Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-44465 OS Command Injection in zed (CVE-2026-44465)
OS command injection in zed (CVE-2026-44465). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.227.1` or later.
CVE-2026-44463 OS Command Injection in zed (CVE-2026-44463)
OS command injection in zed (CVE-2026-44463). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.229.0` or later.
CVE-2026-44462 Vulnerability in zed (CVE-2026-44462)
vulnerability in zed (CVE-2026-44462). Confidential information can be exposed externally. Mitigation: upgrade to `0.229.0` or later.
CVE-2026-44461 OS Command Injection in zed (CVE-2026-44461)
OS command injection in zed (CVE-2026-44461). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.227.1` or later.
CVE-2026-41185 Vulnerability in github.com/projectcalico/calico (CVE-2026-41185)
vulnerability in github.com/projectcalico/calico (CVE-2026-41185). Confidential information can be exposed externally. Mitigation: upgrade to `1.11.0-cni-plugin.0.20260417001138-cd73bc2cea0f` or later.
CVE-2026-41184 Vulnerability in github.com/projectcalico/calico (CVE-2026-41184)
vulnerability in github.com/projectcalico/calico (CVE-2026-41184). Confidential information can be exposed externally. Mitigation: upgrade to `1.11.0-cni-plugin.0.20260417001138-cd73bc2cea0f` or later.
CVE-2026-41160 Vulnerability in CVE-2026-41160 (CVE-2026-41160)
vulnerability in CVE-2026-41160 (CVE-2026-41160). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/Note/{id}/pin`. Mitigation: upgrade to `9.3.5` or later.
CVE-2026-41141 Vulnerability in CVE-2026-41141 (CVE-2026-41141)
vulnerability in CVE-2026-41141 (CVE-2026-41141). Confidential information can be exposed externally. Exploitable via `POST /api/v1/EmailTemplate/`. Mitigation: upgrade to `9.3.5` or later.
CVE-2026-38707 Command Injection in inhandnetworks (CVE-2026-38707)
command injection in inhandnetworks (CVE-2026-38707). Successful exploitation can lead to full system takeover.
CVE-2026-38704 Command Injection in inhandnetworks (CVE-2026-38704)
command injection in inhandnetworks (CVE-2026-38704). Successful exploitation can lead to full system takeover.
CVE-2026-38703 Command Injection in inhandnetworks (CVE-2026-38703)
command injection in inhandnetworks (CVE-2026-38703). Successful exploitation can lead to full system takeover.
CVE-2026-38702 Command Injection in inhandnetworks (CVE-2026-38702)
command injection in inhandnetworks (CVE-2026-38702). Successful exploitation can lead to full system takeover.
CVE-2026-24444 Vulnerability in CVE-2026-24444 (CVE-2026-24444)
vulnerability in CVE-2026-24444 (CVE-2026-24444). Successful exploitation can lead to full system takeover.
CVE-2026-41178 Vulnerability in go.opentelemetry.io/otel/baggage (CVE-2026-41178)
vulnerability in go.opentelemetry.io/otel/baggage (CVE-2026-41178). Risk of unauthorized operations or information disclosure. Exploitable via ``Parse``. Mitigation: upgrade to `1.44.0` or later.
CVE-2026-22872 Vulnerability in github.com/projectcapsule/capsule (CVE-2026-22872)
vulnerability in github.com/projectcapsule/capsule (CVE-2026-22872). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.13.0` or later.
CVE-2026-30963 Vulnerability in github.com/projectcapsule/capsule (CVE-2026-30963)
vulnerability in github.com/projectcapsule/capsule (CVE-2026-30963). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.13.0` or later.
CVE-2026-45753 Cross-Site Scripting (XSS) in symfony/html-sanitizer (CVE-2026-45753)
cross-site scripting in symfony/html-sanitizer (CVE-2026-45753). Risk of unauthorized operations or information disclosure. Exploitable via ``UrlAttributeSanitizer``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-7786 Vulnerability in cisa (CVE-2026-7786)
vulnerability in cisa (CVE-2026-7786). Successful exploitation can lead to full system takeover.
CVE-2026-6824 Cross-Site Scripting (XSS) in cisa (CVE-2026-6824)
cross-site scripting in cisa (CVE-2026-6824). Successful exploitation can lead to full system takeover.
CVE-2026-9037 Vulnerability in cisa (CVE-2026-9037)
vulnerability in cisa (CVE-2026-9037). Risk of unauthorized operations or information disclosure.
CVE-2026-42941 Vulnerability in cisa (CVE-2026-42941)
vulnerability in cisa (CVE-2026-42941). Confidential information can be exposed externally.
CVE-2025-7705 Vulnerability in cisa (CVE-2025-7705)
vulnerability in cisa (CVE-2025-7705). Risk of unauthorized operations or information disclosure.
CVE-2026-5386 Vulnerability in cisa (CVE-2026-5386)
vulnerability in cisa (CVE-2026-5386). Confidential information can be exposed externally.
DEBIAN-CVE-2026-48735 Vulnerability in pypdf (DEBIAN-CVE-2026-48735)
vulnerability in pypdf (DEBIAN-CVE-2026-48735). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.12.1` or later.
DEBIAN-CVE-2026-48526 Vulnerability in pyjwt (DEBIAN-CVE-2026-48526)
vulnerability in pyjwt (DEBIAN-CVE-2026-48526). Confidential information can be exposed externally. Mitigation: upgrade to `2.13.0` or later.
DEBIAN-CVE-2026-48523 Vulnerability in pyjwt (DEBIAN-CVE-2026-48523)
vulnerability in pyjwt (DEBIAN-CVE-2026-48523). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.13.0` or later.
DEBIAN-CVE-2026-48524 Vulnerability in pyjwt (DEBIAN-CVE-2026-48524)
vulnerability in pyjwt (DEBIAN-CVE-2026-48524). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.13.0` or later.
DEBIAN-CVE-2026-48156 Vulnerability in pypdf (DEBIAN-CVE-2026-48156)
vulnerability in pypdf (DEBIAN-CVE-2026-48156). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.12.0` or later.
DEBIAN-CVE-2026-48525 Vulnerability in pyjwt (DEBIAN-CVE-2026-48525)
vulnerability in pyjwt (DEBIAN-CVE-2026-48525). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.13.0` or later.
DEBIAN-CVE-2026-48522 Vulnerability in pyjwt (DEBIAN-CVE-2026-48522)
vulnerability in pyjwt (DEBIAN-CVE-2026-48522). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.13.0` or later.
CVE-2026-48735 Vulnerability in pypdf (CVE-2026-48735)
vulnerability in pypdf (CVE-2026-48735). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.12.1` or later.
CVE-2026-48526 Authentication Bypass in pyjwt (CVE-2026-48526)
authentication bypass in pyjwt (CVE-2026-48526). Confidential information can be exposed externally. Mitigation: upgrade to `2.13.0` or later.
CVE-2026-48525 Vulnerability in pyjwt (CVE-2026-48525)
vulnerability in pyjwt (CVE-2026-48525). Risk of unauthorized operations or information disclosure. Exploitable via `POST /verify`. Mitigation: upgrade to `2.13.0` or later.
CVE-2026-48524 Vulnerability in pyjwt (CVE-2026-48524)
vulnerability in pyjwt (CVE-2026-48524). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.13.0` or later.
CVE-2026-48523 Vulnerability in pyjwt (CVE-2026-48523)
vulnerability in pyjwt (CVE-2026-48523). Risk of unauthorized operations or information disclosure. Exploitable via ``PyJWK``. Mitigation: upgrade to `2.13.0` or later.
CVE-2026-48522 Vulnerability in pyjwt (CVE-2026-48522)
vulnerability in pyjwt (CVE-2026-48522). Risk of unauthorized operations or information disclosure. Exploitable via ``uri``. Mitigation: upgrade to `2.13.0` or later.
CVE-2026-48156 Vulnerability in pypdf (CVE-2026-48156)
vulnerability in pypdf (CVE-2026-48156). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.12.0` or later.
DEBIAN-CVE-2026-48155 Vulnerability in pypdf (DEBIAN-CVE-2026-48155)
vulnerability in pypdf (DEBIAN-CVE-2026-48155). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.12.0` or later.
CVE-2026-48155 Vulnerability in pypdf (CVE-2026-48155)
vulnerability in pypdf (CVE-2026-48155). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.12.0` or later.
CVE-2026-47762 Cross-Site Scripting (XSS) in tinymce (CVE-2026-47762)
cross-site scripting in tinymce (CVE-2026-47762). Confidential information can be exposed externally. Mitigation: upgrade to `8.5.1` or later.
CVE-2026-47761 Cross-Site Scripting (XSS) in tinymce (CVE-2026-47761)
cross-site scripting in tinymce (CVE-2026-47761). Confidential information can be exposed externally. Mitigation: upgrade to `8.5.1` or later.
CVE-2026-47760 Cross-Site Scripting (XSS) in tinymce (CVE-2026-47760)
cross-site scripting in tinymce (CVE-2026-47760). Confidential information can be exposed externally. Mitigation: upgrade to `7.1.0` or later.
CVE-2026-47759 Cross-Site Scripting (XSS) in tinymce (CVE-2026-47759)
cross-site scripting in tinymce (CVE-2026-47759). Confidential information can be exposed externally. Mitigation: upgrade to `8.5.1` or later.
CVE-2026-44358 Vulnerability in CVE-2026-44358 (CVE-2026-44358)
vulnerability in CVE-2026-44358 (CVE-2026-44358). Data can be tampered with by attackers. Mitigation: upgrade to `1.0.1` or later.
DEBIAN-CVE-2026-41565 Vulnerability in libcryptx-perl (DEBIAN-CVE-2026-41565)
vulnerability in libcryptx-perl (DEBIAN-CVE-2026-41565). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.089-1` or later.
CVE-2026-41565 Vulnerability in CVE-2026-41565 (CVE-2026-41565)
vulnerability in CVE-2026-41565 (CVE-2026-41565). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:2105-1 Vulnerability in SUSE-SU-2026:2105-1 (SUSE-SU-2026:2105-1)
vulnerability in SUSE-SU-2026:2105-1 (SUSE-SU-2026:2105-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21861-1 Vulnerability in SUSE-SU-2026:21861-1 (SUSE-SU-2026:21861-1)
vulnerability in SUSE-SU-2026:21861-1 (SUSE-SU-2026:21861-1). Risk of unauthorized operations or information disclosure.
openSUSE-SU-2026:20831-1 Vulnerability in openSUSE-SU-2026:20831-1 (openSUSE-SU-2026:20831-1)
vulnerability in openSUSE-SU-2026:20831-1 (openSUSE-SU-2026:20831-1). Risk of unauthorized operations or information disclosure.
ECHO-310b-3edb-2ba5 Vulnerability in apache2 (ECHO-310b-3edb-2ba5)
vulnerability in apache2 (ECHO-310b-3edb-2ba5). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.68-1~deb13u1` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →