Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-50034 Vulnerability in CVE-2026-50034 (CVE-2026-50034)
vulnerability in CVE-2026-50034 (CVE-2026-50034). Confidential information can be exposed externally.
CVE-2026-12048 Cross-Site Scripting (XSS) in react (CVE-2026-12048)
cross-site scripting in react (CVE-2026-12048). Confidential information can be exposed externally.
CVE-2026-52866 Vulnerability in CVE-2026-52866 (CVE-2026-52866)
vulnerability in CVE-2026-52866 (CVE-2026-52866). Risk of unauthorized operations or information disclosure.
CVE-2026-12047 Cross-Site Scripting (XSS) in react (CVE-2026-12047)
cross-site scripting in react (CVE-2026-12047). Risk of unauthorized operations or information disclosure.
CVE-2026-12049 Open Redirect in pgadmin (CVE-2026-12049)
vulnerability in pgadmin (CVE-2026-12049). Risk of unauthorized operations or information disclosure.
CVE-2026-12050 SQL Injection in sqli (CVE-2026-12050)
SQL injection in sqli (CVE-2026-12050). Risk of unauthorized operations or information disclosure. Exploitable via `POST /browser/server/restore_point/{gid}/{sid}`.
GHSA-fwh2-95jw-g4j6 Path Traversal in praisonai (GHSA-fwh2-95jw-g4j6)
path traversal in praisonai (GHSA-fwh2-95jw-g4j6). Successful exploitation can lead to full system takeover.
GHSA-x44p-gg67-52fc Authorization Flaw in praisonai (GHSA-x44p-gg67-52fc)
vulnerability in praisonai (GHSA-x44p-gg67-52fc). Confidential information can be exposed externally.
CVE-2026-12044 SQL Injection in sqli (CVE-2026-12044)
SQL injection in sqli (CVE-2026-12044). Successful exploitation can lead to full system takeover. Exploitable via ``qtLiteral``.
CVE-2026-12045 Command Injection in pgadmin (CVE-2026-12045)
command injection in pgadmin (CVE-2026-12045). Successful exploitation can lead to full system takeover.
CVE-2026-56077 Vulnerability in CVE-2026-56077 (CVE-2026-56077)
vulnerability in CVE-2026-56077 (CVE-2026-56077). Confidential information can be exposed externally.
CVE-2026-12046 Vulnerability in flask (CVE-2026-12046)
vulnerability in flask (CVE-2026-12046). Successful exploitation can lead to full system takeover. Exploitable via `DELETE /sqleditor/close/`.
CVE-2026-56076 Vulnerability in CVE-2026-56076 (CVE-2026-56076)
vulnerability in CVE-2026-56076 (CVE-2026-56076). Confidential information can be exposed externally. Exploitable via `POST /agui`.
CVE-2026-6716 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-10746 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-56075 Authorization Flaw in praisonai (CVE-2026-56075)
vulnerability in praisonai (CVE-2026-56075). Successful exploitation can lead to full system takeover. Exploitable via ``chat.py``. Mitigation: upgrade to `4.5.128` or later.
CVE-2026-56074 Authorization Flaw in praisonai (CVE-2026-56074)
vulnerability in praisonai (CVE-2026-56074). Confidential information can be exposed externally. Exploitable via ``execute_command``. Mitigation: upgrade to `4.5.128` or later.
CVE-2026-56078 Path Traversal in praisonai (CVE-2026-56078)
path traversal in praisonai (CVE-2026-56078). Confidential information can be exposed externally. Exploitable via ``MultiAgentLedger``. Mitigation: upgrade to `1.5.115` or later.
RLSA-2026:26610 Vulnerability in xorg-x11-server (RLSA-2026:26610)
vulnerability in xorg-x11-server (RLSA-2026:26610). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:1.20.11-34.el9_8.2` or later.
RLSA-2026:26590 Vulnerability in xorg-x11-server-Xwayland (RLSA-2026:26590)
vulnerability in xorg-x11-server-Xwayland (RLSA-2026:26590). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:24.1.9-4.el9_8.2` or later.
RLSA-2026:26533 Vulnerability in dracut (RLSA-2026:26533)
vulnerability in dracut (RLSA-2026:26533). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:057-115.git20260527.el9_8` or later.
RLSA-2026:26709 Vulnerability in xorg-x11-server (RLSA-2026:26709)
vulnerability in xorg-x11-server (RLSA-2026:26709). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:1.20.11-28.el8_10.2` or later.
RLSA-2026:26562 Vulnerability in xorg-x11-server-Xwayland (RLSA-2026:26562)
vulnerability in xorg-x11-server-Xwayland (RLSA-2026:26562). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:21.1.3-20.el8_10.2` or later.
RLSA-2026:26459 Vulnerability in 389-ds-base (RLSA-2026:26459)
vulnerability in 389-ds-base (RLSA-2026:26459). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:1.4.3.39-24.module+el8.10.0+40214+a8ec6bf9` or later.
RLSA-2026:26534 Vulnerability in dracut (RLSA-2026:26534)
vulnerability in dracut (RLSA-2026:26534). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:049-244.git20260529.el8_10` or later.
RLSA-2026:26427 Vulnerability in kernel (RLSA-2026:26427)
vulnerability in kernel (RLSA-2026:26427). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:4.18.0-553.134.1.el8_10` or later.
UBUNTU-CVE-2026-46862 Vulnerability in mysql-5.5 (UBUNTU-CVE-2026-46862)
vulnerability in mysql-5.5 (UBUNTU-CVE-2026-46862). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.46-0ubuntu0.20.04.1+esm3` or later.
UBUNTU-CVE-2026-48142 Vulnerability in nginx (UBUNTU-CVE-2026-48142)
vulnerability in nginx (UBUNTU-CVE-2026-48142). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.18.0-6ubuntu14.16` or later.
UBUNTU-CVE-2026-42055 Vulnerability in nginx (UBUNTU-CVE-2026-42055)
vulnerability in nginx (UBUNTU-CVE-2026-42055). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.18.0-6ubuntu14.16` or later.
UBUNTU-CVE-2026-55203 Vulnerability in haproxy (UBUNTU-CVE-2026-55203)
vulnerability in haproxy (UBUNTU-CVE-2026-55203). Data can be tampered with by attackers. Mitigation: upgrade to `2.4.30-0ubuntu0.22.04.2` or later.
ALSA-2026:27288 Vulnerability in kernel (ALSA-2026:27288)
vulnerability in kernel (ALSA-2026:27288). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.12.0-211.26.1.el10_2` or later.
UBUNTU-CVE-2026-55204 Vulnerability in haproxy (UBUNTU-CVE-2026-55204)
vulnerability in haproxy (UBUNTU-CVE-2026-55204). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.30-0ubuntu0.22.04.2` or later.
ALSA-2026:27353 Vulnerability in bpftool (ALSA-2026:27353)
vulnerability in bpftool (ALSA-2026:27353). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.18.0-553.136.1.el8_10` or later.
ALSA-2026:27354 Vulnerability in kernel-rt (ALSA-2026:27354)
vulnerability in kernel-rt (ALSA-2026:27354). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.18.0-553.136.1.rt7.477.el8_10` or later.
openSUSE-SU-2026:11065-1 Vulnerability in freerdp (openSUSE-SU-2026:11065-1)
vulnerability in freerdp (openSUSE-SU-2026:11065-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.27.1-1.1` or later.
openSUSE-SU-2026:11070-1 Vulnerability in warewulf4 (openSUSE-SU-2026:11070-1)
vulnerability in warewulf4 (openSUSE-SU-2026:11070-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.7.0-2.1` or later.
openSUSE-SU-2026:11069-1 Vulnerability in squid (openSUSE-SU-2026:11069-1)
vulnerability in squid (openSUSE-SU-2026:11069-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.6-1.1` or later.
openSUSE-SU-2026:11066-1 Vulnerability in nginx (openSUSE-SU-2026:11066-1)
vulnerability in nginx (openSUSE-SU-2026:11066-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.31.2-1.1` or later.
openSUSE-SU-2026:11064-1 Vulnerability in ansible-core-2.20 (openSUSE-SU-2026:11064-1)
vulnerability in ansible-core-2.20 (openSUSE-SU-2026:11064-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.20.7-1.1` or later.
openSUSE-SU-2026:11068-1 Vulnerability in python311 (openSUSE-SU-2026:11068-1)
vulnerability in python311 (openSUSE-SU-2026:11068-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.11.15-6.1` or later.
openSUSE-SU-2026:11062-1 Vulnerability in ansible-core-2.18 (openSUSE-SU-2026:11062-1)
vulnerability in ansible-core-2.18 (openSUSE-SU-2026:11062-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.18.18-1.1` or later.
openSUSE-SU-2026:11067-1 Vulnerability in python-joserfc (openSUSE-SU-2026:11067-1)
vulnerability in python-joserfc (openSUSE-SU-2026:11067-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.1-1.1` or later.
openSUSE-SU-2026:11061-1 Vulnerability in ImageMagick (openSUSE-SU-2026:11061-1)
vulnerability in ImageMagick (openSUSE-SU-2026:11061-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.1.2.25-2.1` or later.
openSUSE-SU-2026:11063-1 Vulnerability in ansible-core-2.19 (openSUSE-SU-2026:11063-1)
vulnerability in ansible-core-2.19 (openSUSE-SU-2026:11063-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.19.11-1.1` or later.
UBUNTU-CVE-2026-42530 (NGINX Open Source has a vulnerability in the ngx_http_v3_modulemodule. ...)
GHSA-89vx-wfvc-j58f Vulnerability in node-vfs-polyfill (GHSA-89vx-wfvc-j58f)
vulnerability in node-vfs-polyfill (GHSA-89vx-wfvc-j58f). Risk of unauthorized operations or information disclosure.
GHSA-w7hw-9wmw-hj5w Vulnerability in db-connector-log (GHSA-w7hw-9wmw-hj5w)
vulnerability in db-connector-log (GHSA-w7hw-9wmw-hj5w). Risk of unauthorized operations or information disclosure.
GHSA-vh6x-853w-4qvp Vulnerability in runtime-query (GHSA-vh6x-853w-4qvp)
vulnerability in runtime-query (GHSA-vh6x-853w-4qvp). Risk of unauthorized operations or information disclosure. Exploitable via ``require``.
CVE-2026-8668 Vulnerability in CVE-2026-8668 (CVE-2026-8668)
vulnerability in CVE-2026-8668 (CVE-2026-8668). Risk of unauthorized operations or information disclosure.
CVE-2026-8100 Vulnerability in CVE-2026-8100 (CVE-2026-8100)
vulnerability in CVE-2026-8100 (CVE-2026-8100). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →