Skip to content
OpenAdvisories

Weakness (CWE)

CWE-841: Improper Enforcement of Behavioral Workflow

Class Incomplete

The product supports a session in which more than one behavior must be performed by an actor, but it does not properly ensure that the actor performs the behaviors in the required sequence or timeframe.

Source: MITRE CWE-841

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2026-67279 Exploited Public exploit

    SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS

    RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an exec request. On affected builds the server dispatches the…

    MikroTik RouterOS Network devices
    KEV Sep 25, 2026