Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: cwe Tag: cwe-862 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-82475	iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow... iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow...	High	Cwe 862 Authentication Bypass	15 hours ago
CVE-2026-81346	Vulnerability in wordpress (CVE-2026-81346) vulnerability in wordpress (CVE-2026-81346). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 862	1 day ago
CVE-2026-19430	Vulnerability in wordpress (CVE-2026-19430) vulnerability in wordpress (CVE-2026-19430). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 862	1 day ago
CVE-2026-18233	Vulnerability in wordpress (CVE-2026-18233) vulnerability in wordpress (CVE-2026-18233). Data can be tampered with by attackers.	Medium	WordPress Cwe 862	1 day ago
CVE-2026-18234	Vulnerability in wordpress (CVE-2026-18234) vulnerability in wordpress (CVE-2026-18234). Data can be tampered with by attackers.	Medium	WordPress Cwe 862	1 day ago
CVE-2026-82279	Vulnerability in CVE-2026-82279 (CVE-2026-82279) vulnerability in CVE-2026-82279 (CVE-2026-82279). Data can be tampered with by attackers. Exploitable via `PATCH /team/apiKey`.	High	Cwe 862	1 day ago
CVE-2026-82273	Vulnerability in CVE-2026-82273 (CVE-2026-82273) vulnerability in CVE-2026-82273 (CVE-2026-82273). Confidential information can be exposed externally. Exploitable via `GET /api/memory/threads`.	Medium	Authentication Bypass Cwe 862	1 day ago
CVE-2026-82267	Vulnerability in CVE-2026-82267 (CVE-2026-82267) vulnerability in CVE-2026-82267 (CVE-2026-82267). Risk of unauthorized operations or information disclosure.	Medium	Cwe 862	1 day ago
CVE-2026-56100	Vulnerability in privilege-escalation (CVE-2026-56100) vulnerability in privilege-escalation (CVE-2026-56100). Confidential information can be exposed externally.	High	Privilege Escalation Cwe 862	1 day ago
CVE-2026-55547	Vulnerability in org.yamcs:yamcs-core (CVE-2026-55547) vulnerability in org.yamcs:yamcs-core (CVE-2026-55547). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/roles`. Mitigation: upgrade to `5.12.8` or later.	Medium	Java Cwe 285 Cwe 862	1 day ago
CVE-2026-55545	Vulnerability in org.yamcs:yamcs-core (CVE-2026-55545) vulnerability in org.yamcs:yamcs-core (CVE-2026-55545). Confidential information can be exposed externally. Exploitable via ``packets``. Mitigation: upgrade to `5.13.2` or later.	Medium	Cwe 862	1 day ago
CVE-2026-55521	Vulnerability in org.yamcs:yamcs-core (CVE-2026-55521) vulnerability in org.yamcs:yamcs-core (CVE-2026-55521). Successful exploitation can lead to full system takeover. Exploitable via ``SystemPrivilege``. Mitigation: upgrade to `5.12.8` or later.	High	Cwe 862	1 day ago
CVE-2026-55064	Vulnerability in code.vikunja.io/api (CVE-2026-55064) vulnerability in code.vikunja.io/api (CVE-2026-55064). Risk of unauthorized operations or information disclosure. Exploitable via ``ParentProjectID``. Mitigation: upgrade to `2.4.0` or later.	Medium	Cwe 862	1 day ago
CVE-2026-81767	Unauthenticated Broken Access Control in Simple Payment <= 2.5.2 versions. Unauthenticated Broken Access Control in Simple Payment <= 2.5.2 versions.	High	Cwe 862	1 day ago
CVE-2026-81759	Contributor Broken Access Control in WpEvently <= 5.5.0 versions. Contributor Broken Access Control in WpEvently <= 5.5.0 versions.	Medium	Cwe 862	1 day ago
CVE-2026-81761	Subscriber Broken Access Control in WpEvently <= 5.5.0 versions. Subscriber Broken Access Control in WpEvently <= 5.5.0 versions.	Medium	Cwe 862	1 day ago
CVE-2026-81284	Contributor Broken Access Control in ACF Extended <= 0.9.2.6 versions. Contributor Broken Access Control in ACF Extended <= 0.9.2.6 versions.	Medium	Cwe 862	1 day ago
CVE-2026-54746	Vulnerability in github.com/hatchet-dev/hatchet (CVE-2026-54746) vulnerability in github.com/hatchet-dev/hatchet (CVE-2026-54746). Risk of unauthorized operations or information disclosure. Exploitable via ``Dispatcher``. Mitigation: upgrade to `0.91.2` or later.	Medium	Denial of Service Cwe 639 Cwe 862	1 day ago
CVE-2026-82242	Vulnerability in CVE-2026-82242 (CVE-2026-82242) vulnerability in CVE-2026-82242 (CVE-2026-82242). Data can be tampered with by attackers. Exploitable via `POST /api/resources/duplicate`.	High	Cwe 862	1 day ago
CVE-2026-82245	Vulnerability in CVE-2026-82245 (CVE-2026-82245) vulnerability in CVE-2026-82245 (CVE-2026-82245). Data can be tampered with by attackers.	High	Cwe 862	1 day ago
CVE-2026-82239	Vulnerability in CVE-2026-82239 (CVE-2026-82239) vulnerability in CVE-2026-82239 (CVE-2026-82239). Confidential information can be exposed externally. Exploitable via `POST /api/datasources/query`.	High	Cwe 862	1 day ago
CVE-2026-82240	Vulnerability in CVE-2026-82240 (CVE-2026-82240) vulnerability in CVE-2026-82240 (CVE-2026-82240). Confidential information can be exposed externally.	High	Cwe 862	1 day ago
CVE-2026-77701	Vulnerability in wordpress (CVE-2026-77701) vulnerability in wordpress (CVE-2026-77701). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 862	2 days ago
CVE-2026-12514	Vulnerability in wordpress (CVE-2026-12514) vulnerability in wordpress (CVE-2026-12514). Risk of unauthorized operations or information disclosure.	Medium	PHP WordPress Cwe 862	2 days ago
CVE-2026-75339	Vulnerability in CVE-2026-75339 (CVE-2026-75339) vulnerability in CVE-2026-75339 (CVE-2026-75339). Successful exploitation can lead to full system takeover.	High	Cwe 862	2 days ago
CVE-2026-75813	Vulnerability in CVE-2026-75813 (CVE-2026-75813) vulnerability in CVE-2026-75813 (CVE-2026-75813). Data can be tampered with by attackers.	High	Cwe 862	2 days ago
CVE-2026-68929	Vulnerability in CVE-2026-68929 (CVE-2026-68929) vulnerability in CVE-2026-68929 (CVE-2026-68929). Risk of unauthorized operations or information disclosure.		Cwe 306 Cwe 862	2 days ago
CVE-2026-65931	Vulnerability in CVE-2026-65931 (CVE-2026-65931) vulnerability in CVE-2026-65931 (CVE-2026-65931). Risk of unauthorized operations or information disclosure. Exploitable via `POST /index.php/admin/menuentries/sa/create`.		PHP Cwe 862	2 days ago
CVE-2026-81819	Vulnerability in CVE-2026-81819 (CVE-2026-81819) vulnerability in CVE-2026-81819 (CVE-2026-81819). Risk of unauthorized operations or information disclosure.		Cwe 862	2 days ago
CVE-2026-81335	Vulnerability in CVE-2026-81335 (CVE-2026-81335) vulnerability in CVE-2026-81335 (CVE-2026-81335). Confidential information can be exposed externally.	High	Cwe 862	2 days ago
CVE-2026-81272	Editor Broken Access Control in FluentPlayer Pro <= 1.3.2 versions. Editor Broken Access Control in FluentPlayer Pro <= 1.3.2 versions.	Medium	Cwe 862	2 days ago
CVE-2026-81276	Unauthenticated Broken Access Control in Kali Forms <= 2.4.23 versions. Unauthenticated Broken Access Control in Kali Forms <= 2.4.23 versions.	Medium	Cwe 862	2 days ago
CVE-2026-81279	Subscriber Broken Access Control in Push Notification for Post and BuddyPress <= 3.20 versions. Subscriber Broken Access Control in Push Notification for Post and BuddyPress <= 3.20 versions.	Medium	Cwe 862	2 days ago
CVE-2026-81274	Subscriber Broken Access Control in Ditty <= 3.1.67 versions. Subscriber Broken Access Control in Ditty <= 3.1.67 versions.	Medium	Cwe 862	2 days ago
CVE-2026-80433	Subscriber Sensitive Data Exposure in SureFeedback Client Site <= 1.2.12 versions. Subscriber Sensitive Data Exposure in SureFeedback Client Site <= 1.2.12 versions.	High	Cwe 862	2 days ago
CVE-2026-27330	Unauthenticated Broken Access Control in Mobile App for WooCommerce <= 0.4.62 versions. Unauthenticated Broken Access Control in Mobile App for WooCommerce <= 0.4.62 versions.	High	Cwe 862	2 days ago
CVE-2026-78137	Vulnerability in wordpress (CVE-2026-78137) vulnerability in wordpress (CVE-2026-78137). Data can be tampered with by attackers.	High	WordPress Cwe 862	3 days ago
CVE-2026-13414	Vulnerability in wordpress (CVE-2026-13414) vulnerability in wordpress (CVE-2026-13414). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 862	3 days ago
CVE-2026-77507	Information Disclosure in CVE-2026-77507 (CVE-2026-77507) vulnerability in CVE-2026-77507 (CVE-2026-77507). Risk of unauthorized operations or information disclosure.	Medium	Cwe 200 Cwe 862 Cwe 863	3 days ago
CVE-2026-80348	Vulnerability in CVE-2026-80348 (CVE-2026-80348) vulnerability in CVE-2026-80348 (CVE-2026-80348). Successful exploitation can lead to full system takeover.	High	JavaScript Cwe 862	3 days ago
CVE-2026-81035	Vulnerability in CVE-2026-81035 (CVE-2026-81035) vulnerability in CVE-2026-81035 (CVE-2026-81035). Data can be tampered with by attackers.	High	Cwe 862	3 days ago
CVE-2026-81027	Vulnerability in c (CVE-2026-81027) vulnerability in c (CVE-2026-81027). Confidential information can be exposed externally. Exploitable via `Authorization header`.	High	C Cwe 862	3 days ago
CVE-2026-54569	Vulnerability in senaite.core (CVE-2026-54569) vulnerability in senaite.core (CVE-2026-54569). Successful exploitation can lead to full system takeover. Exploitable via `GET /senaite/bika_setup/`.	Critical	Python Remote Code Execution Cwe 95 Cwe 862	3 days ago
CVE-2026-54523	Vulnerability in github.com/kyverno/kyverno (CVE-2026-54523) vulnerability in github.com/kyverno/kyverno (CVE-2026-54523). Confidential information can be exposed externally. Exploitable via ``NamespacedMutatingPolicy``. Mitigation: upgrade to `1.18.2` or later.	Critical	Privilege Escalation Cwe 862	3 days ago
CVE-2026-80346	Vulnerability in CVE-2026-80346 (CVE-2026-80346) vulnerability in CVE-2026-80346 (CVE-2026-80346). Data can be tampered with by attackers.	High	Cwe 862	3 days ago
CVE-2026-18431	Vulnerability in wordpress (CVE-2026-18431) vulnerability in wordpress (CVE-2026-18431). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress Remote Code Execution Cwe 862	4 days ago
CVE-2026-77694	Vulnerability in wordpress (CVE-2026-77694) vulnerability in wordpress (CVE-2026-77694). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 862	4 days ago
CVE-2026-75798	Vulnerability in wordpress (CVE-2026-75798) vulnerability in wordpress (CVE-2026-75798). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 862	4 days ago
CVE-2026-74928	Vulnerability in wordpress (CVE-2026-74928) vulnerability in wordpress (CVE-2026-74928). Data can be tampered with by attackers.	High	WordPress Cwe 862	4 days ago
CVE-2026-14550	Vulnerability in wordpress (CVE-2026-14550) vulnerability in wordpress (CVE-2026-14550). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 862	4 days ago

Vulnerabilities

🍪 About cookies