Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-45733 Cross-Site Scripting (XSS) in CVE-2026-45733 (CVE-2026-45733)
cross-site scripting in CVE-2026-45733 (CVE-2026-45733). Confidential information can be exposed externally.
CVE-2026-50575 Vulnerability in CVE-2026-50575 (CVE-2026-50575)
vulnerability in CVE-2026-50575 (CVE-2026-50575). Confidential information can be exposed externally.
CVE-2026-75853 Vulnerability in CVE-2026-75853 (CVE-2026-75853)
vulnerability in CVE-2026-75853 (CVE-2026-75853). Successful exploitation can lead to full system takeover.
CVE-2026-75855 Path Traversal in CVE-2026-75855 (CVE-2026-75855)
path traversal in CVE-2026-75855 (CVE-2026-75855). Data can be tampered with by attackers. Exploitable via `POST /api/v1/server`.
CVE-2026-75842 Path Traversal in CVE-2026-75842 (CVE-2026-75842)
path traversal in CVE-2026-75842 (CVE-2026-75842). Confidential information can be exposed externally.
CVE-2026-75846 Vulnerability in CVE-2026-75846 (CVE-2026-75846)
vulnerability in CVE-2026-75846 (CVE-2026-75846). Data can be tampered with by attackers. Exploitable via `POST /api/v1/command/{db}`.
CVE-2026-75844 SSRF (Server-Side Request Forgery) in CVE-2026-75844 (CVE-2026-75844)
SSRF in CVE-2026-75844 (CVE-2026-75844). Confidential information can be exposed externally.
CVE-2026-75831 Cross-Site Scripting (XSS) in CVE-2026-75831 (CVE-2026-75831)
cross-site scripting in CVE-2026-75831 (CVE-2026-75831). Confidential information can be exposed externally.
CVE-2026-75836 Vulnerability in CVE-2026-75836 (CVE-2026-75836)
vulnerability in CVE-2026-75836 (CVE-2026-75836). Successful exploitation can lead to full system takeover. Exploitable via `GET /menubar/items`.
CVE-2026-75828 Cross-Site Scripting (XSS) in CVE-2026-75828 (CVE-2026-75828)
cross-site scripting in CVE-2026-75828 (CVE-2026-75828). Confidential information can be exposed externally.
CVE-2026-75829 Vulnerability in CVE-2026-75829 (CVE-2026-75829)
vulnerability in CVE-2026-75829 (CVE-2026-75829). Confidential information can be exposed externally.
CVE-2026-75830 Vulnerability in path-traversal (CVE-2026-75830)
vulnerability in path-traversal (CVE-2026-75830). Data can be tampered with by attackers. Exploitable via `POST /api/v1/pages/batch`. Mitigation: upgrade to `1.0.15` or later.
CVE-2026-75840 Vulnerability in CVE-2026-75840 (CVE-2026-75840)
vulnerability in CVE-2026-75840 (CVE-2026-75840). Confidential information can be exposed externally.
CVE-2026-75827 Code Injection in CVE-2026-75827 (CVE-2026-75827)
code injection in CVE-2026-75827 (CVE-2026-75827). Successful exploitation can lead to full system takeover.
CVE-2026-74904 Vulnerability in CVE-2026-74904 (CVE-2026-74904)
vulnerability in CVE-2026-74904 (CVE-2026-74904). Confidential information can be exposed externally.
CVE-2026-74906 Authorization Flaw in CVE-2026-74906 (CVE-2026-74906)
vulnerability in CVE-2026-74906 (CVE-2026-74906). Confidential information can be exposed externally.
CVE-2026-15585 Path Traversal in path-traversal (CVE-2026-15585)
path traversal in path-traversal (CVE-2026-15585). Confidential information can be exposed externally.
CVE-2026-74905 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-74905)
SSRF in ssrf (CVE-2026-74905). Confidential information can be exposed externally.
CVE-2026-74902 Cross-Site Scripting (XSS) in c (CVE-2026-74902)
cross-site scripting in c (CVE-2026-74902). Successful exploitation can lead to full system takeover.
CVE-2026-15371 Vulnerability in CVE-2026-15371 (CVE-2026-15371)
vulnerability in CVE-2026-15371 (CVE-2026-15371). Confidential information can be exposed externally.
CVE-2026-75091 Cross-Site Scripting (XSS) in wordpress (CVE-2026-75091)
cross-site scripting in wordpress (CVE-2026-75091). Risk of unauthorized operations or information disclosure.
CVE-2026-11801 Vulnerability in wordpress (CVE-2026-11801)
vulnerability in wordpress (CVE-2026-11801). Confidential information can be exposed externally.
CVE-2026-75089 Vulnerability in sqli (CVE-2026-75089)
vulnerability in sqli (CVE-2026-75089). Risk of unauthorized operations or information disclosure.
CVE-2026-75080 Vulnerability in sqli (CVE-2026-75080)
vulnerability in sqli (CVE-2026-75080). Risk of unauthorized operations or information disclosure.
CVE-2026-75079 Vulnerability in sqli (CVE-2026-75079)
vulnerability in sqli (CVE-2026-75079). Risk of unauthorized operations or information disclosure.
CVE-2025-62593 KEV [KEV] Cross-Site Request Forgery (CSRF) in Ray-project ray (CVE-2025-62593)
vulnerability in Ray-project ray (CVE-2025-62593). Successful exploitation can lead to full system takeover. Exploitable via ``fetch``. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `2.52.0` or later.
CVE-2026-67961 Code Injection in CVE-2026-67961 (CVE-2026-67961)
code injection in CVE-2026-67961 (CVE-2026-67961). Successful exploitation can lead to full system takeover.
CVE-2026-9816 Authorization Flaw in mattermost (CVE-2026-9816)
vulnerability in mattermost (CVE-2026-9816). Data can be tampered with by attackers. Exploitable via `POST /api/v2/boards/{boardID}/members`.
CVE-2026-67918 Path Traversal in path-traversal (CVE-2026-67918)
path traversal in path-traversal (CVE-2026-67918). Confidential information can be exposed externally.
CVE-2026-65346 Vulnerability in apple (CVE-2026-65346)
vulnerability in apple (CVE-2026-65346). Successful exploitation can lead to full system takeover.
CVE-2026-65343 Use-After-Free in apple (CVE-2026-65343)
vulnerability in apple (CVE-2026-65343). Risk of unauthorized operations or information disclosure.
CVE-2026-45790 Privilege Escalation in CVE-2026-45790 (CVE-2026-45790)
vulnerability in CVE-2026-45790 (CVE-2026-45790). Successful exploitation can lead to full system takeover.
CVE-2026-43794 Buffer Overflow in c (CVE-2026-43794)
vulnerability in c (CVE-2026-43794). Successful exploitation can lead to full system takeover.
CVE-2026-69148 Vulnerability in mlflow (CVE-2026-69148)
vulnerability in mlflow (CVE-2026-69148). Confidential information can be exposed externally. Exploitable via `GET /model-versions/get-artifact`. Mitigation: upgrade to `3.15.0` or later.
CVE-2026-56677 Vulnerability in 9router (CVE-2026-56677)
vulnerability in 9router (CVE-2026-56677). Data can be tampered with by attackers. Exploitable via `POST /api/auth/oidc/test`.
CVE-2026-75482 Path Traversal in path-traversal (CVE-2026-75482)
path traversal in path-traversal (CVE-2026-75482). Confidential information can be exposed externally.
CVE-2026-75481 Privilege Escalation in CVE-2026-75481 (CVE-2026-75481)
vulnerability in CVE-2026-75481 (CVE-2026-75481). Successful exploitation can lead to full system takeover.
CVE-2026-75479 Vulnerability in CVE-2026-75479 (CVE-2026-75479)
vulnerability in CVE-2026-75479 (CVE-2026-75479). Confidential information can be exposed externally.
CVE-2026-75111 Path Traversal in CVE-2026-75111 (CVE-2026-75111)
path traversal in CVE-2026-75111 (CVE-2026-75111). Confidential information can be exposed externally.
CVE-2026-75109 Vulnerability in CVE-2026-75109 (CVE-2026-75109)
vulnerability in CVE-2026-75109 (CVE-2026-75109). Risk of unauthorized operations or information disclosure.
CVE-2026-75105 Vulnerability in CVE-2026-75105 (CVE-2026-75105)
vulnerability in CVE-2026-75105 (CVE-2026-75105). Confidential information can be exposed externally.
CVE-2026-75103 Vulnerability in CVE-2026-75103 (CVE-2026-75103)
vulnerability in CVE-2026-75103 (CVE-2026-75103). Successful exploitation can lead to full system takeover.
CVE-2026-71518 Authorization Flaw in CVE-2026-71518 (CVE-2026-71518)
vulnerability in CVE-2026-71518 (CVE-2026-71518). Confidential information can be exposed externally.
CVE-2026-65832 Out-of-Bounds Read in cpp (CVE-2026-65832)
vulnerability in cpp (CVE-2026-65832). Risk of unauthorized operations or information disclosure.
CVE-2026-65822 SQL Injection in CVE-2026-65822 (CVE-2026-65822)
SQL injection in CVE-2026-65822 (CVE-2026-65822). Confidential information can be exposed externally.
CVE-2026-65640 Unrestricted File Upload in wordpress (CVE-2026-65640)
vulnerability in wordpress (CVE-2026-65640). Successful exploitation can lead to full system takeover. Exploitable via ``upload_files``.
CVE-2026-64657 SQL Injection in CVE-2026-64657 (CVE-2026-64657)
SQL injection in CVE-2026-64657 (CVE-2026-64657). Successful exploitation can lead to full system takeover.
CVE-2026-63409 Out-of-Bounds Read in cpp (CVE-2026-63409)
vulnerability in cpp (CVE-2026-63409). Risk of unauthorized operations or information disclosure.
CVE-2026-54356 Vulnerability in @budibase/server (CVE-2026-54356)
vulnerability in @budibase/server (CVE-2026-54356). Data can be tampered with by attackers. Exploitable via `POST /api/attachments/`.
CVE-2026-34789 Code Injection in cpp (CVE-2026-34789)
code injection in cpp (CVE-2026-34789). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →