Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-57856 |
|
Path Traversal in path-traversal (CVE-2026-57856)
path traversal in path-traversal (CVE-2026-57856). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62195 |
|
Vulnerability in openclaw (CVE-2026-62195)
vulnerability in openclaw (CVE-2026-62195). Confidential information can be exposed externally.
|
| CVE-2026-62196 |
|
Authorization Flaw in openclaw (CVE-2026-62196)
vulnerability in openclaw (CVE-2026-62196). Confidential information can be exposed externally.
|
| CVE-2026-62197 |
|
SSRF (Server-Side Request Forgery) in openclaw (CVE-2026-62197)
SSRF in openclaw (CVE-2026-62197). Confidential information can be exposed externally.
|
| CVE-2026-62198 |
|
Authorization Flaw in openclaw (CVE-2026-62198)
vulnerability in openclaw (CVE-2026-62198). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62199 |
|
Vulnerability in openclaw (CVE-2026-62199)
vulnerability in openclaw (CVE-2026-62199). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62200 |
|
Vulnerability in c (CVE-2026-62200)
vulnerability in c (CVE-2026-62200). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62189 |
|
Vulnerability in openclaw (CVE-2026-62189)
vulnerability in openclaw (CVE-2026-62189). Confidential information can be exposed externally.
|
| CVE-2026-62190 |
|
Vulnerability in openclaw (CVE-2026-62190)
vulnerability in openclaw (CVE-2026-62190). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62191 |
|
Vulnerability in openclaw (CVE-2026-62191)
vulnerability in openclaw (CVE-2026-62191). Data can be tampered with by attackers.
|
| CVE-2026-62192 |
|
Authorization Flaw in openclaw (CVE-2026-62192)
vulnerability in openclaw (CVE-2026-62192). Data can be tampered with by attackers.
|
| CVE-2026-62193 |
|
Authorization Flaw in openclaw (CVE-2026-62193)
vulnerability in openclaw (CVE-2026-62193). Data can be tampered with by attackers. Mitigation: upgrade to `2026.6.9` or later.
|
| CVE-2026-62194 |
|
Vulnerability in privilege-escalation (CVE-2026-62194)
vulnerability in privilege-escalation (CVE-2026-62194). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62186 |
|
Vulnerability in openclaw (CVE-2026-62186)
vulnerability in openclaw (CVE-2026-62186). Confidential information can be exposed externally.
|
| CVE-2026-62187 |
|
Authorization Flaw in openclaw (CVE-2026-62187)
vulnerability in openclaw (CVE-2026-62187). Confidential information can be exposed externally.
|
| CVE-2026-62188 |
|
Authorization Flaw in openclaw (CVE-2026-62188)
vulnerability in openclaw (CVE-2026-62188). Confidential information can be exposed externally.
|
| CVE-2026-58411 |
|
Cross-Site Scripting (XSS) in privilege-escalation (CVE-2026-58411)
cross-site scripting in privilege-escalation (CVE-2026-58411). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15597 |
|
Vulnerability in sqli (CVE-2026-15597)
vulnerability in sqli (CVE-2026-15597). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15596 |
|
Cross-Site Scripting (XSS) in CVE-2026-15596 (CVE-2026-15596)
cross-site scripting in CVE-2026-15596 (CVE-2026-15596). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48364 |
|
Vulnerability in adobe (CVE-2026-48364)
vulnerability in adobe (CVE-2026-48364). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48363 |
|
Vulnerability in adobe (CVE-2026-48363)
vulnerability in adobe (CVE-2026-48363). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12385 |
|
Information Disclosure in wordpress (CVE-2026-12385)
vulnerability in wordpress (CVE-2026-12385). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15595 |
|
Cross-Site Scripting (XSS) in CVE-2026-15595 (CVE-2026-15595)
cross-site scripting in CVE-2026-15595 (CVE-2026-15595). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12536 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-12536)
cross-site scripting in wordpress (CVE-2026-12536). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58409 |
|
Unrestricted File Upload in CVE-2026-58409 (CVE-2026-58409)
vulnerability in CVE-2026-58409 (CVE-2026-58409). Successful exploitation can lead to full system takeover. Exploitable via ``php``.
|
| CVE-2026-58408 |
|
Vulnerability in CVE-2026-58408 (CVE-2026-58408)
vulnerability in CVE-2026-58408 (CVE-2026-58408). Confidential information can be exposed externally. Exploitable via `POST /CSVCreateFile.php`.
|
| CVE-2026-55771 |
|
Code Injection in com.cedarpolicy:cedar-java (CVE-2026-55771)
code injection in com.cedarpolicy:cedar-java (CVE-2026-55771). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.9.0` or later.
|
| CVE-2026-49972 |
|
Unrestricted File Upload in laravel (CVE-2026-49972)
vulnerability in laravel (CVE-2026-49972). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49971 |
|
Cross-Site Scripting (XSS) in laravel (CVE-2026-49971)
cross-site scripting in laravel (CVE-2026-49971). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49969 |
|
SSRF (Server-Side Request Forgery) in laravel (CVE-2026-49969)
SSRF in laravel (CVE-2026-49969). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49970 |
|
Path Traversal in plank/laravel-mediable (CVE-2026-49970)
path traversal in plank/laravel-mediable (CVE-2026-49970). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `7.0.0` or later.
|
| CVE-2026-14906 |
|
Unrestricted File Upload in mozilla (CVE-2026-14906)
vulnerability in mozilla (CVE-2026-14906). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53365 |
|
Vulnerability in linux (CVE-2026-53365)
vulnerability in linux (CVE-2026-53365). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53364 |
|
Vulnerability in linux (CVE-2026-53364)
vulnerability in linux (CVE-2026-53364). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57432 |
|
Out-of-Bounds Read in perl (CVE-2026-57432)
vulnerability in perl (CVE-2026-57432). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13221 |
|
Vulnerability in perl (CVE-2026-13221)
vulnerability in perl (CVE-2026-13221). Data can be tampered with by attackers.
|
| CVE-2026-45378 |
|
Information Disclosure in decidim-verifications (CVE-2026-45378)
vulnerability in decidim-verifications (CVE-2026-45378). Confidential information can be exposed externally. Exploitable via ``verification_attachment``. Mitigation: upgrade to `0.32.0` or later.
|
| CVE-2026-58065 |
|
Vulnerability in apache (CVE-2026-58065)
vulnerability in apache (CVE-2026-58065). Successful exploitation can lead to full system takeover. Exploitable via ``known_hosts``.
|
| CVE-2026-59245 |
|
Privilege Escalation in apache (CVE-2026-59245)
vulnerability in apache (CVE-2026-59245). Confidential information can be exposed externally. Exploitable via ``dag_id``.
|
| CVE-2026-60121 |
|
OS Command Injection in vitec (CVE-2026-60121)
OS command injection in vitec (CVE-2026-60121). Successful exploitation can lead to full system takeover.
|
| CVE-2026-61498 |
|
OS Command Injection in vitec (CVE-2026-61498)
OS command injection in vitec (CVE-2026-61498). Successful exploitation can lead to full system takeover.
|
| CVE-2026-6847 |
|
Vulnerability in CVE-2026-6847 (CVE-2026-6847)
vulnerability in CVE-2026-6847 (CVE-2026-6847). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15559 |
|
Vulnerability in sqli (CVE-2026-15559)
vulnerability in sqli (CVE-2026-15559). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15558 |
|
Vulnerability in sqli (CVE-2026-15558)
vulnerability in sqli (CVE-2026-15558). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12257 |
|
Code Injection in CVE-2026-12257 (CVE-2026-12257)
code injection in CVE-2026-12257 (CVE-2026-12257). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57814 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-57814)
cross-site scripting in wordpress (CVE-2026-57814). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57815 |
|
Path Traversal in wordpress (CVE-2026-57815)
path traversal in wordpress (CVE-2026-57815). Confidential information can be exposed externally.
|
| CVE-2026-57799 |
|
Vulnerability in CVE-2026-57799 (CVE-2026-57799)
vulnerability in CVE-2026-57799 (CVE-2026-57799). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57800 |
|
Vulnerability in CVE-2026-57800 (CVE-2026-57800)
vulnerability in CVE-2026-57800 (CVE-2026-57800). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57801 |
|
Vulnerability in CVE-2026-57801 (CVE-2026-57801)
vulnerability in CVE-2026-57801 (CVE-2026-57801). Successful exploitation can lead to full system takeover.
|