Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-53149 Out-of-Bounds Read in linux (CVE-2026-53149)
vulnerability in linux (CVE-2026-53149). Confidential information can be exposed externally.
CVE-2026-53162 Vulnerability in linux (CVE-2026-53162)
vulnerability in linux (CVE-2026-53162). Successful exploitation can lead to full system takeover.
CVE-2026-53148 Out-of-Bounds Write in linux (CVE-2026-53148)
out-of-bounds write in linux (CVE-2026-53148). Successful exploitation can lead to full system takeover.
CVE-2026-53172 Out-of-Bounds Read in linux (CVE-2026-53172)
vulnerability in linux (CVE-2026-53172). Successful exploitation can lead to full system takeover.
CVE-2026-53171 Vulnerability in c (CVE-2026-53171)
vulnerability in c (CVE-2026-53171). Successful exploitation can lead to full system takeover.
CVE-2026-53159 Vulnerability in linux (CVE-2026-53159)
vulnerability in linux (CVE-2026-53159). Successful exploitation can lead to full system takeover.
CVE-2026-53170 Vulnerability in c (CVE-2026-53170)
vulnerability in c (CVE-2026-53170). Successful exploitation can lead to full system takeover.
CVE-2026-53173 Out-of-Bounds Write in linux (CVE-2026-53173)
out-of-bounds write in linux (CVE-2026-53173). Successful exploitation can lead to full system takeover.
CVE-2026-53153 Vulnerability in linux (CVE-2026-53153)
vulnerability in linux (CVE-2026-53153). Successful exploitation can lead to full system takeover.
CVE-2026-53161 Use-After-Free in linux (CVE-2026-53161)
vulnerability in linux (CVE-2026-53161). Successful exploitation can lead to full system takeover.
CVE-2026-53160 Use-After-Free in linux (CVE-2026-53160)
vulnerability in linux (CVE-2026-53160). Successful exploitation can lead to full system takeover.
CVE-2026-53147 Out-of-Bounds Read in linux (CVE-2026-53147)
vulnerability in linux (CVE-2026-53147). Confidential information can be exposed externally.
CVE-2026-53156 Use-After-Free in linux (CVE-2026-53156)
vulnerability in linux (CVE-2026-53156). Successful exploitation can lead to full system takeover.
CVE-2026-53157 Use-After-Free in linux (CVE-2026-53157)
vulnerability in linux (CVE-2026-53157). Successful exploitation can lead to full system takeover.
CVE-2026-53143 Vulnerability in linux (CVE-2026-53143)
vulnerability in linux (CVE-2026-53143). Successful exploitation can lead to full system takeover.
CVE-2026-53132 Vulnerability in linux (CVE-2026-53132)
vulnerability in linux (CVE-2026-53132). Risk of unauthorized operations or information disclosure.
CVE-2026-53138 Out-of-Bounds Read in c (CVE-2026-53138)
vulnerability in c (CVE-2026-53138). Confidential information can be exposed externally.
CVE-2026-53137 Out-of-Bounds Write in linux (CVE-2026-53137)
out-of-bounds write in linux (CVE-2026-53137). Successful exploitation can lead to full system takeover.
CVE-2026-53133 Vulnerability in linux (CVE-2026-53133)
vulnerability in linux (CVE-2026-53133). Successful exploitation can lead to full system takeover.
CVE-2026-53136 Out-of-Bounds Write in linux (CVE-2026-53136)
out-of-bounds write in linux (CVE-2026-53136). Successful exploitation can lead to full system takeover.
CVE-2026-5305 Vulnerability in wordpress (CVE-2026-5305)
vulnerability in wordpress (CVE-2026-5305). Successful exploitation can lead to full system takeover.
CVE-2026-12244 Vulnerability in nlnetlabs (CVE-2026-12244)
vulnerability in nlnetlabs (CVE-2026-12244). Successful exploitation can lead to full system takeover.
CVE-2026-12246 Vulnerability in nlnetlabs (CVE-2026-12246)
vulnerability in nlnetlabs (CVE-2026-12246). Data can be tampered with by attackers.
CVE-2026-12490 Vulnerability in nlnetlabs (CVE-2026-12490)
vulnerability in nlnetlabs (CVE-2026-12490). Confidential information can be exposed externally.
CVE-2026-12937 SQL Injection in wordpress (CVE-2026-12937)
SQL injection in wordpress (CVE-2026-12937). Confidential information can be exposed externally.
CVE-2026-12245 Use-After-Free in nlnetlabs (CVE-2026-12245)
vulnerability in nlnetlabs (CVE-2026-12245). Risk of unauthorized operations or information disclosure.
CVE-2026-9702 Vulnerability in wordpress (CVE-2026-9702)
vulnerability in wordpress (CVE-2026-9702). Data can be tampered with by attackers.
CVE-2026-12053 Vulnerability in gitlab (CVE-2026-12053)
vulnerability in gitlab (CVE-2026-12053). Confidential information can be exposed externally. Mitigation: upgrade to `19.1.1` or later.
CVE-2026-10712 Cross-Site Scripting (XSS) in gitlab (CVE-2026-10712)
cross-site scripting in gitlab (CVE-2026-10712). Confidential information can be exposed externally. Mitigation: upgrade to `18.11.6, 19.0.3, 19.1.1` or later.
CVE-2026-10086 Cross-Site Scripting (XSS) in gitlab (CVE-2026-10086)
cross-site scripting in gitlab (CVE-2026-10086). Confidential information can be exposed externally. Mitigation: upgrade to `18.11.6, 19.0.3, 19.1.1` or later.
CVE-2026-12077 SQL Injection in wordpress (CVE-2026-12077)
SQL injection in wordpress (CVE-2026-12077). Confidential information can be exposed externally.
CVE-2026-13311 Vulnerability in shell-quote (CVE-2026-13311)
vulnerability in shell-quote (CVE-2026-13311). Risk of unauthorized operations or information disclosure. Exploitable via `GET /ping`. Mitigation: upgrade to `1.9.0` or later.
CVE-2026-8666 OS Command Injection in rapid7 (CVE-2026-8666)
OS command injection in rapid7 (CVE-2026-8666). Confidential information can be exposed externally.
CVE-2026-8660 OS Command Injection in rapid7 (CVE-2026-8660)
OS command injection in rapid7 (CVE-2026-8660). Confidential information can be exposed externally.
CVE-2026-8665 OS Command Injection in rapid7 (CVE-2026-8665)
OS command injection in rapid7 (CVE-2026-8665). Confidential information can be exposed externally.
CVE-2026-8592 OS Command Injection in rapid7 (CVE-2026-8592)
OS command injection in rapid7 (CVE-2026-8592). Confidential information can be exposed externally.
CVE-2026-9154 Path Traversal in gnu (CVE-2026-9154)
path traversal in gnu (CVE-2026-9154). Data can be tampered with by attackers.
CVE-2026-9155 OS Command Injection in gnu (CVE-2026-9155)
OS command injection in gnu (CVE-2026-9155). Successful exploitation can lead to full system takeover.
CVE-2026-57589 Use-After-Free in c (CVE-2026-57589)
vulnerability in c (CVE-2026-57589). Successful exploitation can lead to full system takeover.
CVE-2026-9785 SQL Injection in sqli (CVE-2026-9785)
SQL injection in sqli (CVE-2026-9785). Successful exploitation can lead to full system takeover.
CVE-2026-9783 SQL Injection in sqli (CVE-2026-9783)
SQL injection in sqli (CVE-2026-9783). Successful exploitation can lead to full system takeover.
CVE-2026-9786 SQL Injection in sqli (CVE-2026-9786)
SQL injection in sqli (CVE-2026-9786). Successful exploitation can lead to full system takeover.
CVE-2026-9787 OS Command Injection in quest (CVE-2026-9787)
OS command injection in quest (CVE-2026-9787). Successful exploitation can lead to full system takeover.
CVE-2026-9784 SQL Injection in sqli (CVE-2026-9784)
SQL injection in sqli (CVE-2026-9784). Successful exploitation can lead to full system takeover.
CVE-2026-9780 Cross-Site Scripting (XSS) in quest (CVE-2026-9780)
cross-site scripting in quest (CVE-2026-9780). Successful exploitation can lead to full system takeover.
CVE-2026-9773 OS Command Injection in unraid (CVE-2026-9773)
OS command injection in unraid (CVE-2026-9773). Successful exploitation can lead to full system takeover.
CVE-2026-9772 OS Command Injection in unraid (CVE-2026-9772)
OS command injection in unraid (CVE-2026-9772). Successful exploitation can lead to full system takeover.
CVE-2026-9777 Path Traversal in path-traversal (CVE-2026-9777)
path traversal in path-traversal (CVE-2026-9777). Successful exploitation can lead to full system takeover.
CVE-2026-9776 Path Traversal in path-traversal (CVE-2026-9776)
path traversal in path-traversal (CVE-2026-9776). Confidential information can be exposed externally.
CVE-2025-60467 Use-After-Free in c (CVE-2025-60467)
vulnerability in c (CVE-2025-60467). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →