Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-65711 |
|
OS Command Injection in CVE-2026-65711 (CVE-2026-65711)
OS command injection in CVE-2026-65711 (CVE-2026-65711). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65710 |
|
Vulnerability in CVE-2026-65710 (CVE-2026-65710)
vulnerability in CVE-2026-65710 (CVE-2026-65710). Confidential information can be exposed externally.
|
| CVE-2026-65709 |
|
Vulnerability in CVE-2026-65709 (CVE-2026-65709)
vulnerability in CVE-2026-65709 (CVE-2026-65709). Confidential information can be exposed externally.
|
| CVE-2026-65708 |
|
Vulnerability in CVE-2026-65708 (CVE-2026-65708)
vulnerability in CVE-2026-65708 (CVE-2026-65708). Confidential information can be exposed externally.
|
| CVE-2026-59714 |
|
Vulnerability in open-webui (CVE-2026-59714)
vulnerability in open-webui (CVE-2026-59714). Data can be tampered with by attackers. Exploitable via `POST /api/chat/completions`. Mitigation: upgrade to `0.9.6` or later.
|
| CVE-2026-73507 |
|
Vulnerability in io.netty:netty-codec-xml (CVE-2026-73507)
vulnerability in io.netty:netty-codec-xml (CVE-2026-73507). Risk of unauthorized operations or information disclosure. Exploitable via ``maxFrameLength``. Mitigation: upgrade to `4.1.136.Final` or later.
|
| CVE-2026-73643 |
|
Vulnerability in js-yaml (CVE-2026-73643)
vulnerability in js-yaml (CVE-2026-73643). Risk of unauthorized operations or information disclosure. Exploitable via ``maxDepth``. Mitigation: upgrade to `5.2.2` or later.
|
| CVE-2026-73646 |
|
Path Traversal in postcss (CVE-2026-73646)
path traversal in postcss (CVE-2026-73646). Confidential information can be exposed externally. Exploitable via ``loadFile``. Mitigation: upgrade to `8.5.18` or later.
|
| CVE-2026-66027 |
|
Vulnerability in CVE-2026-66027 (CVE-2026-66027)
vulnerability in CVE-2026-66027 (CVE-2026-66027). Confidential information can be exposed externally.
|
| CVE-2026-65693 |
|
Code Injection in CVE-2026-65693 (CVE-2026-65693)
code injection in CVE-2026-65693 (CVE-2026-65693). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64255 |
|
Out-of-Bounds Read in linux (CVE-2026-64255)
vulnerability in linux (CVE-2026-64255). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64251 |
|
Use-After-Free in linux (CVE-2026-64251)
vulnerability in linux (CVE-2026-64251). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64249 |
|
Use-After-Free in linux (CVE-2026-64249)
vulnerability in linux (CVE-2026-64249). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64247 |
|
Out-of-Bounds Read in linux (CVE-2026-64247)
vulnerability in linux (CVE-2026-64247). Confidential information can be exposed externally.
|
| CVE-2026-64246 |
|
Use-After-Free in linux (CVE-2026-64246)
vulnerability in linux (CVE-2026-64246). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64245 |
|
Use-After-Free in linux (CVE-2026-64245)
vulnerability in linux (CVE-2026-64245). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64243 |
|
Vulnerability in linux (CVE-2026-64243)
vulnerability in linux (CVE-2026-64243). Confidential information can be exposed externally.
|
| CVE-2026-64242 |
|
Vulnerability in linux (CVE-2026-64242)
vulnerability in linux (CVE-2026-64242). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64239 |
|
Use-After-Free in linux (CVE-2026-64239)
vulnerability in linux (CVE-2026-64239). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64237 |
|
Out-of-Bounds Read in linux (CVE-2026-64237)
vulnerability in linux (CVE-2026-64237). Confidential information can be exposed externally.
|
| CVE-2026-64235 |
|
Vulnerability in linux (CVE-2026-64235)
vulnerability in linux (CVE-2026-64235). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64226 |
|
Use-After-Free in linux (CVE-2026-64226)
vulnerability in linux (CVE-2026-64226). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64225 |
|
Vulnerability in linux (CVE-2026-64225)
vulnerability in linux (CVE-2026-64225). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64224 |
|
Vulnerability in linux (CVE-2026-64224)
vulnerability in linux (CVE-2026-64224). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64223 |
|
Out-of-Bounds Read in linux (CVE-2026-64223)
vulnerability in linux (CVE-2026-64223). Confidential information can be exposed externally.
|
| CVE-2026-64222 |
|
Vulnerability in linux (CVE-2026-64222)
vulnerability in linux (CVE-2026-64222). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64221 |
|
Use-After-Free in linux (CVE-2026-64221)
vulnerability in linux (CVE-2026-64221). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64219 |
|
Vulnerability in linux (CVE-2026-64219)
vulnerability in linux (CVE-2026-64219). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64218 |
|
Vulnerability in linux (CVE-2026-64218)
vulnerability in linux (CVE-2026-64218). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64217 |
|
Out-of-Bounds Write in linux (CVE-2026-64217)
out-of-bounds write in linux (CVE-2026-64217). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64210 |
|
Vulnerability in c (CVE-2026-64210)
vulnerability in c (CVE-2026-64210). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64209 |
|
Out-of-Bounds Read in linux (CVE-2026-64209)
vulnerability in linux (CVE-2026-64209). Confidential information can be exposed externally.
|
| CVE-2026-64208 |
|
Vulnerability in linux (CVE-2026-64208)
vulnerability in linux (CVE-2026-64208). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8789 |
|
Authorization Flaw in wordpress (CVE-2026-8789)
vulnerability in wordpress (CVE-2026-8789). Data can be tampered with by attackers. Exploitable via ``ea_delete_multiple_connections``.
|
| CVE-2026-16800 |
|
Code Injection in devolutions (CVE-2026-16800)
code injection in devolutions (CVE-2026-16800). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16801 |
|
Code Injection in devolutions (CVE-2026-16801)
code injection in devolutions (CVE-2026-16801). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45811 |
|
Vulnerability in apache (CVE-2026-45811)
vulnerability in apache (CVE-2026-45811). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66143 |
|
Vulnerability in apache (CVE-2026-66143)
vulnerability in apache (CVE-2026-66143). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45816 |
|
Vulnerability in apache (CVE-2026-45816)
vulnerability in apache (CVE-2026-45816). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66142 |
|
Vulnerability in apache (CVE-2026-66142)
vulnerability in apache (CVE-2026-66142). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66144 |
|
Vulnerability in dos (CVE-2026-66144)
vulnerability in dos (CVE-2026-66144). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9765 |
|
Vulnerability in privilege-escalation (CVE-2026-9765)
vulnerability in privilege-escalation (CVE-2026-9765). Data can be tampered with by attackers.
|
| CVE-2026-45813 |
|
Vulnerability in c (CVE-2026-45813)
vulnerability in c (CVE-2026-45813). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45815 |
|
Vulnerability in apache (CVE-2026-45815)
vulnerability in apache (CVE-2026-45815). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55685 |
|
Vulnerability in react-router (CVE-2026-55685)
vulnerability in react-router (CVE-2026-55685). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.18.0` or later.
|
| CVE-2026-15401 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15401)
cross-site scripting in wordpress (CVE-2026-15401). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10033 |
|
Vulnerability in wordpress (CVE-2026-10033)
vulnerability in wordpress (CVE-2026-10033). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49743 |
|
Use-After-Free in imaginationtech (CVE-2026-49743)
vulnerability in imaginationtech (CVE-2026-49743). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49745 |
|
Vulnerability in imaginationtech (CVE-2026-49745)
vulnerability in imaginationtech (CVE-2026-49745). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49744 |
|
Vulnerability in privilege-escalation (CVE-2026-49744)
vulnerability in privilege-escalation (CVE-2026-49744). Successful exploitation can lead to full system takeover.
|