Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
UBUNTU-CVE-2026-39829 Vulnerability in golang-go.crypto (UBUNTU-CVE-2026-39829)
vulnerability in golang-go.crypto (UBUNTU-CVE-2026-39829). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-39828 Vulnerability in golang-go.crypto (UBUNTU-CVE-2026-39828)
vulnerability in golang-go.crypto (UBUNTU-CVE-2026-39828). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-39830 Vulnerability in golang-go.crypto (UBUNTU-CVE-2026-39830)
vulnerability in golang-go.crypto (UBUNTU-CVE-2026-39830). Confidential information can be exposed externally.
UBUNTU-CVE-2026-39827 Vulnerability in golang-go.crypto (UBUNTU-CVE-2026-39827)
vulnerability in golang-go.crypto (UBUNTU-CVE-2026-39827). Risk of unauthorized operations or information disclosure.
openSUSE-SU-2026:10841-1 Vulnerability in chromium (openSUSE-SU-2026:10841-1)
vulnerability in chromium (openSUSE-SU-2026:10841-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `148.0.7778.178-1.1` or later.
UBUNTU-CVE-2026-43498 Vulnerability in linux (UBUNTU-CVE-2026-43498)
vulnerability in linux (UBUNTU-CVE-2026-43498). Successful exploitation can lead to full system takeover.
UBUNTU-CVE-2026-43502 Vulnerability in linux (UBUNTU-CVE-2026-43502)
vulnerability in linux (UBUNTU-CVE-2026-43502). Successful exploitation can lead to full system takeover.
UBUNTU-CVE-2026-43501 Vulnerability in linux (UBUNTU-CVE-2026-43501)
vulnerability in linux (UBUNTU-CVE-2026-43501). Successful exploitation can lead to full system takeover.
UBUNTU-CVE-2026-43495 Vulnerability in linux (UBUNTU-CVE-2026-43495)
vulnerability in linux (UBUNTU-CVE-2026-43495). Successful exploitation can lead to full system takeover.
UBUNTU-CVE-2026-43497 Vulnerability in linux (UBUNTU-CVE-2026-43497)
vulnerability in linux (UBUNTU-CVE-2026-43497). Successful exploitation can lead to full system takeover.
UBUNTU-CVE-2026-43494 Vulnerability in linux (UBUNTU-CVE-2026-43494)
vulnerability in linux (UBUNTU-CVE-2026-43494). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.4.0-1160.170~18.04.1` or later.
UBUNTU-CVE-2026-43496 Vulnerability in linux (UBUNTU-CVE-2026-43496)
vulnerability in linux (UBUNTU-CVE-2026-43496). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-43499 Vulnerability in linux (UBUNTU-CVE-2026-43499)
vulnerability in linux (UBUNTU-CVE-2026-43499). Successful exploitation can lead to full system takeover.
UBUNTU-CVE-2026-42784 [openpgp: Don't imply missing key flags from key type]
UBUNTU-CVE-2026-8376 Vulnerability in perl (UBUNTU-CVE-2026-8376)
vulnerability in perl (UBUNTU-CVE-2026-8376). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.18.2-2ubuntu1.7+esm7` or later.
UBUNTU-CVE-2026-44933 Vulnerability in libzypp (UBUNTU-CVE-2026-44933)
vulnerability in libzypp (UBUNTU-CVE-2026-44933). Successful exploitation can lead to full system takeover. Exploitable via ``PluginScript``.
UBUNTU-CVE-2026-36189 Vulnerability in uncrustify (UBUNTU-CVE-2026-36189)
vulnerability in uncrustify (UBUNTU-CVE-2026-36189). Risk of unauthorized operations or information disclosure.
CVE-2026-5297 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
MAL-2026-4755 Vulnerability in mathepy (MAL-2026-4755)
vulnerability in mathepy (MAL-2026-4755). Risk of unauthorized operations or information disclosure. Exploitable via ``prompt``.
CVE-2026-46701 Vulnerability in network-ai (CVE-2026-46701)
vulnerability in network-ai (CVE-2026-46701). Data can be tampered with by attackers. Exploitable via `POST /mcp`. Mitigation: upgrade to `5.4.5` or later.
MAL-2026-4540 Vulnerability in crypt0co-walet-poc (MAL-2026-4540)
vulnerability in crypt0co-walet-poc (MAL-2026-4540). Risk of unauthorized operations or information disclosure. Exploitable via ``whoami``.
MAL-2026-4749 Vulnerability in fakehuop (MAL-2026-4749)
vulnerability in fakehuop (MAL-2026-4749). Risk of unauthorized operations or information disclosure. Exploitable via ``gsk_...``.
CVE-2026-8435 Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-8435)
vulnerability in concrete5/concrete5 (CVE-2026-8435). Data can be tampered with by attackers. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-8434 Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-8434)
vulnerability in concrete5/concrete5 (CVE-2026-8434). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-8433 Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-8433)
vulnerability in concrete5/concrete5 (CVE-2026-8433). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-8432 Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-8432)
vulnerability in concrete5/concrete5 (CVE-2026-8432). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-8427 Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-8427)
vulnerability in concrete5/concrete5 (CVE-2026-8427). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-8416 Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-8416)
vulnerability in concrete5/concrete5 (CVE-2026-8416). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-8415 Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-8415)
vulnerability in concrete5/concrete5 (CVE-2026-8415). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-8414 Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-8414)
vulnerability in concrete5/concrete5 (CVE-2026-8414). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-8413 Vulnerability in concrete5/concrete5 (CVE-2026-8413)
vulnerability in concrete5/concrete5 (CVE-2026-8413). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-8412 Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-8412)
vulnerability in concrete5/concrete5 (CVE-2026-8412). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-8411 Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-8411)
vulnerability in concrete5/concrete5 (CVE-2026-8411). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-8410 Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-8410)
vulnerability in concrete5/concrete5 (CVE-2026-8410). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-8409 Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-8409)
vulnerability in concrete5/concrete5 (CVE-2026-8409). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-8337 Vulnerability in concrete5/concrete5 (CVE-2026-8337)
vulnerability in concrete5/concrete5 (CVE-2026-8337). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-8327 Privilege Escalation in concrete5/concrete5 (CVE-2026-8327)
vulnerability in concrete5/concrete5 (CVE-2026-8327). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-8245 Vulnerability in concrete5/concrete5 (CVE-2026-8245)
vulnerability in concrete5/concrete5 (CVE-2026-8245). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-8240 Vulnerability in concrete5/concrete5 (CVE-2026-8240)
vulnerability in concrete5/concrete5 (CVE-2026-8240). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-8239 Vulnerability in concrete5/concrete5 (CVE-2026-8239)
vulnerability in concrete5/concrete5 (CVE-2026-8239). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-8238 Vulnerability in concrete5/concrete5 (CVE-2026-8238)
vulnerability in concrete5/concrete5 (CVE-2026-8238). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-8237 Vulnerability in concrete5/concrete5 (CVE-2026-8237)
vulnerability in concrete5/concrete5 (CVE-2026-8237). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-8236 Vulnerability in concrete5/concrete5 (CVE-2026-8236)
vulnerability in concrete5/concrete5 (CVE-2026-8236). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-8139 Cross-Site Scripting (XSS) in concrete5/concrete5 (CVE-2026-8139)
cross-site scripting in concrete5/concrete5 (CVE-2026-8139). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-7890 SSRF (Server-Side Request Forgery) in concrete5/concrete5 (CVE-2026-7890)
SSRF in concrete5/concrete5 (CVE-2026-7890). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-7887 Vulnerability in concrete5/concrete5 (CVE-2026-7887)
vulnerability in concrete5/concrete5 (CVE-2026-7887). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-7886 Vulnerability in concrete5/concrete5 (CVE-2026-7886)
vulnerability in concrete5/concrete5 (CVE-2026-7886). Risk of unauthorized operations or information disclosure. Exploitable via ``AddMessage``. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-7882 Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-7882)
vulnerability in concrete5/concrete5 (CVE-2026-7882). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
DEBIAN-CVE-2026-5091 Vulnerability in libcatalyst-plugin-authentication-perl (DEBIAN-CVE-2026-5091)
vulnerability in libcatalyst-plugin-authentication-perl (DEBIAN-CVE-2026-5091). Confidential information can be exposed externally. Mitigation: upgrade to `0.10026-1` or later.
CVE-2026-7881 Vulnerability in concrete5/concrete5 (CVE-2026-7881)
vulnerability in concrete5/concrete5 (CVE-2026-7881). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →