Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-60373 |
|
Privilege Escalation in c (CVE-2026-60373)
vulnerability in c (CVE-2026-60373). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60372 |
|
Privilege Escalation in c (CVE-2026-60372)
vulnerability in c (CVE-2026-60372). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60371 |
|
Information Disclosure in c (CVE-2026-60371)
vulnerability in c (CVE-2026-60371). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60370 |
|
Vulnerability in c (CVE-2026-60370)
vulnerability in c (CVE-2026-60370). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60369 |
|
Privilege Escalation in c (CVE-2026-60369)
vulnerability in c (CVE-2026-60369). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60368 |
|
Vulnerability in c (CVE-2026-60368)
vulnerability in c (CVE-2026-60368). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60367 |
|
Privilege Escalation in c (CVE-2026-60367)
vulnerability in c (CVE-2026-60367). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60366 |
|
Privilege Escalation in c (CVE-2026-60366)
vulnerability in c (CVE-2026-60366). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16630 |
|
Command Injection in CVE-2026-16630 (CVE-2026-16630)
command injection in CVE-2026-16630 (CVE-2026-16630). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64649 |
|
SSRF (Server-Side Request Forgery) in next (CVE-2026-64649)
SSRF in next (CVE-2026-64649). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`. Mitigation: upgrade to `16.2.11` or later.
|
| CVE-2026-64648 |
|
Vulnerability in next (CVE-2026-64648)
vulnerability in next (CVE-2026-64648). Risk of unauthorized operations or information disclosure. Exploitable via ``fetch``. Mitigation: upgrade to `16.2.11` or later.
|
| CVE-2026-64647 |
|
Vulnerability in next (CVE-2026-64647)
vulnerability in next (CVE-2026-64647). Risk of unauthorized operations or information disclosure. Exploitable via ``fetch``. Mitigation: upgrade to `16.2.11` or later.
|
| CVE-2026-64646 |
|
Vulnerability in next (CVE-2026-64646)
vulnerability in next (CVE-2026-64646). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `16.2.11` or later.
|
| CVE-2026-64645 |
|
Open Redirect in next (CVE-2026-64645)
vulnerability in next (CVE-2026-64645). Risk of unauthorized operations or information disclosure. Exploitable via ``has``. Mitigation: upgrade to `16.2.11` or later.
|
| CVE-2026-64644 |
|
Vulnerability in next (CVE-2026-64644)
vulnerability in next (CVE-2026-64644). Risk of unauthorized operations or information disclosure. Exploitable via ``config.images.remotePatterns``. Mitigation: upgrade to `16.2.11` or later.
|
| CVE-2026-64643 |
|
Vulnerability in next (CVE-2026-64643)
vulnerability in next (CVE-2026-64643). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `16.2.11` or later.
|
| CVE-2026-64642 |
|
Vulnerability in next (CVE-2026-64642)
vulnerability in next (CVE-2026-64642). Confidential information can be exposed externally. Exploitable via ``config.i18n.locales``. Mitigation: upgrade to `16.2.11` or later.
|
| CVE-2026-64641 |
|
Vulnerability in next (CVE-2026-64641)
vulnerability in next (CVE-2026-64641). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `16.2.11` or later.
|
| CVE-2026-59943 |
|
Vulnerability in dompdf/dompdf (CVE-2026-59943)
vulnerability in dompdf/dompdf (CVE-2026-59943). Risk of unauthorized operations or information disclosure. Exploitable via ``href``. Mitigation: upgrade to `3.1.6` or later.
|
| CVE-2026-59942 |
|
Vulnerability in dompdf/dompdf (CVE-2026-59942)
vulnerability in dompdf/dompdf (CVE-2026-59942). Risk of unauthorized operations or information disclosure. Exploitable via ``exploit.py``. Mitigation: upgrade to `3.1.6` or later.
|
| CVE-2026-59941 |
|
Vulnerability in dompdf/dompdf (CVE-2026-59941)
vulnerability in dompdf/dompdf (CVE-2026-59941). Risk of unauthorized operations or information disclosure. Exploitable via `POST /render`. Mitigation: upgrade to `3.1.6` or later.
|
| CVE-2026-16629 |
|
Command Injection in CVE-2026-16629 (CVE-2026-16629)
command injection in CVE-2026-16629 (CVE-2026-16629). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64795 |
|
Cross-Site Scripting (XSS) in CVE-2026-64795 (CVE-2026-64795)
cross-site scripting in CVE-2026-64795 (CVE-2026-64795). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63281 |
|
Stored condition values could also execute HTML/JavaScript in administrator summaries.
Stored condition values could also execute HTML/JavaScript in administrator summaries.
|
| CVE-2026-64796 |
|
Vulnerability in CVE-2026-64796 (CVE-2026-64796)
vulnerability in CVE-2026-64796 (CVE-2026-64796). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64829 |
|
Vulnerability in CVE-2026-64829 (CVE-2026-64829)
vulnerability in CVE-2026-64829 (CVE-2026-64829). Confidential information can be exposed externally.
|
| CVE-2026-13078 |
|
Vulnerability in mongodb (CVE-2026-13078)
vulnerability in mongodb (CVE-2026-13078). Confidential information can be exposed externally.
|
| CVE-2026-13071 |
|
Use-After-Free in mongodb (CVE-2026-13071)
vulnerability in mongodb (CVE-2026-13071). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13066 |
|
Vulnerability in mongodb (CVE-2026-13066)
vulnerability in mongodb (CVE-2026-13066). Confidential information can be exposed externally.
|
| CVE-2026-56722 |
|
Vulnerability in dompdf/dompdf (CVE-2026-56722)
vulnerability in dompdf/dompdf (CVE-2026-56722). Risk of unauthorized operations or information disclosure. Exploitable via ``chroot``. Mitigation: upgrade to `3.1.6` or later.
|
| CVE-2026-55851 |
|
Vulnerability in io.netty:netty-codec-haproxy (CVE-2026-55851)
vulnerability in io.netty:netty-codec-haproxy (CVE-2026-55851). Risk of unauthorized operations or information disclosure. Exploitable via ``HAProxyMessageDecoder``. Mitigation: upgrade to `4.1.136.Final` or later.
|
| CVE-2026-55555 |
|
Vulnerability in dompdf/dompdf (CVE-2026-55555)
vulnerability in dompdf/dompdf (CVE-2026-55555). Confidential information can be exposed externally. Exploitable via ``CHROOT``. Mitigation: upgrade to `3.1.6` or later.
|
| CVE-2026-55554 |
|
Vulnerability in dompdf/dompdf (CVE-2026-55554)
vulnerability in dompdf/dompdf (CVE-2026-55554). Confidential information can be exposed externally. Exploitable via ``jpg``. Mitigation: upgrade to `3.1.6` or later.
|
| CVE-2026-64832 |
|
Vulnerability in c (CVE-2026-64832)
vulnerability in c (CVE-2026-64832). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64834 |
|
Vulnerability in c (CVE-2026-64834)
vulnerability in c (CVE-2026-64834). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64835 |
|
Out-of-Bounds Write in c (CVE-2026-64835)
out-of-bounds write in c (CVE-2026-64835). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64830 |
|
Vulnerability in c (CVE-2026-64830)
vulnerability in c (CVE-2026-64830). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64828 |
|
Cross-Site Scripting (XSS) in CVE-2026-64828 (CVE-2026-64828)
cross-site scripting in CVE-2026-64828 (CVE-2026-64828). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8152 |
|
Cross-Site Scripting (XSS) in CVE-2026-8152 (CVE-2026-8152)
cross-site scripting in CVE-2026-8152 (CVE-2026-8152). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65598 |
|
Vulnerability in n8n (CVE-2026-65598)
vulnerability in n8n (CVE-2026-65598). Successful exploitation can lead to full system takeover. Exploitable via ``clone``. Mitigation: upgrade to `2.29.8` or later.
|
| CVE-2026-65592 |
|
Cross-Site Scripting (XSS) in n8n (CVE-2026-65592)
cross-site scripting in n8n (CVE-2026-65592). Risk of unauthorized operations or information disclosure. Exploitable via ``cachedResultUrl``. Mitigation: upgrade to `2.29.8` or later.
|
| CVE-2026-44190 |
|
OS Command Injection in CVE-2026-44190 (CVE-2026-44190)
OS command injection in CVE-2026-44190 (CVE-2026-44190). Successful exploitation can lead to full system takeover. Exploitable via ``ansible.python.activationScript``.
|
| CVE-2026-12987 |
|
SQL Injection in wordpress (CVE-2026-12987)
SQL injection in wordpress (CVE-2026-12987). Confidential information can be exposed externally.
|
| CVE-2026-15802 |
|
Vulnerability in wordpress (CVE-2026-15802)
vulnerability in wordpress (CVE-2026-15802). Data can be tampered with by attackers.
|
| CVE-2026-16490 |
|
Vulnerability in sqli (CVE-2026-16490)
vulnerability in sqli (CVE-2026-16490). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16488 |
|
Command Injection in CVE-2026-16488 (CVE-2026-16488)
command injection in CVE-2026-16488 (CVE-2026-16488). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16489 |
|
Command Injection in CVE-2026-16489 (CVE-2026-16489)
command injection in CVE-2026-16489 (CVE-2026-16489). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16485 |
|
Cross-Site Scripting (XSS) in CVE-2026-16485 (CVE-2026-16485)
cross-site scripting in CVE-2026-16485 (CVE-2026-16485). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16486 |
|
Cross-Site Scripting (XSS) in CVE-2026-16486 (CVE-2026-16486)
cross-site scripting in CVE-2026-16486 (CVE-2026-16486). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16517 |
|
Vulnerability in c (CVE-2026-16517)
vulnerability in c (CVE-2026-16517). Risk of unauthorized operations or information disclosure.
|