Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: cloud-platforms Clear

ID	Title	Severity	Tags	Detected
CVE-2026-13760	OS Command Injection in Amazon aws-cdk-lib (CVE-2026-13760) OS command injection in Amazon aws-cdk-lib (CVE-2026-13760). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.260.0` or later.	High	AWS Amazon Cloud Cwe 78	1 month ago
CVE-2026-13769	Vulnerability in Amazon awscli (CVE-2026-13769) vulnerability in Amazon awscli (CVE-2026-13769). Confidential information can be exposed externally. Mitigation: upgrade to `1.44.78` or later.	Medium	AWS Amazon Cloud Cwe 732	1 month ago
CVE-2026-13762	Vulnerability in Amazon aws (CVE-2026-13762) vulnerability in Amazon aws (CVE-2026-13762). Successful exploitation can lead to full system takeover.	Critical	AWS Amazon Cloud Cwe 444 +1	2 months ago
CVE-2026-12957	Vulnerability in Amazon aws (CVE-2026-12957) vulnerability in Amazon aws (CVE-2026-12957). Successful exploitation can lead to full system takeover.	High	AWS Amazon Cloud Cwe 732	2 months ago
CVE-2026-50195	Vulnerability in Amazon github.com/containerd/containerd/v2 (CVE-2026-50195) vulnerability in Amazon github.com/containerd/containerd/v2 (CVE-2026-50195). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.1.9, 2.2.5, 2.3.2` or later.	Critical	AWS Amazon Cloud Cwe 345 +3	2 months ago
CVE-2026-12530	Vulnerability in Amazon bedrock-agentcore (CVE-2026-12530) vulnerability in Amazon bedrock-agentcore (CVE-2026-12530). Confidential information can be exposed externally. Mitigation: upgrade to `1.6.1` or later.	High	AWS Amazon Cloud Python +1	2 months ago
CVE-2026-11931	Vulnerability in Amazon aws (CVE-2026-11931) vulnerability in Amazon aws (CVE-2026-11931). Confidential information can be exposed externally.	Medium	AWS Amazon Cloud Cwe 276	2 months ago
CVE-2026-12043	Vulnerability in Amazon aws (CVE-2026-12043) vulnerability in Amazon aws (CVE-2026-12043). Successful exploitation can lead to full system takeover.	High	AWS Amazon Cloud C +1	2 months ago
CVE-2026-10740	Vulnerability in Amazon s2n-quic (CVE-2026-10740) vulnerability in Amazon s2n-quic (CVE-2026-10740). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.82.0` or later.	Medium	AWS Amazon Cloud Denial of Service +1	2 months ago
CVE-2026-11393	Code Injection in Amazon @aws/agentcore (CVE-2026-11393) code injection in Amazon @aws/agentcore (CVE-2026-11393). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.0.0-preview.9` or later.	Critical	AWS Amazon Cloud Python +1	2 months ago
CVE-2026-11400	AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance	High	AWS Amazon Cloud Cwe 426 +4	2 months ago
CVE-2026-11401	AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance	High	Cwe 426 AWS Go Privilege Escalation	2 months ago
CVE-2026-10584	Vulnerability in Amazon aws (CVE-2026-10584) vulnerability in Amazon aws (CVE-2026-10584). Confidential information can be exposed externally.	Medium	AWS Amazon Cloud Cwe 319	2 months ago
CVE-2026-10591	Vulnerability in Amazon aws (CVE-2026-10591) vulnerability in Amazon aws (CVE-2026-10591). Successful exploitation can lead to full system takeover.	High	AWS Amazon Cloud Cwe 732 +1	2 months ago
CVE-2026-9291	Unsafe Deserialization in amazon-braket-sdk (CVE-2026-9291) vulnerability in amazon-braket-sdk (CVE-2026-9291). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.117.0` or later.	High	AWS Amazon Cloud Insecure Deserialization +1	3 months ago
CVE-2026-9255	Vulnerability in Amazon aws (CVE-2026-9255) vulnerability in Amazon aws (CVE-2026-9255). Successful exploitation can lead to full system takeover.	High	AWS Amazon Cloud Cwe 862 +1	3 months ago
CVE-2026-9133	Vulnerability in Amazon aws (CVE-2026-9133) vulnerability in Amazon aws (CVE-2026-9133). Confidential information can be exposed externally. Exploitable via `PUT /api/aws/arn/validate`.	High	AWS Amazon Cloud Cwe 489	3 months ago
CVE-2026-8838	Code Injection in Amazon redshift-connector (CVE-2026-8838) code injection in Amazon redshift-connector (CVE-2026-8838). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.1.14` or later.	Critical	AWS Amazon Cloud Python +2	3 months ago
CVE-2026-8769	Vulnerability in @ai-sdk/provider-utils (CVE-2026-8769) vulnerability in @ai-sdk/provider-utils (CVE-2026-8769). Risk of unauthorized operations or information disclosure.	Medium	Cwe 400 Cwe 404 Vercel Ai	3 months ago
CVE-2026-8767	Command Injection in vercel (CVE-2026-8767) command injection in vercel (CVE-2026-8767). Risk of unauthorized operations or information disclosure.	Medium	Cwe 77 Cwe 78 Vercel Ai	3 months ago
CVE-2026-8768	SSRF (Server-Side Request Forgery) in vercel (CVE-2026-8768) SSRF in vercel (CVE-2026-8768). Risk of unauthorized operations or information disclosure.	High	Cwe 918 Vercel Ai	3 months ago
CVE-2026-8686	Out-of-Bounds Read in Amazon aws (CVE-2026-8686) vulnerability in Amazon aws (CVE-2026-8686). Risk of unauthorized operations or information disclosure.	High	AWS Amazon Cloud Denial of Service +3	3 months ago
CVE-2026-46359	phpMyFAQ has SQL Injection in CurrentUser::setTokenData through unescaped OAuth token fields phpMyFAQ has SQL Injection in CurrentUser::setTokenData through unescaped OAuth token fields	High	SQL Injection Cwe 89 phpMyFAQ PHP +1	3 months ago
CVE-2026-45773	Cross-Site Request Forgery (CSRF) in turbo (CVE-2026-45773) vulnerability in turbo (CVE-2026-45773). Data can be tampered with by attackers. Exploitable via ``turbo``. Mitigation: upgrade to `2.9.14` or later.	Medium	JavaScript Cross-Site Request Forgery Cwe 352 Cwe 384 +2	3 months ago
CVE-2026-46508	Command Injection in vercel (CVE-2026-46508) command injection in vercel (CVE-2026-46508). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.9.14000` or later.	High	JavaScript Cwe 77 Vercel Turborepo +1	3 months ago
CVE-2026-45772	Vulnerability in turbo (CVE-2026-45772) vulnerability in turbo (CVE-2026-45772). Successful exploitation can lead to full system takeover. Exploitable via ``yarnPath``. Mitigation: upgrade to `2.9.14` or later.	Critical	JavaScript Cwe 426 Vercel Turborepo	3 months ago
CVE-2026-8596	Vulnerability in Amazon sagemaker (CVE-2026-8596) vulnerability in Amazon sagemaker (CVE-2026-8596). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.8.0` or later.	High	AWS Amazon Cloud Python +1	3 months ago
CVE-2026-46300	Out-of-Bounds Write in Amazon aws (CVE-2026-46300) out-of-bounds write in Amazon aws (CVE-2026-46300). Successful exploitation can lead to full system takeover.	High	AWS Amazon Cloud Cwe 787 +6	3 months ago
CVE-2026-44479	Information Disclosure in vercel (CVE-2026-44479) vulnerability in vercel (CVE-2026-44479). Confidential information can be exposed externally. Exploitable via ``VERCEL_TOKEN``. Mitigation: upgrade to `52.0.1` or later.	Medium	Cwe 200 Cwe 532 Vercel	3 months ago
CVE-2026-45109	Vulnerability in next (CVE-2026-45109) vulnerability in next (CVE-2026-45109). Confidential information can be exposed externally. Exploitable via ``middleware.ts``. Mitigation: upgrade to `16.2.6` or later.	High	JavaScript React Cwe 288 Vercel +2	3 months ago
CVE-2026-44572	Vulnerability in next (CVE-2026-44572) vulnerability in next (CVE-2026-44572). Risk of unauthorized operations or information disclosure. Exploitable via ``Location``. Mitigation: upgrade to `16.2.5` or later.	Low	JavaScript React Denial of Service Cwe 349 +2	3 months ago
CVE-2026-44581	Cross-Site Scripting (XSS) in next (CVE-2026-44581) cross-site scripting in next (CVE-2026-44581). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `16.2.5` or later.	Medium	JavaScript React Cross-Site Scripting Cwe 79 +2	3 months ago
CVE-2026-44582	Vulnerability in next (CVE-2026-44582) vulnerability in next (CVE-2026-44582). Risk of unauthorized operations or information disclosure. Exploitable via ``_rsc``. Mitigation: upgrade to `16.2.5` or later.	Low	JavaScript React Cwe 328 Vercel +1	3 months ago
CVE-2026-44580	Cross-Site Scripting (XSS) in next (CVE-2026-44580) cross-site scripting in next (CVE-2026-44580). Risk of unauthorized operations or information disclosure. Exploitable via ``beforeInteractive``. Mitigation: upgrade to `16.2.5` or later.	Medium	JavaScript React Cross-Site Scripting Cwe 79 +2	3 months ago
CVE-2026-44579	Vulnerability in next (CVE-2026-44579) vulnerability in next (CVE-2026-44579). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `16.2.5` or later.	High	JavaScript React Cwe 770 Vercel +2	3 months ago
CVE-2026-44577	Vulnerability in next (CVE-2026-44577) vulnerability in next (CVE-2026-44577). Risk of unauthorized operations or information disclosure. Exploitable via ``images.localPatterns``. Mitigation: upgrade to `16.2.5` or later.	Medium	JavaScript React Cwe 770 Vercel +1	3 months ago
CVE-2026-44578	SSRF (Server-Side Request Forgery) in next (CVE-2026-44578) SSRF in next (CVE-2026-44578). Confidential information can be exposed externally. Mitigation: upgrade to `16.2.5` or later.	High	JavaScript React Cwe 918 Vercel +1	3 months ago
CVE-2026-44576	Vulnerability in next (CVE-2026-44576) vulnerability in next (CVE-2026-44576). Risk of unauthorized operations or information disclosure. Exploitable via ``RSC``. Mitigation: upgrade to `16.2.5` or later.	Medium	JavaScript React Cwe 436 Vercel +1	3 months ago
CVE-2026-44575	Vulnerability in next (CVE-2026-44575) vulnerability in next (CVE-2026-44575). Confidential information can be exposed externally. Mitigation: upgrade to `16.2.5` or later.	High	JavaScript React Cwe 288 Vercel +2	3 months ago
CVE-2026-44574	Vulnerability in next (CVE-2026-44574) vulnerability in next (CVE-2026-44574). Confidential information can be exposed externally. Mitigation: upgrade to `16.2.5` or later.	High	JavaScript React Cwe 288 Vercel +2	3 months ago
CVE-2026-44573	Authorization Flaw in next (CVE-2026-44573) vulnerability in next (CVE-2026-44573). Confidential information can be exposed externally. Exploitable via ``i18n``. Mitigation: upgrade to `16.2.5` or later.	High	JavaScript React Cwe 863 Vercel +2	3 months ago
CVE-2026-7461	Vulnerability in Amazon aws (CVE-2026-7461) vulnerability in Amazon aws (CVE-2026-7461). Risk of unauthorized operations or information disclosure.		AWS Amazon Cloud	3 months ago
CVE-2025-8904	Vulnerability in Amazon aws (CVE-2025-8904) vulnerability in Amazon aws (CVE-2025-8904). Risk of unauthorized operations or information disclosure.		AWS Amazon Cloud	3 months ago
CVE-2026-4269	Vulnerability in Amazon aws (CVE-2026-4269) vulnerability in Amazon aws (CVE-2026-4269). Successful exploitation can lead to full system takeover.	High	AWS Amazon Cloud Cwe 283 +2	3 months ago
CVE-2026-4428	Vulnerability in Amazon aws (CVE-2026-4428) vulnerability in Amazon aws (CVE-2026-4428). Risk of unauthorized operations or information disclosure.		AWS Amazon Cloud	3 months ago
CVE-2026-5429	Cross-Site Scripting (XSS) in Amazon aws (CVE-2026-5429) cross-site scripting in Amazon aws (CVE-2026-5429). Successful exploitation can lead to full system takeover.	High	AWS Amazon Cloud Cwe 79	3 months ago
CVE-2026-7791	Vulnerability in Amazon aws (CVE-2026-7791) vulnerability in Amazon aws (CVE-2026-7791). Risk of unauthorized operations or information disclosure.		AWS Amazon Cloud	3 months ago
CVE-2026-7425	Vulnerability in Amazon aws (CVE-2026-7425) vulnerability in Amazon aws (CVE-2026-7425). Risk of unauthorized operations or information disclosure.		AWS Amazon Cloud	3 months ago
CVE-2026-6966	Vulnerability in Amazon tough (CVE-2026-6966) vulnerability in Amazon tough (CVE-2026-6966). Data can be tampered with by attackers. Mitigation: upgrade to `0.22.0` or later.		AWS Amazon Cloud	3 months ago
CVE-2026-3494	Vulnerability in Amazon mysql-client (CVE-2026-3494) vulnerability in Amazon mysql-client (CVE-2026-3494). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.6.25, 10.11.18, 12.0.2` or later.	Medium	AWS Amazon Cloud Cwe 778 +3	3 months ago

Vulnerabilities

🍪 About cookies