Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-15980 |
|
Vulnerability in wordpress (CVE-2026-15980)
vulnerability in wordpress (CVE-2026-15980). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15985 |
|
Vulnerability in wordpress (CVE-2026-15985)
vulnerability in wordpress (CVE-2026-15985). Successful exploitation can lead to full system takeover.
|
| CVE-2026-32639 |
|
Vulnerability in winter/wn-cms-module (CVE-2026-32639)
vulnerability in winter/wn-cms-module (CVE-2026-32639). Confidential information can be exposed externally. Exploitable via ``cms.manage_pages``. Mitigation: upgrade to `1.2.13` or later.
|
| CVE-2026-8457 |
|
Vulnerability in wordpress (CVE-2026-8457)
vulnerability in wordpress (CVE-2026-8457). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10842 |
|
Vulnerability in ibm (CVE-2026-10842)
vulnerability in ibm (CVE-2026-10842). Confidential information can be exposed externally.
|
| CVE-2026-9701 |
|
Vulnerability in wordpress (CVE-2026-9701)
vulnerability in wordpress (CVE-2026-9701). Successful exploitation can lead to full system takeover. Exploitable via ``eventer_verification_code``.
|
| CVE-2026-56091 |
|
Vulnerability in apache (CVE-2026-56091)
vulnerability in apache (CVE-2026-56091). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50627 |
|
Vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50627)
vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50627). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.1.7` or later.
|
| CVE-2026-44492 |
|
SSRF (Server-Side Request Forgery) in axios (CVE-2026-44492)
SSRF in axios (CVE-2026-44492). Confidential information can be exposed externally. Mitigation: upgrade to `1.16.0` or later.
|
| CVE-2026-43617 |
|
Vulnerability in samba (CVE-2026-43617)
vulnerability in samba (CVE-2026-43617). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-23903 |
|
Vulnerability in spring (CVE-2026-23903)
vulnerability in spring (CVE-2026-23903). Risk of unauthorized operations or information disclosure.
|