Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2026-16771	Vulnerability in CVE-2026-16771 (CVE-2026-16771) vulnerability in CVE-2026-16771 (CVE-2026-16771). Successful exploitation can lead to full system takeover.	High	JavaScript Cwe 306	1 month ago
CVE-2026-16496	Vulnerability in CVE-2026-16496 (CVE-2026-16496) vulnerability in CVE-2026-16496 (CVE-2026-16496). Confidential information can be exposed externally.	High	Cwe 384	1 month ago
CVE-2026-15992	Privilege Escalation in wordpress (CVE-2026-15992) vulnerability in wordpress (CVE-2026-15992). Successful exploitation can lead to full system takeover. Exploitable via ``Module_Password_Hint``.	High	WordPress Privilege Escalation Cwe 269	1 month ago
CVE-2026-14869	SSRF (Server-Side Request Forgery) in CVE-2026-14869 (CVE-2026-14869) SSRF in CVE-2026-14869 (CVE-2026-14869). Confidential information can be exposed externally.	High	Cwe 918	1 month ago
CVE-2026-48388	Vulnerability in adobe (CVE-2026-48388) vulnerability in adobe (CVE-2026-48388). Successful exploitation can lead to full system takeover.	High	Cwe 427 Adobe Photoshop Installer	1 month ago
CVE-2026-48372	Vulnerability in adobe (CVE-2026-48372) vulnerability in adobe (CVE-2026-48372). Successful exploitation can lead to full system takeover.	High	Cwe 122 Cwe 787 Adobe Format Plugins	1 month ago
CVE-2026-67185	Path Traversal in path-traversal (CVE-2026-67185) path traversal in path-traversal (CVE-2026-67185). Confidential information can be exposed externally.	High	Path Traversal Cwe 22	1 month ago
CVE-2026-67184	Vulnerability in CVE-2026-67184 (CVE-2026-67184) vulnerability in CVE-2026-67184 (CVE-2026-67184). Risk of unauthorized operations or information disclosure.	High	Cwe 476	1 month ago
CVE-2026-67183	Vulnerability in CVE-2026-67183 (CVE-2026-67183) vulnerability in CVE-2026-67183 (CVE-2026-67183). Risk of unauthorized operations or information disclosure.	High	Cwe 401	1 month ago
CVE-2026-67182	Vulnerability in CVE-2026-67182 (CVE-2026-67182) vulnerability in CVE-2026-67182 (CVE-2026-67182). Data can be tampered with by attackers.	High	Python Cwe 444	1 month ago
CVE-2026-51275	Vulnerability in dos (CVE-2026-51275) vulnerability in dos (CVE-2026-51275). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 122	1 month ago
CVE-2026-51274	Vulnerability in dos (CVE-2026-51274) vulnerability in dos (CVE-2026-51274). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 122	1 month ago
CVE-2026-51273	Vulnerability in CVE-2026-51273 (CVE-2026-51273) vulnerability in CVE-2026-51273 (CVE-2026-51273). Successful exploitation can lead to full system takeover.	High	Cwe 122	1 month ago
CVE-2026-16313	Vulnerability in CVE-2026-16313 (CVE-2026-16313) vulnerability in CVE-2026-16313 (CVE-2026-16313). Successful exploitation can lead to full system takeover.	High	Cwe 93	1 month ago
CVE-2026-54635	Authentication Bypass in pytonapi (CVE-2026-54635) authentication bypass in pytonapi (CVE-2026-54635). Data can be tampered with by attackers. Exploitable via `POST /hook/custom`. Mitigation: upgrade to `2.2.1` or later.	High	Python Cwe 287	1 month ago
CVE-2026-54609	Vulnerability in com.quietterminal:qti-neon (CVE-2026-54609) vulnerability in com.quietterminal:qti-neon (CVE-2026-54609). Risk of unauthorized operations or information disclosure. Exploitable via ``RECONNECT_REQUEST``.	High	Denial of Service Cwe 400 Cwe 406 Cwe 770	1 month ago
CVE-2026-54603	Information Disclosure in oauth2 (CVE-2026-54603) vulnerability in oauth2 (CVE-2026-54603). Confidential information can be exposed externally. Exploitable via `GET /leak`. Mitigation: upgrade to `2.0.22` or later.	High	Ruby Cwe 200 Cwe 601	1 month ago
CVE-2026-54605	Information Disclosure in oauth (CVE-2026-54605) vulnerability in oauth (CVE-2026-54605). Risk of unauthorized operations or information disclosure. Exploitable via ``Location``. Mitigation: upgrade to `1.1.6` or later.	High	Ruby Cwe 200 Cwe 346 Cwe 918	1 month ago
CVE-2026-66748	Code Injection in CVE-2026-66748 (CVE-2026-66748) code injection in CVE-2026-66748 (CVE-2026-66748). Successful exploitation can lead to full system takeover.	High	Ruby Remote Code Execution Cwe 94	1 month ago
CVE-2026-51270	Vulnerability in privilege-escalation (CVE-2026-51270) vulnerability in privilege-escalation (CVE-2026-51270). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Privilege Escalation Cwe 122	1 month ago
CVE-2026-51269	Vulnerability in CVE-2026-51269 (CVE-2026-51269) vulnerability in CVE-2026-51269 (CVE-2026-51269). Successful exploitation can lead to full system takeover.	High	Cwe 122	1 month ago
CVE-2026-47483	Vulnerability in dos (CVE-2026-47483) vulnerability in dos (CVE-2026-47483). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 770	1 month ago
CVE-2026-54332	Vulnerability in github.com/gopacket/gopacket (CVE-2026-54332) vulnerability in github.com/gopacket/gopacket (CVE-2026-54332). Risk of unauthorized operations or information disclosure. Exploitable via ``ExtendedGatewayFlow``. Mitigation: upgrade to `1.6.1` or later.	High	Denial of Service Cwe 770 Gopacket	1 month ago
CVE-2026-54345	Vulnerability in github.com/gopacket/gopacket (CVE-2026-54345) vulnerability in github.com/gopacket/gopacket (CVE-2026-54345). Risk of unauthorized operations or information disclosure. Exploitable via ``headerSize``. Mitigation: upgrade to `1.6.1` or later.	High	Denial of Service Cwe 191 Cwe 770 Gopacket	1 month ago
CVE-2026-16347	Vulnerability in cisa (CVE-2026-16347) vulnerability in cisa (CVE-2026-16347). Successful exploitation can lead to full system takeover.	High	Cisa Ics Industrial Ot +2	1 month ago
CVE-2026-54593	Vulnerability in pterodactyl/panel (CVE-2026-54593) vulnerability in pterodactyl/panel (CVE-2026-54593). Data can be tampered with by attackers. Exploitable via `GET /api/client/servers/`. Mitigation: upgrade to `1.12.3` or later.	High	Cwe 1259 Cwe 1270	1 month ago
CVE-2026-8164	Vulnerability in CVE-2026-8164 (CVE-2026-8164) vulnerability in CVE-2026-8164 (CVE-2026-8164). Successful exploitation can lead to full system takeover.	High	Cwe 427	1 month ago
CVE-2026-63727	Vulnerability in privilege-escalation (CVE-2026-63727) vulnerability in privilege-escalation (CVE-2026-63727). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 648	1 month ago
CVE-2026-51254	Vulnerability in CVE-2026-51254 (CVE-2026-51254) vulnerability in CVE-2026-51254 (CVE-2026-51254). Successful exploitation can lead to full system takeover.	High	Cwe 191	1 month ago
CVE-2026-62430	Vulnerability in CVE-2026-62430 (CVE-2026-62430) vulnerability in CVE-2026-62430 (CVE-2026-62430). Confidential information can be exposed externally.	High	Cwe 362	1 month ago
CVE-2026-51251	Buffer Overflow in CVE-2026-51251 (CVE-2026-51251) vulnerability in CVE-2026-51251 (CVE-2026-51251). Risk of unauthorized operations or information disclosure.	High	Cwe 119	1 month ago
CVE-2026-59878	Vulnerability in apache (CVE-2026-59878) vulnerability in apache (CVE-2026-59878). Risk of unauthorized operations or information disclosure.	High	Apache Cwe 20 Activemq Activemq All +1	1 month ago
CVE-2026-62426	Vulnerability in c (CVE-2026-62426) vulnerability in c (CVE-2026-62426). Successful exploitation can lead to full system takeover.	High	C Flask Cwe 412 Cwe 667	1 month ago
CVE-2026-62428	Vulnerability in CVE-2026-62428 (CVE-2026-62428) vulnerability in CVE-2026-62428 (CVE-2026-62428). Successful exploitation can lead to full system takeover.	High	Cwe 367	1 month ago
CVE-2026-62431	Vulnerability in CVE-2026-62431 (CVE-2026-62431) vulnerability in CVE-2026-62431 (CVE-2026-62431). Risk of unauthorized operations or information disclosure.	High	Cwe 369	1 month ago
CVE-2026-62433	Vulnerability in CVE-2026-62433 (CVE-2026-62433) vulnerability in CVE-2026-62433 (CVE-2026-62433). Risk of unauthorized operations or information disclosure.	High	Cwe 665	1 month ago
CVE-2026-42493	Vulnerability in CVE-2026-42493 (CVE-2026-42493) vulnerability in CVE-2026-42493 (CVE-2026-42493). Risk of unauthorized operations or information disclosure.	High	Cwe 400	1 month ago
CVE-2026-62432	Vulnerability in CVE-2026-62432 (CVE-2026-62432) vulnerability in CVE-2026-62432 (CVE-2026-62432). Risk of unauthorized operations or information disclosure.	High	Cwe 362	1 month ago
CVE-2026-62427	Vulnerability in c (CVE-2026-62427) vulnerability in c (CVE-2026-62427). Successful exploitation can lead to full system takeover.	High	C Flask Cwe 284 Cwe 305	1 month ago
CVE-2026-42492	Vulnerability in CVE-2026-42492 (CVE-2026-42492) vulnerability in CVE-2026-42492 (CVE-2026-42492). Risk of unauthorized operations or information disclosure.	High	Cwe 459	1 month ago
CVE-2026-7187	Vulnerability in CVE-2026-7187 (CVE-2026-7187) vulnerability in CVE-2026-7187 (CVE-2026-7187). Successful exploitation can lead to full system takeover.	High	Cwe 306	1 month ago
CVE-2026-65881	Information Disclosure in CVE-2026-65881 (CVE-2026-65881) vulnerability in CVE-2026-65881 (CVE-2026-65881). Confidential information can be exposed externally.	High	Cwe 200 Cwe 1188	1 month ago
CVE-2026-49332	Vulnerability in CVE-2026-49332 (CVE-2026-49332) vulnerability in CVE-2026-49332 (CVE-2026-49332). Confidential information can be exposed externally.	High	PHP Cwe 436	1 month ago
CVE-2026-61609	Vulnerability in pterodactyl/panel (CVE-2026-61609) vulnerability in pterodactyl/panel (CVE-2026-61609). Risk of unauthorized operations or information disclosure. Exploitable via `POST /auth/login`. Mitigation: upgrade to `1.13.0` or later.	High	Laravel Denial of Service Cwe 770	1 month ago
CVE-2026-54545	Path Traversal in @wakaru/cli (CVE-2026-54545) path traversal in @wakaru/cli (CVE-2026-54545). Data can be tampered with by attackers. Mitigation: upgrade to `1.4.0` or later.	High	JavaScript Cwe 22	1 month ago
CVE-2026-47427	Vulnerability in github.com/github/github-mcp-server (CVE-2026-47427) vulnerability in github.com/github/github-mcp-server (CVE-2026-47427). Risk of unauthorized operations or information disclosure. Exploitable via ``CompletionsHandler``. Mitigation: upgrade to `1.1.0` or later.	High	Denial of Service Cwe 476 Github Mcp Server	1 month ago
CVE-2026-45293	Vulnerability in wp-coding-standards/wpcs (CVE-2026-45293) vulnerability in wp-coding-standards/wpcs (CVE-2026-45293). Successful exploitation can lead to full system takeover. Exploitable via ``WordPress.WP.EnqueuedResourceParameters``. Mitigation: upgrade to `3.4.1` or later.	High	PHP WordPress Cwe 95	1 month ago
CVE-2026-43910	Vulnerability in io.appium:java-client (CVE-2026-43910) vulnerability in io.appium:java-client (CVE-2026-43910). Confidential information can be exposed externally. Exploitable via `POST /wd/hub/session`. Mitigation: upgrade to `10.1.1` or later.	High	Java Cwe 441 Cwe 918 Appium +1	1 month ago
CVE-2026-15025	Vulnerability in wordpress (CVE-2026-15025) vulnerability in wordpress (CVE-2026-15025). Confidential information can be exposed externally.	High	WordPress Cwe 862	1 month ago
CVE-2026-13440	Cross-Site Scripting (XSS) in wordpress (CVE-2026-13440) cross-site scripting in wordpress (CVE-2026-13440). Risk of unauthorized operations or information disclosure.	High	WordPress Cross-Site Scripting Cwe 79	1 month ago

Vulnerabilities

🍪 About cookies