Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-16606 |
|
Code Injection in CVE-2026-16606 (CVE-2026-16606)
code injection in CVE-2026-16606 (CVE-2026-16606). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7328 |
|
Vulnerability in dos (CVE-2026-7328)
vulnerability in dos (CVE-2026-7328). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14985 |
|
Path Traversal in privilege-escalation (CVE-2026-14985)
path traversal in privilege-escalation (CVE-2026-14985). Successful exploitation can lead to full system takeover.
|
| CVE-2026-2395 |
|
SQL Injection in sqli (CVE-2026-2395)
SQL injection in sqli (CVE-2026-2395). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53910 |
|
Vulnerability in CVE-2026-53910 (CVE-2026-53910)
vulnerability in CVE-2026-53910 (CVE-2026-53910). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62144 |
|
Authentication Bypass in CVE-2026-62144 (CVE-2026-62144)
authentication bypass in CVE-2026-62144 (CVE-2026-62144). Confidential information can be exposed externally.
|
| CVE-2026-55717 |
|
Vulnerability in dos (CVE-2026-55717)
vulnerability in dos (CVE-2026-55717). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50046 |
|
Use-After-Free in dos (CVE-2026-50046)
vulnerability in dos (CVE-2026-50046). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32665 |
|
Vulnerability in dos (CVE-2026-32665)
vulnerability in dos (CVE-2026-32665). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16560 |
|
Vulnerability in dos (CVE-2026-16560)
vulnerability in dos (CVE-2026-16560). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40691 |
|
Vulnerability in dos (CVE-2026-40691)
vulnerability in dos (CVE-2026-40691). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16232 KEV |
|
[KEV] Authentication Bypass in Check point checkpoint (CVE-2026-16232)
authentication bypass in Check point checkpoint (CVE-2026-16232). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-14865 |
|
Vulnerability in dos (CVE-2026-14865)
vulnerability in dos (CVE-2026-14865). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14586 |
|
Vulnerability in dos (CVE-2026-14586)
vulnerability in dos (CVE-2026-14586). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13190 |
|
Unsafe Deserialization in deserialization (CVE-2026-13190)
vulnerability in deserialization (CVE-2026-13190). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13186 |
|
Path Traversal in path-traversal (CVE-2026-13186)
path traversal in path-traversal (CVE-2026-13186). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13185 |
|
Unsafe Deserialization in progress (CVE-2026-13185)
vulnerability in progress (CVE-2026-13185). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8152 |
|
Cross-Site Scripting (XSS) in CVE-2026-8152 (CVE-2026-8152)
cross-site scripting in CVE-2026-8152 (CVE-2026-8152). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13181 |
|
Vulnerability in progress (CVE-2026-13181)
vulnerability in progress (CVE-2026-13181). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44191 |
|
OS Command Injection in CVE-2026-44191 (CVE-2026-44191)
OS command injection in CVE-2026-44191 (CVE-2026-44191). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16270 |
|
Vulnerability in dos (CVE-2026-16270)
vulnerability in dos (CVE-2026-16270). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65600 |
|
Path Traversal in github.com/traefik/traefik/v2 (CVE-2026-65600)
path traversal in github.com/traefik/traefik/v2 (CVE-2026-65600). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api../admin`. Mitigation: upgrade to `2.11.52` or later.
|
| CVE-2026-65597 |
|
Cross-Site Scripting (XSS) in n8n (CVE-2026-65597)
cross-site scripting in n8n (CVE-2026-65597). Risk of unauthorized operations or information disclosure. Exploitable via ``sandbox``. Mitigation: upgrade to `2.29.8` or later.
|
| CVE-2026-65603 |
|
Privilege Escalation in privilege-escalation (CVE-2026-65603)
vulnerability in privilege-escalation (CVE-2026-65603). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.8.12` or later.
|
| CVE-2026-65592 |
|
Cross-Site Scripting (XSS) in n8n (CVE-2026-65592)
cross-site scripting in n8n (CVE-2026-65592). Risk of unauthorized operations or information disclosure. Exploitable via ``cachedResultUrl``. Mitigation: upgrade to `2.29.8` or later.
|
| CVE-2026-65593 |
|
SSRF (Server-Side Request Forgery) in n8n (CVE-2026-65593)
SSRF in n8n (CVE-2026-65593). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.29.8` or later.
|
| CVE-2026-65595 |
|
Privilege Escalation in n8n (CVE-2026-65595)
vulnerability in n8n (CVE-2026-65595). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.29.8` or later.
|
| CVE-2026-65016 |
|
Vulnerability in n8n (CVE-2026-65016)
vulnerability in n8n (CVE-2026-65016). Successful exploitation can lead to full system takeover. Exploitable via ``N8N_SSO_SCOPES_PROVISION_INSTANCE_ROLE``. Mitigation: upgrade to `2.29.8` or later.
|
| CVE-2026-57599 |
|
Privilege Escalation in privilege-escalation (CVE-2026-57599)
vulnerability in privilege-escalation (CVE-2026-57599). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65015 |
|
Authorization Flaw in n8n (CVE-2026-65015)
vulnerability in n8n (CVE-2026-65015). Successful exploitation can lead to full system takeover. Exploitable via ``agents``. Mitigation: upgrade to `2.29.8` or later.
|
| CVE-2026-4773 |
|
Vulnerability in CVE-2026-4773 (CVE-2026-4773)
vulnerability in CVE-2026-4773 (CVE-2026-4773). Confidential information can be exposed externally.
|
| CVE-2026-44192 |
|
Path Traversal in path-traversal (CVE-2026-44192)
path traversal in path-traversal (CVE-2026-44192). Confidential information can be exposed externally.
|
| CVE-2026-14551 |
|
Vulnerability in privilege-escalation (CVE-2026-14551)
vulnerability in privilege-escalation (CVE-2026-14551). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15787 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15787)
cross-site scripting in wordpress (CVE-2026-15787). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63264 |
|
Cross-Site Scripting (XSS) in CVE-2026-63264 (CVE-2026-63264)
cross-site scripting in CVE-2026-63264 (CVE-2026-63264). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63048 |
|
Unrestricted File Upload in CVE-2026-63048 (CVE-2026-63048)
vulnerability in CVE-2026-63048 (CVE-2026-63048). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3821 |
|
OS Command Injection in dos (CVE-2026-3821)
OS command injection in dos (CVE-2026-3821). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45820 |
|
Vulnerability in dos (CVE-2026-45820)
vulnerability in dos (CVE-2026-45820). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15802 |
|
Vulnerability in wordpress (CVE-2026-15802)
vulnerability in wordpress (CVE-2026-15802). Data can be tampered with by attackers.
|
| CVE-2026-16490 |
|
Vulnerability in sqli (CVE-2026-16490)
vulnerability in sqli (CVE-2026-16490). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16485 |
|
Cross-Site Scripting (XSS) in CVE-2026-16485 (CVE-2026-16485)
cross-site scripting in CVE-2026-16485 (CVE-2026-16485). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16486 |
|
Cross-Site Scripting (XSS) in CVE-2026-16486 (CVE-2026-16486)
cross-site scripting in CVE-2026-16486 (CVE-2026-16486). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63261 |
|
Vulnerability in dos (CVE-2026-63261)
vulnerability in dos (CVE-2026-63261). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63260 |
|
Vulnerability in dos (CVE-2026-63260)
vulnerability in dos (CVE-2026-63260). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63263 |
|
Vulnerability in dos (CVE-2026-63263)
vulnerability in dos (CVE-2026-63263). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63144 |
|
Vulnerability in dos (CVE-2026-63144)
vulnerability in dos (CVE-2026-63144). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8987 |
|
Vulnerability in dos (CVE-2026-8987)
vulnerability in dos (CVE-2026-8987). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8984 |
|
Code Injection in autel (CVE-2026-8984)
code injection in autel (CVE-2026-8984). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62542 |
|
Vulnerability in c (CVE-2026-62542)
vulnerability in c (CVE-2026-62542). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62525 |
|
Information Disclosure in c (CVE-2026-62525)
vulnerability in c (CVE-2026-62525). Risk of unauthorized operations or information disclosure.
|