Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-17271 |
|
Vulnerability in dos (CVE-2026-17271)
vulnerability in dos (CVE-2026-17271). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17218 |
|
Out-of-Bounds Write in ibm (CVE-2026-17218)
out-of-bounds write in ibm (CVE-2026-17218). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16906 |
|
OS Command Injection in ibm (CVE-2026-16906)
OS command injection in ibm (CVE-2026-16906). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16860 |
|
Vulnerability in ibm (CVE-2026-16860)
vulnerability in ibm (CVE-2026-16860). Confidential information can be exposed externally.
|
| CVE-2026-16907 |
|
Out-of-Bounds Write in ibm (CVE-2026-16907)
out-of-bounds write in ibm (CVE-2026-16907). Data can be tampered with by attackers.
|
| CVE-2026-16863 |
|
Out-of-Bounds Read in ibm (CVE-2026-16863)
vulnerability in ibm (CVE-2026-16863). Confidential information can be exposed externally.
|
| CVE-2026-16931 |
|
Vulnerability in dos (CVE-2026-16931)
vulnerability in dos (CVE-2026-16931). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16856 |
|
OS Command Injection in ibm (CVE-2026-16856)
OS command injection in ibm (CVE-2026-16856). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15423 |
|
Authorization Flaw in gitlab (CVE-2026-15423)
vulnerability in gitlab (CVE-2026-15423). Data can be tampered with by attackers.
|
| CVE-2026-16904 |
|
Privilege Escalation in ibm (CVE-2026-16904)
vulnerability in ibm (CVE-2026-16904). Confidential information can be exposed externally.
|
| CVE-2026-48554 |
|
OS Command Injection in CVE-2026-48554 (CVE-2026-48554)
OS command injection in CVE-2026-48554 (CVE-2026-48554). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73240 |
|
Vulnerability in apache (CVE-2026-73240)
vulnerability in apache (CVE-2026-73240). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48550 |
|
Cross-Site Scripting (XSS) in CVE-2026-48550 (CVE-2026-48550)
cross-site scripting in CVE-2026-48550 (CVE-2026-48550). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73238 |
|
Vulnerability in apache (CVE-2026-73238)
vulnerability in apache (CVE-2026-73238). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18246 |
|
Vulnerability in ibm (CVE-2026-18246)
vulnerability in ibm (CVE-2026-18246). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48553 |
|
OS Command Injection in CVE-2026-48553 (CVE-2026-48553)
OS command injection in CVE-2026-48553 (CVE-2026-48553). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73239 |
|
Vulnerability in apache (CVE-2026-73239)
vulnerability in apache (CVE-2026-73239). Confidential information can be exposed externally.
|
| CVE-2026-48551 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-48551)
vulnerability in csrf (CVE-2026-48551). Data can be tampered with by attackers.
|
| CVE-2026-18683 |
|
OS Command Injection in privilege-escalation (CVE-2026-18683)
OS command injection in privilege-escalation (CVE-2026-18683). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18144 |
|
Vulnerability in ibm (CVE-2026-18144)
vulnerability in ibm (CVE-2026-18144). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48552 |
|
Cross-Site Scripting (XSS) in CVE-2026-48552 (CVE-2026-48552)
cross-site scripting in CVE-2026-48552 (CVE-2026-48552). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73237 |
|
Vulnerability in apache (CVE-2026-73237)
vulnerability in apache (CVE-2026-73237). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18106 |
|
Path Traversal in ibm (CVE-2026-18106)
path traversal in ibm (CVE-2026-18106). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18098 |
|
Vulnerability in ibm (CVE-2026-18098)
vulnerability in ibm (CVE-2026-18098). Confidential information can be exposed externally.
|
| CVE-2026-18847 |
|
Vulnerability in ibm (CVE-2026-18847)
vulnerability in ibm (CVE-2026-18847). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17095 |
|
Vulnerability in ibm (CVE-2026-17095)
vulnerability in ibm (CVE-2026-17095). Confidential information can be exposed externally.
|
| CVE-2026-17094 |
|
Path Traversal in path-traversal (CVE-2026-17094)
path traversal in path-traversal (CVE-2026-17094). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18499 |
|
Vulnerability in privilege-escalation (CVE-2026-18499)
vulnerability in privilege-escalation (CVE-2026-18499). Confidential information can be exposed externally.
|
| CVE-2026-16694 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2026-16694)
cross-site scripting in ibm (CVE-2026-16694). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73300 |
|
SQL Injection in @budibase/server (CVE-2026-73300)
SQL injection in @budibase/server (CVE-2026-73300). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73299 |
|
Code Injection in CVE-2026-73299 (CVE-2026-73299)
code injection in CVE-2026-73299 (CVE-2026-73299). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73298 |
|
Vulnerability in CVE-2026-73298 (CVE-2026-73298)
vulnerability in CVE-2026-73298 (CVE-2026-73298). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49467 |
|
Vulnerability in CVE-2026-49467 (CVE-2026-49467)
vulnerability in CVE-2026-49467 (CVE-2026-49467). Successful exploitation can lead to full system takeover. Exploitable via ``await``.
|
| CVE-2026-73297 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-73297)
SSRF in ssrf (CVE-2026-73297). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73296 |
|
Vulnerability in CVE-2026-73296 (CVE-2026-73296)
vulnerability in CVE-2026-73296 (CVE-2026-73296). Confidential information can be exposed externally.
|
| CVE-2026-73295 |
|
Cross-Site Scripting (XSS) in CVE-2026-73295 (CVE-2026-73295)
cross-site scripting in CVE-2026-73295 (CVE-2026-73295). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73325 |
|
Unsafe Deserialization in deserialization (CVE-2026-73325)
vulnerability in deserialization (CVE-2026-73325). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73294 |
|
OS Command Injection in CVE-2026-73294 (CVE-2026-73294)
OS command injection in CVE-2026-73294 (CVE-2026-73294). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/project/{id}/repositories`.
|
| CVE-2026-73293 |
|
Privilege Escalation in CVE-2026-73293 (CVE-2026-73293)
vulnerability in CVE-2026-73293 (CVE-2026-73293). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/project/{id}/roles`.
|
| CVE-2026-73292 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-73292)
vulnerability in csrf (CVE-2026-73292). Confidential information can be exposed externally.
|
| CVE-2026-70547 |
|
Vulnerability in CVE-2026-70547 (CVE-2026-70547)
vulnerability in CVE-2026-70547 (CVE-2026-70547). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-69107 |
|
Vulnerability in CVE-2026-69107 (CVE-2026-69107)
vulnerability in CVE-2026-69107 (CVE-2026-69107). Confidential information can be exposed externally.
|
| CVE-2026-69105 |
|
Vulnerability in CVE-2026-69105 (CVE-2026-69105)
vulnerability in CVE-2026-69105 (CVE-2026-69105). Data can be tampered with by attackers.
|
| CVE-2026-68971 |
|
Vulnerability in apache (CVE-2026-68971)
vulnerability in apache (CVE-2026-68971). Confidential information can be exposed externally. Exploitable via `POST /api/v2/assets/{asset_id}/materialize`.
|
| CVE-2026-68970 |
|
Vulnerability in apache (CVE-2026-68970)
vulnerability in apache (CVE-2026-68970). Confidential information can be exposed externally.
|
| CVE-2026-68969 |
|
Vulnerability in apache (CVE-2026-68969)
vulnerability in apache (CVE-2026-68969). Confidential information can be exposed externally. Exploitable via `PATCH /api/v2/variables`.
|
| CVE-2026-68968 |
|
Vulnerability in apache (CVE-2026-68968)
vulnerability in apache (CVE-2026-68968). Confidential information can be exposed externally. Exploitable via ``backfill_id``.
|
| CVE-2026-68759 |
|
A holder of a valid integration credential may impersonate other users under specific conditions.
A holder of a valid integration credential may impersonate other users under specific conditions.
|
| CVE-2026-68758 |
|
Vulnerability in CVE-2026-68758 (CVE-2026-68758)
vulnerability in CVE-2026-68758 (CVE-2026-68758). Confidential information can be exposed externally.
|
| CVE-2026-68076 |
|
Vulnerability in apache (CVE-2026-68076)
vulnerability in apache (CVE-2026-68076). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v2/connections/test`.
|