Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-72191 |
|
Vulnerability in c (CVE-2026-72191)
vulnerability in c (CVE-2026-72191). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72139 |
|
Vulnerability in c (CVE-2026-72139)
vulnerability in c (CVE-2026-72139). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72098 |
|
Vulnerability in c (CVE-2026-72098)
vulnerability in c (CVE-2026-72098). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74350 |
|
Vulnerability in c (CVE-2026-74350)
vulnerability in c (CVE-2026-74350). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74345 |
|
Vulnerability in c (CVE-2026-74345)
vulnerability in c (CVE-2026-74345). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74268 |
|
Vulnerability in c (CVE-2026-74268)
vulnerability in c (CVE-2026-74268). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74267 |
|
Vulnerability in c (CVE-2026-74267)
vulnerability in c (CVE-2026-74267). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72491 |
|
Vulnerability in c (CVE-2026-72491)
vulnerability in c (CVE-2026-72491). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72408 |
|
Vulnerability in c (CVE-2026-72408)
vulnerability in c (CVE-2026-72408). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72299 |
|
Vulnerability in c (CVE-2026-72299)
vulnerability in c (CVE-2026-72299). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72288 |
|
Vulnerability in c (CVE-2026-72288)
vulnerability in c (CVE-2026-72288). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72251 |
|
Vulnerability in c (CVE-2026-72251)
vulnerability in c (CVE-2026-72251). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14484 |
|
Path Traversal in wordpress (CVE-2026-14484)
path traversal in wordpress (CVE-2026-14484). Data can be tampered with by attackers.
|
| CVE-2026-73678 |
|
Code Injection in c (CVE-2026-73678)
code injection in c (CVE-2026-73678). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/v1/responses/`.
|
| CVE-2026-73849 |
|
Vulnerability in CVE-2026-73849 (CVE-2026-73849)
vulnerability in CVE-2026-73849 (CVE-2026-73849). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73532 |
|
Vulnerability in CVE-2026-73532 (CVE-2026-73532)
vulnerability in CVE-2026-73532 (CVE-2026-73532). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73533 |
|
Vulnerability in CVE-2026-73533 (CVE-2026-73533)
vulnerability in CVE-2026-73533 (CVE-2026-73533). Successful exploitation can lead to full system takeover.
|
| CVE-2026-28149 |
|
Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions.
Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions.
|
| CVE-2026-49827 |
|
Vulnerability in CVE-2026-49827 (CVE-2026-49827)
vulnerability in CVE-2026-49827 (CVE-2026-49827). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49819 |
|
OS Command Injection in c (CVE-2026-49819)
OS command injection in c (CVE-2026-49819). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/upsnap/init-superuser`.
|
| CVE-2026-49481 |
|
OS Command Injection in c (CVE-2026-49481)
OS command injection in c (CVE-2026-49481). Confidential information can be exposed externally.
|
| CVE-2026-73299 |
|
Code Injection in CVE-2026-73299 (CVE-2026-73299)
code injection in CVE-2026-73299 (CVE-2026-73299). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73263 |
|
OS Command Injection in CVE-2026-73263 (CVE-2026-73263)
OS command injection in CVE-2026-73263 (CVE-2026-73263). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/v1/providers/{id}/connection`.
|
| CVE-2026-18391 |
|
Unrestricted File Upload in wordpress (CVE-2026-18391)
vulnerability in wordpress (CVE-2026-18391). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15039 |
|
Unrestricted File Upload in wordpress (CVE-2026-15039)
vulnerability in wordpress (CVE-2026-15039). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73034 |
|
Path Traversal in path-traversal (CVE-2026-73034)
path traversal in path-traversal (CVE-2026-73034). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73032 |
|
Code Injection in CVE-2026-73032 (CVE-2026-73032)
code injection in CVE-2026-73032 (CVE-2026-73032). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48381 |
|
SQL Injection in c (CVE-2026-48381)
SQL injection in c (CVE-2026-48381). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72748 |
|
Vulnerability in dos (CVE-2026-72748)
vulnerability in dos (CVE-2026-72748). Data can be tampered with by attackers.
|
| CVE-2026-72878 |
|
OS Command Injection in c (CVE-2026-72878)
OS command injection in c (CVE-2026-72878). Confidential information can be exposed externally. Mitigation: upgrade to `0.29.13` or later.
|
| CVE-2026-72865 |
|
OS Command Injection in c (CVE-2026-72865)
OS command injection in c (CVE-2026-72865). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72869 |
|
Command Injection in CVE-2026-72869 (CVE-2026-72869)
command injection in CVE-2026-72869 (CVE-2026-72869). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47754 |
|
Path Traversal in tomcat (CVE-2026-47754)
path traversal in tomcat (CVE-2026-47754). Confidential information can be exposed externally. Exploitable via ``archiveEntryName``.
|
| CVE-2026-18412 |
|
Vulnerability in path-traversal (CVE-2026-18412)
vulnerability in path-traversal (CVE-2026-18412). Confidential information can be exposed externally.
|
| CVE-2026-63106 |
|
SQL Injection in sqli (CVE-2026-63106)
SQL injection in sqli (CVE-2026-63106). Successful exploitation can lead to full system takeover.
|
| CVE-2026-68159 |
|
Vulnerability in c (CVE-2026-68159)
vulnerability in c (CVE-2026-68159). Successful exploitation can lead to full system takeover.
|
| CVE-2026-68124 |
|
Vulnerability in c (CVE-2026-68124)
vulnerability in c (CVE-2026-68124). Successful exploitation can lead to full system takeover.
|
| CVE-2026-68117 |
|
Vulnerability in c (CVE-2026-68117)
vulnerability in c (CVE-2026-68117). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72592 |
|
Unrestricted File Upload in CVE-2026-72592 (CVE-2026-72592)
vulnerability in CVE-2026-72592 (CVE-2026-72592). Successful exploitation can lead to full system takeover.
|
| CVE-2026-71991 |
|
OS Command Injection in c (CVE-2026-71991)
OS command injection in c (CVE-2026-71991). Successful exploitation can lead to full system takeover.
|
| CVE-2026-71949 |
|
OS Command Injection in c (CVE-2026-71949)
OS command injection in c (CVE-2026-71949). Successful exploitation can lead to full system takeover.
|
| CVE-2026-71950 |
|
OS Command Injection in c (CVE-2026-71950)
OS command injection in c (CVE-2026-71950). Successful exploitation can lead to full system takeover.
|
| CVE-2026-71951 |
|
OS Command Injection in c (CVE-2026-71951)
OS command injection in c (CVE-2026-71951). Successful exploitation can lead to full system takeover.
|
| CVE-2026-68082 |
|
Vulnerability in c (CVE-2026-68082)
vulnerability in c (CVE-2026-68082). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14526 |
|
Privilege Escalation in wordpress (CVE-2026-14526)
vulnerability in wordpress (CVE-2026-14526). Successful exploitation can lead to full system takeover.
|
| CVE-2026-71851 |
|
Vulnerability in crypto-js (CVE-2026-71851)
vulnerability in crypto-js (CVE-2026-71851). Successful exploitation can lead to full system takeover. Exploitable via ``crypto``. Mitigation: upgrade to `4.0.0` or later.
|
| CVE-2026-71558 |
|
Unsafe Deserialization in c (CVE-2026-71558)
vulnerability in c (CVE-2026-71558). Successful exploitation can lead to full system takeover.
|
| CVE-2026-71560 |
|
Out-of-Bounds Read in c (CVE-2026-71560)
vulnerability in c (CVE-2026-71560). Data can be tampered with by attackers.
|
| CVE-2026-16258 |
|
Unsafe Deserialization in wordpress (CVE-2026-16258)
vulnerability in wordpress (CVE-2026-16258). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70558 |
|
Unrestricted File Upload in CVE-2026-70558 (CVE-2026-70558)
vulnerability in CVE-2026-70558 (CVE-2026-70558). Successful exploitation can lead to full system takeover. Exploitable via `POST /download/uploadFromRsByLocal`.
|