Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-17271 Vulnerability in dos (CVE-2026-17271)
vulnerability in dos (CVE-2026-17271). Risk of unauthorized operations or information disclosure.
CVE-2026-17218 Out-of-Bounds Write in ibm (CVE-2026-17218)
out-of-bounds write in ibm (CVE-2026-17218). Successful exploitation can lead to full system takeover.
CVE-2026-16906 OS Command Injection in ibm (CVE-2026-16906)
OS command injection in ibm (CVE-2026-16906). Successful exploitation can lead to full system takeover.
CVE-2026-16860 Vulnerability in ibm (CVE-2026-16860)
vulnerability in ibm (CVE-2026-16860). Confidential information can be exposed externally.
CVE-2026-16907 Out-of-Bounds Write in ibm (CVE-2026-16907)
out-of-bounds write in ibm (CVE-2026-16907). Data can be tampered with by attackers.
CVE-2026-16863 Out-of-Bounds Read in ibm (CVE-2026-16863)
vulnerability in ibm (CVE-2026-16863). Confidential information can be exposed externally.
CVE-2026-16931 Vulnerability in dos (CVE-2026-16931)
vulnerability in dos (CVE-2026-16931). Risk of unauthorized operations or information disclosure.
CVE-2026-16856 OS Command Injection in ibm (CVE-2026-16856)
OS command injection in ibm (CVE-2026-16856). Successful exploitation can lead to full system takeover.
CVE-2026-15423 Authorization Flaw in gitlab (CVE-2026-15423)
vulnerability in gitlab (CVE-2026-15423). Data can be tampered with by attackers.
CVE-2026-16904 Privilege Escalation in ibm (CVE-2026-16904)
vulnerability in ibm (CVE-2026-16904). Confidential information can be exposed externally.
CVE-2026-48554 OS Command Injection in CVE-2026-48554 (CVE-2026-48554)
OS command injection in CVE-2026-48554 (CVE-2026-48554). Successful exploitation can lead to full system takeover.
CVE-2026-73240 Vulnerability in apache (CVE-2026-73240)
vulnerability in apache (CVE-2026-73240). Successful exploitation can lead to full system takeover.
CVE-2026-48550 Cross-Site Scripting (XSS) in CVE-2026-48550 (CVE-2026-48550)
cross-site scripting in CVE-2026-48550 (CVE-2026-48550). Risk of unauthorized operations or information disclosure.
CVE-2026-73238 Vulnerability in apache (CVE-2026-73238)
vulnerability in apache (CVE-2026-73238). Risk of unauthorized operations or information disclosure.
CVE-2026-18246 Vulnerability in ibm (CVE-2026-18246)
vulnerability in ibm (CVE-2026-18246). Risk of unauthorized operations or information disclosure.
CVE-2026-48553 OS Command Injection in CVE-2026-48553 (CVE-2026-48553)
OS command injection in CVE-2026-48553 (CVE-2026-48553). Successful exploitation can lead to full system takeover.
CVE-2026-73239 Vulnerability in apache (CVE-2026-73239)
vulnerability in apache (CVE-2026-73239). Confidential information can be exposed externally.
CVE-2026-48551 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-48551)
vulnerability in csrf (CVE-2026-48551). Data can be tampered with by attackers.
CVE-2026-18683 OS Command Injection in privilege-escalation (CVE-2026-18683)
OS command injection in privilege-escalation (CVE-2026-18683). Successful exploitation can lead to full system takeover.
CVE-2026-18144 Vulnerability in ibm (CVE-2026-18144)
vulnerability in ibm (CVE-2026-18144). Risk of unauthorized operations or information disclosure.
CVE-2026-48552 Cross-Site Scripting (XSS) in CVE-2026-48552 (CVE-2026-48552)
cross-site scripting in CVE-2026-48552 (CVE-2026-48552). Risk of unauthorized operations or information disclosure.
CVE-2026-73237 Vulnerability in apache (CVE-2026-73237)
vulnerability in apache (CVE-2026-73237). Risk of unauthorized operations or information disclosure.
CVE-2026-18106 Path Traversal in ibm (CVE-2026-18106)
path traversal in ibm (CVE-2026-18106). Risk of unauthorized operations or information disclosure.
CVE-2026-18098 Vulnerability in ibm (CVE-2026-18098)
vulnerability in ibm (CVE-2026-18098). Confidential information can be exposed externally.
CVE-2026-18847 Vulnerability in ibm (CVE-2026-18847)
vulnerability in ibm (CVE-2026-18847). Successful exploitation can lead to full system takeover.
CVE-2026-17095 Vulnerability in ibm (CVE-2026-17095)
vulnerability in ibm (CVE-2026-17095). Confidential information can be exposed externally.
CVE-2026-17094 Path Traversal in path-traversal (CVE-2026-17094)
path traversal in path-traversal (CVE-2026-17094). Risk of unauthorized operations or information disclosure.
CVE-2026-18499 Vulnerability in privilege-escalation (CVE-2026-18499)
vulnerability in privilege-escalation (CVE-2026-18499). Confidential information can be exposed externally.
CVE-2026-16694 Cross-Site Scripting (XSS) in ibm (CVE-2026-16694)
cross-site scripting in ibm (CVE-2026-16694). Risk of unauthorized operations or information disclosure.
CVE-2026-73300 SQL Injection in @budibase/server (CVE-2026-73300)
SQL injection in @budibase/server (CVE-2026-73300). Successful exploitation can lead to full system takeover.
CVE-2026-73299 Code Injection in CVE-2026-73299 (CVE-2026-73299)
code injection in CVE-2026-73299 (CVE-2026-73299). Successful exploitation can lead to full system takeover.
CVE-2026-73298 Vulnerability in CVE-2026-73298 (CVE-2026-73298)
vulnerability in CVE-2026-73298 (CVE-2026-73298). Risk of unauthorized operations or information disclosure.
CVE-2026-49467 Vulnerability in CVE-2026-49467 (CVE-2026-49467)
vulnerability in CVE-2026-49467 (CVE-2026-49467). Successful exploitation can lead to full system takeover. Exploitable via ``await``.
CVE-2026-73297 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-73297)
SSRF in ssrf (CVE-2026-73297). Risk of unauthorized operations or information disclosure.
CVE-2026-73296 Vulnerability in CVE-2026-73296 (CVE-2026-73296)
vulnerability in CVE-2026-73296 (CVE-2026-73296). Confidential information can be exposed externally.
CVE-2026-73295 Cross-Site Scripting (XSS) in CVE-2026-73295 (CVE-2026-73295)
cross-site scripting in CVE-2026-73295 (CVE-2026-73295). Risk of unauthorized operations or information disclosure.
CVE-2026-73325 Unsafe Deserialization in deserialization (CVE-2026-73325)
vulnerability in deserialization (CVE-2026-73325). Successful exploitation can lead to full system takeover.
CVE-2026-73294 OS Command Injection in CVE-2026-73294 (CVE-2026-73294)
OS command injection in CVE-2026-73294 (CVE-2026-73294). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/project/{id}/repositories`.
CVE-2026-73293 Privilege Escalation in CVE-2026-73293 (CVE-2026-73293)
vulnerability in CVE-2026-73293 (CVE-2026-73293). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/project/{id}/roles`.
CVE-2026-73292 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-73292)
vulnerability in csrf (CVE-2026-73292). Confidential information can be exposed externally.
CVE-2026-70547 Vulnerability in CVE-2026-70547 (CVE-2026-70547)
vulnerability in CVE-2026-70547 (CVE-2026-70547). Risk of unauthorized operations or information disclosure.
CVE-2026-69107 Vulnerability in CVE-2026-69107 (CVE-2026-69107)
vulnerability in CVE-2026-69107 (CVE-2026-69107). Confidential information can be exposed externally.
CVE-2026-69105 Vulnerability in CVE-2026-69105 (CVE-2026-69105)
vulnerability in CVE-2026-69105 (CVE-2026-69105). Data can be tampered with by attackers.
CVE-2026-68971 Vulnerability in apache (CVE-2026-68971)
vulnerability in apache (CVE-2026-68971). Confidential information can be exposed externally. Exploitable via `POST /api/v2/assets/{asset_id}/materialize`.
CVE-2026-68970 Vulnerability in apache (CVE-2026-68970)
vulnerability in apache (CVE-2026-68970). Confidential information can be exposed externally.
CVE-2026-68969 Vulnerability in apache (CVE-2026-68969)
vulnerability in apache (CVE-2026-68969). Confidential information can be exposed externally. Exploitable via `PATCH /api/v2/variables`.
CVE-2026-68968 Vulnerability in apache (CVE-2026-68968)
vulnerability in apache (CVE-2026-68968). Confidential information can be exposed externally. Exploitable via ``backfill_id``.
CVE-2026-68759 A holder of a valid integration credential may impersonate other users under specific conditions.
A holder of a valid integration credential may impersonate other users under specific conditions.
CVE-2026-68758 Vulnerability in CVE-2026-68758 (CVE-2026-68758)
vulnerability in CVE-2026-68758 (CVE-2026-68758). Confidential information can be exposed externally.
CVE-2026-68076 Vulnerability in apache (CVE-2026-68076)
vulnerability in apache (CVE-2026-68076). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v2/connections/test`.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →