Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| MAL-2026-5706 |
|
Vulnerability in theta-kit (MAL-2026-5706)
vulnerability in theta-kit (MAL-2026-5706). Risk of unauthorized operations or information disclosure. Exploitable via ``require``.
|
| GHSA-55wh-p7q3-vh4p |
|
Vulnerability in ttspc-server-sample (GHSA-55wh-p7q3-vh4p)
vulnerability in ttspc-server-sample (GHSA-55wh-p7q3-vh4p). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-5703 |
|
Vulnerability in eslint-plugin-mistica-local-rules (MAL-2026-5703)
vulnerability in eslint-plugin-mistica-local-rules (MAL-2026-5703). Risk of unauthorized operations or information disclosure. Exploitable via ``whoami``.
|
| openSUSE-SU-2026:20962-1 |
|
Vulnerability in cyrus-imapd (openSUSE-SU-2026:20962-1)
vulnerability in cyrus-imapd (openSUSE-SU-2026:20962-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.8.6-bp160.1.1` or later.
|
| CVE-2026-47965 |
|
Out-of-Bounds Write in adobe (CVE-2026-47965)
out-of-bounds write in adobe (CVE-2026-47965). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48558 KEV |
|
[KEV] Vulnerability in Simplehelp simple-help (CVE-2026-48558)
vulnerability in Simplehelp simple-help (CVE-2026-48558). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-53406 |
|
Vulnerability in zoom (CVE-2026-53406)
vulnerability in zoom (CVE-2026-53406). Successful exploitation can lead to full system takeover.
|
| CVE-2026-6739 |
|
Authorization Flaw in github.com/mattermost/mattermost-server (CVE-2026-6739)
vulnerability in github.com/mattermost/mattermost-server (CVE-2026-6739). Confidential information can be exposed externally. Mitigation: upgrade to `10.11.17` or later.
|
| CVE-2026-3433 |
|
Information Disclosure in github.com/mattermost/mattermost-server (CVE-2026-3433)
vulnerability in github.com/mattermost/mattermost-server (CVE-2026-3433). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.11.17` or later.
|
| CVE-2026-7387 |
|
Authorization Flaw in github.com/mattermost/mattermost-server (CVE-2026-7387)
vulnerability in github.com/mattermost/mattermost-server (CVE-2026-7387). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.11.17` or later.
|
| CVE-2026-6961 |
|
Path Traversal in github.com/mattermost/mattermost-server (CVE-2026-6961)
path traversal in github.com/mattermost/mattermost-server (CVE-2026-6961). Data can be tampered with by attackers. Mitigation: upgrade to `10.11.17` or later.
|
| CVE-2026-7184 |
|
Vulnerability in github.com/mattermost/mattermost-server (CVE-2026-7184)
vulnerability in github.com/mattermost/mattermost-server (CVE-2026-7184). Confidential information can be exposed externally. Mitigation: upgrade to `10.11.16` or later.
|
| CVE-2026-3840 |
|
Path Traversal in path-traversal (CVE-2026-3840)
path traversal in path-traversal (CVE-2026-3840). Confidential information can be exposed externally.
|
| CVE-2026-6046 |
|
Information Disclosure in github.com/mattermost/mattermost-server (CVE-2026-6046)
vulnerability in github.com/mattermost/mattermost-server (CVE-2026-6046). Confidential information can be exposed externally. Mitigation: upgrade to `10.11.17` or later.
|
| CVE-2026-6689 |
|
Vulnerability in github.com/mattermost/mattermost-server (CVE-2026-6689)
vulnerability in github.com/mattermost/mattermost-server (CVE-2026-6689). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v4/teams`. Mitigation: upgrade to `10.11.17` or later.
|
| CVE-2026-49854 |
|
Vulnerability in tornado (CVE-2026-49854)
vulnerability in tornado (CVE-2026-49854). Risk of unauthorized operations or information disclosure. Exploitable via ``tornado.speedups``. Mitigation: upgrade to `6.5.6` or later.
|
| GHSA-6vgg-xhvh-38ff |
|
Vulnerability in github.com/juev/nebula-mesh (GHSA-6vgg-xhvh-38ff)
vulnerability in github.com/juev/nebula-mesh (GHSA-6vgg-xhvh-38ff). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.3.2` or later.
|
| CVE-2026-48154 |
|
Vulnerability in github.com/pilinux/gorest (CVE-2026-48154)
vulnerability in github.com/pilinux/gorest (CVE-2026-48154). Risk of unauthorized operations or information disclosure. Exploitable via ``InMemorySecret2FA``. Mitigation: upgrade to `1.12.2` or later.
|
| GHSA-j9gf-vw2f-9hrw |
|
Vulnerability in com.appsmith:server (GHSA-j9gf-vw2f-9hrw)
vulnerability in com.appsmith:server (GHSA-j9gf-vw2f-9hrw). Confidential information can be exposed externally. Exploitable via `POST /forgotPassword`. Mitigation: upgrade to `2.0` or later.
|
| GHSA-9wcp-79g5-5c3c |
|
Vulnerability in com.appsmith:server (GHSA-9wcp-79g5-5c3c)
vulnerability in com.appsmith:server (GHSA-9wcp-79g5-5c3c). Successful exploitation can lead to full system takeover. Exploitable via `GET /api/v1/users/me`. Mitigation: upgrade to `1.99` or later.
|
| openSUSE-SU-2026:20963-1 |
|
Vulnerability in neonmodem (openSUSE-SU-2026:20963-1)
vulnerability in neonmodem (openSUSE-SU-2026:20963-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.7+git0.346d1d3-bp160.1.1` or later.
|
| CVE-2025-58175 |
|
Vulnerability in org.geoserver.web:gs-web-app (CVE-2025-58175)
vulnerability in org.geoserver.web:gs-web-app (CVE-2025-58175). Confidential information can be exposed externally. Exploitable via ``ENTITY_RESOLUTION_ALLOWLIST``. Mitigation: upgrade to `2.27.3` or later.
|
| CVE-2025-52465 |
|
Vulnerability in org.geoserver.web:gs-web-app (CVE-2025-52465)
vulnerability in org.geoserver.web:gs-web-app (CVE-2025-52465). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.26.4` or later.
|
| ALPINE-CVE-2026-48165 |
|
Vulnerability in mariadb (ALPINE-CVE-2026-48165)
vulnerability in mariadb (ALPINE-CVE-2026-48165). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.11.18-r0` or later.
|
| ALPINE-CVE-2026-48163 |
|
Vulnerability in mariadb (ALPINE-CVE-2026-48163)
vulnerability in mariadb (ALPINE-CVE-2026-48163). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.11.18-r0` or later.
|
| CVE-2026-48165 |
|
OS Command Injection in mariadb (CVE-2026-48165)
OS command injection in mariadb (CVE-2026-48165). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48163 |
|
OS Command Injection in mariadb (CVE-2026-48163)
OS command injection in mariadb (CVE-2026-48163). Successful exploitation can lead to full system takeover.
|
| ALPINE-CVE-2026-44173 |
|
Vulnerability in mariadb (ALPINE-CVE-2026-44173)
vulnerability in mariadb (ALPINE-CVE-2026-44173). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.11.17-r0` or later.
|
| ALPINE-CVE-2026-44172 |
|
Vulnerability in mariadb (ALPINE-CVE-2026-44172)
vulnerability in mariadb (ALPINE-CVE-2026-44172). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.11.17-r0` or later.
|
| CVE-2026-47225 |
|
Vulnerability in CVE-2026-47225 (CVE-2026-47225)
vulnerability in CVE-2026-47225 (CVE-2026-47225). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47223 |
|
Out-of-Bounds Read in CVE-2026-47223 (CVE-2026-47223)
vulnerability in CVE-2026-47223 (CVE-2026-47223). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47216 |
|
Vulnerability in CVE-2026-47216 (CVE-2026-47216)
vulnerability in CVE-2026-47216 (CVE-2026-47216). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44173 |
|
Authorization Flaw in mariadb (CVE-2026-44173)
vulnerability in mariadb (CVE-2026-44173). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44172 |
|
SQL Injection in mariadb (CVE-2026-44172)
SQL injection in mariadb (CVE-2026-44172). Successful exploitation can lead to full system takeover.
|
| ALPINE-CVE-2026-44171 |
|
Vulnerability in mariadb (ALPINE-CVE-2026-44171)
vulnerability in mariadb (ALPINE-CVE-2026-44171). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.11.17-r0` or later.
|
| ALPINE-CVE-2026-44170 |
|
Vulnerability in mariadb (ALPINE-CVE-2026-44170)
vulnerability in mariadb (ALPINE-CVE-2026-44170). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.11.17-r0` or later.
|
| ALPINE-CVE-2026-44168 |
|
Vulnerability in mariadb (ALPINE-CVE-2026-44168)
vulnerability in mariadb (ALPINE-CVE-2026-44168). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.11.17-r0` or later.
|
| ALPINE-CVE-2026-44169 |
|
Vulnerability in mariadb (ALPINE-CVE-2026-44169)
vulnerability in mariadb (ALPINE-CVE-2026-44169). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.11.17-r0` or later.
|
| CVE-2026-44171 |
|
Path Traversal in mariadb (CVE-2026-44171)
path traversal in mariadb (CVE-2026-44171). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.6.26, 10.11.17, 11.4.11, 11.8.7, 12.3.2` or later.
|
| CVE-2026-44170 |
|
OS Command Injection in mariadb (CVE-2026-44170)
OS command injection in mariadb (CVE-2026-44170). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44169 |
|
Authorization Flaw in mariadb (CVE-2026-44169)
vulnerability in mariadb (CVE-2026-44169). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.4.11, 11.8.7, 12.3.2` or later.
|
| CVE-2026-44168 |
|
OS Command Injection in mariadb (CVE-2026-44168)
OS command injection in mariadb (CVE-2026-44168). Successful exploitation can lead to full system takeover.
|
| BELL-CVE-2026-50142 |
|
BELL-CVE-2026-50142 |
| RLSA-2026:25120 |
|
Vulnerability in kernel-rt (RLSA-2026:25120)
vulnerability in kernel-rt (RLSA-2026:25120). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:4.18.0-553.132.1.rt7.473.el8_10` or later.
|
| RLSA-2026:25121 |
|
Vulnerability in kernel (RLSA-2026:25121)
vulnerability in kernel (RLSA-2026:25121). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:4.18.0-553.132.1.el8_10` or later.
|
| MAL-2026-5702 |
|
Vulnerability in flexitest (MAL-2026-5702)
vulnerability in flexitest (MAL-2026-5702). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53982 |
|
Vulnerability in CVE-2026-53982 (CVE-2026-53982)
vulnerability in CVE-2026-53982 (CVE-2026-53982). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53981 |
|
Vulnerability in CVE-2026-53981 (CVE-2026-53981)
vulnerability in CVE-2026-53981 (CVE-2026-53981). Confidential information can be exposed externally.
|
| CVE-2026-47224 |
|
Out-of-Bounds Read in CVE-2026-47224 (CVE-2026-47224)
vulnerability in CVE-2026-47224 (CVE-2026-47224). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47222 |
|
Out-of-Bounds Read in dos (CVE-2026-47222)
vulnerability in dos (CVE-2026-47222). Risk of unauthorized operations or information disclosure.
|