE-2026-103977 Public exploit

    FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts

    FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise stores failed TOTP verification attempts in $_SESSION. An attacker who already possesses a target account's valid primary credent…

    error311 FileRise
  • Medium 6.9
    CVE-2026-67279 Exploited Public exploit

    SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS

    RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an exec request. On affected builds the server dispatches the…

    MikroTik RouterOS Network devices
    KEV Sep 25, 2026