Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-81697 |
|
Vulnerability in CVE-2026-81697 (CVE-2026-81697)
vulnerability in CVE-2026-81697 (CVE-2026-81697). Data can be tampered with by attackers. Mitigation: upgrade to `1.4.9` or later.
|
| CVE-2026-75768 |
|
Vulnerability in CVE-2026-75768 (CVE-2026-75768)
vulnerability in CVE-2026-75768 (CVE-2026-75768). Successful exploitation can lead to full system takeover.
|
| CVE-2026-78680 |
|
NLTK versions before 3.10.3 fail to use validated absolute paths when invoking the Graphviz dot...
NLTK versions before 3.10.3 fail to use validated absolute paths when invoking the Graphviz dot...
|
| CVE-2026-78155 |
|
Vulnerability in privilege-escalation (CVE-2026-78155)
vulnerability in privilege-escalation (CVE-2026-78155). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55769 |
|
Vulnerability in CVE-2026-55769 (CVE-2026-55769)
vulnerability in CVE-2026-55769 (CVE-2026-55769). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16869 |
|
Vulnerability in ibm (CVE-2026-16869)
vulnerability in ibm (CVE-2026-16869). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74872 |
|
Vulnerability in CVE-2026-74872 (CVE-2026-74872)
vulnerability in CVE-2026-74872 (CVE-2026-74872). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16674 |
|
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary...
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary...
|
| CVE-2026-14875 |
|
Vulnerability in ibm (CVE-2026-14875)
vulnerability in ibm (CVE-2026-14875). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14673 |
|
Vulnerability in postgresql (CVE-2026-14673)
vulnerability in postgresql (CVE-2026-14673). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-0299 |
|
Vulnerability in privilege-escalation (CVE-2026-0299)
vulnerability in privilege-escalation (CVE-2026-0299). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56174 |
|
Vulnerability in microsoft (CVE-2026-56174)
vulnerability in microsoft (CVE-2026-56174). Successful exploitation can lead to full system takeover.
|
| CVE-2026-32791 |
|
Vulnerability in CVE-2026-32791 (CVE-2026-32791)
vulnerability in CVE-2026-32791 (CVE-2026-32791). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20799 |
|
Vulnerability in CVE-2026-20799 (CVE-2026-20799)
vulnerability in CVE-2026-20799 (CVE-2026-20799). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55522 |
|
Code Injection in praisonaiagents (CVE-2026-55522)
code injection in praisonaiagents (CVE-2026-55522). Successful exploitation can lead to full system takeover. Exploitable via ``tools.py``. Mitigation: upgrade to `1.6.58` or later.
|
| CVE-2026-41447 |
|
Vulnerability in c (CVE-2026-41447)
vulnerability in c (CVE-2026-41447). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18605 |
|
Vulnerability in CVE-2026-18605 (CVE-2026-18605)
vulnerability in CVE-2026-18605 (CVE-2026-18605). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48395 |
|
Vulnerability in adobe (CVE-2026-48395)
vulnerability in adobe (CVE-2026-48395). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48391 |
|
Vulnerability in adobe (CVE-2026-48391)
vulnerability in adobe (CVE-2026-48391). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63093 |
|
Vulnerability in anysphere (CVE-2026-63093)
vulnerability in anysphere (CVE-2026-63093). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48287 |
|
Vulnerability in adobe (CVE-2026-48287)
vulnerability in adobe (CVE-2026-48287). Confidential information can be exposed externally.
|
| CVE-2026-48275 |
|
Vulnerability in adobe (CVE-2026-48275)
vulnerability in adobe (CVE-2026-48275). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48346 |
|
Vulnerability in adobe (CVE-2026-48346)
vulnerability in adobe (CVE-2026-48346). Confidential information can be exposed externally.
|
| CVE-2026-57097 |
|
Vulnerability in microsoft (CVE-2026-57097)
vulnerability in microsoft (CVE-2026-57097). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40945 |
|
Vulnerability in CVE-2025-40945 (CVE-2025-40945)
vulnerability in CVE-2025-40945 (CVE-2025-40945). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15515 |
|
Vulnerability in CVE-2026-15515 (CVE-2026-15515)
vulnerability in CVE-2026-15515 (CVE-2026-15515). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49145 |
|
Vulnerability in CVE-2026-49145 (CVE-2026-49145)
vulnerability in CVE-2026-49145 (CVE-2026-49145). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6901 |
|
Vulnerability in CVE-2026-6901 (CVE-2026-6901)
vulnerability in CVE-2026-6901 (CVE-2026-6901). Confidential information can be exposed externally.
|
| CVE-2026-57919 |
|
Vulnerability in privilege-escalation (CVE-2026-57919)
vulnerability in privilege-escalation (CVE-2026-57919). Successful exploitation can lead to full system takeover.
|
| CVE-2026-46710 |
|
Vulnerability in privilege-escalation (CVE-2026-46710)
vulnerability in privilege-escalation (CVE-2026-46710). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.9.6` or later.
|
| CVE-2026-53865 |
|
Vulnerability in openclaw (CVE-2026-53865)
vulnerability in openclaw (CVE-2026-53865). Confidential information can be exposed externally. Exploitable via ``trash``. Mitigation: upgrade to `2026.5.2` or later.
|
| CVE-2026-53858 |
|
Vulnerability in openclaw (CVE-2026-53858)
vulnerability in openclaw (CVE-2026-53858). Confidential information can be exposed externally. Exploitable via ``STATE_DIRECTORY``. Mitigation: upgrade to `2026.5.2` or later.
|
| CVE-2026-53842 |
|
Vulnerability in openclaw (CVE-2026-53842)
vulnerability in openclaw (CVE-2026-53842). Confidential information can be exposed externally. Exploitable via ``gcloud``. Mitigation: upgrade to `2026.5.2` or later.
|
| CVE-2026-53846 |
|
Vulnerability in openclaw (CVE-2026-53846)
vulnerability in openclaw (CVE-2026-53846). Confidential information can be exposed externally. Mitigation: upgrade to `2026.4.29` or later.
|
| CVE-2026-54055 |
|
Vulnerability in privilege-escalation (CVE-2026-54055)
vulnerability in privilege-escalation (CVE-2026-54055). Data can be tampered with by attackers. Exploitable via ``O_NOFOLLOW``.
|
| CVE-2026-53819 |
|
Vulnerability in openclaw (CVE-2026-53819)
vulnerability in openclaw (CVE-2026-53819). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.5.27` or later.
|
| CVE-2026-48565 |
|
Vulnerability in microsoft (CVE-2026-48565)
vulnerability in microsoft (CVE-2026-48565). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47648 |
|
Vulnerability in microsoft (CVE-2026-47648)
vulnerability in microsoft (CVE-2026-47648). Successful exploitation can lead to full system takeover.
|
| CVE-2026-24064 |
|
Vulnerability in privilege-escalation (CVE-2026-24064)
vulnerability in privilege-escalation (CVE-2026-24064). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11400 |
|
AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance
AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance
|
| CVE-2026-11401 |
|
AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance
AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance
|
| CVE-2026-47211 |
|
Vulnerability in ouroboros-ai (CVE-2026-47211)
vulnerability in ouroboros-ai (CVE-2026-47211). Risk of unauthorized operations or information disclosure. Exploitable via ``OUROBOROS_CLI_PATH``. Mitigation: upgrade to `0.39.0` or later.
|
| CVE-2026-45792 |
|
Vulnerability in rtk (CVE-2026-45792)
vulnerability in rtk (CVE-2026-45792). Data can be tampered with by attackers. Exploitable via ``strip_lines_matching``. Mitigation: upgrade to `0.32.0` or later.
|
| CVE-2026-45721 |
|
Vulnerability in github.com/xyproto/algernon (CVE-2026-45721)
vulnerability in github.com/xyproto/algernon (CVE-2026-45721). Successful exploitation can lead to full system takeover. Exploitable via ``DirPage``. Mitigation: upgrade to `1.17.7` or later.
|
| CVE-2026-45772 |
|
Vulnerability in turbo (CVE-2026-45772)
vulnerability in turbo (CVE-2026-45772). Successful exploitation can lead to full system takeover. Exploitable via ``yarnPath``. Mitigation: upgrade to `2.9.14` or later.
|
| CVE-2026-30906 |
|
Vulnerability in zoom (CVE-2026-30906)
vulnerability in zoom (CVE-2026-30906). Successful exploitation can lead to full system takeover.
|
| CVE-2026-0251 |
|
Vulnerability in privilege-escalation (CVE-2026-0251)
vulnerability in privilege-escalation (CVE-2026-0251). Successful exploitation can lead to full system takeover.
|
| CVE-2026-42830 |
|
Vulnerability in microsoft (CVE-2026-42830)
vulnerability in microsoft (CVE-2026-42830). Data can be tampered with by attackers.
|
| CVE-2026-44477 |
|
Vulnerability in github.com/cloudnative-pg/cloudnative-pg (CVE-2026-44477)
vulnerability in github.com/cloudnative-pg/cloudnative-pg (CVE-2026-44477). Successful exploitation can lead to full system takeover. Exploitable via ``postgres``. Mitigation: upgrade to `1.29.1` or later.
|
| CVE-2026-27290 |
|
Vulnerability in adobe (CVE-2026-27290)
vulnerability in adobe (CVE-2026-27290). Successful exploitation can lead to full system takeover.
|