Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
RLSA-2026:25220 Vulnerability in dotnet8.0 (RLSA-2026:25220)
vulnerability in dotnet8.0 (RLSA-2026:25220). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:8.0.128-1.el9_8` or later.
openSUSE-SU-2026:11025-1 Vulnerability in python-paramiko (openSUSE-SU-2026:11025-1)
vulnerability in python-paramiko (openSUSE-SU-2026:11025-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.0.0-1.1` or later.
openSUSE-SU-2026:11023-1 Vulnerability in openssl-3 (openSUSE-SU-2026:11023-1)
vulnerability in openssl-3 (openSUSE-SU-2026:11023-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.5.3-6.1` or later.
openSUSE-SU-2026:11027-1 Vulnerability in python-tornado6 (openSUSE-SU-2026:11027-1)
vulnerability in python-tornado6 (openSUSE-SU-2026:11027-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.5.7-1.1` or later.
openSUSE-SU-2026:11022-1 Vulnerability in opensc (openSUSE-SU-2026:11022-1)
vulnerability in opensc (openSUSE-SU-2026:11022-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.27.1-2.1` or later.
openSUSE-SU-2026:11028-1 Vulnerability in rav1e (openSUSE-SU-2026:11028-1)
vulnerability in rav1e (openSUSE-SU-2026:11028-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.8.1-2.1` or later.
openSUSE-SU-2026:11024-1 Vulnerability in python-PyJWT (openSUSE-SU-2026:11024-1)
vulnerability in python-PyJWT (openSUSE-SU-2026:11024-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.13.0-1.1` or later.
openSUSE-SU-2026:11026-1 Vulnerability in python-starlette (openSUSE-SU-2026:11026-1)
vulnerability in python-starlette (openSUSE-SU-2026:11026-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.2.0-1.1` or later.
openSUSE-SU-2026:11020-1 Vulnerability in freeipmi (openSUSE-SU-2026:11020-1)
vulnerability in freeipmi (openSUSE-SU-2026:11020-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.6.18-1.1` or later.
openSUSE-SU-2026:11021-1 Vulnerability in kitty (openSUSE-SU-2026:11021-1)
vulnerability in kitty (openSUSE-SU-2026:11021-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.47.3-1.1` or later.
MGASA-2026-0201 Vulnerability in cups (MGASA-2026-0201)
vulnerability in cups (MGASA-2026-0201). Risk of unauthorized operations or information disclosure. Exploitable via ``_ppdCreateFromIPP``. Mitigation: upgrade to `2.4.6-1.10.mga9` or later.
MGASA-2026-0202 Vulnerability in libssh (MGASA-2026-0202)
vulnerability in libssh (MGASA-2026-0202). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.10.6-1.2.mga9` or later.
MGASA-2026-0200 Vulnerability in proftpd (MGASA-2026-0200)
vulnerability in proftpd (MGASA-2026-0200). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.8c-1.2.mga9` or later.
MGASA-2026-0204 Vulnerability in expat (MGASA-2026-0204)
vulnerability in expat (MGASA-2026-0204). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.7.5-1.1.mga9` or later.
MGASA-2026-0203 Vulnerability in memcached (MGASA-2026-0203)
vulnerability in memcached (MGASA-2026-0203). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.6.42-1.mga9` or later.
CGA-9228-hh88-rqcj CGA-9228-hh88-rqcj
CVE-2026-54090 Command Injection in github.com/filebrowser/filebrowser/v2 (CVE-2026-54090)
command injection in github.com/filebrowser/filebrowser/v2 (CVE-2026-54090). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.33.8` or later.
CVE-2026-54398 Authorization Flaw in CVE-2026-54398 (CVE-2026-54398)
vulnerability in CVE-2026-54398 (CVE-2026-54398). Risk of unauthorized operations or information disclosure.
CVE-2026-54095 Vulnerability in CVE-2026-54095 (CVE-2026-54095)
vulnerability in CVE-2026-54095 (CVE-2026-54095). Risk of unauthorized operations or information disclosure.
CVE-2026-53868 Vulnerability in dos (CVE-2026-53868)
vulnerability in dos (CVE-2026-53868). Risk of unauthorized operations or information disclosure.
CVE-2026-53867 Vulnerability in CVE-2026-53867 (CVE-2026-53867)
vulnerability in CVE-2026-53867 (CVE-2026-53867). Risk of unauthorized operations or information disclosure.
CVE-2026-53839 Vulnerability in openclaw (CVE-2026-53839)
vulnerability in openclaw (CVE-2026-53839). Confidential information can be exposed externally. Mitigation: upgrade to `2026.5.7` or later.
CVE-2026-53838 Vulnerability in openclaw (CVE-2026-53838)
vulnerability in openclaw (CVE-2026-53838). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.5.27` or later.
CVE-2026-53837 Vulnerability in openclaw (CVE-2026-53837)
vulnerability in openclaw (CVE-2026-53837). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.5.6` or later.
CVE-2026-53836 Vulnerability in openclaw (CVE-2026-53836)
vulnerability in openclaw (CVE-2026-53836). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.5.12` or later.
CVE-2026-53835 Vulnerability in openclaw (CVE-2026-53835)
vulnerability in openclaw (CVE-2026-53835). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.5.6` or later.
CVE-2026-53834 Authorization Flaw in openclaw (CVE-2026-53834)
vulnerability in openclaw (CVE-2026-53834). Data can be tampered with by attackers. Mitigation: upgrade to `2026.4.27` or later.
CVE-2026-53833 Authorization Flaw in openclaw (CVE-2026-53833)
vulnerability in openclaw (CVE-2026-53833). Confidential information can be exposed externally. Mitigation: upgrade to `2026.4.29` or later.
CVE-2026-53832 Privilege Escalation in openclaw (CVE-2026-53832)
vulnerability in openclaw (CVE-2026-53832). Confidential information can be exposed externally. Mitigation: upgrade to `2026.5.18` or later.
CVE-2026-53831 OS Command Injection in openclaw (CVE-2026-53831)
OS command injection in openclaw (CVE-2026-53831). Confidential information can be exposed externally. Exploitable via ``system.run``. Mitigation: upgrade to `2026.5.18` or later.
CVE-2026-53830 Vulnerability in openclaw (CVE-2026-53830)
vulnerability in openclaw (CVE-2026-53830). Data can be tampered with by attackers. Exploitable via ``secrets.reload``. Mitigation: upgrade to `2026.4.22` or later.
CVE-2026-53829 Vulnerability in openclaw (CVE-2026-53829)
vulnerability in openclaw (CVE-2026-53829). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.5.18` or later.
CVE-2026-53828 Authorization Flaw in openclaw (CVE-2026-53828)
vulnerability in openclaw (CVE-2026-53828). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.5.6` or later.
CVE-2026-53827 Vulnerability in openclaw (CVE-2026-53827)
vulnerability in openclaw (CVE-2026-53827). Confidential information can be exposed externally. Mitigation: upgrade to `2026.5.2` or later.
CVE-2026-53826 Vulnerability in openclaw (CVE-2026-53826)
vulnerability in openclaw (CVE-2026-53826). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.4.26` or later.
CVE-2026-53825 Vulnerability in openclaw (CVE-2026-53825)
vulnerability in openclaw (CVE-2026-53825). Confidential information can be exposed externally. Exploitable via ``operator.write``. Mitigation: upgrade to `2026.5.12` or later.
CVE-2026-53824 Vulnerability in openclaw (CVE-2026-53824)
vulnerability in openclaw (CVE-2026-53824). Data can be tampered with by attackers. Mitigation: upgrade to `2026.4.24` or later.
CVE-2026-53823 Vulnerability in openclaw (CVE-2026-53823)
vulnerability in openclaw (CVE-2026-53823). Confidential information can be exposed externally. Mitigation: upgrade to `2026.5.3` or later.
CVE-2026-53822 Vulnerability in Openclaw (CVE-2026-53822)
vulnerability in Openclaw (CVE-2026-53822). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.5.18` or later.
CVE-2026-53821 Vulnerability in openclaw (CVE-2026-53821)
vulnerability in openclaw (CVE-2026-53821). Successful exploitation can lead to full system takeover. Exploitable via ``operator.admin``. Mitigation: upgrade to `2026.5.18` or later.
CVE-2026-53820 Vulnerability in openclaw (CVE-2026-53820)
vulnerability in openclaw (CVE-2026-53820). Data can be tampered with by attackers.
CVE-2026-53609 Vulnerability in apostrophe (CVE-2026-53609)
vulnerability in apostrophe (CVE-2026-53609). Confidential information can be exposed externally. Exploitable via ``__proto__``. Mitigation: upgrade to `4.31.0` or later.
CVE-2026-53608 Cross-Site Scripting (XSS) in @apostrophecms/seo (CVE-2026-53608)
cross-site scripting in @apostrophecms/seo (CVE-2026-53608). Confidential information can be exposed externally. Exploitable via ``seoGoogleTrackingId``. Mitigation: upgrade to `1.5.0` or later.
CVE-2026-53523 Open Redirect in github.com/nezhahq/nezha (CVE-2026-53523)
vulnerability in github.com/nezhahq/nezha (CVE-2026-53523). Confidential information can be exposed externally. Exploitable via `GET /api/v1/oauth2/github`. Mitigation: upgrade to `2.2.0` or later.
CVE-2026-53522 Vulnerability in github.com/nezhahq/nezha (CVE-2026-53522)
vulnerability in github.com/nezhahq/nezha (CVE-2026-53522). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/terminal`. Mitigation: upgrade to `2.2.0` or later.
CVE-2026-53521 Authorization Flaw in github.com/nezhahq/nezha (CVE-2026-53521)
vulnerability in github.com/nezhahq/nezha (CVE-2026-53521). Risk of unauthorized operations or information disclosure. Exploitable via `PATCH /server/{id}`. Mitigation: upgrade to `2.1.0` or later.
CVE-2026-53520 Vulnerability in github.com/nezhahq/nezha (CVE-2026-53520)
vulnerability in github.com/nezhahq/nezha (CVE-2026-53520). Risk of unauthorized operations or information disclosure. Exploitable via ``domain``. Mitigation: upgrade to `2.1.0` or later.
CVE-2026-53519 Path Traversal in github.com/nezhahq/nezha (CVE-2026-53519)
path traversal in github.com/nezhahq/nezha (CVE-2026-53519). Confidential information can be exposed externally. Exploitable via `GET /dashboard../data/config.yaml`. Mitigation: upgrade to `2.0.13` or later.
CVE-2026-41158 Use-After-Free in CVE-2026-41158 (CVE-2026-41158)
vulnerability in CVE-2026-41158 (CVE-2026-41158). Successful exploitation can lead to full system takeover.
CVE-2026-41157 Out-of-Bounds Write in Google chrome (CVE-2026-41157)
out-of-bounds write in Google chrome (CVE-2026-41157). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →