Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| MAL-2026-4526 |
|
Vulnerability in claw_messenger (MAL-2026-4526)
vulnerability in claw_messenger (MAL-2026-4526). Risk of unauthorized operations or information disclosure. Exploitable via ``pkexec``.
|
| MAL-2026-4549 |
|
Vulnerability in dot-utils-plus (MAL-2026-4549)
vulnerability in dot-utils-plus (MAL-2026-4549). Risk of unauthorized operations or information disclosure. Exploitable via ``EventTarget.prototype.addEventListener``.
|
| ECHO-2fce-8b09-c05e |
|
ECHO-2fce-8b09-c05e |
| ECHO-d188-50df-d53f |
|
ECHO-d188-50df-d53f |
| ECHO-7892-53ae-a3fb |
|
ECHO-7892-53ae-a3fb |
| ECHO-28d0-99d8-d11d |
|
ECHO-28d0-99d8-d11d |
| ECHO-248e-dac5-2836 |
|
ECHO-248e-dac5-2836 |
| ECHO-a55d-d403-6e56 |
|
ECHO-a55d-d403-6e56 |
| ECHO-a689-363a-cb69 |
|
ECHO-a689-363a-cb69 |
| ECHO-ffc7-d859-2d12 |
|
ECHO-ffc7-d859-2d12 |
| ECHO-6546-2c8e-af78 |
|
ECHO-6546-2c8e-af78 |
| ECHO-627e-e177-a81b |
|
ECHO-627e-e177-a81b |
| ECHO-cd79-ba54-3567 |
|
ECHO-cd79-ba54-3567 |
| ECHO-dba8-54f3-0eb4 |
|
ECHO-dba8-54f3-0eb4 |
| ECHO-75d9-35e8-0f25 |
|
ECHO-75d9-35e8-0f25 |
| ECHO-2807-9f4f-ad1f |
|
ECHO-2807-9f4f-ad1f |
| ECHO-36d4-e1ba-8d3c |
|
ECHO-36d4-e1ba-8d3c |
| ECHO-0dff-8373-3408 |
|
ECHO-0dff-8373-3408 |
| CVE-2026-9152 |
|
Vulnerability in CVE-2026-9152 (CVE-2026-9152)
vulnerability in CVE-2026-9152 (CVE-2026-9152). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48172 KEV |
|
[KEV] Vulnerability in Litespeed privilege-escalation (CVE-2026-48172)
vulnerability in Litespeed privilege-escalation (CVE-2026-48172). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-1881 |
|
Vulnerability in wordpress (CVE-2026-1881)
vulnerability in wordpress (CVE-2026-1881). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4414 |
|
Vulnerability in @onerjs/smart-filters (MAL-2026-4414)
vulnerability in @onerjs/smart-filters (MAL-2026-4414). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4470 |
|
Vulnerability in @zentrix23/baileys (MAL-2026-4470)
vulnerability in @zentrix23/baileys (MAL-2026-4470). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4558 |
|
Vulnerability in fastgrc-openclaw (MAL-2026-4558)
vulnerability in fastgrc-openclaw (MAL-2026-4558). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4642 |
|
Vulnerability in polygon-toolkit-validate (MAL-2026-4642)
vulnerability in polygon-toolkit-validate (MAL-2026-4642). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4666 |
|
Vulnerability in seedcode-facturacion-electronica (MAL-2026-4666)
vulnerability in seedcode-facturacion-electronica (MAL-2026-4666). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`.
|
| MAL-2026-4510 |
|
Vulnerability in cerebrum-core (MAL-2026-4510)
vulnerability in cerebrum-core (MAL-2026-4510). Risk of unauthorized operations or information disclosure. Exploitable via ``postinstall``.
|
| MAL-2026-4382 |
|
Vulnerability in @djessicatony/folk-mcp-canary (MAL-2026-4382)
vulnerability in @djessicatony/folk-mcp-canary (MAL-2026-4382). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4391 |
|
Vulnerability in @gad360/apothem (MAL-2026-4391)
vulnerability in @gad360/apothem (MAL-2026-4391). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4617 |
|
Vulnerability in n8n-nodes-pentest-rce (MAL-2026-4617)
vulnerability in n8n-nodes-pentest-rce (MAL-2026-4617). Risk of unauthorized operations or information disclosure. Exploitable via ``postinstall``.
|
| MAL-2026-4626 |
|
Vulnerability in omnius (MAL-2026-4626)
vulnerability in omnius (MAL-2026-4626). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9150 |
|
Vulnerability in dos (CVE-2026-9150)
vulnerability in dos (CVE-2026-9150). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47782 |
|
Vulnerability in jvn (CVE-2026-47782)
vulnerability in jvn (CVE-2026-47782). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9149 |
|
Vulnerability in dos (CVE-2026-9149)
vulnerability in dos (CVE-2026-9149). Risk of unauthorized operations or information disclosure. Exploitable via ``repo_add_solv``.
|
| CVE-2026-8399 |
|
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
|
| DEBIAN-CVE-2026-9149 |
|
Vulnerability in libsolv (DEBIAN-CVE-2026-9149)
vulnerability in libsolv (DEBIAN-CVE-2026-9149). Risk of unauthorized operations or information disclosure. Exploitable via ``repo_add_solv``. Mitigation: upgrade to `0.7.38-1` or later.
|
| CVE-2026-40165 |
|
Vulnerability in authentik (CVE-2026-40165)
vulnerability in authentik (CVE-2026-40165). Confidential information can be exposed externally. Mitigation: upgrade to `2025.12.5, 2026.2.3` or later.
|
| MAL-2026-4401 |
|
Vulnerability in @kruzer/lib-ui (MAL-2026-4401)
vulnerability in @kruzer/lib-ui (MAL-2026-4401). Risk of unauthorized operations or information disclosure.
|
| OSV-2026-785 |
|
Vulnerability in libdwarf (OSV-2026-785)
vulnerability in libdwarf (OSV-2026-785). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `f49716564b3a263ce81c5319fecea4c9319e178f, 1ac98981519d789d11cd80997c0d431975765db0` or later.
|
| MAL-2026-4479 |
|
Vulnerability in anthropic-shared-logger (MAL-2026-4479)
vulnerability in anthropic-shared-logger (MAL-2026-4479). Risk of unauthorized operations or information disclosure.
|
| openSUSE-SU-2026:10837-1 |
|
Vulnerability in python-impacket (openSUSE-SU-2026:10837-1)
vulnerability in python-impacket (openSUSE-SU-2026:10837-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.13.1-1.1` or later.
|
| openSUSE-SU-2026:10835-1 |
|
Vulnerability in openbao (openSUSE-SU-2026:10835-1)
vulnerability in openbao (openSUSE-SU-2026:10835-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.4-1.1` or later.
|
| openSUSE-SU-2026:10834-1 |
|
Vulnerability in libcaca (openSUSE-SU-2026:10834-1)
vulnerability in libcaca (openSUSE-SU-2026:10834-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.99.beta20+git.1776622070.7c8e333-1.1` or later.
|
| openSUSE-SU-2026:10839-1 |
|
Vulnerability in ruby4.0 (openSUSE-SU-2026:10839-1)
vulnerability in ruby4.0 (openSUSE-SU-2026:10839-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.0.5-1.1` or later.
|
| openSUSE-SU-2026:10833-1 |
|
Vulnerability in haveged (openSUSE-SU-2026:10833-1)
vulnerability in haveged (openSUSE-SU-2026:10833-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.9.21-1.1` or later.
|
| openSUSE-SU-2026:10838-1 |
|
Vulnerability in python-urllib3_1 (openSUSE-SU-2026:10838-1)
vulnerability in python-urllib3_1 (openSUSE-SU-2026:10838-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.26.20-6.1` or later.
|
| openSUSE-SU-2026:10832-1 |
|
Vulnerability in freerdp (openSUSE-SU-2026:10832-1)
vulnerability in freerdp (openSUSE-SU-2026:10832-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.26.0-1.1` or later.
|
| openSUSE-SU-2026:10836-1 |
|
Vulnerability in perl-Crypt-SaltedHash (openSUSE-SU-2026:10836-1)
vulnerability in perl-Crypt-SaltedHash (openSUSE-SU-2026:10836-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.110.0-1.1` or later.
|
| openSUSE-SU-2026:10831-1 |
|
Vulnerability in flux2-cli (openSUSE-SU-2026:10831-1)
vulnerability in flux2-cli (openSUSE-SU-2026:10831-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.8.8-1.1` or later.
|
| openSUSE-SU-2026:10840-1 |
|
Vulnerability in systemd (openSUSE-SU-2026:10840-1)
vulnerability in systemd (openSUSE-SU-2026:10840-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `260.1-2.1` or later.
|