Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-48147 |
|
Vulnerability in @budibase/backend-core (CVE-2026-48147)
vulnerability in @budibase/backend-core (CVE-2026-48147). Data can be tampered with by attackers. Exploitable via `POST /api/global/users/invite`. Mitigation: upgrade to `3.35.4` or later.
|
| CVE-2026-46425 |
|
Vulnerability in CVE-2026-46425 (CVE-2026-46425)
vulnerability in CVE-2026-46425 (CVE-2026-46425). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.38.2` or later.
|
| CVE-2026-48128 |
|
SSRF (Server-Side Request Forgery) in budibase (CVE-2026-48128)
SSRF in budibase (CVE-2026-48128). Risk of unauthorized operations or information disclosure. Exploitable via ``inputs.query``. Mitigation: upgrade to `3.39.0` or later.
|
| CVE-2026-48146 |
|
SSRF (Server-Side Request Forgery) in @budibase/server (CVE-2026-48146)
SSRF in @budibase/server (CVE-2026-48146). Confidential information can be exposed externally. Exploitable via ``fetchWithBlacklist``. Mitigation: upgrade to `3.39.0` or later.
|
| CVE-2026-46427 |
|
Information Disclosure in CVE-2026-46427 (CVE-2026-46427)
vulnerability in CVE-2026-46427 (CVE-2026-46427). Confidential information can be exposed externally. Exploitable via `GET /api/datasources/`. Mitigation: upgrade to `3.38.3` or later.
|
| CVE-2026-45081 |
|
Authorization Flaw in CVE-2026-45081 (CVE-2026-45081)
vulnerability in CVE-2026-45081 (CVE-2026-45081). Confidential information can be exposed externally. Mitigation: upgrade to `16.5.0` or later.
|
| CVE-2026-44460 |
|
Information Disclosure in CVE-2026-44460 (CVE-2026-44460)
vulnerability in CVE-2026-44460 (CVE-2026-44460). Confidential information can be exposed externally. Mitigation: upgrade to `3.12.0` or later.
|
| CVE-2026-42553 |
|
Vulnerability in cinny (CVE-2026-42553)
vulnerability in cinny (CVE-2026-42553). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`. Mitigation: upgrade to `4.10.3` or later.
|
| CVE-2026-45368 |
|
Cross-Site Scripting (XSS) in getkirby/cms (CVE-2026-45368)
cross-site scripting in getkirby/cms (CVE-2026-45368). Risk of unauthorized operations or information disclosure. Exploitable via ``image``. Mitigation: upgrade to `5.4.1` or later.
|
| CVE-2026-45357 |
|
Vulnerability in liquidjs (CVE-2026-45357)
vulnerability in liquidjs (CVE-2026-45357). Risk of unauthorized operations or information disclosure. Exploitable via ``date``.
|
| CVE-2026-45334 |
|
Vulnerability in getkirby/cms (CVE-2026-45334)
vulnerability in getkirby/cms (CVE-2026-45334). Risk of unauthorized operations or information disclosure. Exploitable via ``users.access``. Mitigation: upgrade to `5.4.1` or later.
|
| CVE-2026-45260 |
|
Vulnerability in pimcore/pimcore (CVE-2026-45260)
vulnerability in pimcore/pimcore (CVE-2026-45260). Data can be tampered with by attackers. Exploitable via ``MOVE``. Mitigation: upgrade to `11.5.17` or later.
|
| CVE-2026-49054 |
|
Vulnerability in CVE-2026-49054 (CVE-2026-49054)
vulnerability in CVE-2026-49054 (CVE-2026-49054). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45335 |
|
Open Redirect in CVE-2026-45335 (CVE-2026-45335)
vulnerability in CVE-2026-45335 (CVE-2026-45335). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.7.3` or later.
|
| CVE-2026-42790 |
|
Vulnerability in erlang (CVE-2026-42790)
vulnerability in erlang (CVE-2026-42790). Confidential information can be exposed externally.
|
| CVE-2026-42083 |
|
Free5GC PCF: Missing authentication middleware in Npcf_SMPolicyControl allows access to SM policy handlers and disclosure of subscriber SUPI
Free5GC PCF: Missing authentication middleware in Npcf_SMPolicyControl allows access to SM policy handlers and disclosure of subscriber SUPI
|
| CVE-2026-42082 |
|
Vulnerability in github.com/free5gc/amf (CVE-2026-42082)
vulnerability in github.com/free5gc/amf (CVE-2026-42082). Risk of unauthorized operations or information disclosure. Exploitable via ``OnGoing``.
|
| CVE-2026-42459 |
|
Vulnerability in github.com/free5gc/udm (CVE-2026-42459)
vulnerability in github.com/free5gc/udm (CVE-2026-42459). Confidential information can be exposed externally. Exploitable via ``supi``.
|
| CVE-2026-38945 |
|
Command Injection in CVE-2026-38945 (CVE-2026-38945)
command injection in CVE-2026-38945 (CVE-2026-38945). Successful exploitation can lead to full system takeover.
|
| CVE-2026-38931 |
|
Cross-Site Scripting (XSS) in CVE-2026-38931 (CVE-2026-38931)
cross-site scripting in CVE-2026-38931 (CVE-2026-38931). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42081 |
|
Vulnerability in github.com/free5gc/amf (CVE-2026-42081)
vulnerability in github.com/free5gc/amf (CVE-2026-42081). Risk of unauthorized operations or information disclosure. Exploitable via ``handlePathSwitchRequestMain``.
|
| CVE-2026-38930 |
|
SQL Injection in CVE-2026-38930 (CVE-2026-38930)
SQL injection in CVE-2026-38930 (CVE-2026-38930). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-68712 |
|
Vulnerability in c (CVE-2025-68712)
vulnerability in c (CVE-2025-68712). Confidential information can be exposed externally.
|
| CVE-2025-70116 |
|
Vulnerability in CVE-2025-70116 (CVE-2025-70116)
vulnerability in CVE-2025-70116 (CVE-2025-70116). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-41656 |
|
Vulnerability in CVE-2022-41656 (CVE-2022-41656)
vulnerability in CVE-2022-41656 (CVE-2022-41656). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45162 |
|
Unsafe Deserialization in pimcore/pimcore (CVE-2026-45162)
vulnerability in pimcore/pimcore (CVE-2026-45162). Successful exploitation can lead to full system takeover. Exploitable via ``allowed_classes``. Mitigation: upgrade to `2026.1.3` or later.
|
| CVE-2026-45065 |
|
Vulnerability in symfony/routing (CVE-2026-45065)
vulnerability in symfony/routing (CVE-2026-45065). Risk of unauthorized operations or information disclosure. Exploitable via ``UrlGenerator``. Mitigation: upgrade to `8.0.12` or later.
|
| CVE-2026-45063 |
|
Vulnerability in symfony/security-http (CVE-2026-45063)
vulnerability in symfony/security-http (CVE-2026-45063). Confidential information can be exposed externally. Exploitable via ``X509Authenticator``. Mitigation: upgrade to `8.0.12` or later.
|
| CVE-2026-46034 |
|
Vulnerability in linux (CVE-2026-46034)
vulnerability in linux (CVE-2026-46034). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46031 |
|
Vulnerability in linux (CVE-2026-46031)
vulnerability in linux (CVE-2026-46031). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46030 |
|
Vulnerability in linux (CVE-2026-46030)
vulnerability in linux (CVE-2026-46030). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45998 |
|
Use-After-Free in linux (CVE-2026-45998)
vulnerability in linux (CVE-2026-45998). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45991 |
|
Out-of-Bounds Write in linux (CVE-2026-45991)
out-of-bounds write in linux (CVE-2026-45991). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45989 |
|
Use-After-Free in linux (CVE-2026-45989)
vulnerability in linux (CVE-2026-45989). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45980 |
|
Use-After-Free in linux (CVE-2026-45980)
vulnerability in linux (CVE-2026-45980). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45976 |
|
Vulnerability in linux (CVE-2026-45976)
vulnerability in linux (CVE-2026-45976). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45981 |
|
Vulnerability in linux (CVE-2026-45981)
vulnerability in linux (CVE-2026-45981). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45957 |
|
Out-of-Bounds Read in c (CVE-2026-45957)
vulnerability in c (CVE-2026-45957). Confidential information can be exposed externally.
|
| CVE-2026-45970 |
|
Use-After-Free in linux (CVE-2026-45970)
vulnerability in linux (CVE-2026-45970). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45972 |
|
Use-After-Free in linux (CVE-2026-45972)
vulnerability in linux (CVE-2026-45972). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45951 |
|
Use-After-Free in linux (CVE-2026-45951)
vulnerability in linux (CVE-2026-45951). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45956 |
|
Use-After-Free in linux (CVE-2026-45956)
vulnerability in linux (CVE-2026-45956). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45968 |
|
Vulnerability in c (CVE-2026-45968)
vulnerability in c (CVE-2026-45968). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45969 |
|
Vulnerability in linux (CVE-2026-45969)
vulnerability in linux (CVE-2026-45969). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45965 |
|
Vulnerability in linux (CVE-2026-45965)
vulnerability in linux (CVE-2026-45965). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45959 |
|
Vulnerability in linux (CVE-2026-45959)
vulnerability in linux (CVE-2026-45959). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45963 |
|
Vulnerability in linux (CVE-2026-45963)
vulnerability in linux (CVE-2026-45963). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45948 |
|
Vulnerability in linux (CVE-2026-45948)
vulnerability in linux (CVE-2026-45948). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45964 |
|
Vulnerability in c (CVE-2026-45964)
vulnerability in c (CVE-2026-45964). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45935 |
|
Out-of-Bounds Read in linux (CVE-2026-45935)
vulnerability in linux (CVE-2026-45935). Successful exploitation can lead to full system takeover.
|