Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
SUSE-SU-2026:2458-1 Vulnerability in dnsmasq (SUSE-SU-2026:2458-1)
vulnerability in dnsmasq (SUSE-SU-2026:2458-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.92rel2-18.27.1` or later.
SUSE-SU-2026:2457-1 Vulnerability in frr (SUSE-SU-2026:2457-1)
vulnerability in frr (SUSE-SU-2026:2457-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.2.6-150700.3.10.1` or later.
ROOT-APP-GOBINARY-CVE-2025-22868 Vulnerability in rootio-golang.org/x/oauth2 (ROOT-APP-GOBINARY-CVE-2025-22868)
vulnerability in rootio-golang.org/x/oauth2 (ROOT-APP-GOBINARY-CVE-2025-22868). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `v0.23.0-root.io.1, v0.23.0-root.io.3` or later.
ROOT-APP-MAVEN-CVE-2025-67635 Vulnerability in io.root.org.jenkins-ci.main:cli (ROOT-APP-MAVEN-CVE-2025-67635)
vulnerability in io.root.org.jenkins-ci.main:cli (ROOT-APP-MAVEN-CVE-2025-67635). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.533-root.io.1, 2.533-root.io.2, 2.533-root.io.3, 2.533-root.io.4, 2.533-root.io.6, 2.533-root.io.7` or later.
ROOT-APP-MAVEN-CVE-2026-27100 Vulnerability in io.root.org.jenkins-ci.main:jenkins-core (ROOT-APP-MAVEN-CVE-2026-27100)
vulnerability in io.root.org.jenkins-ci.main:jenkins-core (ROOT-APP-MAVEN-CVE-2026-27100). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.533-root.io.5, 2.533-root.io.7` or later.
CVE-2026-56012 SQL Injection in sqli (CVE-2026-56012)
SQL injection in sqli (CVE-2026-56012). Confidential information can be exposed externally.
CVE-2026-9158 Use-After-Free in eclipse (CVE-2026-9158)
vulnerability in eclipse (CVE-2026-9158). Successful exploitation can lead to full system takeover.
CVE-2026-8024 Unsafe Deserialization in deserialization (CVE-2026-8024)
vulnerability in deserialization (CVE-2026-8024). Successful exploitation can lead to full system takeover.
CVE-2026-8461 Out-of-Bounds Write in c (CVE-2026-8461)
out-of-bounds write in c (CVE-2026-8461). Successful exploitation can lead to full system takeover.
CVE-2026-54419 SQL Injection in sqli (CVE-2026-54419)
SQL injection in sqli (CVE-2026-54419). Successful exploitation can lead to full system takeover.
CVE-2026-54223 Path Traversal in path-traversal (CVE-2026-54223)
path traversal in path-traversal (CVE-2026-54223). Risk of unauthorized operations or information disclosure.
CVE-2026-54224 Vulnerability in dos (CVE-2026-54224)
vulnerability in dos (CVE-2026-54224). Risk of unauthorized operations or information disclosure.
CVE-2026-56007 Cross-Site Scripting (XSS) in CVE-2026-56007 (CVE-2026-56007)
cross-site scripting in CVE-2026-56007 (CVE-2026-56007). Risk of unauthorized operations or information disclosure.
CVE-2026-54219 Cross-Site Scripting (XSS) in CVE-2026-54219 (CVE-2026-54219)
cross-site scripting in CVE-2026-54219 (CVE-2026-54219). Risk of unauthorized operations or information disclosure.
CVE-2026-42490 Vulnerability in flask (CVE-2026-42490)
vulnerability in flask (CVE-2026-42490). Risk of unauthorized operations or information disclosure.
CVE-2026-40455 SQL Injection in sqli (CVE-2026-40455)
SQL injection in sqli (CVE-2026-40455). Risk of unauthorized operations or information disclosure.
CVE-2026-56009 Cross-Site Scripting (XSS) in CVE-2026-56009 (CVE-2026-56009)
cross-site scripting in CVE-2026-56009 (CVE-2026-56009). Risk of unauthorized operations or information disclosure.
CVE-2026-54222 SQL Injection in sqli (CVE-2026-54222)
SQL injection in sqli (CVE-2026-54222). Risk of unauthorized operations or information disclosure.
CVE-2026-12527 Vulnerability in CVE-2026-12527 (CVE-2026-12527)
vulnerability in CVE-2026-12527 (CVE-2026-12527). Risk of unauthorized operations or information disclosure.
CVE-2026-42488 Buffer Overflow in CVE-2026-42488 (CVE-2026-42488)
vulnerability in CVE-2026-42488 (CVE-2026-42488). Successful exploitation can lead to full system takeover.
CVE-2026-54221 Cross-Site Scripting (XSS) in CVE-2026-54221 (CVE-2026-54221)
cross-site scripting in CVE-2026-54221 (CVE-2026-54221). Risk of unauthorized operations or information disclosure.
CVE-2026-54220 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-54220)
vulnerability in csrf (CVE-2026-54220). Risk of unauthorized operations or information disclosure.
CVE-2026-40457 Cross-Site Scripting (XSS) in CVE-2026-40457 (CVE-2026-40457)
cross-site scripting in CVE-2026-40457 (CVE-2026-40457). Risk of unauthorized operations or information disclosure.
CVE-2026-42489 Vulnerability in flask (CVE-2026-42489)
vulnerability in flask (CVE-2026-42489). Risk of unauthorized operations or information disclosure.
CVE-2026-44942 Vulnerability in path-traversal (CVE-2026-44942)
vulnerability in path-traversal (CVE-2026-44942). Risk of unauthorized operations or information disclosure.
CVE-2026-12039 Vulnerability in CVE-2026-12039 (CVE-2026-12039)
vulnerability in CVE-2026-12039 (CVE-2026-12039). Risk of unauthorized operations or information disclosure.
CVE-2026-11719 Vulnerability in github.com/googleapis/mcp-toolbox (CVE-2026-11719)
vulnerability in github.com/googleapis/mcp-toolbox (CVE-2026-11719). Confidential information can be exposed externally. Mitigation: upgrade to `1.4.0` or later.
CVE-2026-42487 Vulnerability in c (CVE-2026-42487)
vulnerability in c (CVE-2026-42487). Risk of unauthorized operations or information disclosure.
CVE-2026-12539 Vulnerability in CVE-2026-12539 (CVE-2026-12539)
vulnerability in CVE-2026-12539 (CVE-2026-12539). Risk of unauthorized operations or information disclosure.
CVE-2026-40456 OS Command Injection in CVE-2026-40456 (CVE-2026-40456)
OS command injection in CVE-2026-40456 (CVE-2026-40456). Risk of unauthorized operations or information disclosure.
CVE-2026-11718 Authentication Bypass in github.com/googleapis/mcp-toolbox (CVE-2026-11718)
authentication bypass in github.com/googleapis/mcp-toolbox (CVE-2026-11718). Confidential information can be exposed externally. Mitigation: upgrade to `1.4.0` or later.
CVE-2026-2021 Cross-Site Scripting (XSS) in wordpress (CVE-2026-2021)
cross-site scripting in wordpress (CVE-2026-2021). Risk of unauthorized operations or information disclosure.
CVE-2026-8811 Path Traversal in CVE-2026-8811 (CVE-2026-8811)
path traversal in CVE-2026-8811 (CVE-2026-8811). Risk of unauthorized operations or information disclosure.
CVE-2025-10560 Vulnerability in CVE-2025-10560 (CVE-2025-10560)
vulnerability in CVE-2025-10560 (CVE-2025-10560). Risk of unauthorized operations or information disclosure.
CVE-2026-8039 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8039)
cross-site scripting in wordpress (CVE-2026-8039). Risk of unauthorized operations or information disclosure.
CVE-2026-50643 Out-of-Bounds Read in CVE-2026-50643 (CVE-2026-50643)
vulnerability in CVE-2026-50643 (CVE-2026-50643). Risk of unauthorized operations or information disclosure.
CVE-2026-11717 Authentication Bypass in github.com/googleapis/mcp-toolbox (CVE-2026-11717)
authentication bypass in github.com/googleapis/mcp-toolbox (CVE-2026-11717). Confidential information can be exposed externally. Mitigation: upgrade to `1.4.0` or later.
MINI-m72g-wjgp-gx9m MINI-m72g-wjgp-gx9m
MINI-87cq-g3hp-62r7 MINI-87cq-g3hp-62r7
MINI-67p4-ph8f-rvr3 MINI-67p4-ph8f-rvr3
MINI-f5p9-jm3h-548x MINI-f5p9-jm3h-548x
MINI-wpm6-7xpx-mww2 MINI-wpm6-7xpx-mww2
MINI-883c-9xw3-gqhw MINI-883c-9xw3-gqhw
MINI-hfc7-64f6-x6f7 MINI-hfc7-64f6-x6f7
GHSA-w6cg-2gpv-j66m Vulnerability in parket-helper (GHSA-w6cg-2gpv-j66m)
vulnerability in parket-helper (GHSA-w6cg-2gpv-j66m). Risk of unauthorized operations or information disclosure.
MINI-p2c6-8976-r3qh MINI-p2c6-8976-r3qh
MINI-qchr-4chp-ff8f MINI-qchr-4chp-ff8f
MINI-27qw-2rj8-h7jr MINI-27qw-2rj8-h7jr
MINI-84hw-rmgh-9m3v MINI-84hw-rmgh-9m3v
MINI-ppjr-5cjq-jg35 MINI-ppjr-5cjq-jg35

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →