Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-69223 |
|
SSRF (Server-Side Request Forgery) in apache (CVE-2026-69223)
SSRF in apache (CVE-2026-69223). Confidential information can be exposed externally.
|
| CVE-2026-20270 |
|
Vulnerability in cisco (CVE-2026-20270)
vulnerability in cisco (CVE-2026-20270). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20268 |
|
Buffer Overflow in cisco (CVE-2026-20268)
vulnerability in cisco (CVE-2026-20268). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20272 |
|
Vulnerability in cisco (CVE-2026-20272)
vulnerability in cisco (CVE-2026-20272). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20267 |
|
Vulnerability in Cisco ios-xe (CVE-2026-20267)
vulnerability in Cisco ios-xe (CVE-2026-20267). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20271 |
|
Vulnerability in cisco (CVE-2026-20271)
vulnerability in cisco (CVE-2026-20271). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20269 |
|
Vulnerability in cisco (CVE-2026-20269)
vulnerability in cisco (CVE-2026-20269). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20273 |
|
Vulnerability in Cisco ios-xe (CVE-2026-20273)
vulnerability in Cisco ios-xe (CVE-2026-20273). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4793 |
|
Vulnerability in jvn (CVE-2026-4793)
vulnerability in jvn (CVE-2026-4793). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18556 KEV |
|
[KEV] Vulnerability in N-able n-central (CVE-2026-18556)
vulnerability in N-able n-central (CVE-2026-18556). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
| CVE-2026-66299 |
|
Vulnerability in apache (CVE-2026-66299)
vulnerability in apache (CVE-2026-66299). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40952 |
|
Vulnerability in absolute (CVE-2026-40952)
vulnerability in absolute (CVE-2026-40952). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20187 |
|
Vulnerability in cisco (CVE-2026-20187)
vulnerability in cisco (CVE-2026-20187). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20158 |
|
Vulnerability in cisco (CVE-2026-20158)
vulnerability in cisco (CVE-2026-20158). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20157 |
|
Vulnerability in cisco (CVE-2026-20157)
vulnerability in cisco (CVE-2026-20157). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20156 |
|
Buffer Overflow in cisco (CVE-2026-20156)
vulnerability in cisco (CVE-2026-20156). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20153 |
|
Vulnerability in cisco (CVE-2026-20153)
vulnerability in cisco (CVE-2026-20153). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20150 |
|
Vulnerability in Cisco roomos (CVE-2026-20150)
vulnerability in Cisco roomos (CVE-2026-20150). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59083 |
|
Vulnerability in apache (CVE-2026-59083)
vulnerability in apache (CVE-2026-59083). Confidential information can be exposed externally.
|
| CVE-2025-1071 |
|
Cross-Site Scripting (XSS) in jvn (CVE-2025-1071)
cross-site scripting in jvn (CVE-2025-1071). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-13938 |
|
Cross-Site Scripting (XSS) in jvn (CVE-2025-13938)
cross-site scripting in jvn (CVE-2025-13938). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-13937 |
|
Cross-Site Scripting (XSS) in jvn (CVE-2025-13937)
cross-site scripting in jvn (CVE-2025-13937). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-13936 |
|
Cross-Site Scripting (XSS) in jvn (CVE-2025-13936)
cross-site scripting in jvn (CVE-2025-13936). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13236 |
|
Vulnerability in drupal/ai_agents (CVE-2026-13236)
vulnerability in drupal/ai_agents (CVE-2026-13236). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.1.4, 1.2.5, 1.3.1` or later.
|
| CVE-2026-48828 |
|
Information Disclosure in apache (CVE-2026-48828)
vulnerability in apache (CVE-2026-48828). Confidential information can be exposed externally. Exploitable via ``should_hide_value_for_key``.
|
| CVE-2026-33264 |
|
Unsafe Deserialization in apache (CVE-2026-33264)
vulnerability in apache (CVE-2026-33264). Successful exploitation can lead to full system takeover.
|
| CVE-2026-46590 |
|
Unsafe Deserialization in org.apache.camel:camel-pqc (CVE-2026-46590)
vulnerability in org.apache.camel:camel-pqc (CVE-2026-46590). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-55957 |
|
Vulnerability in tomcat (CVE-2026-55957)
vulnerability in tomcat (CVE-2026-55957). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.0.101, 10.1.37, 11.0.5` or later.
|
| CVE-2026-50645 |
|
Vulnerability in org.apache.cxf:cxf-core (CVE-2026-50645)
vulnerability in org.apache.cxf:cxf-core (CVE-2026-50645). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6.12` or later.
|
| CVE-2026-33828 |
|
Vulnerability in microsoft (CVE-2026-33828)
vulnerability in microsoft (CVE-2026-33828). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49975 |
|
Vulnerability in apache (CVE-2026-49975)
vulnerability in apache (CVE-2026-49975). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.68` or later.
|
| CVE-2026-48913 |
|
Use-After-Free in apache (CVE-2026-48913)
vulnerability in apache (CVE-2026-48913). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.68` or later.
|
| CVE-2026-43951 |
|
Out-of-Bounds Read in apache (CVE-2026-43951)
vulnerability in apache (CVE-2026-43951). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.68` or later.
|
| CVE-2026-48827 |
|
Path Traversal in org.apache.sshd:sshd-git (CVE-2026-48827)
path traversal in org.apache.sshd:sshd-git (CVE-2026-48827). Confidential information can be exposed externally. Mitigation: upgrade to `3.0.0-M4` or later.
|
| CVE-2026-34126 |
|
Vulnerability in tp-link (CVE-2026-34126)
vulnerability in tp-link (CVE-2026-34126). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5509 |
|
Vulnerability in tp-link (CVE-2026-5509)
vulnerability in tp-link (CVE-2026-5509). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47323 |
|
Vulnerability in org.apache.camel:camel-cxf-rest (CVE-2026-47323)
vulnerability in org.apache.camel:camel-cxf-rest (CVE-2026-47323). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.18.2` or later.
|
| CVE-2026-45367 |
|
Vulnerability in ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (CVE-2026-45367)
vulnerability in ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (CVE-2026-45367). Risk of unauthorized operations or information disclosure. Exploitable via ``funcMatches``. Mitigation: upgrade to `6.9.7` or later.
|
| CVE-2026-46300 |
|
Out-of-Bounds Write in Amazon aws (CVE-2026-46300)
out-of-bounds write in Amazon aws (CVE-2026-46300). Successful exploitation can lead to full system takeover.
|
| CVE-2026-22796 |
|
Vulnerability in jvn (CVE-2026-22796)
vulnerability in jvn (CVE-2026-22796). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-23918 |
|
Vulnerability in apache (CVE-2026-23918)
vulnerability in apache (CVE-2026-23918). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.4.67` or later.
|
| CVE-2026-22007 |
|
Vulnerability in java (CVE-2026-22007)
vulnerability in java (CVE-2026-22007). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.0, 8.0.491, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1` or later.
|
| CVE-2026-40860 |
|
Unsafe Deserialization in org.apache.camel:camel-jms (CVE-2026-40860)
vulnerability in org.apache.camel:camel-jms (CVE-2026-40860). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.20.0` or later.
|
| CVE-2026-40048 |
|
Unsafe Deserialization in apache (CVE-2026-40048)
vulnerability in apache (CVE-2026-40048). Successful exploitation can lead to full system takeover. Exploitable via ``java.security.KeyPair``.
|
| CVE-2026-34481 |
|
Vulnerability in apache (CVE-2026-34481)
vulnerability in apache (CVE-2026-34481). Data can be tampered with by attackers.
|
| CVE-2025-39860 |
|
Use-After-Free in c (CVE-2025-39860)
vulnerability in c (CVE-2025-39860). Successful exploitation can lead to full system takeover.
|
| CVE-2025-53816 |
|
Vulnerability in dos (CVE-2025-53816)
vulnerability in dos (CVE-2025-53816). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-3596 |
|
Vulnerability in freeradius (CVE-2024-3596)
vulnerability in freeradius (CVE-2024-3596). Successful exploitation can lead to full system takeover.
|