Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-75006 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-75006)
SSRF in ssrf (CVE-2026-75006). Risk of unauthorized operations or information disclosure.
CVE-2026-75004 Command Injection in CVE-2026-75004 (CVE-2026-75004)
command injection in CVE-2026-75004 (CVE-2026-75004). Risk of unauthorized operations or information disclosure.
CVE-2026-75003 Vulnerability in privilege-escalation (CVE-2026-75003)
vulnerability in privilege-escalation (CVE-2026-75003). Risk of unauthorized operations or information disclosure.
CVE-2026-16138 Unsafe Deserialization in deserialization (CVE-2026-16138)
vulnerability in deserialization (CVE-2026-16138). Successful exploitation can lead to full system takeover.
CVE-2026-16137 Path Traversal in path-traversal (CVE-2026-16137)
path traversal in path-traversal (CVE-2026-16137). Successful exploitation can lead to full system takeover.
CVE-2026-16139 Vulnerability in CVE-2026-16139 (CVE-2026-16139)
vulnerability in CVE-2026-16139 (CVE-2026-16139). Successful exploitation can lead to full system takeover.
CVE-2026-15218 Vulnerability in CVE-2026-15218 (CVE-2026-15218)
vulnerability in CVE-2026-15218 (CVE-2026-15218). Confidential information can be exposed externally.
CVE-2026-75010 Vulnerability in CVE-2026-75010 (CVE-2026-75010)
vulnerability in CVE-2026-75010 (CVE-2026-75010). Risk of unauthorized operations or information disclosure.
CVE-2026-75000 Vulnerability in privilege-escalation (CVE-2026-75000)
vulnerability in privilege-escalation (CVE-2026-75000). Risk of unauthorized operations or information disclosure.
CVE-2026-75002 Command Injection in privilege-escalation (CVE-2026-75002)
command injection in privilege-escalation (CVE-2026-75002). Confidential information can be exposed externally.
CVE-2026-74999 Cross-Site Scripting (XSS) in CVE-2026-74999 (CVE-2026-74999)
cross-site scripting in CVE-2026-74999 (CVE-2026-74999). Risk of unauthorized operations or information disclosure.
CVE-2026-70412 Vulnerability in CVE-2026-70412 (CVE-2026-70412)
vulnerability in CVE-2026-70412 (CVE-2026-70412). Risk of unauthorized operations or information disclosure.
CVE-2026-18674 Vulnerability in CVE-2026-18674 (CVE-2026-18674)
vulnerability in CVE-2026-18674 (CVE-2026-18674). Risk of unauthorized operations or information disclosure.
CVE-2026-16467 Vulnerability in CVE-2026-16467 (CVE-2026-16467)
vulnerability in CVE-2026-16467 (CVE-2026-16467). Confidential information can be exposed externally.
CVE-2026-74998 Cross-Site Scripting (XSS) in CVE-2026-74998 (CVE-2026-74998)
cross-site scripting in CVE-2026-74998 (CVE-2026-74998). Risk of unauthorized operations or information disclosure.
CVE-2026-74997 OS Command Injection in CVE-2026-74997 (CVE-2026-74997)
OS command injection in CVE-2026-74997 (CVE-2026-74997). Successful exploitation can lead to full system takeover.
CVE-2026-14564 Vulnerability in CVE-2026-14564 (CVE-2026-14564)
vulnerability in CVE-2026-14564 (CVE-2026-14564). Confidential information can be exposed externally.
CVE-2026-71567 OS Command Injection in CVE-2026-71567 (CVE-2026-71567)
OS command injection in CVE-2026-71567 (CVE-2026-71567). Data can be tampered with by attackers.
CVE-2026-71566 Vulnerability in CVE-2026-71566 (CVE-2026-71566)
vulnerability in CVE-2026-71566 (CVE-2026-71566). Risk of unauthorized operations or information disclosure.
CVE-2026-53728 Vulnerability in @medplum/core (CVE-2026-53728)
vulnerability in @medplum/core (CVE-2026-53728). Risk of unauthorized operations or information disclosure. Exploitable via `GET /auth/external`. Mitigation: upgrade to `5.1.6` or later.
CVE-2026-55158 OS Command Injection in wktk/conflibot (CVE-2026-55158)
OS command injection in wktk/conflibot (CVE-2026-55158). Risk of unauthorized operations or information disclosure. Exploitable via ``git``. Mitigation: upgrade to `1.2.1` or later.
CVE-2026-40345 Vulnerability in deepmerge-ts (CVE-2026-40345)
vulnerability in deepmerge-ts (CVE-2026-40345). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0` or later.
CVE-2026-74899 Vulnerability in jahlives (CVE-2026-74899)
vulnerability in jahlives (CVE-2026-74899). Successful exploitation can lead to full system takeover.
CVE-2026-74894 Authentication Bypass in CVE-2026-74894 (CVE-2026-74894)
authentication bypass in CVE-2026-74894 (CVE-2026-74894). Successful exploitation can lead to full system takeover. Exploitable via `Authorization header`.
CVE-2026-74895 Vulnerability in CVE-2026-74895 (CVE-2026-74895)
vulnerability in CVE-2026-74895 (CVE-2026-74895). Successful exploitation can lead to full system takeover.
CVE-2026-74900 Vulnerability in CVE-2026-74900 (CVE-2026-74900)
vulnerability in CVE-2026-74900 (CVE-2026-74900). Successful exploitation can lead to full system takeover.
CVE-2026-74896 Vulnerability in CVE-2026-74896 (CVE-2026-74896)
vulnerability in CVE-2026-74896 (CVE-2026-74896). Successful exploitation can lead to full system takeover.
CVE-2026-74843 Buffer Overflow in CVE-2026-74843 (CVE-2026-74843)
vulnerability in CVE-2026-74843 (CVE-2026-74843). Successful exploitation can lead to full system takeover.
CVE-2026-40126 Cross-Site Scripting (XSS) in CVE-2026-40126 (CVE-2026-40126)
cross-site scripting in CVE-2026-40126 (CVE-2026-40126). Risk of unauthorized operations or information disclosure.
CVE-2026-74901 Vulnerability in CVE-2026-74901 (CVE-2026-74901)
vulnerability in CVE-2026-74901 (CVE-2026-74901). Successful exploitation can lead to full system takeover.
CVE-2026-74892 Vulnerability in CVE-2026-74892 (CVE-2026-74892)
vulnerability in CVE-2026-74892 (CVE-2026-74892). Confidential information can be exposed externally.
CVE-2026-74893 Vulnerability in CVE-2026-74893 (CVE-2026-74893)
vulnerability in CVE-2026-74893 (CVE-2026-74893). Successful exploitation can lead to full system takeover.
CVE-2026-74889 Vulnerability in CVE-2026-74889 (CVE-2026-74889)
vulnerability in CVE-2026-74889 (CVE-2026-74889). Successful exploitation can lead to full system takeover.
CVE-2026-74887 Vulnerability in CVE-2026-74887 (CVE-2026-74887)
vulnerability in CVE-2026-74887 (CVE-2026-74887). Risk of unauthorized operations or information disclosure.
CVE-2026-74891 Vulnerability in CVE-2026-74891 (CVE-2026-74891)
vulnerability in CVE-2026-74891 (CVE-2026-74891). Successful exploitation can lead to full system takeover.
CVE-2026-74888 Vulnerability in CVE-2026-74888 (CVE-2026-74888)
vulnerability in CVE-2026-74888 (CVE-2026-74888). Confidential information can be exposed externally.
CVE-2026-74890 Vulnerability in CVE-2026-74890 (CVE-2026-74890)
vulnerability in CVE-2026-74890 (CVE-2026-74890). Data can be tampered with by attackers.
CVE-2026-74886 Vulnerability in CVE-2026-74886 (CVE-2026-74886)
vulnerability in CVE-2026-74886 (CVE-2026-74886). Successful exploitation can lead to full system takeover.
CVE-2026-74885 Vulnerability in CVE-2026-74885 (CVE-2026-74885)
vulnerability in CVE-2026-74885 (CVE-2026-74885). Risk of unauthorized operations or information disclosure.
CVE-2026-74883 Vulnerability in CVE-2026-74883 (CVE-2026-74883)
vulnerability in CVE-2026-74883 (CVE-2026-74883). Successful exploitation can lead to full system takeover.
CVE-2026-74884 Vulnerability in path-traversal (CVE-2026-74884)
vulnerability in path-traversal (CVE-2026-74884). Confidential information can be exposed externally.
CVE-2026-74879 Vulnerability in CVE-2026-74879 (CVE-2026-74879)
vulnerability in CVE-2026-74879 (CVE-2026-74879). Confidential information can be exposed externally.
CVE-2026-74881 Vulnerability in CVE-2026-74881 (CVE-2026-74881)
vulnerability in CVE-2026-74881 (CVE-2026-74881). Confidential information can be exposed externally.
CVE-2026-74882 Vulnerability in CVE-2026-74882 (CVE-2026-74882)
vulnerability in CVE-2026-74882 (CVE-2026-74882). Confidential information can be exposed externally.
CVE-2026-74880 Vulnerability in CVE-2026-74880 (CVE-2026-74880)
vulnerability in CVE-2026-74880 (CVE-2026-74880). Successful exploitation can lead to full system takeover. Exploitable via `Referer header`.
CVE-2026-74872 Vulnerability in CVE-2026-74872 (CVE-2026-74872)
vulnerability in CVE-2026-74872 (CVE-2026-74872). Successful exploitation can lead to full system takeover.
CVE-2026-74876 Vulnerability in CVE-2026-74876 (CVE-2026-74876)
vulnerability in CVE-2026-74876 (CVE-2026-74876). Successful exploitation can lead to full system takeover.
CVE-2026-74842 SSRF (Server-Side Request Forgery) in CVE-2026-74842 (CVE-2026-74842)
SSRF in CVE-2026-74842 (CVE-2026-74842). Risk of unauthorized operations or information disclosure.
CVE-2026-74875 Vulnerability in CVE-2026-74875 (CVE-2026-74875)
vulnerability in CVE-2026-74875 (CVE-2026-74875). Successful exploitation can lead to full system takeover.
CVE-2026-74877 Vulnerability in CVE-2026-74877 (CVE-2026-74877)
vulnerability in CVE-2026-74877 (CVE-2026-74877). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →