Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| RLSA-2026:25220 |
|
Vulnerability in dotnet8.0 (RLSA-2026:25220)
vulnerability in dotnet8.0 (RLSA-2026:25220). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:8.0.128-1.el9_8` or later.
|
| openSUSE-SU-2026:11025-1 |
|
Vulnerability in python-paramiko (openSUSE-SU-2026:11025-1)
vulnerability in python-paramiko (openSUSE-SU-2026:11025-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.0.0-1.1` or later.
|
| openSUSE-SU-2026:11023-1 |
|
Vulnerability in openssl-3 (openSUSE-SU-2026:11023-1)
vulnerability in openssl-3 (openSUSE-SU-2026:11023-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.5.3-6.1` or later.
|
| openSUSE-SU-2026:11027-1 |
|
Vulnerability in python-tornado6 (openSUSE-SU-2026:11027-1)
vulnerability in python-tornado6 (openSUSE-SU-2026:11027-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.5.7-1.1` or later.
|
| openSUSE-SU-2026:11022-1 |
|
Vulnerability in opensc (openSUSE-SU-2026:11022-1)
vulnerability in opensc (openSUSE-SU-2026:11022-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.27.1-2.1` or later.
|
| openSUSE-SU-2026:11028-1 |
|
Vulnerability in rav1e (openSUSE-SU-2026:11028-1)
vulnerability in rav1e (openSUSE-SU-2026:11028-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.8.1-2.1` or later.
|
| openSUSE-SU-2026:11024-1 |
|
Vulnerability in python-PyJWT (openSUSE-SU-2026:11024-1)
vulnerability in python-PyJWT (openSUSE-SU-2026:11024-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.13.0-1.1` or later.
|
| openSUSE-SU-2026:11026-1 |
|
Vulnerability in python-starlette (openSUSE-SU-2026:11026-1)
vulnerability in python-starlette (openSUSE-SU-2026:11026-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.2.0-1.1` or later.
|
| openSUSE-SU-2026:11020-1 |
|
Vulnerability in freeipmi (openSUSE-SU-2026:11020-1)
vulnerability in freeipmi (openSUSE-SU-2026:11020-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.6.18-1.1` or later.
|
| openSUSE-SU-2026:11021-1 |
|
Vulnerability in kitty (openSUSE-SU-2026:11021-1)
vulnerability in kitty (openSUSE-SU-2026:11021-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.47.3-1.1` or later.
|
| MGASA-2026-0201 |
|
Vulnerability in cups (MGASA-2026-0201)
vulnerability in cups (MGASA-2026-0201). Risk of unauthorized operations or information disclosure. Exploitable via ``_ppdCreateFromIPP``. Mitigation: upgrade to `2.4.6-1.10.mga9` or later.
|
| MGASA-2026-0202 |
|
Vulnerability in libssh (MGASA-2026-0202)
vulnerability in libssh (MGASA-2026-0202). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.10.6-1.2.mga9` or later.
|
| MGASA-2026-0200 |
|
Vulnerability in proftpd (MGASA-2026-0200)
vulnerability in proftpd (MGASA-2026-0200). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.8c-1.2.mga9` or later.
|
| MGASA-2026-0204 |
|
Vulnerability in expat (MGASA-2026-0204)
vulnerability in expat (MGASA-2026-0204). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.7.5-1.1.mga9` or later.
|
| MGASA-2026-0203 |
|
Vulnerability in memcached (MGASA-2026-0203)
vulnerability in memcached (MGASA-2026-0203). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.6.42-1.mga9` or later.
|
| CGA-9228-hh88-rqcj |
|
CGA-9228-hh88-rqcj |
| CVE-2026-54090 |
|
Command Injection in github.com/filebrowser/filebrowser/v2 (CVE-2026-54090)
command injection in github.com/filebrowser/filebrowser/v2 (CVE-2026-54090). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.33.8` or later.
|
| CVE-2026-54398 |
|
Authorization Flaw in CVE-2026-54398 (CVE-2026-54398)
vulnerability in CVE-2026-54398 (CVE-2026-54398). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54095 |
|
Vulnerability in CVE-2026-54095 (CVE-2026-54095)
vulnerability in CVE-2026-54095 (CVE-2026-54095). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53868 |
|
Vulnerability in dos (CVE-2026-53868)
vulnerability in dos (CVE-2026-53868). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53867 |
|
Vulnerability in CVE-2026-53867 (CVE-2026-53867)
vulnerability in CVE-2026-53867 (CVE-2026-53867). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53839 |
|
Vulnerability in openclaw (CVE-2026-53839)
vulnerability in openclaw (CVE-2026-53839). Confidential information can be exposed externally. Mitigation: upgrade to `2026.5.7` or later.
|
| CVE-2026-53838 |
|
Vulnerability in openclaw (CVE-2026-53838)
vulnerability in openclaw (CVE-2026-53838). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.5.27` or later.
|
| CVE-2026-53837 |
|
Vulnerability in openclaw (CVE-2026-53837)
vulnerability in openclaw (CVE-2026-53837). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.5.6` or later.
|
| CVE-2026-53836 |
|
Vulnerability in openclaw (CVE-2026-53836)
vulnerability in openclaw (CVE-2026-53836). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.5.12` or later.
|
| CVE-2026-53835 |
|
Vulnerability in openclaw (CVE-2026-53835)
vulnerability in openclaw (CVE-2026-53835). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.5.6` or later.
|
| CVE-2026-53834 |
|
Authorization Flaw in openclaw (CVE-2026-53834)
vulnerability in openclaw (CVE-2026-53834). Data can be tampered with by attackers. Mitigation: upgrade to `2026.4.27` or later.
|
| CVE-2026-53833 |
|
Authorization Flaw in openclaw (CVE-2026-53833)
vulnerability in openclaw (CVE-2026-53833). Confidential information can be exposed externally. Mitigation: upgrade to `2026.4.29` or later.
|
| CVE-2026-53832 |
|
Privilege Escalation in openclaw (CVE-2026-53832)
vulnerability in openclaw (CVE-2026-53832). Confidential information can be exposed externally. Mitigation: upgrade to `2026.5.18` or later.
|
| CVE-2026-53831 |
|
OS Command Injection in openclaw (CVE-2026-53831)
OS command injection in openclaw (CVE-2026-53831). Confidential information can be exposed externally. Exploitable via ``system.run``. Mitigation: upgrade to `2026.5.18` or later.
|
| CVE-2026-53830 |
|
Vulnerability in openclaw (CVE-2026-53830)
vulnerability in openclaw (CVE-2026-53830). Data can be tampered with by attackers. Exploitable via ``secrets.reload``. Mitigation: upgrade to `2026.4.22` or later.
|
| CVE-2026-53829 |
|
Vulnerability in openclaw (CVE-2026-53829)
vulnerability in openclaw (CVE-2026-53829). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.5.18` or later.
|
| CVE-2026-53828 |
|
Authorization Flaw in openclaw (CVE-2026-53828)
vulnerability in openclaw (CVE-2026-53828). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.5.6` or later.
|
| CVE-2026-53827 |
|
Vulnerability in openclaw (CVE-2026-53827)
vulnerability in openclaw (CVE-2026-53827). Confidential information can be exposed externally. Mitigation: upgrade to `2026.5.2` or later.
|
| CVE-2026-53826 |
|
Vulnerability in openclaw (CVE-2026-53826)
vulnerability in openclaw (CVE-2026-53826). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.4.26` or later.
|
| CVE-2026-53825 |
|
Vulnerability in openclaw (CVE-2026-53825)
vulnerability in openclaw (CVE-2026-53825). Confidential information can be exposed externally. Exploitable via ``operator.write``. Mitigation: upgrade to `2026.5.12` or later.
|
| CVE-2026-53824 |
|
Vulnerability in openclaw (CVE-2026-53824)
vulnerability in openclaw (CVE-2026-53824). Data can be tampered with by attackers. Mitigation: upgrade to `2026.4.24` or later.
|
| CVE-2026-53823 |
|
Vulnerability in openclaw (CVE-2026-53823)
vulnerability in openclaw (CVE-2026-53823). Confidential information can be exposed externally. Mitigation: upgrade to `2026.5.3` or later.
|
| CVE-2026-53822 |
|
Vulnerability in Openclaw (CVE-2026-53822)
vulnerability in Openclaw (CVE-2026-53822). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.5.18` or later.
|
| CVE-2026-53821 |
|
Vulnerability in openclaw (CVE-2026-53821)
vulnerability in openclaw (CVE-2026-53821). Successful exploitation can lead to full system takeover. Exploitable via ``operator.admin``. Mitigation: upgrade to `2026.5.18` or later.
|
| CVE-2026-53820 |
|
Vulnerability in openclaw (CVE-2026-53820)
vulnerability in openclaw (CVE-2026-53820). Data can be tampered with by attackers.
|
| CVE-2026-53609 |
|
Vulnerability in apostrophe (CVE-2026-53609)
vulnerability in apostrophe (CVE-2026-53609). Confidential information can be exposed externally. Exploitable via ``__proto__``. Mitigation: upgrade to `4.31.0` or later.
|
| CVE-2026-53608 |
|
Cross-Site Scripting (XSS) in @apostrophecms/seo (CVE-2026-53608)
cross-site scripting in @apostrophecms/seo (CVE-2026-53608). Confidential information can be exposed externally. Exploitable via ``seoGoogleTrackingId``. Mitigation: upgrade to `1.5.0` or later.
|
| CVE-2026-53523 |
|
Open Redirect in github.com/nezhahq/nezha (CVE-2026-53523)
vulnerability in github.com/nezhahq/nezha (CVE-2026-53523). Confidential information can be exposed externally. Exploitable via `GET /api/v1/oauth2/github`. Mitigation: upgrade to `2.2.0` or later.
|
| CVE-2026-53522 |
|
Vulnerability in github.com/nezhahq/nezha (CVE-2026-53522)
vulnerability in github.com/nezhahq/nezha (CVE-2026-53522). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/terminal`. Mitigation: upgrade to `2.2.0` or later.
|
| CVE-2026-53521 |
|
Authorization Flaw in github.com/nezhahq/nezha (CVE-2026-53521)
vulnerability in github.com/nezhahq/nezha (CVE-2026-53521). Risk of unauthorized operations or information disclosure. Exploitable via `PATCH /server/{id}`. Mitigation: upgrade to `2.1.0` or later.
|
| CVE-2026-53520 |
|
Vulnerability in github.com/nezhahq/nezha (CVE-2026-53520)
vulnerability in github.com/nezhahq/nezha (CVE-2026-53520). Risk of unauthorized operations or information disclosure. Exploitable via ``domain``. Mitigation: upgrade to `2.1.0` or later.
|
| CVE-2026-53519 |
|
Path Traversal in github.com/nezhahq/nezha (CVE-2026-53519)
path traversal in github.com/nezhahq/nezha (CVE-2026-53519). Confidential information can be exposed externally. Exploitable via `GET /dashboard../data/config.yaml`. Mitigation: upgrade to `2.0.13` or later.
|
| CVE-2026-41158 |
|
Use-After-Free in CVE-2026-41158 (CVE-2026-41158)
vulnerability in CVE-2026-41158 (CVE-2026-41158). Successful exploitation can lead to full system takeover.
|
| CVE-2026-41157 |
|
Out-of-Bounds Write in Google chrome (CVE-2026-41157)
out-of-bounds write in Google chrome (CVE-2026-41157). Successful exploitation can lead to full system takeover.
|