Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-38569 |
|
Cross-Site Scripting (XSS) in CVE-2026-38569 (CVE-2026-38569)
cross-site scripting in CVE-2026-38569 (CVE-2026-38569). Risk of unauthorized operations or information disclosure. Exploitable via `POST /candidates/add`.
|
| CVE-2026-34094 |
|
Vulnerability in CVE-2026-34094 (CVE-2026-34094)
vulnerability in CVE-2026-34094 (CVE-2026-34094). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3048 |
|
Unsafe Deserialization in CVE-2026-3048 (CVE-2026-3048)
vulnerability in CVE-2026-3048 (CVE-2026-3048). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3609 |
|
Vulnerability in privilege-escalation (CVE-2026-3609)
vulnerability in privilege-escalation (CVE-2026-3609). Successful exploitation can lead to full system takeover.
|
| CVE-2026-30635 |
|
OS Command Injection in CVE-2026-30635 (CVE-2026-30635)
OS command injection in CVE-2026-30635 (CVE-2026-30635). Successful exploitation can lead to full system takeover.
|
| CVE-2026-38567 |
|
SQL Injection in sqli (CVE-2026-38567)
SQL injection in sqli (CVE-2026-38567). Successful exploitation can lead to full system takeover.
|
| CVE-2026-2291 |
|
Vulnerability in dos (CVE-2026-2291)
vulnerability in dos (CVE-2026-2291). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34093 |
|
Information Disclosure in CVE-2026-34093 (CVE-2026-34093)
vulnerability in CVE-2026-34093 (CVE-2026-34093). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34095 |
|
Vulnerability in mediawiki (CVE-2026-34095)
vulnerability in mediawiki (CVE-2026-34095). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2393 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-2393)
SSRF in ssrf (CVE-2026-2393). Confidential information can be exposed externally. Exploitable via ``url``.
|
| CVE-2026-33362 |
|
Vulnerability in CVE-2026-33362 (CVE-2026-33362)
vulnerability in CVE-2026-33362 (CVE-2026-33362). Confidential information can be exposed externally.
|
| CVE-2026-33357 |
|
Vulnerability in CVE-2026-33357 (CVE-2026-33357)
vulnerability in CVE-2026-33357 (CVE-2026-33357). Confidential information can be exposed externally. Exploitable via `GET /openapi/device/status`.
|
| CVE-2026-38566 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-38566)
vulnerability in csrf (CVE-2026-38566). Confidential information can be exposed externally.
|
| CVE-2026-33361 |
|
Vulnerability in CVE-2026-33361 (CVE-2026-33361)
vulnerability in CVE-2026-33361 (CVE-2026-33361). Confidential information can be exposed externally.
|
| CVE-2026-38568 |
|
Vulnerability in privilege-escalation (CVE-2026-38568)
vulnerability in privilege-escalation (CVE-2026-38568). Confidential information can be exposed externally.
|
| CVE-2026-36962 |
|
SQL Injection in sqli (CVE-2026-36962)
SQL injection in sqli (CVE-2026-36962). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-36983 |
|
Command Injection in dlink (CVE-2026-36983)
command injection in dlink (CVE-2026-36983). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-36906 |
|
Cross-Site Scripting (XSS) in CVE-2026-36906 (CVE-2026-36906)
cross-site scripting in CVE-2026-36906 (CVE-2026-36906). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33359 |
|
Vulnerability in CVE-2026-33359 (CVE-2026-33359)
vulnerability in CVE-2026-33359 (CVE-2026-33359). Confidential information can be exposed externally.
|
| CVE-2026-31253 |
|
Code Injection in deserialization (CVE-2026-31253)
code injection in deserialization (CVE-2026-31253). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31251 |
|
Vulnerability in deserialization (CVE-2026-31251)
vulnerability in deserialization (CVE-2026-31251). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33356 |
|
Vulnerability in CVE-2026-33356 (CVE-2026-33356)
vulnerability in CVE-2026-33356 (CVE-2026-33356). Confidential information can be exposed externally.
|
| CVE-2026-31248 |
|
Vulnerability in dos (CVE-2026-31248)
vulnerability in dos (CVE-2026-31248). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31250 |
|
Unsafe Deserialization in deserialization (CVE-2026-31250)
vulnerability in deserialization (CVE-2026-31250). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31254 |
|
Vulnerability in CVE-2026-31254 (CVE-2026-31254)
vulnerability in CVE-2026-31254 (CVE-2026-31254). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31249 |
|
Unsafe Deserialization in deserialization (CVE-2026-31249)
vulnerability in deserialization (CVE-2026-31249). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31252 |
|
Code Injection in deserialization (CVE-2026-31252)
code injection in deserialization (CVE-2026-31252). Risk of unauthorized operations or information disclosure.
|
| MINI-wrjh-hwpp-7prq |
|
MINI-wrjh-hwpp-7prq |
| MINI-xm2h-2248-6f43 |
|
MINI-xm2h-2248-6f43 |
| MINI-q2mr-w5g9-rj8q |
|
MINI-q2mr-w5g9-rj8q |
| MINI-vwcc-6r2f-v96p |
|
MINI-vwcc-6r2f-v96p |
| MINI-rv6j-9rvw-88v5 |
|
MINI-rv6j-9rvw-88v5 |
| MINI-pgcv-2m9c-ggpv |
|
MINI-pgcv-2m9c-ggpv |
| MINI-vcmj-fj4r-hpm6 |
|
MINI-vcmj-fj4r-hpm6 |
| MINI-rm4p-64f9-c3qc |
|
MINI-rm4p-64f9-c3qc |
| MINI-xpcv-mfh4-7mqj |
|
MINI-xpcv-mfh4-7mqj |
| MINI-mvq4-p382-3xmm |
|
MINI-mvq4-p382-3xmm |
| MINI-xpgj-ph8q-786h |
|
MINI-xpgj-ph8q-786h |
| MINI-wr7j-hjwc-gm37 |
|
MINI-wr7j-hjwc-gm37 |
| MINI-x587-mhw5-88j8 |
|
MINI-x587-mhw5-88j8 |
| MINI-x6gm-xw2f-gg9f |
|
MINI-x6gm-xw2f-gg9f |
| MINI-p2xh-r4xj-6r97 |
|
MINI-p2xh-r4xj-6r97 |
| MINI-xhp3-8f2g-pxp2 |
|
MINI-xhp3-8f2g-pxp2 |
| MINI-r437-j6g4-cfxf |
|
MINI-r437-j6g4-cfxf |
| MINI-q798-j67j-74p8 |
|
MINI-q798-j67j-74p8 |
| MINI-mm5r-wc2q-4w3p |
|
MINI-mm5r-wc2q-4w3p |
| MINI-r5g9-gx4m-mq5j |
|
MINI-r5g9-gx4m-mq5j |
| MINI-w6c5-vp2j-vfpr |
|
MINI-w6c5-vp2j-vfpr |
| MINI-p9hc-787j-vcgm |
|
MINI-p9hc-787j-vcgm |
| MINI-wvc4-2w8x-48jq |
|
MINI-wvc4-2w8x-48jq |