Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-28747 Vulnerability in CVE-2026-28747 (CVE-2026-28747)
vulnerability in CVE-2026-28747 (CVE-2026-28747). Successful exploitation can lead to full system takeover.
CVE-2026-7178 SSRF (Server-Side Request Forgery) in nextchat (CVE-2026-7178)
SSRF in nextchat (CVE-2026-7178). Risk of unauthorized operations or information disclosure.
CVE-2026-3087 Path Traversal in libpython (CVE-2026-3087)
path traversal in libpython (CVE-2026-3087). Data can be tampered with by attackers. Mitigation: upgrade to `3.14.5` or later.
CVE-2026-31686 Vulnerability in linux (CVE-2026-31686)
vulnerability in linux (CVE-2026-31686). Successful exploitation can lead to full system takeover.
CVE-2026-38934 Cross-Site Request Forgery (CSRF) in CVE-2026-38934 (CVE-2026-38934)
vulnerability in CVE-2026-38934 (CVE-2026-38934). Successful exploitation can lead to full system takeover.
CVE-2026-40022 Vulnerability in org.apache.camel:camel-platform-http-main (CVE-2026-40022)
vulnerability in org.apache.camel:camel-platform-http-main (CVE-2026-40022). Confidential information can be exposed externally. Mitigation: upgrade to `4.20.0` or later.
CVE-2026-27172 Unsafe Deserialization in apache (CVE-2026-27172)
vulnerability in apache (CVE-2026-27172). Successful exploitation can lead to full system takeover.
CVE-2026-40858 Unsafe Deserialization in apache (CVE-2026-40858)
vulnerability in apache (CVE-2026-40858). Successful exploitation can lead to full system takeover.
CVE-2026-7101 Buffer Overflow in tenda (CVE-2026-7101)
vulnerability in tenda (CVE-2026-7101). Successful exploitation can lead to full system takeover.
CVE-2026-40048 Unsafe Deserialization in apache (CVE-2026-40048)
vulnerability in apache (CVE-2026-40048). Successful exploitation can lead to full system takeover. Exploitable via ``java.security.KeyPair``.
CVE-2026-40473 Unsafe Deserialization in apache (CVE-2026-40473)
vulnerability in apache (CVE-2026-40473). Successful exploitation can lead to full system takeover.
CVE-2026-3006 Vulnerability in privilege-escalation (CVE-2026-3006)
vulnerability in privilege-escalation (CVE-2026-3006). Successful exploitation can lead to full system takeover.
CVE-2026-6786 Out-of-Bounds Read in mozilla (CVE-2026-6786)
vulnerability in mozilla (CVE-2026-6786). Successful exploitation can lead to full system takeover.
CVE-2026-6785 Out-of-Bounds Read in mozilla (CVE-2026-6785)
vulnerability in mozilla (CVE-2026-6785). Successful exploitation can lead to full system takeover.
CVE-2026-31676 Vulnerability in linux (CVE-2026-31676)
vulnerability in linux (CVE-2026-31676). Risk of unauthorized operations or information disclosure.
CVE-2026-31680 Vulnerability in linux (CVE-2026-31680)
vulnerability in linux (CVE-2026-31680). Successful exploitation can lead to full system takeover.
CVE-2026-31673 Vulnerability in linux (CVE-2026-31673)
vulnerability in linux (CVE-2026-31673). Successful exploitation can lead to full system takeover.
CVE-2026-31674 Vulnerability in linux (CVE-2026-31674)
vulnerability in linux (CVE-2026-31674). Confidential information can be exposed externally.
CVE-2026-42171 Vulnerability in nullsoft (CVE-2026-42171)
vulnerability in nullsoft (CVE-2026-42171). Successful exploitation can lead to full system takeover.
CVE-2026-41433 Path Traversal in go.opentelemetry.io/obi (CVE-2026-41433)
path traversal in go.opentelemetry.io/obi (CVE-2026-41433). Data can be tampered with by attackers. Exploitable via ``TMPDIR``. Mitigation: upgrade to `0.8.0` or later.
CVE-2026-41907 Vulnerability in uuid (CVE-2026-41907)
vulnerability in uuid (CVE-2026-41907). Data can be tampered with by attackers. Exploitable via ``uuid``. Mitigation: upgrade to `13.0.1` or later.
CVE-2026-33662 Vulnerability in c (CVE-2026-33662)
vulnerability in c (CVE-2026-33662). Risk of unauthorized operations or information disclosure.
CVE-2026-42043 Vulnerability in axios (CVE-2026-42043)
vulnerability in axios (CVE-2026-42043). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.15.1` or later.
CVE-2026-42033 Vulnerability in axios (CVE-2026-42033)
vulnerability in axios (CVE-2026-42033). Confidential information can be exposed externally. Mitigation: upgrade to `1.15.1` or later.
CVE-2026-41676 Vulnerability in rust-openssl-project (CVE-2026-41676)
vulnerability in rust-openssl-project (CVE-2026-41676). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.10.78` or later.
CVE-2026-41681 Vulnerability in rust-openssl-project (CVE-2026-41681)
vulnerability in rust-openssl-project (CVE-2026-41681). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.10.78` or later.
CVE-2026-41678 Out-of-Bounds Write in rust-openssl-project (CVE-2026-41678)
out-of-bounds write in rust-openssl-project (CVE-2026-41678). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.10.78` or later.
CVE-2026-41140 Path Traversal in path-traversal (CVE-2026-41140)
path traversal in path-traversal (CVE-2026-41140). Data can be tampered with by attackers. Mitigation: upgrade to `2.3.4` or later.
CVE-2026-40897 Vulnerability in mathjs (CVE-2026-40897)
vulnerability in mathjs (CVE-2026-40897). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `15.2.0` or later.
CVE-2026-40068 Vulnerability in @anthropic-ai/claude-code (CVE-2026-40068)
vulnerability in @anthropic-ai/claude-code (CVE-2026-40068). Successful exploitation can lead to full system takeover. Exploitable via ``commondir``. Mitigation: upgrade to `2.1.84` or later.
CVE-2026-42239 Vulnerability in @budibase/backend-core (CVE-2026-42239)
vulnerability in @budibase/backend-core (CVE-2026-42239). Confidential information can be exposed externally. Exploitable via ``document.cookie``. Mitigation: upgrade to `3.35.10` or later.
CVE-2026-41316 Vulnerability in erb (CVE-2026-41316)
vulnerability in erb (CVE-2026-41316). Successful exploitation can lead to full system takeover. Exploitable via ``Marshal.load``. Mitigation: upgrade to `6.0.4` or later.
CVE-2026-31635 Vulnerability in c (CVE-2026-31635)
vulnerability in c (CVE-2026-31635). Risk of unauthorized operations or information disclosure.
CVE-2026-31641 Out-of-Bounds Read in linux (CVE-2026-31641)
vulnerability in linux (CVE-2026-31641). Successful exploitation can lead to full system takeover.
CVE-2026-5367 Vulnerability in CVE-2026-5367 (CVE-2026-5367)
vulnerability in CVE-2026-5367 (CVE-2026-5367). Confidential information can be exposed externally.
CVE-2026-41246 Code Injection in github.com/projectcontour/contour (CVE-2026-41246)
code injection in github.com/projectcontour/contour (CVE-2026-41246). Confidential information can be exposed externally. Mitigation: upgrade to `1.33.4` or later.
CVE-2026-31665 Use-After-Free in c (CVE-2026-31665)
vulnerability in c (CVE-2026-31665). Successful exploitation can lead to full system takeover.
CVE-2026-31663 Vulnerability in linux (CVE-2026-31663)
vulnerability in linux (CVE-2026-31663). Successful exploitation can lead to full system takeover.
CVE-2026-31656 Vulnerability in linux (CVE-2026-31656)
vulnerability in linux (CVE-2026-31656). Successful exploitation can lead to full system takeover.
CVE-2026-31627 Vulnerability in linux (CVE-2026-31627)
vulnerability in linux (CVE-2026-31627). Successful exploitation can lead to full system takeover.
CVE-2026-31630 Vulnerability in c (CVE-2026-31630)
vulnerability in c (CVE-2026-31630). Successful exploitation can lead to full system takeover.
CVE-2026-31629 Vulnerability in linux (CVE-2026-31629)
vulnerability in linux (CVE-2026-31629). Successful exploitation can lead to full system takeover.
CVE-2026-31622 Vulnerability in linux (CVE-2026-31622)
vulnerability in linux (CVE-2026-31622). Successful exploitation can lead to full system takeover.
CVE-2026-31626 Vulnerability in c (CVE-2026-31626)
vulnerability in c (CVE-2026-31626). Risk of unauthorized operations or information disclosure.
CVE-2026-31613 Out-of-Bounds Read in linux (CVE-2026-31613)
vulnerability in linux (CVE-2026-31613). Confidential information can be exposed externally.
CVE-2026-31611 Vulnerability in linux (CVE-2026-31611)
vulnerability in linux (CVE-2026-31611). Risk of unauthorized operations or information disclosure.
CVE-2026-31612 Vulnerability in linux (CVE-2026-31612)
vulnerability in linux (CVE-2026-31612). Confidential information can be exposed externally.
CVE-2026-31602 Vulnerability in linux (CVE-2026-31602)
vulnerability in linux (CVE-2026-31602). Successful exploitation can lead to full system takeover.
CVE-2026-31597 Use-After-Free in c (CVE-2026-31597)
vulnerability in c (CVE-2026-31597). Successful exploitation can lead to full system takeover.
CVE-2026-31598 Vulnerability in linux (CVE-2026-31598)
vulnerability in linux (CVE-2026-31598). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →