Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-9603 |
|
Vulnerability in CVE-2026-9603 (CVE-2026-9603)
vulnerability in CVE-2026-9603 (CVE-2026-9603). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9582 |
|
Cross-Site Request Forgery (CSRF) in CVE-2026-9582 (CVE-2026-9582)
vulnerability in CVE-2026-9582 (CVE-2026-9582). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48592 |
|
Vulnerability in oban_web (CVE-2026-48592)
vulnerability in oban_web (CVE-2026-48592). Risk of unauthorized operations or information disclosure. Exploitable via ``oban_web``. Mitigation: upgrade to `2.12.5` or later.
|
| CVE-2026-42337 |
|
Vulnerability in CVE-2026-42337 (CVE-2026-42337)
vulnerability in CVE-2026-42337 (CVE-2026-42337). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.8.1` or later.
|
| CVE-2025-14361 |
|
Vulnerability in CVE-2025-14361 (CVE-2025-14361)
vulnerability in CVE-2025-14361 (CVE-2025-14361). Data can be tampered with by attackers.
|
| CVE-2026-27331 |
|
Vulnerability in CVE-2026-27331 (CVE-2026-27331)
vulnerability in CVE-2026-27331 (CVE-2026-27331). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24520 |
|
Vulnerability in CVE-2026-24520 (CVE-2026-24520)
vulnerability in CVE-2026-24520 (CVE-2026-24520). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-25426 |
|
Vulnerability in CVE-2026-25426 (CVE-2026-25426)
vulnerability in CVE-2026-25426 (CVE-2026-25426). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-25444 |
|
Vulnerability in CVE-2026-25444 (CVE-2026-25444)
vulnerability in CVE-2026-25444 (CVE-2026-25444). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24190 |
|
Vulnerability in dos (CVE-2026-24190)
vulnerability in dos (CVE-2026-24190). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47728 |
|
Vulnerability in bugsink (CVE-2026-47728)
vulnerability in bugsink (CVE-2026-47728). Risk of unauthorized operations or information disclosure. Exploitable via ``FEATURE_MINIDUMPS``. Mitigation: upgrade to `2.2.0` or later.
|
| CVE-2026-24590 |
|
Vulnerability in CVE-2026-24590 (CVE-2026-24590)
vulnerability in CVE-2026-24590 (CVE-2026-24590). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24638 |
|
Vulnerability in CVE-2026-24638 (CVE-2026-24638)
vulnerability in CVE-2026-24638 (CVE-2026-24638). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39655 |
|
Vulnerability in CVE-2026-39655 (CVE-2026-39655)
vulnerability in CVE-2026-39655 (CVE-2026-39655). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4795 |
|
Vulnerability in CVE-2026-4795 (CVE-2026-4795)
vulnerability in CVE-2026-4795 (CVE-2026-4795). Confidential information can be exposed externally.
|
| CVE-2026-42776 |
|
Vulnerability in CVE-2026-42776 (CVE-2026-42776)
vulnerability in CVE-2026-42776 (CVE-2026-42776). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27346 |
|
Vulnerability in CVE-2026-27346 (CVE-2026-27346)
vulnerability in CVE-2026-27346 (CVE-2026-27346). Data can be tampered with by attackers.
|
| CVE-2026-27398 |
|
Vulnerability in CVE-2026-27398 (CVE-2026-27398)
vulnerability in CVE-2026-27398 (CVE-2026-27398). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32389 |
|
Vulnerability in CVE-2026-32389 (CVE-2026-32389)
vulnerability in CVE-2026-32389 (CVE-2026-32389). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27357 |
|
Vulnerability in CVE-2026-27357 (CVE-2026-27357)
vulnerability in CVE-2026-27357 (CVE-2026-27357). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42763 |
|
Vulnerability in CVE-2026-42763 (CVE-2026-42763)
vulnerability in CVE-2026-42763 (CVE-2026-42763). Confidential information can be exposed externally.
|
| CVE-2026-45209 |
|
Vulnerability in CVE-2026-45209 (CVE-2026-45209)
vulnerability in CVE-2026-45209 (CVE-2026-45209). Confidential information can be exposed externally.
|
| CVE-2026-45438 |
|
Vulnerability in CVE-2026-45438 (CVE-2026-45438)
vulnerability in CVE-2026-45438 (CVE-2026-45438). Data can be tampered with by attackers.
|
| CVE-2026-24582 |
|
Vulnerability in CVE-2026-24582 (CVE-2026-24582)
vulnerability in CVE-2026-24582 (CVE-2026-24582). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24586 |
|
Vulnerability in CVE-2026-24586 (CVE-2026-24586)
vulnerability in CVE-2026-24586 (CVE-2026-24586). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24592 |
|
Vulnerability in CVE-2026-24592 (CVE-2026-24592)
vulnerability in CVE-2026-24592 (CVE-2026-24592). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24527 |
|
Vulnerability in CVE-2026-24527 (CVE-2026-24527)
vulnerability in CVE-2026-24527 (CVE-2026-24527). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9486 |
|
Cross-Site Request Forgery (CSRF) in CVE-2026-9486 (CVE-2026-9486)
vulnerability in CVE-2026-9486 (CVE-2026-9486). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24545 |
|
Vulnerability in CVE-2026-24545 (CVE-2026-24545)
vulnerability in CVE-2026-24545 (CVE-2026-24545). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24546 |
|
Vulnerability in CVE-2026-24546 (CVE-2026-24546)
vulnerability in CVE-2026-24546 (CVE-2026-24546). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2651 |
|
Vulnerability in mlflow (CVE-2026-2651)
vulnerability in mlflow (CVE-2026-2651). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.11.1` or later.
|
| CVE-2026-9350 |
|
Vulnerability in CVE-2026-9350 (CVE-2026-9350)
vulnerability in CVE-2026-9350 (CVE-2026-9350). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9303 |
|
Cross-Site Request Forgery (CSRF) in CVE-2026-9303 (CVE-2026-9303)
vulnerability in CVE-2026-9303 (CVE-2026-9303). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9284 |
|
Vulnerability in wordpress (CVE-2026-9284)
vulnerability in wordpress (CVE-2026-9284). Confidential information can be exposed externally.
|
| CVE-2026-3294 |
|
Vulnerability in tp-link (CVE-2026-3294)
vulnerability in tp-link (CVE-2026-3294). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9224 |
|
Vulnerability in devolutions (CVE-2026-9224)
vulnerability in devolutions (CVE-2026-9224). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9246 |
|
Vulnerability in devolutions (CVE-2026-9246)
vulnerability in devolutions (CVE-2026-9246). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9251 |
|
Vulnerability in devolutions (CVE-2026-9251)
vulnerability in devolutions (CVE-2026-9251). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46716 |
|
Privilege Escalation in github.com/nezhahq/nezha (CVE-2026-46716)
vulnerability in github.com/nezhahq/nezha (CVE-2026-46716). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/v1/cron`. Mitigation: upgrade to `1.14.15-0.20260517022419-d7526351cf97` or later.
|
| CVE-2026-47125 |
|
Vulnerability in github.com/getarcaneapp/arcane/backend (CVE-2026-47125)
vulnerability in github.com/getarcaneapp/arcane/backend (CVE-2026-47125). Successful exploitation can lead to full system takeover. Exploitable via `PUT /api/environments/{id}/templates/variables`. Mitigation: upgrade to `1.19.2` or later.
|
| CVE-2026-47120 |
|
Vulnerability in github.com/nezhahq/nezha (CVE-2026-47120)
vulnerability in github.com/nezhahq/nezha (CVE-2026-47120). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/alert-rule`. Mitigation: upgrade to `1.14.15-0.20260517022419-d7526351cf97` or later.
|
| CVE-2026-39967 |
|
Vulnerability in CVE-2026-39967 (CVE-2026-39967)
vulnerability in CVE-2026-39967 (CVE-2026-39967). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9255 |
|
Vulnerability in Amazon aws (CVE-2026-9255)
vulnerability in Amazon aws (CVE-2026-9255). Successful exploitation can lead to full system takeover.
|
| CVE-2026-33712 |
|
Vulnerability in ssrf (CVE-2026-33712)
vulnerability in ssrf (CVE-2026-33712). Confidential information can be exposed externally. Exploitable via `POST /api/v1/typebots/{typebotId}/preview/startChat`.
|
| CVE-2026-8381 |
|
Vulnerability in CVE-2026-8381 (CVE-2026-8381)
vulnerability in CVE-2026-8381 (CVE-2026-8381). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8684 |
|
Vulnerability in wordpress (CVE-2026-8684)
vulnerability in wordpress (CVE-2026-8684). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8692 |
|
Vulnerability in wordpress (CVE-2026-8692)
vulnerability in wordpress (CVE-2026-8692). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9011 |
|
Vulnerability in wordpress (CVE-2026-9011)
vulnerability in wordpress (CVE-2026-9011). Confidential information can be exposed externally.
|
| CVE-2026-7249 |
|
Vulnerability in wordpress (CVE-2026-7249)
vulnerability in wordpress (CVE-2026-7249). Risk of unauthorized operations or information disclosure. Exploitable via ``init``.
|
| CVE-2026-44409 |
|
Information Disclosure in zte (CVE-2026-44409)
vulnerability in zte (CVE-2026-44409). Confidential information can be exposed externally.
|