Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-58658 Vulnerability in CVE-2026-58658 (CVE-2026-58658)
vulnerability in CVE-2026-58658 (CVE-2026-58658). Confidential information can be exposed externally.
CVE-2026-12382 Vulnerability in CVE-2026-12382 (CVE-2026-12382)
vulnerability in CVE-2026-12382 (CVE-2026-12382). Data can be tampered with by attackers.
CVE-2026-20298 Information Disclosure in splunk (CVE-2026-20298)
vulnerability in splunk (CVE-2026-20298). Confidential information can be exposed externally. Exploitable via ``encr_password``.
CVE-2026-52847 Cross-Site Scripting (XSS) in mantisbt/mantisbt (CVE-2026-52847)
cross-site scripting in mantisbt/mantisbt (CVE-2026-52847). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.28.4` or later.
CVE-2026-54494 SSRF (Server-Side Request Forgery) in phanan/koel (CVE-2026-54494)
SSRF in phanan/koel (CVE-2026-54494). Risk of unauthorized operations or information disclosure. Exploitable via `GET /secret`. Mitigation: upgrade to `9.7.1` or later.
CVE-2026-8055 Vulnerability in c (CVE-2026-8055)
vulnerability in c (CVE-2026-8055). Risk of unauthorized operations or information disclosure.
CVE-2026-62948 Cross-Site Scripting (XSS) in c (CVE-2026-62948)
cross-site scripting in c (CVE-2026-62948). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `25.12.5` or later.
CVE-2026-61643 Authorization Flaw in CVE-2026-61643 (CVE-2026-61643)
vulnerability in CVE-2026-61643 (CVE-2026-61643). Data can be tampered with by attackers.
CVE-2026-53515 Privilege Escalation in @better-auth/sso (CVE-2026-53515)
vulnerability in @better-auth/sso (CVE-2026-53515). Data can be tampered with by attackers. Exploitable via `POST /sso/register`. Mitigation: upgrade to `1.6.11` or later.
CVE-2026-50562 Vulnerability in CVE-2026-50562 (CVE-2026-50562)
vulnerability in CVE-2026-50562 (CVE-2026-50562). Risk of unauthorized operations or information disclosure.
CVE-2026-10673 Out-of-Bounds Read in c (CVE-2026-10673)
vulnerability in c (CVE-2026-10673). Data can be tampered with by attackers.
CVE-2026-54491 SSRF (Server-Side Request Forgery) in phanan/koel (CVE-2026-54491)
SSRF in phanan/koel (CVE-2026-54491). Confidential information can be exposed externally. Exploitable via `POST /api/podcasts`. Mitigation: upgrade to `9.7.1` or later.
CVE-2026-54451 Vulnerability in protobuf (CVE-2026-54451)
vulnerability in protobuf (CVE-2026-54451). Risk of unauthorized operations or information disclosure. Exploitable via ``Protobuf.Decoder``. Mitigation: upgrade to `0.16.1` or later.
CVE-2026-54449 Command Injection in langbot (CVE-2026-54449)
command injection in langbot (CVE-2026-54449). Successful exploitation can lead to full system takeover.
CVE-2026-54447 Vulnerability in garminconnect (CVE-2026-54447)
vulnerability in garminconnect (CVE-2026-54447). Risk of unauthorized operations or information disclosure. Exploitable via ``garminconnect``. Mitigation: upgrade to `0.3.5` or later.
GHSA-8q6q-m837-fv64 SSRF (Server-Side Request Forgery) in phanan/koel (GHSA-8q6q-m837-fv64)
SSRF in phanan/koel (GHSA-8q6q-m837-fv64). Risk of unauthorized operations or information disclosure. Exploitable via `GET /rest/createPodcastChannel.view`. Mitigation: upgrade to `9.7.0` or later.
CVE-2026-62378 Cross-Site Scripting (XSS) in CVE-2026-62378 (CVE-2026-62378)
cross-site scripting in CVE-2026-62378 (CVE-2026-62378). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.1.10` or later.
CVE-2026-62287 Vulnerability in CVE-2026-62287 (CVE-2026-62287)
vulnerability in CVE-2026-62287 (CVE-2026-62287). Risk of unauthorized operations or information disclosure.
CVE-2026-62248 Vulnerability in CVE-2026-62248 (CVE-2026-62248)
vulnerability in CVE-2026-62248 (CVE-2026-62248). Risk of unauthorized operations or information disclosure.
CVE-2026-62180 Vulnerability in CVE-2026-62180 (CVE-2026-62180)
vulnerability in CVE-2026-62180 (CVE-2026-62180). Risk of unauthorized operations or information disclosure.
CVE-2026-62178 Vulnerability in CVE-2026-62178 (CVE-2026-62178)
vulnerability in CVE-2026-62178 (CVE-2026-62178). Risk of unauthorized operations or information disclosure.
CVE-2026-62177 Vulnerability in CVE-2026-62177 (CVE-2026-62177)
vulnerability in CVE-2026-62177 (CVE-2026-62177). Risk of unauthorized operations or information disclosure.
CVE-2026-62174 Vulnerability in CVE-2026-62174 (CVE-2026-62174)
vulnerability in CVE-2026-62174 (CVE-2026-62174). Risk of unauthorized operations or information disclosure.
CVE-2026-62173 Vulnerability in CVE-2026-62173 (CVE-2026-62173)
vulnerability in CVE-2026-62173 (CVE-2026-62173). Risk of unauthorized operations or information disclosure.
CVE-2026-62172 Vulnerability in CVE-2026-62172 (CVE-2026-62172)
vulnerability in CVE-2026-62172 (CVE-2026-62172). Risk of unauthorized operations or information disclosure.
CVE-2026-62169 Vulnerability in CVE-2026-62169 (CVE-2026-62169)
vulnerability in CVE-2026-62169 (CVE-2026-62169). Risk of unauthorized operations or information disclosure.
CVE-2026-62168 Vulnerability in CVE-2026-62168 (CVE-2026-62168)
vulnerability in CVE-2026-62168 (CVE-2026-62168). Risk of unauthorized operations or information disclosure.
CVE-2026-62165 Vulnerability in CVE-2026-62165 (CVE-2026-62165)
vulnerability in CVE-2026-62165 (CVE-2026-62165). Risk of unauthorized operations or information disclosure.
CVE-2026-62164 Vulnerability in CVE-2026-62164 (CVE-2026-62164)
vulnerability in CVE-2026-62164 (CVE-2026-62164). Risk of unauthorized operations or information disclosure.
CVE-2026-61841 Vulnerability in CVE-2026-61841 (CVE-2026-61841)
vulnerability in CVE-2026-61841 (CVE-2026-61841). Risk of unauthorized operations or information disclosure.
CVE-2026-61839 Vulnerability in CVE-2026-61839 (CVE-2026-61839)
vulnerability in CVE-2026-61839 (CVE-2026-61839). Risk of unauthorized operations or information disclosure.
CVE-2026-61829 Vulnerability in CVE-2026-61829 (CVE-2026-61829)
vulnerability in CVE-2026-61829 (CVE-2026-61829). Risk of unauthorized operations or information disclosure.
CVE-2026-61710 Vulnerability in CVE-2026-61710 (CVE-2026-61710)
vulnerability in CVE-2026-61710 (CVE-2026-61710). Risk of unauthorized operations or information disclosure.
CVE-2026-61606 Vulnerability in CVE-2026-61606 (CVE-2026-61606)
vulnerability in CVE-2026-61606 (CVE-2026-61606). Risk of unauthorized operations or information disclosure.
CVE-2026-52843 Vulnerability in CVE-2026-52843 (CVE-2026-52843)
vulnerability in CVE-2026-52843 (CVE-2026-52843). Confidential information can be exposed externally.
CVE-2026-52842 Vulnerability in CVE-2026-52842 (CVE-2026-52842)
vulnerability in CVE-2026-52842 (CVE-2026-52842). Confidential information can be exposed externally.
CVE-2026-48799 Vulnerability in CVE-2026-48799 (CVE-2026-48799)
vulnerability in CVE-2026-48799 (CVE-2026-48799). Data can be tampered with by attackers.
CVE-2026-20187 Vulnerability in cisco (CVE-2026-20187)
vulnerability in cisco (CVE-2026-20187). Risk of unauthorized operations or information disclosure.
CVE-2026-20158 Vulnerability in cisco (CVE-2026-20158)
vulnerability in cisco (CVE-2026-20158). Risk of unauthorized operations or information disclosure.
CVE-2026-20157 Vulnerability in cisco (CVE-2026-20157)
vulnerability in cisco (CVE-2026-20157). Successful exploitation can lead to full system takeover.
CVE-2026-20156 Buffer Overflow in cisco (CVE-2026-20156)
vulnerability in cisco (CVE-2026-20156). Successful exploitation can lead to full system takeover.
CVE-2026-20153 Vulnerability in cisco (CVE-2026-20153)
vulnerability in cisco (CVE-2026-20153). Risk of unauthorized operations or information disclosure.
CVE-2026-1563 Cross-Site Scripting (XSS) in pega (CVE-2026-1563)
cross-site scripting in pega (CVE-2026-1563). Risk of unauthorized operations or information disclosure.
CVE-2026-1562 Cross-Site Scripting (XSS) in pega (CVE-2026-1562)
cross-site scripting in pega (CVE-2026-1562). Risk of unauthorized operations or information disclosure.
CVE-2026-54493 SSRF (Server-Side Request Forgery) in phanan/koel (CVE-2026-54493)
SSRF in phanan/koel (CVE-2026-54493). Confidential information can be exposed externally. Exploitable via ``SafeUrl``. Mitigation: upgrade to `9.7.0` or later.
CVE-2026-54492 SSRF (Server-Side Request Forgery) in phanan/koel (CVE-2026-54492)
SSRF in phanan/koel (CVE-2026-54492). Risk of unauthorized operations or information disclosure. Exploitable via ``SafeUrl``. Mitigation: upgrade to `9.7.0` or later.
CVE-2026-49280 Vulnerability in mantisbt/mantisbt (CVE-2026-49280)
vulnerability in mantisbt/mantisbt (CVE-2026-49280). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.28.4` or later.
CVE-2026-49273 Vulnerability in mantisbt/mantisbt (CVE-2026-49273)
vulnerability in mantisbt/mantisbt (CVE-2026-49273). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.28.4` or later.
CVE-2026-47156 Authentication Bypass in mantisbt/mantisbt (CVE-2026-47156)
authentication bypass in mantisbt/mantisbt (CVE-2026-47156). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.28.4` or later.
CVE-2026-20146 Path Traversal in Cisco path-traversal (CVE-2026-20146)
path traversal in Cisco path-traversal (CVE-2026-20146). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →