Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-23981 Vulnerability in apache (CVE-2026-23981)
vulnerability in apache (CVE-2026-23981). Risk of unauthorized operations or information disclosure.
CVE-2026-15658 Vulnerability in CVE-2026-15658 (CVE-2026-15658)
vulnerability in CVE-2026-15658 (CVE-2026-15658). Confidential information can be exposed externally.
CVE-2026-10842 Vulnerability in ibm (CVE-2026-10842)
vulnerability in ibm (CVE-2026-10842). Confidential information can be exposed externally.
CVE-2026-15657 Vulnerability in CVE-2026-15657 (CVE-2026-15657)
vulnerability in CVE-2026-15657 (CVE-2026-15657). Confidential information can be exposed externally.
CVE-2026-66066 Vulnerability in activestorage (CVE-2026-66066)
vulnerability in activestorage (CVE-2026-66066). Risk of unauthorized operations or information disclosure. Exploitable via ``secret_key_base``. Mitigation: upgrade to `8.1.3.1` or later.
CVE-2026-5846 Vulnerability in cisa (CVE-2026-5846)
vulnerability in cisa (CVE-2026-5846). Confidential information can be exposed externally.
CVE-2026-61893 Out-of-Bounds Read in cisa (CVE-2026-61893)
vulnerability in cisa (CVE-2026-61893). Risk of unauthorized operations or information disclosure.
CVE-2026-14227 Vulnerability in cisa (CVE-2026-14227)
vulnerability in cisa (CVE-2026-14227). Confidential information can be exposed externally.
CVE-2026-62663 Path Traversal in path-traversal (CVE-2026-62663)
path traversal in path-traversal (CVE-2026-62663). Confidential information can be exposed externally.
CVE-2026-54522 Use-After-Free in msgpack (CVE-2026-54522)
vulnerability in msgpack (CVE-2026-54522). Risk of unauthorized operations or information disclosure. Exploitable via ``rmem_last``. Mitigation: upgrade to `1.8.2` or later.
CVE-2026-54722 Vulnerability in dssrf (CVE-2026-54722)
vulnerability in dssrf (CVE-2026-54722). Risk of unauthorized operations or information disclosure. Exploitable via ``is_url_safe``. Mitigation: upgrade to `1.0.4` or later.
CVE-2026-41186 Information Disclosure in tigera (CVE-2026-41186)
vulnerability in tigera (CVE-2026-41186). Confidential information can be exposed externally.
CVE-2026-67348 Vulnerability in CVE-2026-67348 (CVE-2026-67348)
vulnerability in CVE-2026-67348 (CVE-2026-67348). Confidential information can be exposed externally.
CVE-2026-15435 Path Traversal in ibm (CVE-2026-15435)
path traversal in ibm (CVE-2026-15435). Successful exploitation can lead to full system takeover.
CVE-2026-67347 Authorization Flaw in CVE-2026-67347 (CVE-2026-67347)
vulnerability in CVE-2026-67347 (CVE-2026-67347). Data can be tampered with by attackers.
CVE-2026-67349 Vulnerability in CVE-2026-67349 (CVE-2026-67349)
vulnerability in CVE-2026-67349 (CVE-2026-67349). Confidential information can be exposed externally. Exploitable via `GET /helmValues`.
CVE-2026-11980 Vulnerability in ibm (CVE-2026-11980)
vulnerability in ibm (CVE-2026-11980). Successful exploitation can lead to full system takeover.
CVE-2026-16308 Vulnerability in dos (CVE-2026-16308)
vulnerability in dos (CVE-2026-16308). Risk of unauthorized operations or information disclosure.
CVE-2026-14980 Privilege Escalation in ssrf (CVE-2026-14980)
vulnerability in ssrf (CVE-2026-14980). Confidential information can be exposed externally.
CVE-2026-67346 SSRF (Server-Side Request Forgery) in CVE-2026-67346 (CVE-2026-67346)
SSRF in CVE-2026-67346 (CVE-2026-67346). Confidential information can be exposed externally.
CVE-2026-12947 Vulnerability in ibm (CVE-2026-12947)
vulnerability in ibm (CVE-2026-12947). Confidential information can be exposed externally.
CVE-2026-6540 Path Traversal in tigera (CVE-2026-6540)
path traversal in tigera (CVE-2026-6540). Confidential information can be exposed externally.
CVE-2026-11897 Vulnerability in dos (CVE-2026-11897)
vulnerability in dos (CVE-2026-11897). Confidential information can be exposed externally.
CVE-2026-41187 Vulnerability in tigera (CVE-2026-41187)
vulnerability in tigera (CVE-2026-41187). Data can be tampered with by attackers.
CVE-2026-11707 Cross-Site Scripting (XSS) in ibm (CVE-2026-11707)
cross-site scripting in ibm (CVE-2026-11707). Confidential information can be exposed externally.
CVE-2026-67345 Vulnerability in CVE-2026-67345 (CVE-2026-67345)
vulnerability in CVE-2026-67345 (CVE-2026-67345). Confidential information can be exposed externally.
CVE-2026-14522 OS Command Injection in ibm (CVE-2026-14522)
OS command injection in ibm (CVE-2026-14522). Successful exploitation can lead to full system takeover.
CVE-2026-14519 Path Traversal in path-traversal (CVE-2026-14519)
path traversal in path-traversal (CVE-2026-14519). Confidential information can be exposed externally.
CVE-2025-36431 Cross-Site Scripting (XSS) in ibm (CVE-2025-36431)
cross-site scripting in ibm (CVE-2025-36431). Risk of unauthorized operations or information disclosure.
CVE-2026-11383 Cross-Site Scripting (XSS) in ibm (CVE-2026-11383)
cross-site scripting in ibm (CVE-2026-11383). Risk of unauthorized operations or information disclosure.
CVE-2026-60074 Vulnerability in CVE-2026-60074 (CVE-2026-60074)
vulnerability in CVE-2026-60074 (CVE-2026-60074). Risk of unauthorized operations or information disclosure.
CVE-2025-36298 Cross-Site Scripting (XSS) in ibm (CVE-2025-36298)
cross-site scripting in ibm (CVE-2025-36298). Risk of unauthorized operations or information disclosure.
CVE-2026-60075 Vulnerability in dos (CVE-2026-60075)
vulnerability in dos (CVE-2026-60075). Risk of unauthorized operations or information disclosure.
CVE-2026-58218 Vulnerability in dos (CVE-2026-58218)
vulnerability in dos (CVE-2026-58218). Risk of unauthorized operations or information disclosure.
CVE-2026-5219 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-5219)
vulnerability in csrf (CVE-2026-5219). Confidential information can be exposed externally.
CVE-2026-56428 Vulnerability in CVE-2026-56428 (CVE-2026-56428)
vulnerability in CVE-2026-56428 (CVE-2026-56428). Successful exploitation can lead to full system takeover.
CVE-2026-41709 Vulnerability in CVE-2026-41709 (CVE-2026-41709)
vulnerability in CVE-2026-41709 (CVE-2026-41709). Risk of unauthorized operations or information disclosure.
CVE-2026-54365 Vulnerability in deserialization (CVE-2026-54365)
vulnerability in deserialization (CVE-2026-54365). Data can be tampered with by attackers.
CVE-2026-54363 Vulnerability in CVE-2026-54363 (CVE-2026-54363)
vulnerability in CVE-2026-54363 (CVE-2026-54363). Confidential information can be exposed externally.
CVE-2026-59309 Vulnerability in vmware (CVE-2026-59309)
vulnerability in vmware (CVE-2026-59309). Successful exploitation can lead to full system takeover.
CVE-2026-54367 Vulnerability in CVE-2026-54367 (CVE-2026-54367)
vulnerability in CVE-2026-54367 (CVE-2026-54367). Data can be tampered with by attackers.
CVE-2026-54364 Vulnerability in c (CVE-2026-54364)
vulnerability in c (CVE-2026-54364). Risk of unauthorized operations or information disclosure.
CVE-2026-47876 Out-of-Bounds Write in CVE-2026-47876 (CVE-2026-47876)
out-of-bounds write in CVE-2026-47876 (CVE-2026-47876). Successful exploitation can lead to full system takeover.
CVE-2026-12722 Vulnerability in CVE-2026-12722 (CVE-2026-12722)
vulnerability in CVE-2026-12722 (CVE-2026-12722). Confidential information can be exposed externally.
CVE-2026-54368 SQL Injection in sqli (CVE-2026-54368)
SQL injection in sqli (CVE-2026-54368). Successful exploitation can lead to full system takeover.
CVE-2026-54366 XXE (XML External Entity) in CVE-2026-54366 (CVE-2026-54366)
vulnerability in CVE-2026-54366 (CVE-2026-54366). Confidential information can be exposed externally.
CVE-2026-59310 KEV [KEV] Path Traversal in Broadcom path-traversal (CVE-2026-59310)
path traversal in Broadcom path-traversal (CVE-2026-59310). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-41703 Out-of-Bounds Read in dos (CVE-2026-41703)
vulnerability in dos (CVE-2026-41703). Confidential information can be exposed externally.
CVE-2026-65635 Vulnerability in CVE-2026-65635 (CVE-2026-65635)
vulnerability in CVE-2026-65635 (CVE-2026-65635). Risk of unauthorized operations or information disclosure.
CVE-2026-54885 SSRF (Server-Side Request Forgery) in CVE-2026-54885 (CVE-2026-54885)
SSRF in CVE-2026-54885 (CVE-2026-54885). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →