Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Clear
ID Title
CVE-2026-62207 Vulnerability in openclaw (CVE-2026-62207)
vulnerability in openclaw (CVE-2026-62207). Successful exploitation can lead to full system takeover.
CVE-2026-62209 Authorization Flaw in openclaw (CVE-2026-62209)
vulnerability in openclaw (CVE-2026-62209). Confidential information can be exposed externally.
CVE-2026-62212 Vulnerability in openclaw (CVE-2026-62212)
vulnerability in openclaw (CVE-2026-62212). Confidential information can be exposed externally.
CVE-2026-62201 SSRF (Server-Side Request Forgery) in openclaw (CVE-2026-62201)
SSRF in openclaw (CVE-2026-62201). Confidential information can be exposed externally.
CVE-2026-62202 Authorization Flaw in privilege-escalation (CVE-2026-62202)
vulnerability in privilege-escalation (CVE-2026-62202). Successful exploitation can lead to full system takeover.
CVE-2026-62203 Vulnerability in openclaw (CVE-2026-62203)
vulnerability in openclaw (CVE-2026-62203). Successful exploitation can lead to full system takeover.
CVE-2026-62205 Vulnerability in openclaw (CVE-2026-62205)
vulnerability in openclaw (CVE-2026-62205). Data can be tampered with by attackers. Mitigation: upgrade to `2026.6.6` or later.
CVE-2026-62206 Vulnerability in openclaw (CVE-2026-62206)
vulnerability in openclaw (CVE-2026-62206). Data can be tampered with by attackers.
CVE-2026-34150 Vulnerability in wazuh (CVE-2026-34150)
vulnerability in wazuh (CVE-2026-34150). Risk of unauthorized operations or information disclosure.
CVE-2026-39359 Path Traversal in path-traversal (CVE-2026-39359)
path traversal in path-traversal (CVE-2026-39359). Confidential information can be exposed externally.
CVE-2026-59117 Vulnerability in microsoft (CVE-2026-59117)
vulnerability in microsoft (CVE-2026-59117). Successful exploitation can lead to full system takeover.
CVE-2026-58598 Vulnerability in microsoft (CVE-2026-58598)
vulnerability in microsoft (CVE-2026-58598). Successful exploitation can lead to full system takeover.
CVE-2026-55578 OS Command Injection in pheditor/pheditor (CVE-2026-55578)
OS command injection in pheditor/pheditor (CVE-2026-55578). Successful exploitation can lead to full system takeover. Exploitable via ``terminal``. Mitigation: upgrade to `2.0.6` or later.
CVE-2026-54540 OS Command Injection in pheditor/pheditor (CVE-2026-54540)
OS command injection in pheditor/pheditor (CVE-2026-54540). Successful exploitation can lead to full system takeover. Exploitable via ``TERMINAL_COMMANDS``. Mitigation: upgrade to `2.0.5` or later.
CVE-2026-46513 Vulnerability in CVE-2026-46513 (CVE-2026-46513)
vulnerability in CVE-2026-46513 (CVE-2026-46513). Confidential information can be exposed externally.
CVE-2026-46353 Vulnerability in CVE-2026-46353 (CVE-2026-46353)
vulnerability in CVE-2026-46353 (CVE-2026-46353). Confidential information can be exposed externally.
CVE-2026-46351 Vulnerability in CVE-2026-46351 (CVE-2026-46351)
vulnerability in CVE-2026-46351 (CVE-2026-46351). Confidential information can be exposed externally.
CVE-2026-63304 OS Command Injection in CVE-2026-63304 (CVE-2026-63304)
OS command injection in CVE-2026-63304 (CVE-2026-63304). Successful exploitation can lead to full system takeover.
CVE-2026-63305 OS Command Injection in CVE-2026-63305 (CVE-2026-63305)
OS command injection in CVE-2026-63305 (CVE-2026-63305). Successful exploitation can lead to full system takeover.
CVE-2026-7543 Cross-Site Scripting (XSS) in wordpress (CVE-2026-7543)
cross-site scripting in wordpress (CVE-2026-7543). Risk of unauthorized operations or information disclosure.
CVE-2026-15005 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15005)
vulnerability in wordpress (CVE-2026-15005). Successful exploitation can lead to full system takeover.
CVE-2026-15008 Unsafe Deserialization in wordpress (CVE-2026-15008)
vulnerability in wordpress (CVE-2026-15008). Successful exploitation can lead to full system takeover.
CVE-2026-15103 Privilege Escalation in wordpress (CVE-2026-15103)
vulnerability in wordpress (CVE-2026-15103). Successful exploitation can lead to full system takeover. Exploitable via ``group_id``.
CVE-2026-13741 Privilege Escalation in wordpress (CVE-2026-13741)
vulnerability in wordpress (CVE-2026-13741). Successful exploitation can lead to full system takeover. Exploitable via ``digits_reg_userrole``.
CVE-2026-12978 Cross-Site Scripting (XSS) in wordpress (CVE-2026-12978)
cross-site scripting in wordpress (CVE-2026-12978). Risk of unauthorized operations or information disclosure.
CVE-2026-12585 Authentication Bypass in wordpress (CVE-2026-12585)
authentication bypass in wordpress (CVE-2026-12585). Successful exploitation can lead to full system takeover.
CVE-2026-12525 Privilege Escalation in wordpress (CVE-2026-12525)
vulnerability in wordpress (CVE-2026-12525). Successful exploitation can lead to full system takeover.
CVE-2026-53366 Vulnerability in linux (CVE-2026-53366)
vulnerability in linux (CVE-2026-53366). Successful exploitation can lead to full system takeover.
CVE-2026-13042 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13042)
cross-site scripting in wordpress (CVE-2026-13042). Risk of unauthorized operations or information disclosure.
CVE-2026-12753 SQL Injection in wordpress (CVE-2026-12753)
SQL injection in wordpress (CVE-2026-12753). Confidential information can be exposed externally.
CVE-2026-54498 Cross-Site Scripting (XSS) in view_component (CVE-2026-54498)
cross-site scripting in view_component (CVE-2026-54498). Confidential information can be exposed externally. Exploitable via ``around_render``. Mitigation: upgrade to `4.12.0` or later.
CVE-2026-40952 Vulnerability in absolute (CVE-2026-40952)
vulnerability in absolute (CVE-2026-40952). Successful exploitation can lead to full system takeover.
CVE-2026-12997 Path Traversal in wordpress (CVE-2026-12997)
path traversal in wordpress (CVE-2026-12997). Confidential information can be exposed externally.
CVE-2026-20153 Vulnerability in cisco (CVE-2026-20153)
vulnerability in cisco (CVE-2026-20153). Risk of unauthorized operations or information disclosure.
CVE-2026-20156 Buffer Overflow in cisco (CVE-2026-20156)
vulnerability in cisco (CVE-2026-20156). Successful exploitation can lead to full system takeover.
CVE-2026-20157 Vulnerability in cisco (CVE-2026-20157)
vulnerability in cisco (CVE-2026-20157). Successful exploitation can lead to full system takeover.
CVE-2026-20158 Vulnerability in cisco (CVE-2026-20158)
vulnerability in cisco (CVE-2026-20158). Risk of unauthorized operations or information disclosure.
CVE-2026-20187 Vulnerability in cisco (CVE-2026-20187)
vulnerability in cisco (CVE-2026-20187). Risk of unauthorized operations or information disclosure.
CVE-2026-54493 SSRF (Server-Side Request Forgery) in phanan/koel (CVE-2026-54493)
SSRF in phanan/koel (CVE-2026-54493). Confidential information can be exposed externally. Exploitable via ``SafeUrl``. Mitigation: upgrade to `9.7.0` or later.
CVE-2026-20150 Vulnerability in Cisco roomos (CVE-2026-20150)
vulnerability in Cisco roomos (CVE-2026-20150). Successful exploitation can lead to full system takeover.
CVE-2026-60005 Vulnerability in nginx (CVE-2026-60005)
vulnerability in nginx (CVE-2026-60005). Risk of unauthorized operations or information disclosure.
CVE-2026-50147 Vulnerability in metabase (CVE-2026-50147)
vulnerability in metabase (CVE-2026-50147). Confidential information can be exposed externally.
CVE-2026-55723 Vulnerability in nginx (CVE-2026-55723)
vulnerability in nginx (CVE-2026-55723). Confidential information can be exposed externally.
CVE-2026-59762 Vulnerability in dos (CVE-2026-59762)
vulnerability in dos (CVE-2026-59762). Risk of unauthorized operations or information disclosure.
CVE-2026-42533 Vulnerability in nginx (CVE-2026-42533)
vulnerability in nginx (CVE-2026-42533). Successful exploitation can lead to full system takeover.
CVE-2026-61873 Vulnerability in path-traversal (CVE-2026-61873)
vulnerability in path-traversal (CVE-2026-61873). Data can be tampered with by attackers.
CVE-2026-61457 Unrestricted File Upload in CVE-2026-61457 (CVE-2026-61457)
vulnerability in CVE-2026-61457 (CVE-2026-61457). Successful exploitation can lead to full system takeover.
CVE-2026-40633 Vulnerability in dell (CVE-2026-40633)
vulnerability in dell (CVE-2026-40633). Successful exploitation can lead to full system takeover.
CVE-2026-35152 SQL Injection in apache (CVE-2026-35152)
SQL injection in apache (CVE-2026-35152). Successful exploitation can lead to full system takeover.
CVE-2026-56287 SQL Injection in apache (CVE-2026-56287)
SQL injection in apache (CVE-2026-56287). Confidential information can be exposed externally. Exploitable via `GET /api/v1/clients`.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →