Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-75843 |
|
Privilege Escalation in CVE-2026-75843 (CVE-2026-75843)
vulnerability in CVE-2026-75843 (CVE-2026-75843). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75842 |
|
Path Traversal in CVE-2026-75842 (CVE-2026-75842)
path traversal in CVE-2026-75842 (CVE-2026-75842). Confidential information can be exposed externally.
|
| CVE-2026-75854 |
|
Vulnerability in CVE-2026-75854 (CVE-2026-75854)
vulnerability in CVE-2026-75854 (CVE-2026-75854). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75846 |
|
Vulnerability in CVE-2026-75846 (CVE-2026-75846)
vulnerability in CVE-2026-75846 (CVE-2026-75846). Data can be tampered with by attackers. Exploitable via `POST /api/v1/command/{db}`.
|
| CVE-2026-75844 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-75844 (CVE-2026-75844)
SSRF in CVE-2026-75844 (CVE-2026-75844). Confidential information can be exposed externally.
|
| CVE-2026-75841 |
|
Vulnerability in dos (CVE-2026-75841)
vulnerability in dos (CVE-2026-75841). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75838 |
|
Cross-Site Scripting (XSS) in CVE-2026-75838 (CVE-2026-75838)
cross-site scripting in CVE-2026-75838 (CVE-2026-75838). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75839 |
|
Information Disclosure in CVE-2026-75839 (CVE-2026-75839)
vulnerability in CVE-2026-75839 (CVE-2026-75839). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.8.1` or later.
|
| CVE-2026-75837 |
|
Privilege Escalation in CVE-2026-75837 (CVE-2026-75837)
vulnerability in CVE-2026-75837 (CVE-2026-75837). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75831 |
|
Cross-Site Scripting (XSS) in CVE-2026-75831 (CVE-2026-75831)
cross-site scripting in CVE-2026-75831 (CVE-2026-75831). Confidential information can be exposed externally.
|
| CVE-2026-75836 |
|
Vulnerability in CVE-2026-75836 (CVE-2026-75836)
vulnerability in CVE-2026-75836 (CVE-2026-75836). Successful exploitation can lead to full system takeover. Exploitable via `GET /menubar/items`.
|
| CVE-2026-75832 |
|
Vulnerability in CVE-2026-75832 (CVE-2026-75832)
vulnerability in CVE-2026-75832 (CVE-2026-75832). Risk of unauthorized operations or information disclosure. Exploitable via `POST /blueprint-upload`. Mitigation: upgrade to `1.0.15` or later.
|
| CVE-2026-75833 |
|
Open Redirect in CVE-2026-75833 (CVE-2026-75833)
vulnerability in CVE-2026-75833 (CVE-2026-75833). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75835 |
|
Vulnerability in CVE-2026-75835 (CVE-2026-75835)
vulnerability in CVE-2026-75835 (CVE-2026-75835). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75828 |
|
Cross-Site Scripting (XSS) in CVE-2026-75828 (CVE-2026-75828)
cross-site scripting in CVE-2026-75828 (CVE-2026-75828). Confidential information can be exposed externally.
|
| CVE-2026-75829 |
|
Vulnerability in CVE-2026-75829 (CVE-2026-75829)
vulnerability in CVE-2026-75829 (CVE-2026-75829). Confidential information can be exposed externally.
|
| CVE-2026-75830 |
|
Vulnerability in path-traversal (CVE-2026-75830)
vulnerability in path-traversal (CVE-2026-75830). Data can be tampered with by attackers. Exploitable via `POST /api/v1/pages/batch`. Mitigation: upgrade to `1.0.15` or later.
|
| CVE-2026-75840 |
|
Vulnerability in CVE-2026-75840 (CVE-2026-75840)
vulnerability in CVE-2026-75840 (CVE-2026-75840). Confidential information can be exposed externally.
|
| CVE-2026-75834 |
|
Cross-Site Scripting (XSS) in CVE-2026-75834 (CVE-2026-75834)
cross-site scripting in CVE-2026-75834 (CVE-2026-75834). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75827 |
|
Code Injection in CVE-2026-75827 (CVE-2026-75827)
code injection in CVE-2026-75827 (CVE-2026-75827). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74907 |
|
Path Traversal in path-traversal (CVE-2026-74907)
path traversal in path-traversal (CVE-2026-74907). Confidential information can be exposed externally.
|
| CVE-2026-74904 |
|
Vulnerability in CVE-2026-74904 (CVE-2026-74904)
vulnerability in CVE-2026-74904 (CVE-2026-74904). Confidential information can be exposed externally.
|
| CVE-2026-74906 |
|
Authorization Flaw in CVE-2026-74906 (CVE-2026-74906)
vulnerability in CVE-2026-74906 (CVE-2026-74906). Confidential information can be exposed externally.
|
| CVE-2026-75774 |
|
Authentication Bypass in CVE-2026-75774 (CVE-2026-75774)
authentication bypass in CVE-2026-75774 (CVE-2026-75774). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-74908 |
|
Cross-Site Scripting (XSS) in CVE-2026-74908 (CVE-2026-74908)
cross-site scripting in CVE-2026-74908 (CVE-2026-74908). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75107 |
|
Cross-Site Scripting (XSS) in CVE-2026-75107 (CVE-2026-75107)
cross-site scripting in CVE-2026-75107 (CVE-2026-75107). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-74903 |
|
Vulnerability in CVE-2026-74903 (CVE-2026-74903)
vulnerability in CVE-2026-74903 (CVE-2026-74903). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15585 |
|
Path Traversal in path-traversal (CVE-2026-15585)
path traversal in path-traversal (CVE-2026-15585). Confidential information can be exposed externally.
|
| CVE-2026-74905 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-74905)
SSRF in ssrf (CVE-2026-74905). Confidential information can be exposed externally.
|
| CVE-2026-74902 |
|
Cross-Site Scripting (XSS) in c (CVE-2026-74902)
cross-site scripting in c (CVE-2026-74902). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5224 |
|
Vulnerability in CVE-2026-5224 (CVE-2026-5224)
vulnerability in CVE-2026-5224 (CVE-2026-5224). Confidential information can be exposed externally.
|
| CVE-2026-75773 |
|
Vulnerability in CVE-2026-75773 (CVE-2026-75773)
vulnerability in CVE-2026-75773 (CVE-2026-75773). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75627 |
|
Vulnerability in CVE-2026-75627 (CVE-2026-75627)
vulnerability in CVE-2026-75627 (CVE-2026-75627). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75626 |
|
Cross-Site Scripting (XSS) in CVE-2026-75626 (CVE-2026-75626)
cross-site scripting in CVE-2026-75626 (CVE-2026-75626). Confidential information can be exposed externally.
|
| CVE-2026-19608 |
|
Vulnerability in CVE-2026-19608 (CVE-2026-19608)
vulnerability in CVE-2026-19608 (CVE-2026-19608). Data can be tampered with by attackers.
|
| CVE-2026-19447 |
|
Cross-Site Scripting (XSS) in CVE-2026-19447 (CVE-2026-19447)
cross-site scripting in CVE-2026-19447 (CVE-2026-19447). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-14046 |
|
Vulnerability in CVE-2024-14046 (CVE-2024-14046)
vulnerability in CVE-2024-14046 (CVE-2024-14046). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18929 |
|
Vulnerability in dos (CVE-2026-18929)
vulnerability in dos (CVE-2026-18929). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43971 |
|
Vulnerability in CVE-2026-43971 (CVE-2026-43971)
vulnerability in CVE-2026-43971 (CVE-2026-43971). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-14045 |
|
Vulnerability in CVE-2024-14045 (CVE-2024-14045)
vulnerability in CVE-2024-14045 (CVE-2024-14045). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34884 |
|
SSRF (Server-Side Request Forgery) in apache (CVE-2026-34884)
SSRF in apache (CVE-2026-34884). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15371 |
|
Vulnerability in CVE-2026-15371 (CVE-2026-15371)
vulnerability in CVE-2026-15371 (CVE-2026-15371). Confidential information can be exposed externally.
|
| CVE-2026-75091 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-75091)
cross-site scripting in wordpress (CVE-2026-75091). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15748 |
|
Unrestricted File Upload in wordpress (CVE-2026-15748)
vulnerability in wordpress (CVE-2026-15748). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75151 |
|
Cross-Site Request Forgery (CSRF) in CVE-2026-75151 (CVE-2026-75151)
vulnerability in CVE-2026-75151 (CVE-2026-75151). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11801 |
|
Vulnerability in wordpress (CVE-2026-11801)
vulnerability in wordpress (CVE-2026-11801). Confidential information can be exposed externally.
|
| CVE-2026-75094 |
|
Command Injection in CVE-2026-75094 (CVE-2026-75094)
command injection in CVE-2026-75094 (CVE-2026-75094). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75093 |
|
Vulnerability in CVE-2026-75093 (CVE-2026-75093)
vulnerability in CVE-2026-75093 (CVE-2026-75093). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75090 |
|
Buffer Overflow in c (CVE-2026-75090)
vulnerability in c (CVE-2026-75090). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75089 |
|
Vulnerability in sqli (CVE-2026-75089)
vulnerability in sqli (CVE-2026-75089). Risk of unauthorized operations or information disclosure.
|