Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-46409 |
|
Code Injection in CVE-2026-46409 (CVE-2026-46409)
code injection in CVE-2026-46409 (CVE-2026-46409). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65310 |
|
Vulnerability in CVE-2026-65310 (CVE-2026-65310)
vulnerability in CVE-2026-65310 (CVE-2026-65310). Confidential information can be exposed externally.
|
| CVE-2026-59148 |
|
Vulnerability in express (CVE-2026-59148)
vulnerability in express (CVE-2026-59148). Successful exploitation can lead to full system takeover. Exploitable via `PUT /mockoon-admin/environment`.
|
| CVE-2026-59726 |
|
OS Command Injection in CVE-2026-59726 (CVE-2026-59726)
OS command injection in CVE-2026-59726 (CVE-2026-59726). Successful exploitation can lead to full system takeover. Exploitable via `POST /mcp`.
|
| CVE-2026-54753 |
|
Vulnerability in nx (CVE-2026-54753)
vulnerability in nx (CVE-2026-54753). Confidential information can be exposed externally. Exploitable via `GET /help`. Mitigation: upgrade to `23.0.0-beta.2` or later.
|
| CVE-2026-46685 |
|
Vulnerability in CVE-2026-46685 (CVE-2026-46685)
vulnerability in CVE-2026-46685 (CVE-2026-46685). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.0-beta.2` or later.
|
| CVE-2026-8948 |
|
Vulnerability in mozilla (CVE-2026-8948)
vulnerability in mozilla (CVE-2026-8948). Confidential information can be exposed externally.
|
| CVE-2026-44895 |
|
Vulnerability in @yoda.digital/gitlab-mcp-server (CVE-2026-44895)
vulnerability in @yoda.digital/gitlab-mcp-server (CVE-2026-44895). Risk of unauthorized operations or information disclosure. Exploitable via `GET /sse`. Mitigation: upgrade to `0.6.0` or later.
|
| CVE-2026-34227 |
|
Vulnerability in github.com/bishopfox/sliver (CVE-2026-34227)
vulnerability in github.com/bishopfox/sliver (CVE-2026-34227). Successful exploitation can lead to full system takeover. Exploitable via ``ntds.dit``. Mitigation: upgrade to `1.7.4` or later.
|
| CVE-2026-34200 |
|
Vulnerability in nhost (CVE-2026-34200)
vulnerability in nhost (CVE-2026-34200). Successful exploitation can lead to full system takeover.
|
| CVE-2020-36851 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2020-36851)
SSRF in ssrf (CVE-2020-36851). Risk of unauthorized operations or information disclosure.
|