Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-10284 |
|
Vulnerability in CVE-2026-10284 (CVE-2026-10284)
vulnerability in CVE-2026-10284 (CVE-2026-10284). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10286 |
|
Vulnerability in sqli (CVE-2026-10286)
vulnerability in sqli (CVE-2026-10286). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10289 |
|
Cross-Site Scripting (XSS) in CVE-2026-10289 (CVE-2026-10289)
cross-site scripting in CVE-2026-10289 (CVE-2026-10289). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10285 |
|
Vulnerability in CVE-2026-10285 (CVE-2026-10285)
vulnerability in CVE-2026-10285 (CVE-2026-10285). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10287 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-10287 (CVE-2026-10287)
SSRF in CVE-2026-10287 (CVE-2026-10287). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10288 |
|
Authentication Bypass in CVE-2026-10288 (CVE-2026-10288)
authentication bypass in CVE-2026-10288 (CVE-2026-10288). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24751 |
|
Cross-Site Scripting (XSS) in accellion (CVE-2026-24751)
cross-site scripting in accellion (CVE-2026-24751). Confidential information can be exposed externally.
|
| CVE-2026-8644 |
|
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to identity spoofing.
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to identity spoofing.
|
| CVE-2026-9311 |
|
Code Injection in ibm (CVE-2026-9311)
code injection in ibm (CVE-2026-9311). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9319 |
|
Unsafe Deserialization in deserialization (CVE-2026-9319)
vulnerability in deserialization (CVE-2026-9319). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9330 |
|
Unsafe Deserialization in deserialization (CVE-2026-9330)
vulnerability in deserialization (CVE-2026-9330). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47294 |
|
OS Command Injection in deserialization (CVE-2026-47294)
OS command injection in deserialization (CVE-2026-47294). Successful exploitation can lead to full system takeover.
|
| CVE-2026-40989 |
|
Vulnerability in org.springframework.cloud:spring-cloud-function-context (CVE-2026-40989)
vulnerability in org.springframework.cloud:spring-cloud-function-context (CVE-2026-40989). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40990 |
|
Vulnerability in org.springframework.cloud:spring-cloud-function-context (CVE-2026-40990)
vulnerability in org.springframework.cloud:spring-cloud-function-context (CVE-2026-40990). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-23638 |
|
Vulnerability in accellion (CVE-2026-23638)
vulnerability in accellion (CVE-2026-23638). Data can be tampered with by attackers.
|
| CVE-2026-10282 |
|
Vulnerability in CVE-2026-10282 (CVE-2026-10282)
vulnerability in CVE-2026-10282 (CVE-2026-10282). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-0072 |
|
Vulnerability in google (CVE-2026-0072)
vulnerability in google (CVE-2026-0072). Successful exploitation can lead to full system takeover.
|
| CVE-2026-46243 |
|
Vulnerability in linux (CVE-2026-46243)
vulnerability in linux (CVE-2026-46243). Confidential information can be exposed externally.
|
| CVE-2026-10272 |
|
Vulnerability in CVE-2026-10272 (CVE-2026-10272)
vulnerability in CVE-2026-10272 (CVE-2026-10272). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10273 |
|
Command Injection in CVE-2026-10273 (CVE-2026-10273)
command injection in CVE-2026-10273 (CVE-2026-10273). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10265 |
|
Vulnerability in sqli (CVE-2026-10265)
vulnerability in sqli (CVE-2026-10265). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10261 |
|
Vulnerability in sqli (CVE-2026-10261)
vulnerability in sqli (CVE-2026-10261). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10262 |
|
Vulnerability in sqli (CVE-2026-10262)
vulnerability in sqli (CVE-2026-10262). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10263 |
|
Vulnerability in sqli (CVE-2026-10263)
vulnerability in sqli (CVE-2026-10263). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10260 |
|
Vulnerability in sqli (CVE-2026-10260)
vulnerability in sqli (CVE-2026-10260). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9308 |
|
Cross-Site Scripting (XSS) in mozilla (CVE-2026-9308)
cross-site scripting in mozilla (CVE-2026-9308). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9309 |
|
Cross-Site Scripting (XSS) in mozilla (CVE-2026-9309)
cross-site scripting in mozilla (CVE-2026-9309). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34193 |
|
Vulnerability in imaginationtech (CVE-2026-34193)
vulnerability in imaginationtech (CVE-2026-34193). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10257 |
|
Vulnerability in sqli (CVE-2026-10257)
vulnerability in sqli (CVE-2026-10257). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10258 |
|
Vulnerability in sqli (CVE-2026-10258)
vulnerability in sqli (CVE-2026-10258). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10251 |
|
Vulnerability in sqli (CVE-2026-10251)
vulnerability in sqli (CVE-2026-10251). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10252 |
|
Vulnerability in sqli (CVE-2026-10252)
vulnerability in sqli (CVE-2026-10252). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10253 |
|
Vulnerability in sqli (CVE-2026-10253)
vulnerability in sqli (CVE-2026-10253). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10255 |
|
Vulnerability in CVE-2026-10255 (CVE-2026-10255)
vulnerability in CVE-2026-10255 (CVE-2026-10255). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10256 |
|
Vulnerability in sqli (CVE-2026-10256)
vulnerability in sqli (CVE-2026-10256). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49328 |
|
SSRF (Server-Side Request Forgery) in org.apache.fesod:fesod-sheet (CVE-2026-49328)
SSRF in org.apache.fesod:fesod-sheet (CVE-2026-49328). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.2-incubating` or later.
|
| CVE-2026-10249 |
|
Vulnerability in sqli (CVE-2026-10249)
vulnerability in sqli (CVE-2026-10249). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10250 |
|
Vulnerability in sqli (CVE-2026-10250)
vulnerability in sqli (CVE-2026-10250). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49361 |
|
Vulnerability in org.apache.fluss:fluss-common (CVE-2026-49361)
vulnerability in org.apache.fluss:fluss-common (CVE-2026-49361). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.9.1-incubating` or later.
|
| CVE-2026-48827 |
|
Path Traversal in org.apache.sshd:sshd-git (CVE-2026-48827)
path traversal in org.apache.sshd:sshd-git (CVE-2026-48827). Confidential information can be exposed externally. Mitigation: upgrade to `3.0.0-M4` or later.
|
| CVE-2026-48726 |
|
Vulnerability in apache-airflow (CVE-2026-48726)
vulnerability in apache-airflow (CVE-2026-48726). Confidential information can be exposed externally. Exploitable via ``FabAuthManager``. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-49157 |
|
Vulnerability in activemq (CVE-2026-49157)
vulnerability in activemq (CVE-2026-49157). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.19.7, 6.2.6` or later.
|
| CVE-2026-49298 |
|
Vulnerability in airflow (CVE-2026-49298)
vulnerability in airflow (CVE-2026-49298). Successful exploitation can lead to full system takeover. Exploitable via ``KubernetesExecutor``. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-49267 |
|
Vulnerability in airflow (CVE-2026-49267)
vulnerability in airflow (CVE-2026-49267). Confidential information can be exposed externally. Exploitable via ``airflow.utils.email``. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-49270 |
|
Vulnerability in activemq (CVE-2026-49270)
vulnerability in activemq (CVE-2026-49270). Confidential information can be exposed externally. Mitigation: upgrade to `5.19.7, 6.2.6` or later.
|
| CVE-2026-46605 |
|
Vulnerability in activemq (CVE-2026-46605)
vulnerability in activemq (CVE-2026-46605). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.19.7, 6.2.6` or later.
|
| CVE-2026-46764 |
|
Vulnerability in airflow (CVE-2026-46764)
vulnerability in airflow (CVE-2026-46764). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v2/eventLogs/{event_log_id}`. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-44825 |
|
Vulnerability in solr (CVE-2026-44825)
vulnerability in solr (CVE-2026-44825). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.0.0` or later.
|
| CVE-2026-42252 |
|
Vulnerability in apache-airflow (CVE-2026-42252)
vulnerability in apache-airflow (CVE-2026-42252). Confidential information can be exposed externally. Exploitable via ``Dag.can_trigger``. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-42253 |
|
Cross-Site Scripting (XSS) in activemq (CVE-2026-42253)
cross-site scripting in activemq (CVE-2026-42253). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.19.7, 6.2.6` or later.
|