Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-66109 |
|
Vulnerability in jvn (CVE-2026-66109)
vulnerability in jvn (CVE-2026-66109). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59561 |
|
OS Command Injection in jvn (CVE-2026-59561)
OS command injection in jvn (CVE-2026-59561). Successful exploitation can lead to full system takeover.
|
| CVE-2026-76131 |
|
Vulnerability in jvn (CVE-2026-76131)
vulnerability in jvn (CVE-2026-76131). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66358 |
|
Cross-Site Scripting (XSS) in jvn (CVE-2026-66358)
cross-site scripting in jvn (CVE-2026-66358). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-71368 |
|
Cross-Site Scripting (XSS) in jvn (CVE-2026-71368)
cross-site scripting in jvn (CVE-2026-71368). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-69223 |
|
SSRF (Server-Side Request Forgery) in apache (CVE-2026-69223)
SSRF in apache (CVE-2026-69223). Confidential information can be exposed externally.
|
| CVE-2026-6726 |
|
Vulnerability in jvn (CVE-2026-6726)
vulnerability in jvn (CVE-2026-6726). Confidential information can be exposed externally.
|
| CVE-2026-13133 |
|
Vulnerability in jvn (CVE-2026-13133)
vulnerability in jvn (CVE-2026-13133). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20272 |
|
Vulnerability in cisco (CVE-2026-20272)
vulnerability in cisco (CVE-2026-20272). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20267 |
|
Vulnerability in Cisco ios-xe (CVE-2026-20267)
vulnerability in Cisco ios-xe (CVE-2026-20267). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20269 |
|
Vulnerability in cisco (CVE-2026-20269)
vulnerability in cisco (CVE-2026-20269). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20268 |
|
Buffer Overflow in cisco (CVE-2026-20268)
vulnerability in cisco (CVE-2026-20268). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20273 |
|
Vulnerability in Cisco ios-xe (CVE-2026-20273)
vulnerability in Cisco ios-xe (CVE-2026-20273). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54876 |
|
Vulnerability in dos (CVE-2026-54876)
vulnerability in dos (CVE-2026-54876). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14304 |
|
XXE (XML External Entity) in eclipse (CVE-2026-14304)
vulnerability in eclipse (CVE-2026-14304). Confidential information can be exposed externally.
|
| CVE-2026-67243 |
|
Unrestricted File Upload in jvn (CVE-2026-67243)
vulnerability in jvn (CVE-2026-67243). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60011 |
|
Vulnerability in jvn (CVE-2026-60011)
vulnerability in jvn (CVE-2026-60011). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62416 |
|
Vulnerability in dos (CVE-2026-62416)
vulnerability in dos (CVE-2026-62416). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57279 |
|
Cross-Site Scripting (XSS) in jvn (CVE-2026-57279)
cross-site scripting in jvn (CVE-2026-57279). Data can be tampered with by attackers.
|
| CVE-2026-4793 |
|
Vulnerability in jvn (CVE-2026-4793)
vulnerability in jvn (CVE-2026-4793). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18556 KEV |
|
[KEV] Vulnerability in N-able n-central (CVE-2026-18556)
vulnerability in N-able n-central (CVE-2026-18556). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
| CVE-2026-66299 |
|
Vulnerability in apache (CVE-2026-66299)
vulnerability in apache (CVE-2026-66299). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44387 |
|
Cross-Site Scripting (XSS) in jvn (CVE-2026-44387)
cross-site scripting in jvn (CVE-2026-44387). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53667 |
|
Cross-Site Scripting (XSS) in react-router (CVE-2026-53667)
cross-site scripting in react-router (CVE-2026-53667). Confidential information can be exposed externally. Mitigation: upgrade to `7.18.0` or later.
|
| CVE-2026-63226 |
|
Vulnerability in jvn (CVE-2026-63226)
vulnerability in jvn (CVE-2026-63226). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10723 |
|
Vulnerability in jvn (CVE-2026-10723)
vulnerability in jvn (CVE-2026-10723). Data can be tampered with by attackers.
|
| CVE-2026-55399 |
|
Vulnerability in dos (CVE-2026-55399)
vulnerability in dos (CVE-2026-55399). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55398 |
|
Buffer Overflow in dos (CVE-2026-55398)
vulnerability in dos (CVE-2026-55398). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40955 |
|
Vulnerability in dos (CVE-2026-40955)
vulnerability in dos (CVE-2026-40955). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40952 |
|
Vulnerability in absolute (CVE-2026-40952)
vulnerability in absolute (CVE-2026-40952). Successful exploitation can lead to full system takeover.
|
| CVE-2026-40956 |
|
Information Disclosure in absolute (CVE-2026-40956)
vulnerability in absolute (CVE-2026-40956). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40958 |
|
Vulnerability in dos (CVE-2026-40958)
vulnerability in dos (CVE-2026-40958). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40953 |
|
Out-of-Bounds Write in dos (CVE-2026-40953)
out-of-bounds write in dos (CVE-2026-40953). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40954 |
|
Vulnerability in dos (CVE-2026-40954)
vulnerability in dos (CVE-2026-40954). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33443 |
|
Vulnerability in dos (CVE-2026-33443)
vulnerability in dos (CVE-2026-33443). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20156 |
|
Buffer Overflow in cisco (CVE-2026-20156)
vulnerability in cisco (CVE-2026-20156). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20153 |
|
Vulnerability in cisco (CVE-2026-20153)
vulnerability in cisco (CVE-2026-20153). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20158 |
|
Vulnerability in cisco (CVE-2026-20158)
vulnerability in cisco (CVE-2026-20158). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20187 |
|
Vulnerability in cisco (CVE-2026-20187)
vulnerability in cisco (CVE-2026-20187). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20150 |
|
Vulnerability in Cisco roomos (CVE-2026-20150)
vulnerability in Cisco roomos (CVE-2026-20150). Successful exploitation can lead to full system takeover.
|
| CVE-2026-42936 |
|
Vulnerability in jvn (CVE-2026-42936)
vulnerability in jvn (CVE-2026-42936). Successful exploitation can lead to full system takeover.
|
| CVE-2025-6947 |
|
Cross-Site Scripting (XSS) in jvn (CVE-2025-6947)
cross-site scripting in jvn (CVE-2025-6947). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-1071 |
|
Cross-Site Scripting (XSS) in jvn (CVE-2025-1071)
cross-site scripting in jvn (CVE-2025-1071). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-13938 |
|
Cross-Site Scripting (XSS) in jvn (CVE-2025-13938)
cross-site scripting in jvn (CVE-2025-13938). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-13937 |
|
Cross-Site Scripting (XSS) in jvn (CVE-2025-13937)
cross-site scripting in jvn (CVE-2025-13937). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-13936 |
|
Cross-Site Scripting (XSS) in jvn (CVE-2025-13936)
cross-site scripting in jvn (CVE-2025-13936). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13236 |
|
Vulnerability in drupal/ai_agents (CVE-2026-13236)
vulnerability in drupal/ai_agents (CVE-2026-13236). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.1.4, 1.2.5, 1.3.1` or later.
|
| CVE-2026-56437 |
|
Vulnerability in jvn (CVE-2026-56437)
vulnerability in jvn (CVE-2026-56437). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48828 |
|
Information Disclosure in apache (CVE-2026-48828)
vulnerability in apache (CVE-2026-48828). Confidential information can be exposed externally. Exploitable via ``should_hide_value_for_key``.
|
| CVE-2026-33264 |
|
Unsafe Deserialization in apache (CVE-2026-33264)
vulnerability in apache (CVE-2026-33264). Successful exploitation can lead to full system takeover.
|