Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Clear
ID Title
CVE-2026-44180 Vulnerability in jupyter_enterprise_gateway (CVE-2026-44180)
vulnerability in jupyter_enterprise_gateway (CVE-2026-44180). Successful exploitation can lead to full system takeover. Exploitable via ``KERNEL_UID``. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-44023 Path Traversal in docling-core (CVE-2026-44023)
path traversal in docling-core (CVE-2026-44023). Confidential information can be exposed externally. Mitigation: upgrade to `2.74.1` or later.
CVE-2026-44019 Vulnerability in docling-core (CVE-2026-44019)
vulnerability in docling-core (CVE-2026-44019). Confidential information can be exposed externally. Mitigation: upgrade to `2.74.1` or later.
CVE-2026-47214 Vulnerability in docling (CVE-2026-47214)
vulnerability in docling (CVE-2026-47214). Confidential information can be exposed externally. Exploitable via ``base_path``. Mitigation: upgrade to `2.94.0` or later.
CVE-2026-44022 Path Traversal in docling (CVE-2026-44022)
path traversal in docling (CVE-2026-44022). Confidential information can be exposed externally. Mitigation: upgrade to `2.91.0` or later.
CVE-2026-44020 XXE (XML External Entity) in docling (CVE-2026-44020)
vulnerability in docling (CVE-2026-44020). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.74.0` or later.
CVE-2026-44018 Vulnerability in docling (CVE-2026-44018)
vulnerability in docling (CVE-2026-44018). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.91.0` or later.
CVE-2026-44016 Code Injection in docling (CVE-2026-44016)
code injection in docling (CVE-2026-44016). Confidential information can be exposed externally. Exploitable via ``enable_remote_fetch``. Mitigation: upgrade to `2.91.0` or later.
CVE-2026-43980 Cross-Site Scripting (XSS) in malla (CVE-2026-43980)
cross-site scripting in malla (CVE-2026-43980). Risk of unauthorized operations or information disclosure.
CVE-2026-41234 Vulnerability in froxlor/froxlor (CVE-2026-41234)
vulnerability in froxlor/froxlor (CVE-2026-41234). Data can be tampered with by attackers. Exploitable via ``DomainZones.add``. Mitigation: upgrade to `2.3.7` or later.
CVE-2026-40898 Vulnerability in github.com/quic-go/quic-go (CVE-2026-40898)
vulnerability in github.com/quic-go/quic-go (CVE-2026-40898). Risk of unauthorized operations or information disclosure. Exploitable via ``http.Header``. Mitigation: upgrade to `0.59.1` or later.
CVE-2026-44609 Vulnerability in privilege-escalation (CVE-2026-44609)
vulnerability in privilege-escalation (CVE-2026-44609). Successful exploitation can lead to full system takeover.
CVE-2026-44682 Vulnerability in privilege-escalation (CVE-2026-44682)
vulnerability in privilege-escalation (CVE-2026-44682). Successful exploitation can lead to full system takeover.
CVE-2026-50033 Vulnerability in privilege-escalation (CVE-2026-50033)
vulnerability in privilege-escalation (CVE-2026-50033). Successful exploitation can lead to full system takeover.
CVE-2026-43924 Open Redirect in CVE-2026-43924 (CVE-2026-43924)
vulnerability in CVE-2026-43924 (CVE-2026-43924). Risk of unauthorized operations or information disclosure. Exploitable via ``extension_meta``.
CVE-2026-40495 Information Disclosure in CVE-2026-40495 (CVE-2026-40495)
vulnerability in CVE-2026-40495 (CVE-2026-40495). Risk of unauthorized operations or information disclosure. Exploitable via ``hide_version_public``.
CVE-2026-42061 Vulnerability in privilege-escalation (CVE-2026-42061)
vulnerability in privilege-escalation (CVE-2026-42061). Successful exploitation can lead to full system takeover.
CVE-2026-37700 Cross-Site Scripting (XSS) in CVE-2026-37700 (CVE-2026-37700)
cross-site scripting in CVE-2026-37700 (CVE-2026-37700). Risk of unauthorized operations or information disclosure.
CVE-2026-26825 Vulnerability in libxls-project (CVE-2026-26825)
vulnerability in libxls-project (CVE-2026-26825). Risk of unauthorized operations or information disclosure.
CVE-2026-44017 Path Traversal in docling (CVE-2026-44017)
path traversal in docling (CVE-2026-44017). Successful exploitation can lead to full system takeover. Exploitable via ``SecurityError``. Mitigation: upgrade to `2.91.0` or later.
CVE-2026-8888 Vulnerability in dos (CVE-2026-8888)
vulnerability in dos (CVE-2026-8888). Risk of unauthorized operations or information disclosure.
CVE-2026-8878 Vulnerability in securly (CVE-2026-8878)
vulnerability in securly (CVE-2026-8878). Confidential information can be exposed externally.
CVE-2026-8879 Vulnerability in securly (CVE-2026-8879)
vulnerability in securly (CVE-2026-8879). Risk of unauthorized operations or information disclosure.
CVE-2026-8876 Vulnerability in securly (CVE-2026-8876)
vulnerability in securly (CVE-2026-8876). Risk of unauthorized operations or information disclosure.
CVE-2026-45614 Vulnerability in linaro (CVE-2026-45614)
vulnerability in linaro (CVE-2026-45614). Confidential information can be exposed externally.
CVE-2026-45702 Vulnerability in linaro (CVE-2026-45702)
vulnerability in linaro (CVE-2026-45702). Risk of unauthorized operations or information disclosure.
CVE-2026-7888 Unsafe Deserialization in concrete5/concrete5 (CVE-2026-7888)
vulnerability in concrete5/concrete5 (CVE-2026-7888). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.2` or later.
CVE-2026-42839 Cross-Site Scripting (XSS) in CVE-2026-42839 (CVE-2026-42839)
cross-site scripting in CVE-2026-42839 (CVE-2026-42839). Risk of unauthorized operations or information disclosure.
CVE-2026-42840 Cross-Site Scripting (XSS) in CVE-2026-42840 (CVE-2026-42840)
cross-site scripting in CVE-2026-42840 (CVE-2026-42840). Risk of unauthorized operations or information disclosure.
CVE-2026-26378 Cross-Site Scripting (XSS) in koha (CVE-2026-26378)
cross-site scripting in koha (CVE-2026-26378). Risk of unauthorized operations or information disclosure.
CVE-2026-26379 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-26379)
SSRF in ssrf (CVE-2026-26379). Risk of unauthorized operations or information disclosure.
CVE-2026-46273 Vulnerability in linux (CVE-2026-46273)
vulnerability in linux (CVE-2026-46273). Risk of unauthorized operations or information disclosure.
CVE-2026-46267 Use-After-Free in linux (CVE-2026-46267)
vulnerability in linux (CVE-2026-46267). Successful exploitation can lead to full system takeover.
CVE-2026-46270 Use-After-Free in linux (CVE-2026-46270)
vulnerability in linux (CVE-2026-46270). Successful exploitation can lead to full system takeover. Exploitable via ``devm_``.
CVE-2026-46269 Vulnerability in linux (CVE-2026-46269)
vulnerability in linux (CVE-2026-46269). Risk of unauthorized operations or information disclosure.
CVE-2026-46272 Vulnerability in c (CVE-2026-46272)
vulnerability in c (CVE-2026-46272). Risk of unauthorized operations or information disclosure.
CVE-2026-46260 Out-of-Bounds Read in c (CVE-2026-46260)
vulnerability in c (CVE-2026-46260). Successful exploitation can lead to full system takeover.
CVE-2026-46263 Out-of-Bounds Read in c (CVE-2026-46263)
vulnerability in c (CVE-2026-46263). Successful exploitation can lead to full system takeover.
CVE-2026-46246 Use-After-Free in linux (CVE-2026-46246)
vulnerability in linux (CVE-2026-46246). Successful exploitation can lead to full system takeover. Exploitable via ``devm_``.
CVE-2026-46264 Use-After-Free in c (CVE-2026-46264)
vulnerability in c (CVE-2026-46264). Successful exploitation can lead to full system takeover.
CVE-2026-46258 Vulnerability in linux (CVE-2026-46258)
vulnerability in linux (CVE-2026-46258). Risk of unauthorized operations or information disclosure.
CVE-2026-46245 Vulnerability in c (CVE-2026-46245)
vulnerability in c (CVE-2026-46245). Risk of unauthorized operations or information disclosure.
CVE-2026-46261 Vulnerability in linux (CVE-2026-46261)
vulnerability in linux (CVE-2026-46261). Risk of unauthorized operations or information disclosure.
CVE-2026-46252 Vulnerability in c (CVE-2026-46252)
vulnerability in c (CVE-2026-46252). Risk of unauthorized operations or information disclosure.
CVE-2026-46262 Vulnerability in linux (CVE-2026-46262)
vulnerability in linux (CVE-2026-46262). Risk of unauthorized operations or information disclosure.
CVE-2026-46256 Vulnerability in linux (CVE-2026-46256)
vulnerability in linux (CVE-2026-46256). Risk of unauthorized operations or information disclosure.
CVE-2026-46253 Out-of-Bounds Write in linux (CVE-2026-46253)
out-of-bounds write in linux (CVE-2026-46253). Successful exploitation can lead to full system takeover.
CVE-2026-46257 Vulnerability in linux (CVE-2026-46257)
vulnerability in linux (CVE-2026-46257). Risk of unauthorized operations or information disclosure.
CVE-2026-46244 Vulnerability in c (CVE-2026-46244)
vulnerability in c (CVE-2026-46244). Confidential information can be exposed externally.
CVE-2026-36612 Vulnerability in CVE-2026-36612 (CVE-2026-36612)
vulnerability in CVE-2026-36612 (CVE-2026-36612). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →