Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-55485 |
|
Information Disclosure in piccolo-admin (CVE-2026-55485)
vulnerability in piccolo-admin (CVE-2026-55485). Successful exploitation can lead to full system takeover. Exploitable via `PATCH /api/tables/piccolo_user/2/`. Mitigation: upgrade to `1.14.0` or later.
|
| CVE-2026-81729 |
|
Authorization Flaw in CVE-2026-81729 (CVE-2026-81729)
vulnerability in CVE-2026-81729 (CVE-2026-81729). Data can be tampered with by attackers. Exploitable via `DELETE /api/index.php/documents`.
|
| CVE-2026-66003 |
|
Authorization Flaw in CVE-2026-66003 (CVE-2026-66003)
vulnerability in CVE-2026-66003 (CVE-2026-66003). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-80203 |
|
Authorization Flaw in CVE-2026-80203 (CVE-2026-80203)
vulnerability in CVE-2026-80203 (CVE-2026-80203). Successful exploitation can lead to full system takeover.
|
| CVE-2026-79190 |
|
Authorization Flaw in c (CVE-2026-79190)
vulnerability in c (CVE-2026-79190). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79002 |
|
Authorization Flaw in c (CVE-2026-79002)
vulnerability in c (CVE-2026-79002). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78954 |
|
Authorization Flaw in c (CVE-2026-78954)
vulnerability in c (CVE-2026-78954). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77923 |
|
Authorization Flaw in CVE-2026-77923 (CVE-2026-77923)
vulnerability in CVE-2026-77923 (CVE-2026-77923). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76836 |
|
Code Injection in CVE-2026-76836 (CVE-2026-76836)
code injection in CVE-2026-76836 (CVE-2026-76836). Successful exploitation can lead to full system takeover. Exploitable via `PUT /api/station/{station_id}/profile/edit`.
|
| CVE-2026-62382 |
|
Authorization Flaw in CVE-2026-62382 (CVE-2026-62382)
vulnerability in CVE-2026-62382 (CVE-2026-62382). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.9.6` or later.
|
| CVE-2026-62313 |
|
Authorization Flaw in c (CVE-2026-62313)
vulnerability in c (CVE-2026-62313). Risk of unauthorized operations or information disclosure. Exploitable via ``security.idmap.isolated``.
|
| CVE-2026-14949 |
|
Authorization Flaw in CVE-2026-14949 (CVE-2026-14949)
vulnerability in CVE-2026-14949 (CVE-2026-14949). Data can be tampered with by attackers.
|
| CVE-2026-68561 |
|
Privilege Escalation in CVE-2026-68561 (CVE-2026-68561)
vulnerability in CVE-2026-68561 (CVE-2026-68561). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19670 |
|
Authorization Flaw in nginx (CVE-2026-19670)
vulnerability in nginx (CVE-2026-19670). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45122 |
|
Authorization Flaw in CVE-2026-45122 (CVE-2026-45122)
vulnerability in CVE-2026-45122 (CVE-2026-45122). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45121 |
|
Authorization Flaw in CVE-2026-45121 (CVE-2026-45121)
vulnerability in CVE-2026-45121 (CVE-2026-45121). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19598 |
|
Authorization Flaw in wordpress (CVE-2026-19598)
vulnerability in wordpress (CVE-2026-19598). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73571 |
|
Authorization Flaw in c (CVE-2026-73571)
vulnerability in c (CVE-2026-73571). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73290 |
|
Authorization Flaw in CVE-2026-73290 (CVE-2026-73290)
vulnerability in CVE-2026-73290 (CVE-2026-73290). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73289 |
|
Authorization Flaw in CVE-2026-73289 (CVE-2026-73289)
vulnerability in CVE-2026-73289 (CVE-2026-73289). Confidential information can be exposed externally.
|
| CVE-2026-73286 |
|
Authorization Flaw in CVE-2026-73286 (CVE-2026-73286)
vulnerability in CVE-2026-73286 (CVE-2026-73286). Confidential information can be exposed externally.
|
| CVE-2026-73285 |
|
Authorization Flaw in CVE-2026-73285 (CVE-2026-73285)
vulnerability in CVE-2026-73285 (CVE-2026-73285). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73265 |
|
Vulnerability in CVE-2026-73265 (CVE-2026-73265)
vulnerability in CVE-2026-73265 (CVE-2026-73265). Confidential information can be exposed externally.
|
| CVE-2026-73213 |
|
Authorization Flaw in c (CVE-2026-73213)
vulnerability in c (CVE-2026-73213). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62872 |
|
Authorization Flaw in csharp (CVE-2026-62872)
vulnerability in csharp (CVE-2026-62872). Successful exploitation can lead to full system takeover.
|
| CVE-2026-69118 |
|
Authorization Flaw in CVE-2026-69118 (CVE-2026-69118)
vulnerability in CVE-2026-69118 (CVE-2026-69118). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19350 |
|
Vulnerability in CVE-2026-19350 (CVE-2026-19350)
vulnerability in CVE-2026-19350 (CVE-2026-19350). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19345 |
|
Vulnerability in CVE-2026-19345 (CVE-2026-19345)
vulnerability in CVE-2026-19345 (CVE-2026-19345). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-71315 |
|
Vulnerability in nuxt (CVE-2026-71315)
vulnerability in nuxt (CVE-2026-71315). Confidential information can be exposed externally. Exploitable via ``appMiddleware``. Mitigation: upgrade to `3.21.10` or later.
|
| CVE-2026-68930 |
|
Vulnerability in russh (CVE-2026-68930)
vulnerability in russh (CVE-2026-68930). Data can be tampered with by attackers. Exploitable via ``russh``. Mitigation: upgrade to `0.62.5` or later.
|
| CVE-2026-67341 |
|
Authorization Flaw in CVE-2026-67341 (CVE-2026-67341)
vulnerability in CVE-2026-67341 (CVE-2026-67341). Successful exploitation can lead to full system takeover.
|
| CVE-2026-2411 |
|
Authorization Flaw in c (CVE-2026-2411)
vulnerability in c (CVE-2026-2411). Confidential information can be exposed externally.
|
| CVE-2026-14929 |
|
Authorization Flaw in wordpress (CVE-2026-14929)
vulnerability in wordpress (CVE-2026-14929). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65975 |
|
Authorization Flaw in pydantic (CVE-2026-65975)
vulnerability in pydantic (CVE-2026-65975). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61325 |
|
Vulnerability in c (CVE-2026-61325)
vulnerability in c (CVE-2026-61325). Confidential information can be exposed externally.
|
| CVE-2026-61012 |
|
Authorization Flaw in c (CVE-2026-61012)
vulnerability in c (CVE-2026-61012). Data can be tampered with by attackers.
|
| CVE-2026-60951 |
|
Vulnerability in c (CVE-2026-60951)
vulnerability in c (CVE-2026-60951). Confidential information can be exposed externally.
|
| CVE-2026-60723 |
|
Authorization Flaw in c (CVE-2026-60723)
vulnerability in c (CVE-2026-60723). Confidential information can be exposed externally.
|
| CVE-2026-60663 |
|
Privilege Escalation in c (CVE-2026-60663)
vulnerability in c (CVE-2026-60663). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60625 |
|
Authorization Flaw in c (CVE-2026-60625)
vulnerability in c (CVE-2026-60625). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60320 |
|
Authorization Flaw in c (CVE-2026-60320)
vulnerability in c (CVE-2026-60320). Confidential information can be exposed externally.
|
| CVE-2026-15829 |
|
SQL Injection in c (CVE-2026-15829)
SQL injection in c (CVE-2026-15829). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65049 |
|
Authorization Flaw in wordpress (CVE-2026-65049)
vulnerability in wordpress (CVE-2026-65049). Data can be tampered with by attackers.
|
| CVE-2026-16200 |
|
Vulnerability in c (CVE-2026-16200)
vulnerability in c (CVE-2026-16200). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16126 |
|
Vulnerability in c (CVE-2026-16126)
vulnerability in c (CVE-2026-16126). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62217 |
|
Authorization Flaw in c (CVE-2026-62217)
vulnerability in c (CVE-2026-62217). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50528 |
|
Vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-50528)
vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-50528). Data can be tampered with by attackers. Mitigation: upgrade to `8.0.29` or later.
|
| CVE-2026-47303 |
|
Vulnerability in Microsoft.AspNetCore.Authentication.Negotiate (CVE-2026-47303)
vulnerability in Microsoft.AspNetCore.Authentication.Negotiate (CVE-2026-47303). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.29` or later.
|
| CVE-2026-58408 |
|
Vulnerability in CVE-2026-58408 (CVE-2026-58408)
vulnerability in CVE-2026-58408 (CVE-2026-58408). Confidential information can be exposed externally. Exploitable via `POST /CSVCreateFile.php`.
|
| CVE-2026-39903 |
|
Authorization Flaw in CVE-2026-39903 (CVE-2026-39903)
vulnerability in CVE-2026-39903 (CVE-2026-39903). Data can be tampered with by attackers.
|