Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
RLSA-2026:22644 Vulnerability in samba (RLSA-2026:22644)
vulnerability in samba (RLSA-2026:22644). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:4.19.4-16.el8_10` or later.
MGASA-2026-0181 Vulnerability in suricata (MGASA-2026-0181)
vulnerability in suricata (MGASA-2026-0181). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.10-1.mga9` or later.
MGASA-2026-0180 Vulnerability in packagekit (MGASA-2026-0180)
vulnerability in packagekit (MGASA-2026-0180). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.2.6-2.1.mga9` or later.
CGA-8qcx-34q5-c785 CGA-8qcx-34q5-c785
CVE-2026-9662 Vulnerability in wordpress (CVE-2026-9662)
vulnerability in wordpress (CVE-2026-9662). Successful exploitation can lead to full system takeover. Exploitable via ``tpf``.
CVE-2026-9185 Vulnerability in wordpress (CVE-2026-9185)
vulnerability in wordpress (CVE-2026-9185). Confidential information can be exposed externally. Exploitable via ``userId``.
CVE-2026-8977 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8977)
cross-site scripting in wordpress (CVE-2026-8977). Risk of unauthorized operations or information disclosure.
CVE-2026-8940 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8940)
vulnerability in wordpress (CVE-2026-8940). Risk of unauthorized operations or information disclosure.
CVE-2026-8910 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8910)
vulnerability in wordpress (CVE-2026-8910). Risk of unauthorized operations or information disclosure.
CVE-2026-8909 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8909)
vulnerability in wordpress (CVE-2026-8909). Risk of unauthorized operations or information disclosure.
CVE-2026-8907 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8907)
vulnerability in wordpress (CVE-2026-8907). Risk of unauthorized operations or information disclosure.
CVE-2026-8904 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8904)
vulnerability in wordpress (CVE-2026-8904). Risk of unauthorized operations or information disclosure.
CVE-2026-8902 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8902)
vulnerability in wordpress (CVE-2026-8902). Risk of unauthorized operations or information disclosure.
CVE-2026-8895 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8895)
cross-site scripting in wordpress (CVE-2026-8895). Risk of unauthorized operations or information disclosure.
CVE-2026-8883 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8883)
cross-site scripting in wordpress (CVE-2026-8883). Risk of unauthorized operations or information disclosure.
CVE-2026-8882 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8882)
cross-site scripting in wordpress (CVE-2026-8882). Risk of unauthorized operations or information disclosure.
CVE-2026-8880 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8880)
cross-site scripting in wordpress (CVE-2026-8880). Risk of unauthorized operations or information disclosure.
CVE-2026-8841 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8841)
cross-site scripting in wordpress (CVE-2026-8841). Risk of unauthorized operations or information disclosure.
CVE-2026-8499 Vulnerability in wordpress (CVE-2026-8499)
vulnerability in wordpress (CVE-2026-8499). Risk of unauthorized operations or information disclosure. Exploitable via ``token``.
CVE-2026-7662 Cross-Site Scripting (XSS) in wordpress (CVE-2026-7662)
cross-site scripting in wordpress (CVE-2026-7662). Risk of unauthorized operations or information disclosure. Exploitable via ``epaperflip_embed``.
CVE-2026-41980 Information Disclosure in CVE-2026-41980 (CVE-2026-41980)
vulnerability in CVE-2026-41980 (CVE-2026-41980). Confidential information can be exposed externally.
CVE-2026-41979 Vulnerability in CVE-2026-41979 (CVE-2026-41979)
vulnerability in CVE-2026-41979 (CVE-2026-41979). Data can be tampered with by attackers.
CVE-2026-41978 Vulnerability in CVE-2026-41978 (CVE-2026-41978)
vulnerability in CVE-2026-41978 (CVE-2026-41978). Risk of unauthorized operations or information disclosure.
DEBIAN-CVE-2026-41851 Vulnerability in libspring-java (DEBIAN-CVE-2026-41851)
vulnerability in libspring-java (DEBIAN-CVE-2026-41851). Risk of unauthorized operations or information disclosure.
DEBIAN-CVE-2026-41855 Vulnerability in libspring-java (DEBIAN-CVE-2026-41855)
vulnerability in libspring-java (DEBIAN-CVE-2026-41855). Successful exploitation can lead to full system takeover.
DEBIAN-CVE-2026-41850 Vulnerability in libspring-java (DEBIAN-CVE-2026-41850)
vulnerability in libspring-java (DEBIAN-CVE-2026-41850). Risk of unauthorized operations or information disclosure.
DEBIAN-CVE-2026-41852 Vulnerability in libspring-java (DEBIAN-CVE-2026-41852)
vulnerability in libspring-java (DEBIAN-CVE-2026-41852). Risk of unauthorized operations or information disclosure.
DEBIAN-CVE-2026-41853 Vulnerability in libspring-java (DEBIAN-CVE-2026-41853)
vulnerability in libspring-java (DEBIAN-CVE-2026-41853). Risk of unauthorized operations or information disclosure.
DEBIAN-CVE-2026-41849 Vulnerability in libspring-java (DEBIAN-CVE-2026-41849)
vulnerability in libspring-java (DEBIAN-CVE-2026-41849). Risk of unauthorized operations or information disclosure.
CVE-2026-41975 Vulnerability in CVE-2026-41975 (CVE-2026-41975)
vulnerability in CVE-2026-41975 (CVE-2026-41975). Confidential information can be exposed externally.
CVE-2026-41855 Unsafe Deserialization in spring (CVE-2026-41855)
vulnerability in spring (CVE-2026-41855). Successful exploitation can lead to full system takeover.
CVE-2026-41854 SSRF (Server-Side Request Forgery) in org.springframework:spring-web (CVE-2026-41854)
SSRF in org.springframework:spring-web (CVE-2026-41854). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.2.19` or later.
CVE-2026-41853 Vulnerability in org.springframework:spring-webmvc (CVE-2026-41853)
vulnerability in org.springframework:spring-webmvc (CVE-2026-41853). Risk of unauthorized operations or information disclosure.
CVE-2026-41852 Authorization Flaw in org.springframework:spring-expression (CVE-2026-41852)
vulnerability in org.springframework:spring-expression (CVE-2026-41852). Risk of unauthorized operations or information disclosure.
CVE-2026-41851 Vulnerability in org.springframework:spring-expression (CVE-2026-41851)
vulnerability in org.springframework:spring-expression (CVE-2026-41851). Risk of unauthorized operations or information disclosure.
CVE-2026-41850 Vulnerability in org.springframework:spring-expression (CVE-2026-41850)
vulnerability in org.springframework:spring-expression (CVE-2026-41850). Risk of unauthorized operations or information disclosure.
CVE-2026-41849 Vulnerability in org.springframework:spring-expression (CVE-2026-41849)
vulnerability in org.springframework:spring-expression (CVE-2026-41849). Risk of unauthorized operations or information disclosure.
DEBIAN-CVE-2026-41848 Vulnerability in libspring-java (DEBIAN-CVE-2026-41848)
vulnerability in libspring-java (DEBIAN-CVE-2026-41848). Risk of unauthorized operations or information disclosure.
DEBIAN-CVE-2026-41846 Vulnerability in libspring-java (DEBIAN-CVE-2026-41846)
vulnerability in libspring-java (DEBIAN-CVE-2026-41846). Risk of unauthorized operations or information disclosure.
DEBIAN-CVE-2026-41843 Vulnerability in libspring-java (DEBIAN-CVE-2026-41843)
vulnerability in libspring-java (DEBIAN-CVE-2026-41843). Confidential information can be exposed externally.
DEBIAN-CVE-2026-41842 Vulnerability in libspring-java (DEBIAN-CVE-2026-41842)
vulnerability in libspring-java (DEBIAN-CVE-2026-41842). Risk of unauthorized operations or information disclosure.
DEBIAN-CVE-2026-41844 Vulnerability in libspring-java (DEBIAN-CVE-2026-41844)
vulnerability in libspring-java (DEBIAN-CVE-2026-41844). Risk of unauthorized operations or information disclosure.
DEBIAN-CVE-2026-41847 Vulnerability in libspring-java (DEBIAN-CVE-2026-41847)
vulnerability in libspring-java (DEBIAN-CVE-2026-41847). Risk of unauthorized operations or information disclosure.
DEBIAN-CVE-2026-41841 Vulnerability in libspring-java (DEBIAN-CVE-2026-41841)
vulnerability in libspring-java (DEBIAN-CVE-2026-41841). Confidential information can be exposed externally.
DEBIAN-CVE-2026-41845 Vulnerability in libspring-java (DEBIAN-CVE-2026-41845)
vulnerability in libspring-java (DEBIAN-CVE-2026-41845). Risk of unauthorized operations or information disclosure.
CVE-2026-41848 Vulnerability in org.springframework:spring-core (CVE-2026-41848)
vulnerability in org.springframework:spring-core (CVE-2026-41848). Risk of unauthorized operations or information disclosure.
CVE-2026-41847 Vulnerability in org.springframework:spring-webflux (CVE-2026-41847)
vulnerability in org.springframework:spring-webflux (CVE-2026-41847). Risk of unauthorized operations or information disclosure.
CVE-2026-41846 Cross-Site Scripting (XSS) in org.springframework:spring-webmvc (CVE-2026-41846)
cross-site scripting in org.springframework:spring-webmvc (CVE-2026-41846). Confidential information can be exposed externally.
CVE-2026-41845 Cross-Site Scripting (XSS) in org.springframework:spring-webmvc (CVE-2026-41845)
cross-site scripting in org.springframework:spring-webmvc (CVE-2026-41845). Confidential information can be exposed externally.
CVE-2026-41844 Open Redirect in org.springframework:spring-webmvc (CVE-2026-41844)
vulnerability in org.springframework:spring-webmvc (CVE-2026-41844). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →