Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-47864 |
|
Unsafe Deserialization in deserialization (CVE-2026-47864)
vulnerability in deserialization (CVE-2026-47864). Confidential information can be exposed externally.
|
| CVE-2026-19912 |
|
Vulnerability in deserialization (CVE-2026-19912)
vulnerability in deserialization (CVE-2026-19912). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78572 |
|
Unsafe Deserialization in wordpress (CVE-2026-78572)
vulnerability in wordpress (CVE-2026-78572). Successful exploitation can lead to full system takeover.
|
| CVE-2026-77310 |
|
SSRF (Server-Side Request Forgery) in csharp (CVE-2026-77310)
SSRF in csharp (CVE-2026-77310). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-0551 |
|
Unsafe Deserialization in wordpress (CVE-2026-0551)
vulnerability in wordpress (CVE-2026-0551). Successful exploitation can lead to full system takeover.
|
| CVE-2026-4703 |
|
Unsafe Deserialization in wordpress (CVE-2026-4703)
vulnerability in wordpress (CVE-2026-4703). Successful exploitation can lead to full system takeover.
|
| CVE-2026-69836 KEV |
|
[KEV] Unsafe Deserialization in Microsoft deserialization (CVE-2026-69836)
vulnerability in Microsoft deserialization (CVE-2026-69836). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-49817 |
|
Unsafe Deserialization in deserialization (CVE-2026-49817)
vulnerability in deserialization (CVE-2026-49817). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49816 |
|
Unsafe Deserialization in deserialization (CVE-2026-49816)
vulnerability in deserialization (CVE-2026-49816). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75987 |
|
Vulnerability in deserialization (CVE-2026-75987)
vulnerability in deserialization (CVE-2026-75987). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-74012 |
|
Editor PHP Object Injection in TaxoPress <= 3.51.0 versions.
Editor PHP Object Injection in TaxoPress <= 3.51.0 versions.
|
| CVE-2024-13784 |
|
Unsafe Deserialization in wordpress (CVE-2024-13784)
vulnerability in wordpress (CVE-2024-13784). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10035 |
|
Unsafe Deserialization in wordpress (CVE-2026-10035)
vulnerability in wordpress (CVE-2026-10035). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63701 |
|
Privilege Escalation in privilege-escalation (CVE-2026-63701)
vulnerability in privilege-escalation (CVE-2026-63701). Confidential information can be exposed externally.
|
| CVE-2026-19826 |
|
A vulnerability was detected in alldatacenter alldata up to 0.6.8. This affects the function...
A vulnerability was detected in alldatacenter alldata up to 0.6.8. This affects the function...
|
| CVE-2026-10571 |
|
Unsafe Deserialization in dos (CVE-2026-10571)
vulnerability in dos (CVE-2026-10571). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66256 |
|
Unsafe Deserialization in apache (CVE-2026-66256)
vulnerability in apache (CVE-2026-66256). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67587 |
|
Unsafe Deserialization in apache (CVE-2026-67587)
vulnerability in apache (CVE-2026-67587). Successful exploitation can lead to full system takeover. Exploitable via ``Callback``.
|
| CVE-2026-67260 |
|
Unsafe Deserialization in apache (CVE-2026-67260)
vulnerability in apache (CVE-2026-67260). Risk of unauthorized operations or information disclosure. Exploitable via ``awaiting_input``.
|
| CVE-2026-59124 |
|
Unsafe Deserialization in deserialization (CVE-2026-59124)
vulnerability in deserialization (CVE-2026-59124). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48397 |
|
Unsafe Deserialization in deserialization (CVE-2026-48397)
vulnerability in deserialization (CVE-2026-48397). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70321 |
|
Unsafe Deserialization in deserialization (CVE-2026-70321)
vulnerability in deserialization (CVE-2026-70321). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66808 |
|
Unsafe Deserialization in deserialization (CVE-2026-66808)
vulnerability in deserialization (CVE-2026-66808). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65815 |
|
Unsafe Deserialization in deserialization (CVE-2026-65815)
vulnerability in deserialization (CVE-2026-65815). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66805 |
|
Unsafe Deserialization in deserialization (CVE-2026-66805)
vulnerability in deserialization (CVE-2026-66805). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65663 |
|
Unsafe Deserialization in deserialization (CVE-2026-65663)
vulnerability in deserialization (CVE-2026-65663). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65665 |
|
Unsafe Deserialization in deserialization (CVE-2026-65665)
vulnerability in deserialization (CVE-2026-65665). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65658 |
|
Unsafe Deserialization in deserialization (CVE-2026-65658)
vulnerability in deserialization (CVE-2026-65658). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64901 |
|
Unsafe Deserialization in deserialization (CVE-2026-64901)
vulnerability in deserialization (CVE-2026-64901). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63514 |
|
Unsafe Deserialization in deserialization (CVE-2026-63514)
vulnerability in deserialization (CVE-2026-63514). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63516 |
|
Unsafe Deserialization in deserialization (CVE-2026-63516)
vulnerability in deserialization (CVE-2026-63516). Confidential information can be exposed externally.
|
| CVE-2026-62912 |
|
Unsafe Deserialization in deserialization (CVE-2026-62912)
vulnerability in deserialization (CVE-2026-62912). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-71559 |
|
Unsafe Deserialization in apache (CVE-2026-71559)
vulnerability in apache (CVE-2026-71559). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-71558 |
|
Unsafe Deserialization in c (CVE-2026-71558)
vulnerability in c (CVE-2026-71558). Successful exploitation can lead to full system takeover.
|
| CVE-2026-71560 |
|
Out-of-Bounds Read in c (CVE-2026-71560)
vulnerability in c (CVE-2026-71560). Data can be tampered with by attackers.
|
| CVE-2026-16258 |
|
Unsafe Deserialization in wordpress (CVE-2026-16258)
vulnerability in wordpress (CVE-2026-16258). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50515 |
|
Unsafe Deserialization in deserialization (CVE-2026-50515)
vulnerability in deserialization (CVE-2026-50515). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66909 |
|
Unsafe Deserialization in apache (CVE-2026-66909)
vulnerability in apache (CVE-2026-66909). Successful exploitation can lead to full system takeover.
|
| CVE-2026-61484 |
|
Unsafe Deserialization in apache (CVE-2026-61484)
vulnerability in apache (CVE-2026-61484). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47623 |
|
Unsafe Deserialization in dos (CVE-2026-47623)
vulnerability in dos (CVE-2026-47623). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-15672 |
|
Unsafe Deserialization in wordpress (CVE-2025-15672)
vulnerability in wordpress (CVE-2025-15672). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16062 |
|
Unsafe Deserialization in wordpress (CVE-2026-16062)
vulnerability in wordpress (CVE-2026-16062). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12118 |
|
Unsafe Deserialization in deserialization (CVE-2026-12118)
vulnerability in deserialization (CVE-2026-12118). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57859 |
|
Unsafe Deserialization in deserialization (CVE-2026-57859)
vulnerability in deserialization (CVE-2026-57859). Successful exploitation can lead to full system takeover.
|
| CVE-2026-1360 |
|
Unsafe Deserialization in wordpress (CVE-2026-1360)
vulnerability in wordpress (CVE-2026-1360). Successful exploitation can lead to full system takeover. Exploitable via ``allowed_classes``.
|
| CVE-2026-14512 |
|
Unsafe Deserialization in c (CVE-2026-14512)
vulnerability in c (CVE-2026-14512). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14974 |
|
Unsafe Deserialization in deserialization (CVE-2026-14974)
vulnerability in deserialization (CVE-2026-14974). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66713 |
|
Unsafe Deserialization in apache (CVE-2026-66713)
vulnerability in apache (CVE-2026-66713). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15962 |
|
Unsafe Deserialization in wordpress (CVE-2026-15962)
vulnerability in wordpress (CVE-2026-15962). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50517 |
|
Unsafe Deserialization in deserialization (CVE-2026-50517)
vulnerability in deserialization (CVE-2026-50517). Successful exploitation can lead to full system takeover.
|