Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-16036 Authentication Bypass in wordpress (CVE-2026-16036)
authentication bypass in wordpress (CVE-2026-16036). Risk of unauthorized operations or information disclosure.
CVE-2026-15372 Authentication Bypass in wordpress (CVE-2026-15372)
authentication bypass in wordpress (CVE-2026-15372). Confidential information can be exposed externally.
CVE-2026-15230 Vulnerability in wordpress (CVE-2026-15230)
vulnerability in wordpress (CVE-2026-15230). Confidential information can be exposed externally.
CVE-2026-14553 Unrestricted File Upload in wordpress (CVE-2026-14553)
vulnerability in wordpress (CVE-2026-14553). Confidential information can be exposed externally.
CVE-2026-8761 Vulnerability in wordpress (CVE-2026-8761)
vulnerability in wordpress (CVE-2026-8761). Successful exploitation can lead to full system takeover. Exploitable via ``CustomersController``.
CVE-2026-68074 Vulnerability in apache (CVE-2026-68074)
vulnerability in apache (CVE-2026-68074). Risk of unauthorized operations or information disclosure.
CVE-2026-67588 Vulnerability in apache (CVE-2026-67588)
vulnerability in apache (CVE-2026-67588). Risk of unauthorized operations or information disclosure.
CVE-2026-67551 Vulnerability in apache (CVE-2026-67551)
vulnerability in apache (CVE-2026-67551). Risk of unauthorized operations or information disclosure.
CVE-2026-67589 Vulnerability in apache (CVE-2026-67589)
vulnerability in apache (CVE-2026-67589). Risk of unauthorized operations or information disclosure.
CVE-2026-68060 Vulnerability in apache (CVE-2026-68060)
vulnerability in apache (CVE-2026-68060). Risk of unauthorized operations or information disclosure.
CVE-2026-66273 Vulnerability in apache (CVE-2026-66273)
vulnerability in apache (CVE-2026-66273). Risk of unauthorized operations or information disclosure.
CVE-2026-67465 Vulnerability in apache (CVE-2026-67465)
vulnerability in apache (CVE-2026-67465). Risk of unauthorized operations or information disclosure.
CVE-2026-66257 Vulnerability in apache (CVE-2026-66257)
vulnerability in apache (CVE-2026-66257). Risk of unauthorized operations or information disclosure.
CVE-2026-15918 SQL Injection in wordpress (CVE-2026-15918)
SQL injection in wordpress (CVE-2026-15918). Confidential information can be exposed externally.
CVE-2026-18322 Privilege Escalation in wordpress (CVE-2026-18322)
vulnerability in wordpress (CVE-2026-18322). Successful exploitation can lead to full system takeover. Exploitable via ``save``.
CVE-2026-16143 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16143)
cross-site scripting in wordpress (CVE-2026-16143). Risk of unauthorized operations or information disclosure.
CVE-2026-18902 Vulnerability in CVE-2026-18902 (CVE-2026-18902)
vulnerability in CVE-2026-18902 (CVE-2026-18902). Successful exploitation can lead to full system takeover.
CVE-2026-18901 Vulnerability in CVE-2026-18901 (CVE-2026-18901)
vulnerability in CVE-2026-18901 (CVE-2026-18901). Successful exploitation can lead to full system takeover.
CVE-2026-18900 Command Injection in CVE-2026-18900 (CVE-2026-18900)
command injection in CVE-2026-18900 (CVE-2026-18900). Successful exploitation can lead to full system takeover.
CVE-2026-18898 A security flaw has been discovered in UTT HiPER 1200GW up to v2.5.3-170306. This affects the...
A security flaw has been discovered in UTT HiPER 1200GW up to v2.5.3-170306. This affects the...
CVE-2026-18907 Vulnerability in path-traversal (CVE-2026-18907)
vulnerability in path-traversal (CVE-2026-18907). Risk of unauthorized operations or information disclosure.
CVE-2026-18897 A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted...
A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted...
CVE-2026-18895 A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function...
A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function...
CVE-2026-18859 A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of...
A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of...
CVE-2026-18854 Vulnerability in sqli (CVE-2026-18854)
vulnerability in sqli (CVE-2026-18854). Risk of unauthorized operations or information disclosure.
CVE-2026-70619 Vulnerability in CVE-2026-70619 (CVE-2026-70619)
vulnerability in CVE-2026-70619 (CVE-2026-70619). Successful exploitation can lead to full system takeover.
CVE-2026-67862 Vulnerability in c (CVE-2026-67862)
vulnerability in c (CVE-2026-67862). Risk of unauthorized operations or information disclosure.
CVE-2026-67861 Vulnerability in dos (CVE-2026-67861)
vulnerability in dos (CVE-2026-67861). Risk of unauthorized operations or information disclosure.
CVE-2026-67860 Vulnerability in CVE-2026-67860 (CVE-2026-67860)
vulnerability in CVE-2026-67860 (CVE-2026-67860). Risk of unauthorized operations or information disclosure.
CVE-2026-67859 Vulnerability in dos (CVE-2026-67859)
vulnerability in dos (CVE-2026-67859). Risk of unauthorized operations or information disclosure.
CVE-2026-67858 Vulnerability in dos (CVE-2026-67858)
vulnerability in dos (CVE-2026-67858). Risk of unauthorized operations or information disclosure.
CVE-2026-67857 Out-of-Bounds Read in c (CVE-2026-67857)
vulnerability in c (CVE-2026-67857). Risk of unauthorized operations or information disclosure.
CVE-2026-67856 Vulnerability in dos (CVE-2026-67856)
vulnerability in dos (CVE-2026-67856). Risk of unauthorized operations or information disclosure.
CVE-2026-67855 Vulnerability in dos (CVE-2026-67855)
vulnerability in dos (CVE-2026-67855). Risk of unauthorized operations or information disclosure.
CVE-2026-45103 Vulnerability in CVE-2026-45103 (CVE-2026-45103)
vulnerability in CVE-2026-45103 (CVE-2026-45103). Data can be tampered with by attackers.
CVE-2026-18814 Vulnerability in CVE-2026-18814 (CVE-2026-18814)
vulnerability in CVE-2026-18814 (CVE-2026-18814). Successful exploitation can lead to full system takeover.
CVE-2026-66901 Vulnerability in CVE-2026-66901 (CVE-2026-66901)
vulnerability in CVE-2026-66901 (CVE-2026-66901). Confidential information can be exposed externally.
CVE-2026-51401 Code Injection in c (CVE-2026-51401)
code injection in c (CVE-2026-51401). Confidential information can be exposed externally.
CVE-2026-18811 Vulnerability in CVE-2026-18811 (CVE-2026-18811)
vulnerability in CVE-2026-18811 (CVE-2026-18811). Successful exploitation can lead to full system takeover.
CVE-2026-51400 Vulnerability in c (CVE-2026-51400)
vulnerability in c (CVE-2026-51400). Successful exploitation can lead to full system takeover.
CVE-2026-18813 Vulnerability in c (CVE-2026-18813)
vulnerability in c (CVE-2026-18813). Successful exploitation can lead to full system takeover.
CVE-2026-18812 Vulnerability in CVE-2026-18812 (CVE-2026-18812)
vulnerability in CVE-2026-18812 (CVE-2026-18812). Successful exploitation can lead to full system takeover.
CVE-2026-70494 Vulnerability in open-webui (CVE-2026-70494)
vulnerability in open-webui (CVE-2026-70494). Data can be tampered with by attackers. Exploitable via `DELETE /api/v1/folders/{id}`. Mitigation: upgrade to `0.11.0` or later.
CVE-2026-70492 Cross-Site Scripting (XSS) in open-webui (CVE-2026-70492)
cross-site scripting in open-webui (CVE-2026-70492). Confidential information can be exposed externally. Exploitable via ``catch``. Mitigation: upgrade to `0.11.0` or later.
CVE-2026-18656 Vulnerability in Amazon aws (CVE-2026-18656)
vulnerability in Amazon aws (CVE-2026-18656). Successful exploitation can lead to full system takeover.
CVE-2026-18810 Authentication Bypass in CVE-2026-18810 (CVE-2026-18810)
authentication bypass in CVE-2026-18810 (CVE-2026-18810). Risk of unauthorized operations or information disclosure.
CVE-2026-18657 Vulnerability in amazon (CVE-2026-18657)
vulnerability in amazon (CVE-2026-18657). Successful exploitation can lead to full system takeover.
CVE-2026-16793 Vulnerability in CVE-2026-16793 (CVE-2026-16793)
vulnerability in CVE-2026-16793 (CVE-2026-16793). Successful exploitation can lead to full system takeover.
CVE-2026-70486 Cross-Site Scripting (XSS) in open-webui (CVE-2026-70486)
cross-site scripting in open-webui (CVE-2026-70486). Confidential information can be exposed externally. Exploitable via ``TERMINAL_SERVER_CONNECTIONS``. Mitigation: upgrade to `0.11.0` or later.
CVE-2026-70485 SSRF (Server-Side Request Forgery) in open-webui (CVE-2026-70485)
SSRF in open-webui (CVE-2026-70485). Confidential information can be exposed externally. Exploitable via `POST /api/v1/retrieval/process/web`. Mitigation: upgrade to `0.11.0` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →