Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-9151 |
|
OS Command Injection in CVE-2026-9151 (CVE-2026-9151)
OS command injection in CVE-2026-9151 (CVE-2026-9151). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20251 |
|
Unsafe Deserialization in deserialization (CVE-2026-20251)
vulnerability in deserialization (CVE-2026-20251). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20252 |
|
SSRF (Server-Side Request Forgery) in splunk (CVE-2026-20252)
SSRF in splunk (CVE-2026-20252). Confidential information can be exposed externally.
|
| CVE-2026-20259 |
|
Vulnerability in splunk (CVE-2026-20259)
vulnerability in splunk (CVE-2026-20259). Confidential information can be exposed externally. Exploitable via ``edit_saved_search_owner``.
|
| CVE-2026-20253 KEV |
|
[KEV] Vulnerability in splunk (CVE-2026-20253)
vulnerability in splunk (CVE-2026-20253). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-20256 |
|
Vulnerability in splunk (CVE-2026-20256)
vulnerability in splunk (CVE-2026-20256). Confidential information can be exposed externally.
|
| CVE-2026-20255 |
|
Vulnerability in splunk (CVE-2026-20255)
vulnerability in splunk (CVE-2026-20255). Confidential information can be exposed externally.
|
| CVE-2026-20257 |
|
Vulnerability in splunk (CVE-2026-20257)
vulnerability in splunk (CVE-2026-20257). Confidential information can be exposed externally.
|
| CVE-2026-20254 |
|
Vulnerability in splunk (CVE-2026-20254)
vulnerability in splunk (CVE-2026-20254). Confidential information can be exposed externally.
|
| CVE-2026-20258 |
|
Cross-Site Scripting (XSS) in splunk (CVE-2026-20258)
cross-site scripting in splunk (CVE-2026-20258). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50569 |
|
Vulnerability in github.com/fission/fission (CVE-2026-50569)
vulnerability in github.com/fission/fission (CVE-2026-50569). Risk of unauthorized operations or information disclosure. Exploitable via ``Methods``. Mitigation: upgrade to `1.25.0` or later.
|
| CVE-2026-50566 |
|
Vulnerability in github.com/fission/fission (CVE-2026-50566)
vulnerability in github.com/fission/fission (CVE-2026-50566). Successful exploitation can lead to full system takeover. Exploitable via ``PodSpec``. Mitigation: upgrade to `1.24.0` or later.
|
| CVE-2026-50567 |
|
Path Traversal in github.com/fission/fission (CVE-2026-50567)
path traversal in github.com/fission/fission (CVE-2026-50567). Data can be tampered with by attackers. Exploitable via ``Unarchive``. Mitigation: upgrade to `1.25.0` or later.
|
| CVE-2026-50570 |
|
Privilege Escalation in github.com/fission/fission (CVE-2026-50570)
vulnerability in github.com/fission/fission (CVE-2026-50570). Data can be tampered with by attackers. Exploitable via ``ValidatePodSpecSafety``. Mitigation: upgrade to `1.25.0` or later.
|
| CVE-2026-50565 |
|
Vulnerability in github.com/fission/fission (CVE-2026-50565)
vulnerability in github.com/fission/fission (CVE-2026-50565). Confidential information can be exposed externally. Exploitable via ``Environment.spec.builder.image``. Mitigation: upgrade to `1.24.0` or later.
|
| CVE-2026-50545 |
|
Privilege Escalation in github.com/fission/fission (CVE-2026-50545)
vulnerability in github.com/fission/fission (CVE-2026-50545). Successful exploitation can lead to full system takeover. Exploitable via ``Environment.spec.runtime.podSpec``. Mitigation: upgrade to `1.24.0` or later.
|
| CVE-2026-50564 |
|
Privilege Escalation in github.com/fission/fission (CVE-2026-50564)
vulnerability in github.com/fission/fission (CVE-2026-50564). Successful exploitation can lead to full system takeover. Exploitable via ``Environment``. Mitigation: upgrade to `1.24.0` or later.
|
| CVE-2026-50563 |
|
Privilege Escalation in github.com/fission/fission (CVE-2026-50563)
vulnerability in github.com/fission/fission (CVE-2026-50563). Successful exploitation can lead to full system takeover. Exploitable via ``Function.spec.podspec``. Mitigation: upgrade to `1.24.0` or later.
|
| CVE-2026-49821 |
|
Vulnerability in github.com/fission/fission (CVE-2026-49821)
vulnerability in github.com/fission/fission (CVE-2026-49821). Confidential information can be exposed externally. Exploitable via ``buildermgr``. Mitigation: upgrade to `1.24.0` or later.
|
| CVE-2026-49822 |
|
Vulnerability in github.com/fission/fission (CVE-2026-49822)
vulnerability in github.com/fission/fission (CVE-2026-49822). Confidential information can be exposed externally. Exploitable via ``KubernetesWatchTrigger``. Mitigation: upgrade to `1.24.0` or later.
|
| CVE-2026-49823 |
|
Vulnerability in github.com/fission/fission (CVE-2026-49823)
vulnerability in github.com/fission/fission (CVE-2026-49823). Confidential information can be exposed externally. Exploitable via ``PackageRef.Namespace``. Mitigation: upgrade to `1.24.0` or later.
|
| CVE-2026-49824 |
|
Vulnerability in github.com/fission/fission (CVE-2026-49824)
vulnerability in github.com/fission/fission (CVE-2026-49824). Confidential information can be exposed externally. Exploitable via ``spec.environment.namespace``. Mitigation: upgrade to `1.24.0` or later.
|
| CVE-2026-46642 |
|
Cross-Site Scripting (XSS) in CVE-2026-46642 (CVE-2026-46642)
cross-site scripting in CVE-2026-46642 (CVE-2026-46642). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11417 |
|
OS Command Injection in aws-cdk-lib (CVE-2026-11417)
OS command injection in aws-cdk-lib (CVE-2026-11417). Successful exploitation can lead to full system takeover. Exploitable via ``NodejsFunction``. Mitigation: upgrade to `2.246.0` or later.
|
| CVE-2026-11914 |
|
Vulnerability in drupal/composer (CVE-2026-11914)
vulnerability in drupal/composer (CVE-2026-11914). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11913 |
|
Vulnerability in drupal/mothermayi (CVE-2026-11913)
vulnerability in drupal/mothermayi (CVE-2026-11913). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11909 |
|
Vulnerability in drupal/examples (CVE-2026-11909)
vulnerability in drupal/examples (CVE-2026-11909). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.0.6` or later.
|
| CVE-2026-11908 |
|
Cross-Site Scripting (XSS) in drupal/tagify (CVE-2026-11908)
cross-site scripting in drupal/tagify (CVE-2026-11908). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.2.52` or later.
|
| CVE-2025-53114 |
|
Vulnerability in org.cometd.java:cometd-java-server-common (CVE-2025-53114)
vulnerability in org.cometd.java:cometd-java-server-common (CVE-2025-53114). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.0.x` or later.
|
| CVE-2026-53694 |
|
Vulnerability in CVE-2026-53694 (CVE-2026-53694)
vulnerability in CVE-2026-53694 (CVE-2026-53694). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53698 |
|
Vulnerability in org.silverpeas.core:silverpeas-core-war (CVE-2026-53698)
vulnerability in org.silverpeas.core:silverpeas-core-war (CVE-2026-53698). Confidential information can be exposed externally.
|
| CVE-2026-53693 |
|
Cross-Site Scripting (XSS) in CVE-2026-53693 (CVE-2026-53693)
cross-site scripting in CVE-2026-53693 (CVE-2026-53693). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48859 |
|
Vulnerability in erlang (CVE-2026-48859)
vulnerability in erlang (CVE-2026-48859). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48860 |
|
Authorization Flaw in erlang (CVE-2026-48860)
vulnerability in erlang (CVE-2026-48860). Confidential information can be exposed externally.
|
| CVE-2026-49759 |
|
Vulnerability in c (CVE-2026-49759)
vulnerability in c (CVE-2026-49759). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49760 |
|
Vulnerability in c (CVE-2026-49760)
vulnerability in c (CVE-2026-49760). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48858 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-48858)
SSRF in ssrf (CVE-2026-48858). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48856 |
|
Open Redirect in erlang (CVE-2026-48856)
vulnerability in erlang (CVE-2026-48856). Confidential information can be exposed externally. Exploitable via `Authorization header`.
|
| CVE-2026-48855 |
|
Information Disclosure in erlang (CVE-2026-48855)
vulnerability in erlang (CVE-2026-48855). Confidential information can be exposed externally.
|
| CVE-2026-48096 |
|
Vulnerability in github.com/openfga/openfga (CVE-2026-48096)
vulnerability in github.com/openfga/openfga (CVE-2026-48096). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.16.0` or later.
|
| CVE-2026-46558 |
|
Vulnerability in plane (CVE-2026-46558)
vulnerability in plane (CVE-2026-46558). Confidential information can be exposed externally.
|
| CVE-2026-45569 |
|
Path Traversal in c (CVE-2026-45569)
path traversal in c (CVE-2026-45569). Confidential information can be exposed externally.
|
| CVE-2026-45567 |
|
Authentication Bypass in nginx (CVE-2026-45567)
authentication bypass in nginx (CVE-2026-45567). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45566 |
|
Open Redirect in nginx (CVE-2026-45566)
vulnerability in nginx (CVE-2026-45566). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45565 |
|
Vulnerability in nginx (CVE-2026-45565)
vulnerability in nginx (CVE-2026-45565). Confidential information can be exposed externally.
|
| CVE-2026-9045 |
|
Vulnerability in CVE-2026-9045 (CVE-2026-9045)
vulnerability in CVE-2026-9045 (CVE-2026-9045). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53475 |
|
Vulnerability in github.com/kubev2v/assisted-migration-agent (CVE-2026-53475)
vulnerability in github.com/kubev2v/assisted-migration-agent (CVE-2026-53475). Confidential information can be exposed externally. Mitigation: upgrade to `0.16.0` or later.
|
| CVE-2026-8637 |
|
Vulnerability in CVE-2026-8637 (CVE-2026-8637)
vulnerability in CVE-2026-8637 (CVE-2026-8637). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8335 |
|
Vulnerability in CVE-2026-8335 (CVE-2026-8335)
vulnerability in CVE-2026-8335 (CVE-2026-8335). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53476 |
|
Path Traversal in github.com/kubev2v/assisted-migration-agent (CVE-2026-53476)
path traversal in github.com/kubev2v/assisted-migration-agent (CVE-2026-53476). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.16.0` or later.
|