Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-53311 |
|
Vulnerability in c (CVE-2026-53311)
vulnerability in c (CVE-2026-53311). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53312 |
|
Vulnerability in linux (CVE-2026-53312)
vulnerability in linux (CVE-2026-53312). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53309 |
|
Vulnerability in linux (CVE-2026-53309)
vulnerability in linux (CVE-2026-53309). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53306 |
|
Vulnerability in c (CVE-2026-53306)
vulnerability in c (CVE-2026-53306). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32833 |
|
OS Command Injection in CVE-2026-32833 (CVE-2026-32833)
OS command injection in CVE-2026-32833 (CVE-2026-32833). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53286 |
|
Vulnerability in linux (CVE-2026-53286)
vulnerability in linux (CVE-2026-53286). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53290 |
|
Use-After-Free in linux (CVE-2026-53290)
vulnerability in linux (CVE-2026-53290). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53281 |
|
Vulnerability in linux (CVE-2026-53281)
vulnerability in linux (CVE-2026-53281). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53283 |
|
Vulnerability in linux (CVE-2026-53283)
vulnerability in linux (CVE-2026-53283). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53284 |
|
Vulnerability in c (CVE-2026-53284)
vulnerability in c (CVE-2026-53284). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53278 |
|
Vulnerability in linux (CVE-2026-53278)
vulnerability in linux (CVE-2026-53278). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53291 |
|
Vulnerability in linux (CVE-2026-53291)
vulnerability in linux (CVE-2026-53291). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53280 |
|
Vulnerability in linux (CVE-2026-53280)
vulnerability in linux (CVE-2026-53280). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53289 |
|
Vulnerability in c (CVE-2026-53289)
vulnerability in c (CVE-2026-53289). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-29509 |
|
Path Traversal in path-traversal (CVE-2026-29509)
path traversal in path-traversal (CVE-2026-29509). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13372 |
|
Vulnerability in devolutions (CVE-2026-13372)
vulnerability in devolutions (CVE-2026-13372). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49258 |
|
Vulnerability in github.com/juev/nebula-mesh (CVE-2026-49258)
vulnerability in github.com/juev/nebula-mesh (CVE-2026-49258). Successful exploitation can lead to full system takeover. Exploitable via `POST /ui/hosts/{id}/block`.
|
| CVE-2026-48770 |
|
Out-of-Bounds Read in notepad-plus-plus (CVE-2026-48770)
vulnerability in notepad-plus-plus (CVE-2026-48770). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.9.6.1` or later.
|
| CVE-2026-48778 |
|
OS Command Injection in cpp (CVE-2026-48778)
OS command injection in cpp (CVE-2026-48778). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.9.6.1` or later.
|
| CVE-2026-48800 |
|
OS Command Injection in cpp (CVE-2026-48800)
OS command injection in cpp (CVE-2026-48800). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.9.6.1` or later.
|
| CVE-2026-52885 |
|
Vulnerability in cpp (CVE-2026-52885)
vulnerability in cpp (CVE-2026-52885). Data can be tampered with by attackers. Mitigation: upgrade to `8.9.6.4` or later.
|
| CVE-2026-46710 |
|
Vulnerability in privilege-escalation (CVE-2026-46710)
vulnerability in privilege-escalation (CVE-2026-46710). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.9.6` or later.
|
| CVE-2026-46604 |
|
Panic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image
Panic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image
|
| CVE-2026-48813 |
|
Vulnerability in flawfinder (CVE-2026-48813)
vulnerability in flawfinder (CVE-2026-48813). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.20` or later.
|
| CVE-2026-48804 |
|
Vulnerability in python-socketio (CVE-2026-48804)
vulnerability in python-socketio (CVE-2026-48804). Risk of unauthorized operations or information disclosure. Exploitable via ``EVENT``. Mitigation: upgrade to `5.16.2` or later.
|
| CVE-2026-48802 |
|
Vulnerability in python-engineio (CVE-2026-48802)
vulnerability in python-engineio (CVE-2026-48802). Risk of unauthorized operations or information disclosure. Exploitable via ``connect``. Mitigation: upgrade to `4.13.2` or later.
|
| CVE-2026-48809 |
|
Vulnerability in python-engineio (CVE-2026-48809)
vulnerability in python-engineio (CVE-2026-48809). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.13.2` or later.
|
| CVE-2026-48790 |
|
Vulnerability in github.com/tursodatabase/turso-cli (CVE-2026-48790)
vulnerability in github.com/tursodatabase/turso-cli (CVE-2026-48790). Confidential information can be exposed externally. Exploitable via ``configPermissions``. Mitigation: upgrade to `1.0.26` or later.
|
| CVE-2026-41262 |
|
Authorization Flaw in github.com/fleetdm/fleet/v4 (CVE-2026-41262)
vulnerability in github.com/fleetdm/fleet/v4 (CVE-2026-41262). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/latest/fleet/policies/{policy_id}`. Mitigation: upgrade to `4.85.0` or later.
|
| CVE-2026-55188 |
|
Information Disclosure in CVE-2026-55188 (CVE-2026-55188)
vulnerability in CVE-2026-55188 (CVE-2026-55188). Confidential information can be exposed externally. Mitigation: upgrade to `1.0.0-beta.9` or later.
|
| CVE-2026-55189 |
|
Vulnerability in CVE-2026-55189 (CVE-2026-55189)
vulnerability in CVE-2026-55189 (CVE-2026-55189). Confidential information can be exposed externally. Mitigation: upgrade to `1.0.0-beta.9` or later.
|
| CVE-2026-55838 |
|
Vulnerability in CVE-2026-55838 (CVE-2026-55838)
vulnerability in CVE-2026-55838 (CVE-2026-55838). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52785 |
|
SQL Injection in sqli (CVE-2026-52785)
SQL injection in sqli (CVE-2026-52785). Confidential information can be exposed externally. Mitigation: upgrade to `17.3.3` or later.
|
| CVE-2026-52780 |
|
Vulnerability in CVE-2026-52780 (CVE-2026-52780)
vulnerability in CVE-2026-52780 (CVE-2026-52780). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `17.3.3` or later.
|
| CVE-2026-52781 |
|
Cross-Site Scripting (XSS) in CVE-2026-52781 (CVE-2026-52781)
cross-site scripting in CVE-2026-52781 (CVE-2026-52781). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `17.3.3` or later.
|
| CVE-2026-52779 |
|
Vulnerability in CVE-2026-52779 (CVE-2026-52779)
vulnerability in CVE-2026-52779 (CVE-2026-52779). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `17.3.3` or later.
|
| CVE-2026-52784 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-52784)
vulnerability in csrf (CVE-2026-52784). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `17.3.3` or later.
|
| CVE-2026-49355 |
|
Information Disclosure in CVE-2026-49355 (CVE-2026-49355)
vulnerability in CVE-2026-49355 (CVE-2026-49355). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v3/meetings/`. Mitigation: upgrade to `17.4.0` or later.
|
| CVE-2026-49991 |
|
Path Traversal in path-traversal (CVE-2026-49991)
path traversal in path-traversal (CVE-2026-49991). Data can be tampered with by attackers.
|
| CVE-2026-47193 |
|
Information Disclosure in CVE-2026-47193 (CVE-2026-47193)
vulnerability in CVE-2026-47193 (CVE-2026-47193). Confidential information can be exposed externally. Mitigation: upgrade to `17.3.3` or later.
|
| CVE-2026-46386 |
|
Unsafe Deserialization in rails (CVE-2026-46386)
vulnerability in rails (CVE-2026-46386). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44734 |
|
Vulnerability in CVE-2026-44734 (CVE-2026-44734)
vulnerability in CVE-2026-44734 (CVE-2026-44734). Data can be tampered with by attackers. Mitigation: upgrade to `17.3.2` or later.
|
| CVE-2026-44735 |
|
Authorization Flaw in CVE-2026-44735 (CVE-2026-44735)
vulnerability in CVE-2026-44735 (CVE-2026-44735). Confidential information can be exposed externally. Exploitable via `GET /api/v3/shares`. Mitigation: upgrade to `17.3.2` or later.
|
| CVE-2026-44736 |
|
Information Disclosure in CVE-2026-44736 (CVE-2026-44736)
vulnerability in CVE-2026-44736 (CVE-2026-44736). Confidential information can be exposed externally. Exploitable via `GET /api/v3/relations`. Mitigation: upgrade to `17.4.0` or later.
|
| CVE-2026-44696 |
|
Cross-Site Scripting (XSS) in CVE-2026-44696 (CVE-2026-44696)
cross-site scripting in CVE-2026-44696 (CVE-2026-44696). Data can be tampered with by attackers. Mitigation: upgrade to `17.4.0` or later.
|
| CVE-2026-54753 |
|
Vulnerability in nx (CVE-2026-54753)
vulnerability in nx (CVE-2026-54753). Confidential information can be exposed externally. Exploitable via `GET /help`. Mitigation: upgrade to `23.0.0-beta.2` or later.
|
| CVE-2026-48090 |
|
Use-After-Free in dos (CVE-2026-48090)
vulnerability in dos (CVE-2026-48090). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.37.5` or later.
|
| CVE-2026-47220 |
|
Vulnerability in envoyproxy (CVE-2026-47220)
vulnerability in envoyproxy (CVE-2026-47220). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`. Mitigation: upgrade to `1.37.5` or later.
|
| CVE-2026-47205 |
|
Use-After-Free in envoyproxy (CVE-2026-47205)
vulnerability in envoyproxy (CVE-2026-47205). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.36.9` or later.
|
| CVE-2026-48769 |
|
Vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48769)
vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48769). Successful exploitation can lead to full system takeover. Exploitable via `POST /1.0/images`. Mitigation: upgrade to `7.2.0` or later.
|