Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-57433 |
|
Vulnerability in deserialization (CVE-2026-57433)
vulnerability in deserialization (CVE-2026-57433). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59515 |
|
SQL Injection in sqli (CVE-2026-59515)
SQL injection in sqli (CVE-2026-59515). Confidential information can be exposed externally.
|
| CVE-2026-59518 |
|
Unsafe Deserialization in deserialization (CVE-2026-59518)
vulnerability in deserialization (CVE-2026-59518). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57813 |
|
Vulnerability in privilege-escalation (CVE-2026-57813)
vulnerability in privilege-escalation (CVE-2026-57813). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57770 |
|
Unsafe Deserialization in deserialization (CVE-2026-57770)
vulnerability in deserialization (CVE-2026-57770). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57739 |
|
SQL Injection in sqli (CVE-2026-57739)
SQL injection in sqli (CVE-2026-57739). Confidential information can be exposed externally.
|
| CVE-2026-57744 |
|
Unsafe Deserialization in deserialization (CVE-2026-57744)
vulnerability in deserialization (CVE-2026-57744). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57738 |
|
Unsafe Deserialization in deserialization (CVE-2026-57738)
vulnerability in deserialization (CVE-2026-57738). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57726 |
|
SQL Injection in sqli (CVE-2026-57726)
SQL injection in sqli (CVE-2026-57726). Confidential information can be exposed externally.
|
| CVE-2026-57724 |
|
Unsafe Deserialization in deserialization (CVE-2026-57724)
vulnerability in deserialization (CVE-2026-57724). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57714 |
|
SQL Injection in sqli (CVE-2026-57714)
SQL injection in sqli (CVE-2026-57714). Confidential information can be exposed externally.
|
| CVE-2026-57702 |
|
SQL Injection in sqli (CVE-2026-57702)
SQL injection in sqli (CVE-2026-57702). Confidential information can be exposed externally.
|
| CVE-2026-57707 |
|
SQL Injection in sqli (CVE-2026-57707)
SQL injection in sqli (CVE-2026-57707). Confidential information can be exposed externally.
|
| CVE-2026-57401 |
|
Path Traversal in path-traversal (CVE-2026-57401)
path traversal in path-traversal (CVE-2026-57401). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14453 |
|
Code Injection in CVE-2026-14453 (CVE-2026-14453)
code injection in CVE-2026-14453 (CVE-2026-14453). Confidential information can be exposed externally.
|
| CVE-2026-56271 |
|
Vulnerability in flowiseai (CVE-2026-56271)
vulnerability in flowiseai (CVE-2026-56271). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56260 |
|
Path Traversal in dos (CVE-2026-56260)
path traversal in dos (CVE-2026-56260). Data can be tampered with by attackers.
|
| CVE-2026-61447 |
|
Code Injection in CVE-2026-61447 (CVE-2026-61447)
code injection in CVE-2026-61447 (CVE-2026-61447). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57827 |
|
Unrestricted File Upload in rsjoomla (CVE-2026-57827)
vulnerability in rsjoomla (CVE-2026-57827). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12761 |
|
Authentication Bypass in wordpress (CVE-2026-12761)
authentication bypass in wordpress (CVE-2026-12761). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57807 |
|
Vulnerability in CVE-2026-57807 (CVE-2026-57807)
vulnerability in CVE-2026-57807 (CVE-2026-57807). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5801 |
|
SQL Injection in sqli (CVE-2026-5801)
SQL injection in sqli (CVE-2026-5801). Successful exploitation can lead to full system takeover.
|
| CVE-2026-2397 |
|
SQL Injection in sqli (CVE-2026-2397)
SQL injection in sqli (CVE-2026-2397). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59792 |
|
Vulnerability in path-traversal (CVE-2026-59792)
vulnerability in path-traversal (CVE-2026-59792). Confidential information can be exposed externally.
|
| CVE-2026-15378 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-15378)
SSRF in ssrf (CVE-2026-15378). Confidential information can be exposed externally.
|
| CVE-2026-40005 |
|
Path Traversal in apache (CVE-2026-40005)
path traversal in apache (CVE-2026-40005). Confidential information can be exposed externally.
|
| CVE-2026-28564 |
|
Vulnerability in apache (CVE-2026-28564)
vulnerability in apache (CVE-2026-28564). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15300 |
|
SQL Injection in wordpress (CVE-2026-15300)
SQL injection in wordpress (CVE-2026-15300). Data can be tampered with by attackers. Mitigation: upgrade to `4.5.5` or later.
|
| CVE-2026-15282 |
|
Unrestricted File Upload in wordpress (CVE-2026-15282)
vulnerability in wordpress (CVE-2026-15282). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14894 |
|
Unrestricted File Upload in wordpress (CVE-2026-14894)
vulnerability in wordpress (CVE-2026-14894). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58122 |
|
Vulnerability in CVE-2026-58122 (CVE-2026-58122)
vulnerability in CVE-2026-58122 (CVE-2026-58122). Confidential information can be exposed externally.
|
| CVE-2026-58123 |
|
Vulnerability in CVE-2026-58123 (CVE-2026-58123)
vulnerability in CVE-2026-58123 (CVE-2026-58123). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14261 |
|
Vulnerability in CVE-2026-14261 (CVE-2026-14261)
vulnerability in CVE-2026-14261 (CVE-2026-14261). Confidential information can be exposed externally.
|
| CVE-2026-12116 |
|
Vulnerability in CVE-2026-12116 (CVE-2026-12116)
vulnerability in CVE-2026-12116 (CVE-2026-12116). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56291 KEV |
|
[KEV] Unrestricted File Upload in Balbooa forms (CVE-2026-56291)
vulnerability in Balbooa forms (CVE-2026-56291). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-5955 |
|
SQL Injection in sqli (CVE-2026-5955)
SQL injection in sqli (CVE-2026-5955). Successful exploitation can lead to full system takeover.
|
| CVE-2026-2342 |
|
Cross-Site Scripting (XSS) in CVE-2026-2342 (CVE-2026-2342)
cross-site scripting in CVE-2026-2342 (CVE-2026-2342). Confidential information can be exposed externally.
|
| CVE-2026-15158 |
|
Unrestricted File Upload in wordpress (CVE-2026-15158)
vulnerability in wordpress (CVE-2026-15158). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14245 |
|
Vulnerability in wordpress (CVE-2026-14245)
vulnerability in wordpress (CVE-2026-14245). Successful exploitation can lead to full system takeover. Exploitable via ``form_nonce``.
|
| CVE-2026-47646 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-47646)
cross-site scripting in microsoft (CVE-2026-47646). Confidential information can be exposed externally.
|
| CVE-2026-9074 |
|
SQL Injection in sqli (CVE-2026-9074)
SQL injection in sqli (CVE-2026-9074). Confidential information can be exposed externally.
|
| CVE-2026-15062 |
|
SQL Injection in sqli (CVE-2026-15062)
SQL injection in sqli (CVE-2026-15062). Confidential information can be exposed externally.
|
| CVE-2026-58480 |
|
Unrestricted File Upload in wordpress (CVE-2026-58480)
vulnerability in wordpress (CVE-2026-58480). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8307 |
|
SQL Injection in sqli (CVE-2026-8307)
SQL injection in sqli (CVE-2026-8307). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9701 |
|
Vulnerability in wordpress (CVE-2026-9701)
vulnerability in wordpress (CVE-2026-9701). Successful exploitation can lead to full system takeover. Exploitable via ``eventer_verification_code``.
|
| CVE-2026-14487 |
|
Path Traversal in wordpress (CVE-2026-14487)
path traversal in wordpress (CVE-2026-14487). Data can be tampered with by attackers.
|
| CVE-2026-37270 |
|
Authentication Bypass in CVE-2026-37270 (CVE-2026-37270)
authentication bypass in CVE-2026-37270 (CVE-2026-37270). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59706 |
|
Vulnerability in ssrf (CVE-2026-59706)
vulnerability in ssrf (CVE-2026-59706). Confidential information can be exposed externally. Exploitable via `GET /api/v1/config/`.
|
| CVE-2026-20744 |
|
Vulnerability in cisa (CVE-2026-20744)
vulnerability in cisa (CVE-2026-20744). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53481 |
|
Path Traversal in path-traversal (CVE-2026-53481)
path traversal in path-traversal (CVE-2026-53481). Successful exploitation can lead to full system takeover.
|