Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Clear
ID Title
CVE-2026-42354 Vulnerability in sso (CVE-2026-42354)
vulnerability in sso (CVE-2026-42354). Confidential information can be exposed externally. Exploitable via ``Moved``.
CVE-2026-42352 SSRF (Server-Side Request Forgery) in CVE-2026-42352 (CVE-2026-42352)
SSRF in CVE-2026-42352 (CVE-2026-42352). Confidential information can be exposed externally.
CVE-2026-42453 Command Injection in CVE-2026-42453 (CVE-2026-42453)
command injection in CVE-2026-42453 (CVE-2026-42453). Risk of unauthorized operations or information disclosure.
CVE-2026-42345 SSRF (Server-Side Request Forgery) in CVE-2026-42345 (CVE-2026-42345)
SSRF in CVE-2026-42345 (CVE-2026-42345). Confidential information can be exposed externally.
CVE-2026-42343 Vulnerability in dos (CVE-2026-42343)
vulnerability in dos (CVE-2026-42343). Risk of unauthorized operations or information disclosure.
CVE-2026-42346 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-42346)
SSRF in ssrf (CVE-2026-42346). Confidential information can be exposed externally.
CVE-2026-42344 Vulnerability in CVE-2026-42344 (CVE-2026-42344)
vulnerability in CVE-2026-42344 (CVE-2026-42344). Confidential information can be exposed externally.
CVE-2026-42298 Code Injection in docker (CVE-2026-42298)
code injection in docker (CVE-2026-42298). Successful exploitation can lead to full system takeover. Exploitable via ``GITHUB_TOKEN``. Mitigation: upgrade to `>= 0` or later.
CVE-2026-42339 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-42339)
SSRF in ssrf (CVE-2026-42339). Risk of unauthorized operations or information disclosure.
CVE-2026-42302 Vulnerability in openai-sdk (CVE-2026-42302)
vulnerability in openai-sdk (CVE-2026-42302). Successful exploitation can lead to full system takeover. Exploitable via ``entrypoint.sh``.
CVE-2026-42307 OS Command Injection in CVE-2026-42307 (CVE-2026-42307)
OS command injection in CVE-2026-42307 (CVE-2026-42307). Risk of unauthorized operations or information disclosure.
CVE-2026-41432 Vulnerability in CVE-2026-41432 (CVE-2026-41432)
vulnerability in CVE-2026-41432 (CVE-2026-41432). Data can be tampered with by attackers.
CVE-2026-41682 Vulnerability in CVE-2026-41682 (CVE-2026-41682)
vulnerability in CVE-2026-41682 (CVE-2026-41682). Risk of unauthorized operations or information disclosure.
CVE-2026-42224 Cross-Site Scripting (XSS) in CVE-2026-42224 (CVE-2026-42224)
cross-site scripting in CVE-2026-42224 (CVE-2026-42224). Successful exploitation can lead to full system takeover.
CVE-2026-41520 Information Disclosure in CVE-2026-41520 (CVE-2026-41520)
vulnerability in CVE-2026-41520 (CVE-2026-41520). Confidential information can be exposed externally.
CVE-2026-42287 SQL Injection in sqli (CVE-2026-42287)
SQL injection in sqli (CVE-2026-42287). Risk of unauthorized operations or information disclosure.
CVE-2026-42286 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-42286)
vulnerability in csrf (CVE-2026-42286). Risk of unauthorized operations or information disclosure.
CVE-2026-42212 Vulnerability in csharp (CVE-2026-42212)
vulnerability in csharp (CVE-2026-42212). Risk of unauthorized operations or information disclosure.
CVE-2026-42213 Path Traversal in CVE-2026-42213 (CVE-2026-42213)
path traversal in CVE-2026-42213 (CVE-2026-42213). Risk of unauthorized operations or information disclosure.
CVE-2026-42195 Information Disclosure in CVE-2026-42195 (CVE-2026-42195)
vulnerability in CVE-2026-42195 (CVE-2026-42195). Risk of unauthorized operations or information disclosure.
CVE-2026-42205 Vulnerability in rails (CVE-2026-42205)
vulnerability in rails (CVE-2026-42205). Successful exploitation can lead to full system takeover.
CVE-2026-42193 Vulnerability in aws (CVE-2026-42193)
vulnerability in aws (CVE-2026-42193). Data can be tampered with by attackers.
CVE-2026-42192 Cross-Site Scripting (XSS) in react (CVE-2026-42192)
cross-site scripting in react (CVE-2026-42192). Risk of unauthorized operations or information disclosure.
CVE-2026-42199 Vulnerability in CVE-2026-42199 (CVE-2026-42199)
vulnerability in CVE-2026-42199 (CVE-2026-42199). Risk of unauthorized operations or information disclosure.
CVE-2026-42202 Vulnerability in CVE-2026-42202 (CVE-2026-42202)
vulnerability in CVE-2026-42202 (CVE-2026-42202). Data can be tampered with by attackers.
CVE-2026-41517 Unrestricted File Upload in CVE-2026-41517 (CVE-2026-41517)
vulnerability in CVE-2026-41517 (CVE-2026-41517). Risk of unauthorized operations or information disclosure.
CVE-2026-41486 Code Injection in CVE-2026-41486 (CVE-2026-41486)
code injection in CVE-2026-41486 (CVE-2026-41486). Risk of unauthorized operations or information disclosure.
CVE-2026-7807 Path Traversal in CVE-2026-7807 (CVE-2026-7807)
path traversal in CVE-2026-7807 (CVE-2026-7807). Successful exploitation can lead to full system takeover.
CVE-2026-42189 Vulnerability in CVE-2026-42189 (CVE-2026-42189)
vulnerability in CVE-2026-42189 (CVE-2026-42189). Risk of unauthorized operations or information disclosure.
CVE-2026-42185 Privilege Escalation in CVE-2026-42185 (CVE-2026-42185)
vulnerability in CVE-2026-42185 (CVE-2026-42185). Data can be tampered with by attackers.
CVE-2026-42180 SSRF (Server-Side Request Forgery) in CVE-2026-42180 (CVE-2026-42180)
SSRF in CVE-2026-42180 (CVE-2026-42180). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v3/post.`.
CVE-2026-42282 Vulnerability in CVE-2026-42282 (CVE-2026-42282)
vulnerability in CVE-2026-42282 (CVE-2026-42282). Risk of unauthorized operations or information disclosure.
CVE-2026-42190 Cross-Site Request Forgery (CSRF) in react (CVE-2026-42190)
vulnerability in react (CVE-2026-42190). Data can be tampered with by attackers.
CVE-2026-44694 Vulnerability in n8n-mcp (CVE-2026-44694)
vulnerability in n8n-mcp (CVE-2026-44694). Risk of unauthorized operations or information disclosure. Exploitable via ``N8N_API_URL``. Mitigation: upgrade to `2.50.2` or later.
CVE-2026-42181 SSRF (Server-Side Request Forgery) in CVE-2026-42181 (CVE-2026-42181)
SSRF in CVE-2026-42181 (CVE-2026-42181). Confidential information can be exposed externally.
CVE-2026-41495 Vulnerability in CVE-2026-41495 (CVE-2026-41495)
vulnerability in CVE-2026-41495 (CVE-2026-41495). Risk of unauthorized operations or information disclosure. Exploitable via `POST /mcp`.
CVE-2026-42160 Vulnerability in CVE-2026-42160 (CVE-2026-42160)
vulnerability in CVE-2026-42160 (CVE-2026-42160). Risk of unauthorized operations or information disclosure.
CVE-2026-42176 Vulnerability in CVE-2026-42176 (CVE-2026-42176)
vulnerability in CVE-2026-42176 (CVE-2026-42176). Confidential information can be exposed externally.
CVE-2026-41511 Vulnerability in c (CVE-2026-41511)
vulnerability in c (CVE-2026-41511). Risk of unauthorized operations or information disclosure.
CVE-2026-8178 Vulnerability in Amazon aws (CVE-2026-8178)
vulnerability in Amazon aws (CVE-2026-8178). Successful exploitation can lead to full system takeover.
CVE-2026-29202 Vulnerability in CVE-2026-29202 (CVE-2026-29202)
vulnerability in CVE-2026-29202 (CVE-2026-29202). Successful exploitation can lead to full system takeover. Exploitable via ``plugin``.
CVE-2026-29201 Vulnerability in CVE-2026-29201 (CVE-2026-29201)
vulnerability in CVE-2026-29201 (CVE-2026-29201). Risk of unauthorized operations or information disclosure.
CVE-2026-42028 Path Traversal in path-traversal (CVE-2026-42028)
path traversal in path-traversal (CVE-2026-42028). Risk of unauthorized operations or information disclosure.
CVE-2026-41889 SQL Injection in sqli (CVE-2026-41889)
SQL injection in sqli (CVE-2026-41889). Risk of unauthorized operations or information disclosure.
CVE-2026-42030 Vulnerability in CVE-2026-42030 (CVE-2026-42030)
vulnerability in CVE-2026-42030 (CVE-2026-42030). Risk of unauthorized operations or information disclosure.
CVE-2026-38360 Path Traversal in path-traversal (CVE-2026-38360)
path traversal in path-traversal (CVE-2026-38360). Successful exploitation can lead to full system takeover.
CVE-2026-41887 Path Traversal in CVE-2026-41887 (CVE-2026-41887)
path traversal in CVE-2026-41887 (CVE-2026-41887). Confidential information can be exposed externally.
CVE-2026-44499 Vulnerability in zebrad (CVE-2026-44499)
vulnerability in zebrad (CVE-2026-44499). Risk of unauthorized operations or information disclosure. Exploitable via ``inv``. Mitigation: upgrade to `4.4.0` or later.
CVE-2026-42794 Cross-Site Scripting (XSS) in CVE-2026-42794 (CVE-2026-42794)
cross-site scripting in CVE-2026-42794 (CVE-2026-42794). Risk of unauthorized operations or information disclosure.
CVE-2026-41886 Cross-Site Scripting (XSS) in CVE-2026-41886 (CVE-2026-41886)
cross-site scripting in CVE-2026-41886 (CVE-2026-41886). Data can be tampered with by attackers.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →