Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Clear
ID Title
CVE-2026-53311 Vulnerability in c (CVE-2026-53311)
vulnerability in c (CVE-2026-53311). Risk of unauthorized operations or information disclosure.
CVE-2026-53312 Vulnerability in linux (CVE-2026-53312)
vulnerability in linux (CVE-2026-53312). Risk of unauthorized operations or information disclosure.
CVE-2026-53309 Vulnerability in linux (CVE-2026-53309)
vulnerability in linux (CVE-2026-53309). Successful exploitation can lead to full system takeover.
CVE-2026-53306 Vulnerability in c (CVE-2026-53306)
vulnerability in c (CVE-2026-53306). Risk of unauthorized operations or information disclosure.
CVE-2026-32833 OS Command Injection in CVE-2026-32833 (CVE-2026-32833)
OS command injection in CVE-2026-32833 (CVE-2026-32833). Successful exploitation can lead to full system takeover.
CVE-2026-53286 Vulnerability in linux (CVE-2026-53286)
vulnerability in linux (CVE-2026-53286). Successful exploitation can lead to full system takeover.
CVE-2026-53290 Use-After-Free in linux (CVE-2026-53290)
vulnerability in linux (CVE-2026-53290). Successful exploitation can lead to full system takeover.
CVE-2026-53281 Vulnerability in linux (CVE-2026-53281)
vulnerability in linux (CVE-2026-53281). Successful exploitation can lead to full system takeover.
CVE-2026-53283 Vulnerability in linux (CVE-2026-53283)
vulnerability in linux (CVE-2026-53283). Risk of unauthorized operations or information disclosure.
CVE-2026-53284 Vulnerability in c (CVE-2026-53284)
vulnerability in c (CVE-2026-53284). Risk of unauthorized operations or information disclosure.
CVE-2026-53278 Vulnerability in linux (CVE-2026-53278)
vulnerability in linux (CVE-2026-53278). Risk of unauthorized operations or information disclosure.
CVE-2026-53291 Vulnerability in linux (CVE-2026-53291)
vulnerability in linux (CVE-2026-53291). Risk of unauthorized operations or information disclosure.
CVE-2026-53280 Vulnerability in linux (CVE-2026-53280)
vulnerability in linux (CVE-2026-53280). Risk of unauthorized operations or information disclosure.
CVE-2026-53289 Vulnerability in c (CVE-2026-53289)
vulnerability in c (CVE-2026-53289). Risk of unauthorized operations or information disclosure.
CVE-2026-29509 Path Traversal in path-traversal (CVE-2026-29509)
path traversal in path-traversal (CVE-2026-29509). Risk of unauthorized operations or information disclosure.
CVE-2026-13372 Vulnerability in devolutions (CVE-2026-13372)
vulnerability in devolutions (CVE-2026-13372). Successful exploitation can lead to full system takeover.
CVE-2026-49258 Vulnerability in github.com/juev/nebula-mesh (CVE-2026-49258)
vulnerability in github.com/juev/nebula-mesh (CVE-2026-49258). Successful exploitation can lead to full system takeover. Exploitable via `POST /ui/hosts/{id}/block`.
CVE-2026-48770 Out-of-Bounds Read in notepad-plus-plus (CVE-2026-48770)
vulnerability in notepad-plus-plus (CVE-2026-48770). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.9.6.1` or later.
CVE-2026-48778 OS Command Injection in cpp (CVE-2026-48778)
OS command injection in cpp (CVE-2026-48778). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.9.6.1` or later.
CVE-2026-48800 OS Command Injection in cpp (CVE-2026-48800)
OS command injection in cpp (CVE-2026-48800). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.9.6.1` or later.
CVE-2026-52885 Vulnerability in cpp (CVE-2026-52885)
vulnerability in cpp (CVE-2026-52885). Data can be tampered with by attackers. Mitigation: upgrade to `8.9.6.4` or later.
CVE-2026-46710 Vulnerability in privilege-escalation (CVE-2026-46710)
vulnerability in privilege-escalation (CVE-2026-46710). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.9.6` or later.
CVE-2026-46604 Panic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image
Panic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image
CVE-2026-48813 Vulnerability in flawfinder (CVE-2026-48813)
vulnerability in flawfinder (CVE-2026-48813). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.20` or later.
CVE-2026-48804 Vulnerability in python-socketio (CVE-2026-48804)
vulnerability in python-socketio (CVE-2026-48804). Risk of unauthorized operations or information disclosure. Exploitable via ``EVENT``. Mitigation: upgrade to `5.16.2` or later.
CVE-2026-48802 Vulnerability in python-engineio (CVE-2026-48802)
vulnerability in python-engineio (CVE-2026-48802). Risk of unauthorized operations or information disclosure. Exploitable via ``connect``. Mitigation: upgrade to `4.13.2` or later.
CVE-2026-48809 Vulnerability in python-engineio (CVE-2026-48809)
vulnerability in python-engineio (CVE-2026-48809). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.13.2` or later.
CVE-2026-48790 Vulnerability in github.com/tursodatabase/turso-cli (CVE-2026-48790)
vulnerability in github.com/tursodatabase/turso-cli (CVE-2026-48790). Confidential information can be exposed externally. Exploitable via ``configPermissions``. Mitigation: upgrade to `1.0.26` or later.
CVE-2026-41262 Authorization Flaw in github.com/fleetdm/fleet/v4 (CVE-2026-41262)
vulnerability in github.com/fleetdm/fleet/v4 (CVE-2026-41262). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/latest/fleet/policies/{policy_id}`. Mitigation: upgrade to `4.85.0` or later.
CVE-2026-55188 Information Disclosure in CVE-2026-55188 (CVE-2026-55188)
vulnerability in CVE-2026-55188 (CVE-2026-55188). Confidential information can be exposed externally. Mitigation: upgrade to `1.0.0-beta.9` or later.
CVE-2026-55189 Vulnerability in CVE-2026-55189 (CVE-2026-55189)
vulnerability in CVE-2026-55189 (CVE-2026-55189). Confidential information can be exposed externally. Mitigation: upgrade to `1.0.0-beta.9` or later.
CVE-2026-55838 Vulnerability in CVE-2026-55838 (CVE-2026-55838)
vulnerability in CVE-2026-55838 (CVE-2026-55838). Risk of unauthorized operations or information disclosure.
CVE-2026-52785 SQL Injection in sqli (CVE-2026-52785)
SQL injection in sqli (CVE-2026-52785). Confidential information can be exposed externally. Mitigation: upgrade to `17.3.3` or later.
CVE-2026-52780 Vulnerability in CVE-2026-52780 (CVE-2026-52780)
vulnerability in CVE-2026-52780 (CVE-2026-52780). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `17.3.3` or later.
CVE-2026-52781 Cross-Site Scripting (XSS) in CVE-2026-52781 (CVE-2026-52781)
cross-site scripting in CVE-2026-52781 (CVE-2026-52781). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `17.3.3` or later.
CVE-2026-52779 Vulnerability in CVE-2026-52779 (CVE-2026-52779)
vulnerability in CVE-2026-52779 (CVE-2026-52779). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `17.3.3` or later.
CVE-2026-52784 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-52784)
vulnerability in csrf (CVE-2026-52784). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `17.3.3` or later.
CVE-2026-49355 Information Disclosure in CVE-2026-49355 (CVE-2026-49355)
vulnerability in CVE-2026-49355 (CVE-2026-49355). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v3/meetings/`. Mitigation: upgrade to `17.4.0` or later.
CVE-2026-49991 Path Traversal in path-traversal (CVE-2026-49991)
path traversal in path-traversal (CVE-2026-49991). Data can be tampered with by attackers.
CVE-2026-47193 Information Disclosure in CVE-2026-47193 (CVE-2026-47193)
vulnerability in CVE-2026-47193 (CVE-2026-47193). Confidential information can be exposed externally. Mitigation: upgrade to `17.3.3` or later.
CVE-2026-46386 Unsafe Deserialization in rails (CVE-2026-46386)
vulnerability in rails (CVE-2026-46386). Successful exploitation can lead to full system takeover.
CVE-2026-44734 Vulnerability in CVE-2026-44734 (CVE-2026-44734)
vulnerability in CVE-2026-44734 (CVE-2026-44734). Data can be tampered with by attackers. Mitigation: upgrade to `17.3.2` or later.
CVE-2026-44735 Authorization Flaw in CVE-2026-44735 (CVE-2026-44735)
vulnerability in CVE-2026-44735 (CVE-2026-44735). Confidential information can be exposed externally. Exploitable via `GET /api/v3/shares`. Mitigation: upgrade to `17.3.2` or later.
CVE-2026-44736 Information Disclosure in CVE-2026-44736 (CVE-2026-44736)
vulnerability in CVE-2026-44736 (CVE-2026-44736). Confidential information can be exposed externally. Exploitable via `GET /api/v3/relations`. Mitigation: upgrade to `17.4.0` or later.
CVE-2026-44696 Cross-Site Scripting (XSS) in CVE-2026-44696 (CVE-2026-44696)
cross-site scripting in CVE-2026-44696 (CVE-2026-44696). Data can be tampered with by attackers. Mitigation: upgrade to `17.4.0` or later.
CVE-2026-54753 Vulnerability in nx (CVE-2026-54753)
vulnerability in nx (CVE-2026-54753). Confidential information can be exposed externally. Exploitable via `GET /help`. Mitigation: upgrade to `23.0.0-beta.2` or later.
CVE-2026-48090 Use-After-Free in dos (CVE-2026-48090)
vulnerability in dos (CVE-2026-48090). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.37.5` or later.
CVE-2026-47220 Vulnerability in envoyproxy (CVE-2026-47220)
vulnerability in envoyproxy (CVE-2026-47220). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`. Mitigation: upgrade to `1.37.5` or later.
CVE-2026-47205 Use-After-Free in envoyproxy (CVE-2026-47205)
vulnerability in envoyproxy (CVE-2026-47205). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.36.9` or later.
CVE-2026-48769 Vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48769)
vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48769). Successful exploitation can lead to full system takeover. Exploitable via `POST /1.0/images`. Mitigation: upgrade to `7.2.0` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →