Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-63125 |
|
Vulnerability in CVE-2026-63125 (CVE-2026-63125)
vulnerability in CVE-2026-63125 (CVE-2026-63125). Successful exploitation can lead to full system takeover. Exploitable via ``can_create_images``.
|
| CVE-2026-62941 |
|
Authorization Flaw in CVE-2026-62941 (CVE-2026-62941)
vulnerability in CVE-2026-62941 (CVE-2026-62941). Successful exploitation can lead to full system takeover. Exploitable via ``AllowInstanceCreation``.
|
| CVE-2026-62940 |
|
Vulnerability in CVE-2026-62940 (CVE-2026-62940)
vulnerability in CVE-2026-62940 (CVE-2026-62940). Successful exploitation can lead to full system takeover. Exploitable via ``security.privileged``.
|
| CVE-2026-62867 |
|
Vulnerability in CVE-2026-62867 (CVE-2026-62867)
vulnerability in CVE-2026-62867 (CVE-2026-62867). Successful exploitation can lead to full system takeover. Exploitable via ``block.create_options``.
|
| CVE-2026-62313 |
|
Authorization Flaw in c (CVE-2026-62313)
vulnerability in c (CVE-2026-62313). Risk of unauthorized operations or information disclosure. Exploitable via ``security.idmap.isolated``.
|
| CVE-2026-55622 |
|
Vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-55622)
vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-55622). Confidential information can be exposed externally. Exploitable via `POST /1.0/instances`. Mitigation: upgrade to `7.2.0` or later.
|
| CVE-2026-55621 |
|
Vulnerability in github.com/lxc/incus/v7 (CVE-2026-55621)
vulnerability in github.com/lxc/incus/v7 (CVE-2026-55621). Confidential information can be exposed externally. Exploitable via ``req.Source.Project``. Mitigation: upgrade to `7.2.0` or later.
|
| CVE-2026-50278 |
|
Out-of-Bounds Read in CVE-2026-50278 (CVE-2026-50278)
vulnerability in CVE-2026-50278 (CVE-2026-50278). Risk of unauthorized operations or information disclosure. Exploitable via ``icSigEmbeddedV5ProfileTag``.
|
| CVE-2026-77806 |
|
Code Injection in CVE-2026-77806 (CVE-2026-77806)
code injection in CVE-2026-77806 (CVE-2026-77806). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75946 |
|
Vulnerability in CVE-2026-75946 (CVE-2026-75946)
vulnerability in CVE-2026-75946 (CVE-2026-75946). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15580 |
|
Vulnerability in CVE-2026-15580 (CVE-2026-15580)
vulnerability in CVE-2026-15580 (CVE-2026-15580). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77780 |
|
Vulnerability in CVE-2026-77780 (CVE-2026-77780)
vulnerability in CVE-2026-77780 (CVE-2026-77780). Risk of unauthorized operations or information disclosure. Exploitable via `POST
/transaction/save`.
|
| CVE-2026-77028 |
|
Cross-Site Scripting (XSS) in CVE-2026-77028 (CVE-2026-77028)
cross-site scripting in CVE-2026-77028 (CVE-2026-77028). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76613 |
|
SQL Injection in sqli (CVE-2026-76613)
SQL injection in sqli (CVE-2026-76613). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76612 |
|
Cross-Site Scripting (XSS) in CVE-2026-76612 (CVE-2026-76612)
cross-site scripting in CVE-2026-76612 (CVE-2026-76612). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76611 |
|
Path Traversal in CVE-2026-76611 (CVE-2026-76611)
path traversal in CVE-2026-76611 (CVE-2026-76611). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75115 |
|
Path Traversal in CVE-2026-75115 (CVE-2026-75115)
path traversal in CVE-2026-75115 (CVE-2026-75115). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59654 |
|
Vulnerability in apache (CVE-2026-59654)
vulnerability in apache (CVE-2026-59654). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77776 |
|
Vulnerability in CVE-2026-77776 (CVE-2026-77776)
vulnerability in CVE-2026-77776 (CVE-2026-77776). Confidential information can be exposed externally.
|
| CVE-2026-77775 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-77775 (CVE-2026-77775)
SSRF in CVE-2026-77775 (CVE-2026-77775). Confidential information can be exposed externally. Exploitable via `Authorization header`.
|
| CVE-2026-77759 |
|
Vulnerability in CVE-2026-77759 (CVE-2026-77759)
vulnerability in CVE-2026-77759 (CVE-2026-77759). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/transaction/{id}`.
|
| CVE-2026-77029 |
|
Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo < 4.1.66
Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo < 4.1.66
|
| CVE-2026-59318 |
|
Authorization Flaw in privilege-escalation (CVE-2026-59318)
vulnerability in privilege-escalation (CVE-2026-59318). Confidential information can be exposed externally.
|
| CVE-2026-59308 |
|
Vulnerability in CVE-2026-59308 (CVE-2026-59308)
vulnerability in CVE-2026-59308 (CVE-2026-59308). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59279 |
|
Vulnerability in dos (CVE-2026-59279)
vulnerability in dos (CVE-2026-59279). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19848 |
|
Vulnerability in wordpress (CVE-2026-19848)
vulnerability in wordpress (CVE-2026-19848). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18356 |
|
Vulnerability in wordpress (CVE-2026-18356)
vulnerability in wordpress (CVE-2026-18356). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17559 |
|
Authorization Flaw in wordpress (CVE-2026-17559)
vulnerability in wordpress (CVE-2026-17559). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16650 |
|
Vulnerability in wordpress (CVE-2026-16650)
vulnerability in wordpress (CVE-2026-16650). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15150 |
|
Vulnerability in wordpress (CVE-2026-15150)
vulnerability in wordpress (CVE-2026-15150). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15046 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15046)
vulnerability in wordpress (CVE-2026-15046). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13176 |
|
SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-13176)
SSRF in wordpress (CVE-2026-13176). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77769 |
|
Vulnerability in CVE-2026-77769 (CVE-2026-77769)
vulnerability in CVE-2026-77769 (CVE-2026-77769). Confidential information can be exposed externally.
|
| CVE-2026-77768 |
|
Vulnerability in CVE-2026-77768 (CVE-2026-77768)
vulnerability in CVE-2026-77768 (CVE-2026-77768). Confidential information can be exposed externally.
|
| CVE-2026-77767 |
|
Vulnerability in CVE-2026-77767 (CVE-2026-77767)
vulnerability in CVE-2026-77767 (CVE-2026-77767). Confidential information can be exposed externally.
|
| CVE-2026-77763 |
|
Path Traversal in CVE-2026-77763 (CVE-2026-77763)
path traversal in CVE-2026-77763 (CVE-2026-77763). Data can be tampered with by attackers.
|
| CVE-2026-77761 |
|
Vulnerability in CVE-2026-77761 (CVE-2026-77761)
vulnerability in CVE-2026-77761 (CVE-2026-77761). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77686 |
|
Vulnerability in CVE-2026-77686 (CVE-2026-77686)
vulnerability in CVE-2026-77686 (CVE-2026-77686). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77683 |
|
Vulnerability in CVE-2026-77683 (CVE-2026-77683)
vulnerability in CVE-2026-77683 (CVE-2026-77683). Successful exploitation can lead to full system takeover.
|
| CVE-2026-77086 |
|
Path Traversal in path-traversal (CVE-2026-77086)
path traversal in path-traversal (CVE-2026-77086). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59296 |
|
Vulnerability in CVE-2026-59296 (CVE-2026-59296)
vulnerability in CVE-2026-59296 (CVE-2026-59296). Data can be tampered with by attackers.
|
| CVE-2026-15576 |
|
Vulnerability in CVE-2026-15576 (CVE-2026-15576)
vulnerability in CVE-2026-15576 (CVE-2026-15576). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14208 |
|
Vulnerability in c (CVE-2026-14208)
vulnerability in c (CVE-2026-14208). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77755 |
|
Vulnerability in CVE-2026-77755 (CVE-2026-77755)
vulnerability in CVE-2026-77755 (CVE-2026-77755). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77751 |
|
Path Traversal in path-traversal (CVE-2026-77751)
path traversal in path-traversal (CVE-2026-77751). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77681 |
|
Vulnerability in CVE-2026-77681 (CVE-2026-77681)
vulnerability in CVE-2026-77681 (CVE-2026-77681). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59323 |
|
Vulnerability in spring (CVE-2026-59323)
vulnerability in spring (CVE-2026-59323). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48590 |
|
Vulnerability in CVE-2026-48590 (CVE-2026-48590)
vulnerability in CVE-2026-48590 (CVE-2026-48590). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47827 |
|
Command Injection in CVE-2026-47827 (CVE-2026-47827)
command injection in CVE-2026-47827 (CVE-2026-47827). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47080 |
|
Vulnerability in CVE-2026-47080 (CVE-2026-47080)
vulnerability in CVE-2026-47080 (CVE-2026-47080). Risk of unauthorized operations or information disclosure.
|