Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-47752 Vulnerability in CVE-2026-47752 (CVE-2026-47752)
vulnerability in CVE-2026-47752 (CVE-2026-47752). Successful exploitation can lead to full system takeover. Exploitable via ``title_template``.
CVE-2026-65761 SQL Injection in sqli (CVE-2026-65761)
SQL injection in sqli (CVE-2026-65761). Risk of unauthorized operations or information disclosure.
CVE-2026-65760 Information Disclosure in CVE-2026-65760 (CVE-2026-65760)
vulnerability in CVE-2026-65760 (CVE-2026-65760). Risk of unauthorized operations or information disclosure.
CVE-2026-65759 Vulnerability in CVE-2026-65759 (CVE-2026-65759)
vulnerability in CVE-2026-65759 (CVE-2026-65759). Risk of unauthorized operations or information disclosure.
CVE-2026-65698 Path Traversal in path-traversal (CVE-2026-65698)
path traversal in path-traversal (CVE-2026-65698). Confidential information can be exposed externally.
CVE-2026-65697 Cross-Site Scripting (XSS) in CVE-2026-65697 (CVE-2026-65697)
cross-site scripting in CVE-2026-65697 (CVE-2026-65697). Risk of unauthorized operations or information disclosure.
CVE-2026-65696 Vulnerability in CVE-2026-65696 (CVE-2026-65696)
vulnerability in CVE-2026-65696 (CVE-2026-65696). Risk of unauthorized operations or information disclosure.
CVE-2026-65695 Path Traversal in path-traversal (CVE-2026-65695)
path traversal in path-traversal (CVE-2026-65695). Confidential information can be exposed externally.
CVE-2026-44909 Vulnerability in dos (CVE-2026-44909)
vulnerability in dos (CVE-2026-44909). Risk of unauthorized operations or information disclosure.
CVE-2026-16768 Out-of-Bounds Read in CVE-2026-16768 (CVE-2026-16768)
vulnerability in CVE-2026-16768 (CVE-2026-16768). Risk of unauthorized operations or information disclosure.
CVE-2026-16584 Vulnerability in Amazon awslabs.aws-api-mcp-server (CVE-2026-16584)
vulnerability in Amazon awslabs.aws-api-mcp-server (CVE-2026-16584). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.3.47` or later.
CVE-2026-65917 Vulnerability in CVE-2026-65917 (CVE-2026-65917)
vulnerability in CVE-2026-65917 (CVE-2026-65917). Successful exploitation can lead to full system takeover.
CVE-2026-65916 Vulnerability in CVE-2026-65916 (CVE-2026-65916)
vulnerability in CVE-2026-65916 (CVE-2026-65916). Data can be tampered with by attackers.
CVE-2026-48539 Cross-Site Scripting (XSS) in CVE-2026-48539 (CVE-2026-48539)
cross-site scripting in CVE-2026-48539 (CVE-2026-48539). Risk of unauthorized operations or information disclosure.
CVE-2026-48538 Cross-Site Scripting (XSS) in CVE-2026-48538 (CVE-2026-48538)
cross-site scripting in CVE-2026-48538 (CVE-2026-48538). Risk of unauthorized operations or information disclosure.
CVE-2026-48537 Cross-Site Scripting (XSS) in CVE-2026-48537 (CVE-2026-48537)
cross-site scripting in CVE-2026-48537 (CVE-2026-48537). Risk of unauthorized operations or information disclosure.
CVE-2026-48536 Cross-Site Scripting (XSS) in CVE-2026-48536 (CVE-2026-48536)
cross-site scripting in CVE-2026-48536 (CVE-2026-48536). Risk of unauthorized operations or information disclosure.
CVE-2026-48535 Cross-Site Scripting (XSS) in CVE-2026-48535 (CVE-2026-48535)
cross-site scripting in CVE-2026-48535 (CVE-2026-48535). Risk of unauthorized operations or information disclosure.
CVE-2026-48534 Cross-Site Scripting (XSS) in CVE-2026-48534 (CVE-2026-48534)
cross-site scripting in CVE-2026-48534 (CVE-2026-48534). Risk of unauthorized operations or information disclosure.
CVE-2026-48533 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-48532 Cross-Site Scripting (XSS) in CVE-2026-48532 (CVE-2026-48532)
cross-site scripting in CVE-2026-48532 (CVE-2026-48532). Risk of unauthorized operations or information disclosure.
CVE-2026-48531 Cross-Site Scripting (XSS) in CVE-2026-48531 (CVE-2026-48531)
cross-site scripting in CVE-2026-48531 (CVE-2026-48531). Risk of unauthorized operations or information disclosure.
CVE-2026-48530 Cross-Site Scripting (XSS) in CVE-2026-48530 (CVE-2026-48530)
cross-site scripting in CVE-2026-48530 (CVE-2026-48530). Risk of unauthorized operations or information disclosure.
CVE-2026-15617 Vulnerability in CVE-2026-15617 (CVE-2026-15617)
vulnerability in CVE-2026-15617 (CVE-2026-15617). Confidential information can be exposed externally.
CVE-2026-15616 Vulnerability in CVE-2026-15616 (CVE-2026-15616)
vulnerability in CVE-2026-15616 (CVE-2026-15616). Confidential information can be exposed externally.
CVE-2026-15615 Vulnerability in CVE-2026-15615 (CVE-2026-15615)
vulnerability in CVE-2026-15615 (CVE-2026-15615). Data can be tampered with by attackers.
CVE-2026-15614 Vulnerability in CVE-2026-15614 (CVE-2026-15614)
vulnerability in CVE-2026-15614 (CVE-2026-15614). Data can be tampered with by attackers.
CVE-2026-15612 Vulnerability in CVE-2026-15612 (CVE-2026-15612)
vulnerability in CVE-2026-15612 (CVE-2026-15612). Confidential information can be exposed externally.
CVE-2026-15611 Authentication Bypass in CVE-2026-15611 (CVE-2026-15611)
authentication bypass in CVE-2026-15611 (CVE-2026-15611). Confidential information can be exposed externally.
CVE-2026-11804 Vulnerability in CVE-2026-11804 (CVE-2026-11804)
vulnerability in CVE-2026-11804 (CVE-2026-11804). Confidential information can be exposed externally.
CVE-2026-8287 Vulnerability in CVE-2026-8287 (CVE-2026-8287)
vulnerability in CVE-2026-8287 (CVE-2026-8287). Risk of unauthorized operations or information disclosure.
CVE-2026-16735 Command Injection in CVE-2026-16735 (CVE-2026-16735)
command injection in CVE-2026-16735 (CVE-2026-16735). Risk of unauthorized operations or information disclosure.
CVE-2026-16733 Command Injection in CVE-2026-16733 (CVE-2026-16733)
command injection in CVE-2026-16733 (CVE-2026-16733). Risk of unauthorized operations or information disclosure.
CVE-2026-65688 Path Traversal in path-traversal (CVE-2026-65688)
path traversal in path-traversal (CVE-2026-65688). Successful exploitation can lead to full system takeover.
CVE-2026-65689 Path Traversal in path-traversal (CVE-2026-65689)
path traversal in path-traversal (CVE-2026-65689). Successful exploitation can lead to full system takeover.
CVE-2026-65690 Path Traversal in path-traversal (CVE-2026-65690)
path traversal in path-traversal (CVE-2026-65690). Successful exploitation can lead to full system takeover.
CVE-2026-65687 Path Traversal in path-traversal (CVE-2026-65687)
path traversal in path-traversal (CVE-2026-65687). Successful exploitation can lead to full system takeover.
CVE-2026-65908 Vulnerability in jetbrains (CVE-2026-65908)
vulnerability in jetbrains (CVE-2026-65908). Successful exploitation can lead to full system takeover.
CVE-2026-65907 In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible
In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible
CVE-2026-15037 Vulnerability in CVE-2026-15037 (CVE-2026-15037)
vulnerability in CVE-2026-15037 (CVE-2026-15037). Risk of unauthorized operations or information disclosure.
CVE-2026-65906 Code Injection in jetbrains (CVE-2026-65906)
code injection in jetbrains (CVE-2026-65906). Successful exploitation can lead to full system takeover.
CVE-2026-43823 Vulnerability in CVE-2026-43823 (CVE-2026-43823)
vulnerability in CVE-2026-43823 (CVE-2026-43823). Risk of unauthorized operations or information disclosure.
CVE-2026-43820 Out-of-Bounds Read in CVE-2026-43820 (CVE-2026-43820)
vulnerability in CVE-2026-43820 (CVE-2026-43820). Confidential information can be exposed externally.
CVE-2026-45623 Path Traversal in postcss (CVE-2026-45623)
path traversal in postcss (CVE-2026-45623). Confidential information can be exposed externally. Exploitable via ``PreviousMap``. Mitigation: upgrade to `8.5.12` or later.
CVE-2026-59933 Vulnerability in phpoffice/phpspreadsheet (CVE-2026-59933)
vulnerability in phpoffice/phpspreadsheet (CVE-2026-59933). Risk of unauthorized operations or information disclosure. Exploitable via ``bigBlockChain``. Mitigation: upgrade to `1.30.6` or later.
CVE-2026-59932 Vulnerability in phpoffice/phpspreadsheet (CVE-2026-59932)
vulnerability in phpoffice/phpspreadsheet (CVE-2026-59932). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.30.6` or later.
CVE-2026-59931 SSRF (Server-Side Request Forgery) in phpoffice/phpspreadsheet (CVE-2026-59931)
SSRF in phpoffice/phpspreadsheet (CVE-2026-59931). Confidential information can be exposed externally. Exploitable via ``example.com``. Mitigation: upgrade to `1.30.6` or later.
CVE-2026-73421 Vulnerability in next-auth (CVE-2026-73421)
vulnerability in next-auth (CVE-2026-73421). Risk of unauthorized operations or information disclosure. Exploitable via ``auth``. Mitigation: upgrade to `5.0.0-beta.32` or later.
CVE-2026-73418 Vulnerability in @auth/core (CVE-2026-73418)
vulnerability in @auth/core (CVE-2026-73418). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`. Mitigation: upgrade to `0.41.3` or later.
CVE-2026-73420 Vulnerability in @auth/core (CVE-2026-73420)
vulnerability in @auth/core (CVE-2026-73420). Risk of unauthorized operations or information disclosure. Exploitable via ``normalizeIdentifier``. Mitigation: upgrade to `0.41.3` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →