Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-62229 |
|
Path Traversal in openclaw (CVE-2026-62229)
path traversal in openclaw (CVE-2026-62229). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62228 |
|
Authorization Flaw in openclaw (CVE-2026-62228)
vulnerability in openclaw (CVE-2026-62228). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62227 |
|
SSRF (Server-Side Request Forgery) in openclaw (CVE-2026-62227)
SSRF in openclaw (CVE-2026-62227). Confidential information can be exposed externally.
|
| CVE-2026-62233 |
|
Vulnerability in CVE-2026-62233 (CVE-2026-62233)
vulnerability in CVE-2026-62233 (CVE-2026-62233). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62226 |
|
SSRF (Server-Side Request Forgery) in openclaw (CVE-2026-62226)
SSRF in openclaw (CVE-2026-62226). Confidential information can be exposed externally.
|
| CVE-2026-62223 |
|
Authorization Flaw in openclaw (CVE-2026-62223)
vulnerability in openclaw (CVE-2026-62223). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62222 |
|
Vulnerability in openclaw (CVE-2026-62222)
vulnerability in openclaw (CVE-2026-62222). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62219 |
|
Authorization Flaw in openclaw (CVE-2026-62219)
vulnerability in openclaw (CVE-2026-62219). Data can be tampered with by attackers.
|
| CVE-2026-62218 |
|
Vulnerability in openclaw (CVE-2026-62218)
vulnerability in openclaw (CVE-2026-62218). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62217 |
|
Authorization Flaw in c (CVE-2026-62217)
vulnerability in c (CVE-2026-62217). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62215 |
|
Vulnerability in openclaw (CVE-2026-62215)
vulnerability in openclaw (CVE-2026-62215). Confidential information can be exposed externally.
|
| CVE-2026-62207 |
|
Vulnerability in openclaw (CVE-2026-62207)
vulnerability in openclaw (CVE-2026-62207). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62212 |
|
Vulnerability in openclaw (CVE-2026-62212)
vulnerability in openclaw (CVE-2026-62212). Confidential information can be exposed externally.
|
| CVE-2026-62209 |
|
Authorization Flaw in openclaw (CVE-2026-62209)
vulnerability in openclaw (CVE-2026-62209). Confidential information can be exposed externally.
|
| CVE-2026-62201 |
|
SSRF (Server-Side Request Forgery) in openclaw (CVE-2026-62201)
SSRF in openclaw (CVE-2026-62201). Confidential information can be exposed externally.
|
| CVE-2026-62203 |
|
Vulnerability in openclaw (CVE-2026-62203)
vulnerability in openclaw (CVE-2026-62203). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62202 |
|
Authorization Flaw in privilege-escalation (CVE-2026-62202)
vulnerability in privilege-escalation (CVE-2026-62202). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62206 |
|
Vulnerability in openclaw (CVE-2026-62206)
vulnerability in openclaw (CVE-2026-62206). Data can be tampered with by attackers.
|
| CVE-2026-62205 |
|
Vulnerability in openclaw (CVE-2026-62205)
vulnerability in openclaw (CVE-2026-62205). Data can be tampered with by attackers. Mitigation: upgrade to `2026.6.6` or later.
|
| CVE-2026-54340 |
|
Vulnerability in h2o (CVE-2026-54340)
vulnerability in h2o (CVE-2026-54340). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39359 |
|
Path Traversal in path-traversal (CVE-2026-39359)
path traversal in path-traversal (CVE-2026-39359). Confidential information can be exposed externally.
|
| CVE-2026-34150 |
|
Vulnerability in wazuh (CVE-2026-34150)
vulnerability in wazuh (CVE-2026-34150). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44453 |
|
Vulnerability in dos (CVE-2026-44453)
vulnerability in dos (CVE-2026-44453). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44436 |
|
Vulnerability in dos (CVE-2026-44436)
vulnerability in dos (CVE-2026-44436). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44435 |
|
Vulnerability in dos (CVE-2026-44435)
vulnerability in dos (CVE-2026-44435). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59117 |
|
Vulnerability in microsoft (CVE-2026-59117)
vulnerability in microsoft (CVE-2026-59117). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58598 |
|
Vulnerability in microsoft (CVE-2026-58598)
vulnerability in microsoft (CVE-2026-58598). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57077 |
|
Out-of-Bounds Read in CVE-2026-57077 (CVE-2026-57077)
vulnerability in CVE-2026-57077 (CVE-2026-57077). Confidential information can be exposed externally.
|
| CVE-2026-57076 |
|
Use-After-Free in CVE-2026-57076 (CVE-2026-57076)
vulnerability in CVE-2026-57076 (CVE-2026-57076). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53411 |
|
Vulnerability in zoom (CVE-2026-53411)
vulnerability in zoom (CVE-2026-53411). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53410 |
|
Vulnerability in zoom (CVE-2026-53410)
vulnerability in zoom (CVE-2026-53410). Successful exploitation can lead to full system takeover.
|
| CVE-2024-32386 |
|
Path Traversal in path-traversal (CVE-2024-32386)
path traversal in path-traversal (CVE-2024-32386). Confidential information can be exposed externally.
|
| CVE-2026-53409 |
|
Vulnerability in zoom (CVE-2026-53409)
vulnerability in zoom (CVE-2026-53409). Successful exploitation can lead to full system takeover.
|
| CVE-2024-34268 |
|
Vulnerability in CVE-2024-34268 (CVE-2024-34268)
vulnerability in CVE-2024-34268 (CVE-2024-34268). Data can be tampered with by attackers.
|
| CVE-2026-62309 |
|
Vulnerability in corednsio (CVE-2026-62309)
vulnerability in corednsio (CVE-2026-62309). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62290 |
|
Authorization Flaw in linuxfoundation (CVE-2026-62290)
vulnerability in linuxfoundation (CVE-2026-62290). Confidential information can be exposed externally. Exploitable via `X-API-Key header`.
|
| CVE-2026-61389 |
|
Out-of-Bounds Write in privilege-escalation (CVE-2026-61389)
out-of-bounds write in privilege-escalation (CVE-2026-61389). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60063 |
|
Out-of-Bounds Write in privilege-escalation (CVE-2026-60063)
out-of-bounds write in privilege-escalation (CVE-2026-60063). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55578 |
|
OS Command Injection in pheditor/pheditor (CVE-2026-55578)
OS command injection in pheditor/pheditor (CVE-2026-55578). Successful exploitation can lead to full system takeover. Exploitable via ``terminal``. Mitigation: upgrade to `2.0.6` or later.
|
| CVE-2026-54540 |
|
OS Command Injection in pheditor/pheditor (CVE-2026-54540)
OS command injection in pheditor/pheditor (CVE-2026-54540). Successful exploitation can lead to full system takeover. Exploitable via ``TERMINAL_COMMANDS``. Mitigation: upgrade to `2.0.5` or later.
|
| CVE-2026-46513 |
|
Vulnerability in CVE-2026-46513 (CVE-2026-46513)
vulnerability in CVE-2026-46513 (CVE-2026-46513). Confidential information can be exposed externally.
|
| CVE-2026-46353 |
|
Vulnerability in CVE-2026-46353 (CVE-2026-46353)
vulnerability in CVE-2026-46353 (CVE-2026-46353). Confidential information can be exposed externally.
|
| CVE-2026-46351 |
|
Vulnerability in CVE-2026-46351 (CVE-2026-46351)
vulnerability in CVE-2026-46351 (CVE-2026-46351). Confidential information can be exposed externally.
|
| CVE-2026-46336 |
|
Path Traversal in path-traversal (CVE-2026-46336)
path traversal in path-traversal (CVE-2026-46336). Data can be tampered with by attackers.
|
| CVE-2021-27137 KEV |
|
[KEV] Vulnerability in Dd-wrt c (CVE-2021-27137)
vulnerability in Dd-wrt c (CVE-2021-27137). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-9046 |
|
Vulnerability in CVE-2026-9046 (CVE-2026-9046)
vulnerability in CVE-2026-9046 (CVE-2026-9046). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63085 |
|
Authorization Flaw in CVE-2026-63085 (CVE-2026-63085)
vulnerability in CVE-2026-63085 (CVE-2026-63085). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63088 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-63088)
SSRF in ssrf (CVE-2026-63088). Confidential information can be exposed externally.
|
| CVE-2026-63086 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-63086)
SSRF in ssrf (CVE-2026-63086). Confidential information can be exposed externally.
|
| CVE-2026-13397 |
|
Vulnerability in c (CVE-2026-13397)
vulnerability in c (CVE-2026-13397). Risk of unauthorized operations or information disclosure.
|