Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-54202 |
|
Vulnerability in c (CVE-2026-54202)
vulnerability in c (CVE-2026-54202). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66492 |
|
Path Traversal in path-traversal (CVE-2026-66492)
path traversal in path-traversal (CVE-2026-66492). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66493 |
|
Path Traversal in path-traversal (CVE-2026-66493)
path traversal in path-traversal (CVE-2026-66493). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18938 |
|
Vulnerability in dos (CVE-2026-18938)
vulnerability in dos (CVE-2026-18938). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16027 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-16027)
SSRF in ssrf (CVE-2026-16027). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14331 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14331)
cross-site scripting in wordpress (CVE-2026-14331). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15032 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15032)
cross-site scripting in wordpress (CVE-2026-15032). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16262 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-16262)
vulnerability in wordpress (CVE-2026-16262). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19196 |
|
Vulnerability in sqli (CVE-2026-19196)
vulnerability in sqli (CVE-2026-19196). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15361 |
|
SQL Injection in wordpress (CVE-2026-15361)
SQL injection in wordpress (CVE-2026-15361). Confidential information can be exposed externally.
|
| CVE-2026-16258 |
|
Unsafe Deserialization in wordpress (CVE-2026-16258)
vulnerability in wordpress (CVE-2026-16258). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15215 |
|
Privilege Escalation in wordpress (CVE-2026-15215)
vulnerability in wordpress (CVE-2026-15215). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16265 |
|
Vulnerability in wordpress (CVE-2026-16265)
vulnerability in wordpress (CVE-2026-16265). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12801 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-12801)
cross-site scripting in wordpress (CVE-2026-12801). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45204 |
|
Vulnerability in dos (CVE-2026-45204)
vulnerability in dos (CVE-2026-45204). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-70332 |
|
Cross-Site Scripting (XSS) in ssrf (CVE-2026-70332)
cross-site scripting in ssrf (CVE-2026-70332). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49163 |
|
Path Traversal in path-traversal (CVE-2026-49163)
path traversal in path-traversal (CVE-2026-49163). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50515 |
|
Unsafe Deserialization in deserialization (CVE-2026-50515)
vulnerability in deserialization (CVE-2026-50515). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7867 |
|
Authorization Flaw in privilege-escalation (CVE-2026-7867)
vulnerability in privilege-escalation (CVE-2026-7867). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7405 |
|
Out-of-Bounds Read in dos (CVE-2026-7405)
vulnerability in dos (CVE-2026-7405). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-71447 |
|
Cross-Site Scripting (XSS) in CVE-2026-71447 (CVE-2026-71447)
cross-site scripting in CVE-2026-71447 (CVE-2026-71447). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-71446 |
|
Cross-Site Scripting (XSS) in CVE-2026-71446 (CVE-2026-71446)
cross-site scripting in CVE-2026-71446 (CVE-2026-71446). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-71445 |
|
Cross-Site Scripting (XSS) in CVE-2026-71445 (CVE-2026-71445)
cross-site scripting in CVE-2026-71445 (CVE-2026-71445). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-70640 |
|
Vulnerability in cpp (CVE-2026-70640)
vulnerability in cpp (CVE-2026-70640). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70636 |
|
Vulnerability in CVE-2026-70636 (CVE-2026-70636)
vulnerability in CVE-2026-70636 (CVE-2026-70636). Data can be tampered with by attackers.
|
| CVE-2026-70638 |
|
Vulnerability in cpp (CVE-2026-70638)
vulnerability in cpp (CVE-2026-70638). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70639 |
|
Vulnerability in cpp (CVE-2026-70639)
vulnerability in cpp (CVE-2026-70639). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-70633 |
|
Out-of-Bounds Read in dos (CVE-2026-70633)
vulnerability in dos (CVE-2026-70633). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67689 |
|
SQL Injection in sqli (CVE-2026-67689)
SQL injection in sqli (CVE-2026-67689). Successful exploitation can lead to full system takeover. Exploitable via ``field``.
|
| CVE-2026-67422 |
|
Vulnerability in pymdown-extensions (CVE-2026-67422)
vulnerability in pymdown-extensions (CVE-2026-67422). Risk of unauthorized operations or information disclosure. Exploitable via ``caret``. Mitigation: upgrade to `10.16.1` or later.
|
| CVE-2026-64677 |
|
Path Traversal in path-traversal (CVE-2026-64677)
path traversal in path-traversal (CVE-2026-64677). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5857 |
|
Out-of-Bounds Write in c (CVE-2026-5857)
out-of-bounds write in c (CVE-2026-5857). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53983 |
|
SSRF (Server-Side Request Forgery) in c (CVE-2026-53983)
SSRF in c (CVE-2026-53983). Confidential information can be exposed externally.
|
| CVE-2026-48085 |
|
Vulnerability in csrf (CVE-2026-48085)
vulnerability in csrf (CVE-2026-48085). Successful exploitation can lead to full system takeover. Exploitable via ``default``.
|
| CVE-2026-48088 |
|
Vulnerability in CVE-2026-48088 (CVE-2026-48088)
vulnerability in CVE-2026-48088 (CVE-2026-48088). Confidential information can be exposed externally. Exploitable via `POST /api/tenants/{tenantId}/staff/{staffId}/crypto`.
|
| CVE-2026-48083 |
|
Vulnerability in dos (CVE-2026-48083)
vulnerability in dos (CVE-2026-48083). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48086 |
|
Privilege Escalation in privilege-escalation (CVE-2026-48086)
vulnerability in privilege-escalation (CVE-2026-48086). Successful exploitation can lead to full system takeover. Exploitable via ``GLOBAL_ADMIN``.
|
| CVE-2026-48080 |
|
Information Disclosure in ssrf (CVE-2026-48080)
vulnerability in ssrf (CVE-2026-48080). Successful exploitation can lead to full system takeover. Exploitable via `GET /api/tenants/{id}`.
|
| CVE-2026-48071 |
|
Vulnerability in dos (CVE-2026-48071)
vulnerability in dos (CVE-2026-48071). Risk of unauthorized operations or information disclosure. Exploitable via ``emailHash``.
|
| CVE-2026-43631 |
|
Vulnerability in cpp (CVE-2026-43631)
vulnerability in cpp (CVE-2026-43631). Successful exploitation can lead to full system takeover.
|
| CVE-2026-43628 |
|
Out-of-Bounds Read in cpp (CVE-2026-43628)
vulnerability in cpp (CVE-2026-43628). Successful exploitation can lead to full system takeover.
|
| CVE-2026-41861 |
|
Path Traversal in path-traversal (CVE-2026-41861)
path traversal in path-traversal (CVE-2026-41861). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3418 |
|
Unrestricted File Upload in CVE-2026-3418 (CVE-2026-3418)
vulnerability in CVE-2026-3418 (CVE-2026-3418). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19169 |
|
Vulnerability in privilege-escalation (CVE-2026-19169)
vulnerability in privilege-escalation (CVE-2026-19169). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19139 |
|
Vulnerability in privilege-escalation (CVE-2026-19139)
vulnerability in privilege-escalation (CVE-2026-19139). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19110 |
|
Cross-Site Scripting (XSS) in CVE-2026-19110 (CVE-2026-19110)
cross-site scripting in CVE-2026-19110 (CVE-2026-19110). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19067 |
|
Vulnerability in sqli (CVE-2026-19067)
vulnerability in sqli (CVE-2026-19067). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19068 |
|
Vulnerability in sqli (CVE-2026-19068)
vulnerability in sqli (CVE-2026-19068). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19069 |
|
Vulnerability in sqli (CVE-2026-19069)
vulnerability in sqli (CVE-2026-19069). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19070 |
|
Vulnerability in sqli (CVE-2026-19070)
vulnerability in sqli (CVE-2026-19070). Risk of unauthorized operations or information disclosure.
|