cwe-494
Safeguard articles tagged "cwe-494" — guides, analysis, and best practices for software supply chain and application security.
6 articles
CVE-2021-44168: Fortinet FortiOS Arbitrary File Download
CVE-2021-44168 affects Fortinet FortiOS and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-12-10.
CVE-2022-40799: D-Link DNR-322L Download of Code Without Integrity Check Vulnerability
CVE-2022-40799 affects D-Link DNR-322L and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-08-05.
CVE-2025-15556: Notepad++ Download of Code Without Integrity Check Vulnerability
CVE-2025-15556 affects Notepad++ Notepad++ and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-02-12.
CVE-2026-3502: TrueConf Client Download of Code Without Integrity Check Vulnerability
CVE-2026-3502 affects TrueConf Client and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-04-02.
3CX (2023): The First Widely Documented Cascading Supply Chain Attack
A factual retrospective on the 2023 3CX desktop app compromise, notable because the attackers reached 3CX through a prior supply chain compromise of a different vendor, producing a chain of two linked attacks.
The SolarWinds Orion Supply Chain Attack: What Actually Happened
A factual summary of the 2020 SolarWinds Orion compromise, in which attackers inserted malicious code into a legitimate software update, and what it means for build-pipeline integrity.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.