Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-23698 Unrestricted File Upload in apache (CVE-2026-23698)
vulnerability in apache (CVE-2026-23698). Successful exploitation can lead to full system takeover.
CVE-2026-23697 Unrestricted File Upload in apache (CVE-2026-23697)
vulnerability in apache (CVE-2026-23697). Successful exploitation can lead to full system takeover.
CVE-2026-13020 Vulnerability in esri (CVE-2026-13020)
vulnerability in esri (CVE-2026-13020). Successful exploitation can lead to full system takeover.
CVE-2026-56811 Vulnerability in dos (CVE-2026-56811)
vulnerability in dos (CVE-2026-56811). Risk of unauthorized operations or information disclosure.
CVE-2026-56812 Vulnerability in dos (CVE-2026-56812)
vulnerability in dos (CVE-2026-56812). Risk of unauthorized operations or information disclosure.
CVE-2026-6101 Vulnerability in wordpress (CVE-2026-6101)
vulnerability in wordpress (CVE-2026-6101). Successful exploitation can lead to full system takeover.
CVE-2026-53479 OS Command Injection in dell (CVE-2026-53479)
OS command injection in dell (CVE-2026-53479). Successful exploitation can lead to full system takeover.
CVE-2026-33655 SSRF (Server-Side Request Forgery) in github.com/QuantumNous/new-api (CVE-2026-33655)
SSRF in github.com/QuantumNous/new-api (CVE-2026-33655). Confidential information can be exposed externally. Exploitable via ``ApplyIPFilterForDomain``. Mitigation: upgrade to `0.12.0-alpha.1` or later.
CVE-2026-13696 Vulnerability in CVE-2026-13696 (CVE-2026-13696)
vulnerability in CVE-2026-13696 (CVE-2026-13696). Successful exploitation can lead to full system takeover.
CVE-2026-11348 Vulnerability in CVE-2026-11348 (CVE-2026-11348)
vulnerability in CVE-2026-11348 (CVE-2026-11348). Successful exploitation can lead to full system takeover.
CVE-2026-11340 Vulnerability in CVE-2026-11340 (CVE-2026-11340)
vulnerability in CVE-2026-11340 (CVE-2026-11340). Data can be tampered with by attackers.
CVE-2026-14476 Vulnerability in path-traversal (CVE-2026-14476)
vulnerability in path-traversal (CVE-2026-14476). Successful exploitation can lead to full system takeover.
CVE-2026-14474 Vulnerability in CVE-2026-14474 (CVE-2026-14474)
vulnerability in CVE-2026-14474 (CVE-2026-14474). Successful exploitation can lead to full system takeover.
CVE-2026-11610 Vulnerability in c (CVE-2026-11610)
vulnerability in c (CVE-2026-11610). Successful exploitation can lead to full system takeover.
CVE-2026-58384 Vulnerability in dos (CVE-2026-58384)
vulnerability in dos (CVE-2026-58384). Successful exploitation can lead to full system takeover.
CVE-2026-8377 Vulnerability in CVE-2026-8377 (CVE-2026-8377)
vulnerability in CVE-2026-8377 (CVE-2026-8377). Confidential information can be exposed externally.
CVE-2026-5799 Vulnerability in CVE-2026-5799 (CVE-2026-5799)
vulnerability in CVE-2026-5799 (CVE-2026-5799). Confidential information can be exposed externally.
CVE-2026-5730 Vulnerability in CVE-2026-5730 (CVE-2026-5730)
vulnerability in CVE-2026-5730 (CVE-2026-5730). Confidential information can be exposed externally.
CVE-2026-12277 Vulnerability in wordpress (CVE-2026-12277)
vulnerability in wordpress (CVE-2026-12277). Data can be tampered with by attackers.
CVE-2026-34158 OS Command Injection in CVE-2026-34158 (CVE-2026-34158)
OS command injection in CVE-2026-34158 (CVE-2026-34158). Successful exploitation can lead to full system takeover.
CVE-2026-42200 Path Traversal in CVE-2026-42200 (CVE-2026-42200)
path traversal in CVE-2026-42200 (CVE-2026-42200). Successful exploitation can lead to full system takeover.
CVE-2026-42143 OS Command Injection in CVE-2026-42143 (CVE-2026-42143)
OS command injection in CVE-2026-42143 (CVE-2026-42143). Successful exploitation can lead to full system takeover.
CVE-2026-34152 OS Command Injection in CVE-2026-34152 (CVE-2026-34152)
OS command injection in CVE-2026-34152 (CVE-2026-34152). Successful exploitation can lead to full system takeover.
CVE-2026-34168 OS Command Injection in CVE-2026-34168 (CVE-2026-34168)
OS command injection in CVE-2026-34168 (CVE-2026-34168). Successful exploitation can lead to full system takeover.
CVE-2026-34171 Cross-Site Request Forgery (CSRF) in CVE-2026-34171 (CVE-2026-34171)
vulnerability in CVE-2026-34171 (CVE-2026-34171). Confidential information can be exposed externally. Exploitable via `GET /invitations/{uuid}`.
CVE-2026-34058 OS Command Injection in CVE-2026-34058 (CVE-2026-34058)
OS command injection in CVE-2026-34058 (CVE-2026-34058). Successful exploitation can lead to full system takeover.
CVE-2026-34044 Vulnerability in CVE-2026-34044 (CVE-2026-34044)
vulnerability in CVE-2026-34044 (CVE-2026-34044). Confidential information can be exposed externally.
CVE-2026-34057 OS Command Injection in CVE-2026-34057 (CVE-2026-34057)
OS command injection in CVE-2026-34057 (CVE-2026-34057). Successful exploitation can lead to full system takeover.
CVE-2026-34035 OS Command Injection in CVE-2026-34035 (CVE-2026-34035)
OS command injection in CVE-2026-34035 (CVE-2026-34035). Successful exploitation can lead to full system takeover.
CVE-2026-34034 OS Command Injection in CVE-2026-34034 (CVE-2026-34034)
OS command injection in CVE-2026-34034 (CVE-2026-34034). Successful exploitation can lead to full system takeover.
CVE-2026-42204 OS Command Injection in CVE-2026-42204 (CVE-2026-42204)
OS command injection in CVE-2026-42204 (CVE-2026-42204). Successful exploitation can lead to full system takeover.
CVE-2026-42153 OS Command Injection in CVE-2026-42153 (CVE-2026-42153)
OS command injection in CVE-2026-42153 (CVE-2026-42153). Successful exploitation can lead to full system takeover.
CVE-2026-38976 Vulnerability in c (CVE-2026-38976)
vulnerability in c (CVE-2026-38976). Risk of unauthorized operations or information disclosure.
CVE-2026-34599 OS Command Injection in CVE-2026-34599 (CVE-2026-34599)
OS command injection in CVE-2026-34599 (CVE-2026-34599). Successful exploitation can lead to full system takeover.
CVE-2026-34153 OS Command Injection in CVE-2026-34153 (CVE-2026-34153)
OS command injection in CVE-2026-34153 (CVE-2026-34153). Successful exploitation can lead to full system takeover.
CVE-2026-55501 Vulnerability in 9router (CVE-2026-55501)
vulnerability in 9router (CVE-2026-55501). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/auth/login`. Mitigation: upgrade to `0.4.77` or later.
CVE-2026-59712 Vulnerability in CVE-2026-59712 (CVE-2026-59712)
vulnerability in CVE-2026-59712 (CVE-2026-59712). Confidential information can be exposed externally.
CVE-2026-59713 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-59713)
vulnerability in csrf (CVE-2026-59713). Confidential information can be exposed externally.
CVE-2026-55727 Authentication Bypass in CVE-2026-55727 (CVE-2026-55727)
authentication bypass in CVE-2026-55727 (CVE-2026-55727). Confidential information can be exposed externally.
CVE-2026-14468 Path Traversal in CVE-2026-14468 (CVE-2026-14468)
path traversal in CVE-2026-14468 (CVE-2026-14468). Confidential information can be exposed externally.
CVE-2026-21383 Vulnerability in qualcomm (CVE-2026-21383)
vulnerability in qualcomm (CVE-2026-21383). Confidential information can be exposed externally.
CVE-2026-25268 Vulnerability in qualcomm (CVE-2026-25268)
vulnerability in qualcomm (CVE-2026-25268). Successful exploitation can lead to full system takeover.
CVE-2026-25271 Vulnerability in qualcomm (CVE-2026-25271)
vulnerability in qualcomm (CVE-2026-25271). Successful exploitation can lead to full system takeover.
CVE-2026-21379 Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.
Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.
CVE-2026-14471 SQL Injection in Amazon aws (CVE-2026-14471)
SQL injection in Amazon aws (CVE-2026-14471). Confidential information can be exposed externally.
CVE-2026-57573 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-57573)
SSRF in ssrf (CVE-2026-57573). Confidential information can be exposed externally. Exploitable via `POST /crawl/stream`.
CVE-2026-55574 Vulnerability in vllm (CVE-2026-55574)
vulnerability in vllm (CVE-2026-55574). Risk of unauthorized operations or information disclosure. Exploitable via ``structured_outputs.regex``. Mitigation: upgrade to `0.24.0` or later.
CVE-2026-54765 Vulnerability in github.com/traefik/traefik/v3 (CVE-2026-54765)
vulnerability in github.com/traefik/traefik/v3 (CVE-2026-54765). Data can be tampered with by attackers. Exploitable via ``backendRef``. Mitigation: upgrade to `3.7.6` or later.
CVE-2026-54234 Vulnerability in vllm (CVE-2026-54234)
vulnerability in vllm (CVE-2026-54234). Risk of unauthorized operations or information disclosure. Exploitable via ``vocab_size``. Mitigation: upgrade to `0.24.0` or later.
CVE-2026-55426 OS Command Injection in linuxfabrik-lib (CVE-2026-55426)
OS command injection in linuxfabrik-lib (CVE-2026-55426). Successful exploitation can lead to full system takeover. Exploitable via ``shell_exec``. Mitigation: upgrade to `5.0.0` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →