Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-56776 |
|
Vulnerability in n8n (CVE-2026-56776)
vulnerability in n8n (CVE-2026-56776). Risk of unauthorized operations or information disclosure. Exploitable via `POST /workflows/{workflowId}/test-runs/new`. Mitigation: upgrade to `2.25.7` or later.
|
| CVE-2026-56360 |
|
Vulnerability in n8n (CVE-2026-56360)
vulnerability in n8n (CVE-2026-56360). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.6.2` or later.
|
| CVE-2026-56359 |
|
Cross-Site Scripting (XSS) in n8n (CVE-2026-56359)
cross-site scripting in n8n (CVE-2026-56359). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.6.4` or later.
|
| CVE-2026-56362 |
|
Vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-56362)
vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-56362). Risk of unauthorized operations or information disclosure. Exploitable via ``OpenPixelCache``. Mitigation: upgrade to `14.10.3` or later.
|
| CVE-2026-56374 |
|
Out-of-Bounds Read in Magick.NET-Q16-AnyCPU (CVE-2026-56374)
vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-56374). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.12.0` or later.
|
| CVE-2026-22927 |
|
Omnissa Workspace ONE® Tunnel for Windows addresses a Local Privilege Escalation Vulnerability.
Omnissa Workspace ONE® Tunnel for Windows addresses a Local Privilege Escalation Vulnerability.
|
| CVE-2026-10698 |
|
Vulnerability in progress (CVE-2026-10698)
vulnerability in progress (CVE-2026-10698). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10699 |
|
Vulnerability in progress (CVE-2026-10699)
vulnerability in progress (CVE-2026-10699). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11903 |
|
Cross-Site Scripting (XSS) in progress (CVE-2026-11903)
cross-site scripting in progress (CVE-2026-11903). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60092 |
|
Cross-Site Scripting (XSS) in wwbn/avideo (CVE-2026-60092)
cross-site scripting in wwbn/avideo (CVE-2026-60092). Risk of unauthorized operations or information disclosure. Exploitable via ``meet_join_log.user_agent``.
|
| CVE-2026-59257 |
|
SQL Injection in n8n (CVE-2026-59257)
SQL injection in n8n (CVE-2026-59257). Successful exploitation can lead to full system takeover. Exploitable via ``executeQuery``. Mitigation: upgrade to `2.27.4` or later.
|
| CVE-2026-59253 |
|
Vulnerability in n8n (CVE-2026-59253)
vulnerability in n8n (CVE-2026-59253). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.28.0` or later.
|
| CVE-2026-58654 |
|
Unrestricted File Upload in path-traversal (CVE-2026-58654)
vulnerability in path-traversal (CVE-2026-58654). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.1` or later.
|
| CVE-2026-58480 |
|
Unrestricted File Upload in wordpress (CVE-2026-58480)
vulnerability in wordpress (CVE-2026-58480). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56778 |
|
Authorization Flaw in n8n (CVE-2026-56778)
vulnerability in n8n (CVE-2026-56778). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.25.7` or later.
|
| CVE-2026-56775 |
|
Authorization Flaw in n8n (CVE-2026-56775)
vulnerability in n8n (CVE-2026-56775). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.25.7` or later.
|
| CVE-2026-41042 |
|
Vulnerability in apache (CVE-2026-41042)
vulnerability in apache (CVE-2026-41042). Confidential information can be exposed externally.
|
| CVE-2026-57260 |
|
Out-of-Bounds Write in foxit (CVE-2026-57260)
out-of-bounds write in foxit (CVE-2026-57260). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57259 |
|
XXE (XML External Entity) in foxit (CVE-2026-57259)
vulnerability in foxit (CVE-2026-57259). Confidential information can be exposed externally.
|
| CVE-2026-57258 |
|
Out-of-Bounds Read in foxit (CVE-2026-57258)
vulnerability in foxit (CVE-2026-57258). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57250 |
|
Use-After-Free in foxit (CVE-2026-57250)
vulnerability in foxit (CVE-2026-57250). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57251 |
|
Vulnerability in foxit (CVE-2026-57251)
vulnerability in foxit (CVE-2026-57251). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57252 |
|
Use-After-Free in foxit (CVE-2026-57252)
vulnerability in foxit (CVE-2026-57252). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57253 |
|
Out-of-Bounds Read in foxit (CVE-2026-57253)
vulnerability in foxit (CVE-2026-57253). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57254 |
|
Vulnerability in foxit (CVE-2026-57254)
vulnerability in foxit (CVE-2026-57254). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57255 |
|
Out-of-Bounds Read in foxit (CVE-2026-57255)
vulnerability in foxit (CVE-2026-57255). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57256 |
|
Use-After-Free in foxit (CVE-2026-57256)
vulnerability in foxit (CVE-2026-57256). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57257 |
|
Out-of-Bounds Read in foxit (CVE-2026-57257)
vulnerability in foxit (CVE-2026-57257). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57241 |
|
Out-of-Bounds Read in foxit (CVE-2026-57241)
vulnerability in foxit (CVE-2026-57241). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57242 |
|
Use-After-Free in foxit (CVE-2026-57242)
vulnerability in foxit (CVE-2026-57242). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57243 |
|
Out-of-Bounds Read in foxit (CVE-2026-57243)
vulnerability in foxit (CVE-2026-57243). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57244 |
|
Use-After-Free in foxit (CVE-2026-57244)
vulnerability in foxit (CVE-2026-57244). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57245 |
|
Use-After-Free in foxit (CVE-2026-57245)
vulnerability in foxit (CVE-2026-57245). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57246 |
|
Vulnerability in foxit (CVE-2026-57246)
vulnerability in foxit (CVE-2026-57246). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57247 |
|
Use-After-Free in foxit (CVE-2026-57247)
vulnerability in foxit (CVE-2026-57247). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57248 |
|
Vulnerability in foxit (CVE-2026-57248)
vulnerability in foxit (CVE-2026-57248). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57249 |
|
Use-After-Free in foxit (CVE-2026-57249)
vulnerability in foxit (CVE-2026-57249). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57237 |
|
Use-After-Free in foxit (CVE-2026-57237)
vulnerability in foxit (CVE-2026-57237). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57238 |
|
Use-After-Free in foxit (CVE-2026-57238)
vulnerability in foxit (CVE-2026-57238). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57239 |
|
Vulnerability in foxit (CVE-2026-57239)
vulnerability in foxit (CVE-2026-57239). Confidential information can be exposed externally.
|
| CVE-2026-57240 |
|
Use-After-Free in foxit (CVE-2026-57240)
vulnerability in foxit (CVE-2026-57240). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13128 |
|
Use-After-Free in foxit (CVE-2026-13128)
vulnerability in foxit (CVE-2026-13128). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13129 |
|
Use-After-Free in foxit (CVE-2026-13129)
vulnerability in foxit (CVE-2026-13129). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13127 |
|
Use-After-Free in foxit (CVE-2026-13127)
vulnerability in foxit (CVE-2026-13127). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13126 |
|
Use-After-Free in foxit (CVE-2026-13126)
vulnerability in foxit (CVE-2026-13126). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12378 |
|
Vulnerability in wordpress (CVE-2026-12378)
vulnerability in wordpress (CVE-2026-12378). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9701 |
|
Vulnerability in wordpress (CVE-2026-9701)
vulnerability in wordpress (CVE-2026-9701). Successful exploitation can lead to full system takeover. Exploitable via ``eventer_verification_code``.
|
| CVE-2026-14487 |
|
Path Traversal in wordpress (CVE-2026-14487)
path traversal in wordpress (CVE-2026-14487). Data can be tampered with by attackers.
|
| CVE-2026-28378 |
|
Vulnerability in grafana (CVE-2026-28378)
vulnerability in grafana (CVE-2026-28378). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.6.14, 12.1.10, 12.2.8, 12.3.6, 12.4.1` or later.
|
| CVE-2026-48958 |
|
Vulnerability in joomla (CVE-2026-48958)
vulnerability in joomla (CVE-2026-48958). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.4.7, 6.1.2` or later.
|