Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-7867 Authorization Flaw in privilege-escalation (CVE-2026-7867)
vulnerability in privilege-escalation (CVE-2026-7867). Successful exploitation can lead to full system takeover.
CVE-2026-7406 Vulnerability in CVE-2026-7406 (CVE-2026-7406)
vulnerability in CVE-2026-7406 (CVE-2026-7406). Successful exploitation can lead to full system takeover.
CVE-2026-7405 Out-of-Bounds Read in dos (CVE-2026-7405)
vulnerability in dos (CVE-2026-7405). Risk of unauthorized operations or information disclosure.
CVE-2026-71555 Vulnerability in CVE-2026-71555 (CVE-2026-71555)
vulnerability in CVE-2026-71555 (CVE-2026-71555). Risk of unauthorized operations or information disclosure.
CVE-2026-71447 Cross-Site Scripting (XSS) in CVE-2026-71447 (CVE-2026-71447)
cross-site scripting in CVE-2026-71447 (CVE-2026-71447). Risk of unauthorized operations or information disclosure.
CVE-2026-71446 Cross-Site Scripting (XSS) in CVE-2026-71446 (CVE-2026-71446)
cross-site scripting in CVE-2026-71446 (CVE-2026-71446). Risk of unauthorized operations or information disclosure.
CVE-2026-71445 Cross-Site Scripting (XSS) in CVE-2026-71445 (CVE-2026-71445)
cross-site scripting in CVE-2026-71445 (CVE-2026-71445). Risk of unauthorized operations or information disclosure.
CVE-2026-70640 Vulnerability in cpp (CVE-2026-70640)
vulnerability in cpp (CVE-2026-70640). Successful exploitation can lead to full system takeover.
CVE-2026-70639 Vulnerability in cpp (CVE-2026-70639)
vulnerability in cpp (CVE-2026-70639). Risk of unauthorized operations or information disclosure.
CVE-2026-70638 Vulnerability in cpp (CVE-2026-70638)
vulnerability in cpp (CVE-2026-70638). Successful exploitation can lead to full system takeover.
CVE-2026-70636 Vulnerability in CVE-2026-70636 (CVE-2026-70636)
vulnerability in CVE-2026-70636 (CVE-2026-70636). Data can be tampered with by attackers.
CVE-2026-70635 Out-of-Bounds Read in CVE-2026-70635 (CVE-2026-70635)
vulnerability in CVE-2026-70635 (CVE-2026-70635). Risk of unauthorized operations or information disclosure.
CVE-2026-70634 Out-of-Bounds Read in c (CVE-2026-70634)
vulnerability in c (CVE-2026-70634). Confidential information can be exposed externally.
CVE-2026-70633 Out-of-Bounds Read in dos (CVE-2026-70633)
vulnerability in dos (CVE-2026-70633). Risk of unauthorized operations or information disclosure.
CVE-2026-70632 Out-of-Bounds Write in CVE-2026-70632 (CVE-2026-70632)
out-of-bounds write in CVE-2026-70632 (CVE-2026-70632). Successful exploitation can lead to full system takeover.
CVE-2026-70631 Vulnerability in c (CVE-2026-70631)
vulnerability in c (CVE-2026-70631). Confidential information can be exposed externally.
CVE-2026-70630 Vulnerability in c (CVE-2026-70630)
vulnerability in c (CVE-2026-70630). Confidential information can be exposed externally.
CVE-2026-70629 Vulnerability in c (CVE-2026-70629)
vulnerability in c (CVE-2026-70629). Confidential information can be exposed externally.
CVE-2026-70628 Vulnerability in c (CVE-2026-70628)
vulnerability in c (CVE-2026-70628). Successful exploitation can lead to full system takeover.
CVE-2026-70559 Vulnerability in CVE-2026-70559 (CVE-2026-70559)
vulnerability in CVE-2026-70559 (CVE-2026-70559). Confidential information can be exposed externally. Exploitable via `GET /api/sysConfig/getAll`.
CVE-2026-70558 Unrestricted File Upload in CVE-2026-70558 (CVE-2026-70558)
vulnerability in CVE-2026-70558 (CVE-2026-70558). Successful exploitation can lead to full system takeover. Exploitable via `POST /download/uploadFromRsByLocal`.
CVE-2026-70557 Vulnerability in CVE-2026-70557 (CVE-2026-70557)
vulnerability in CVE-2026-70557 (CVE-2026-70557). Confidential information can be exposed externally. Exploitable via `POST /common/load-related-data`.
CVE-2026-69125 Vulnerability in CVE-2026-69125 (CVE-2026-69125)
vulnerability in CVE-2026-69125 (CVE-2026-69125). Risk of unauthorized operations or information disclosure.
CVE-2026-69124 Vulnerability in CVE-2026-69124 (CVE-2026-69124)
vulnerability in CVE-2026-69124 (CVE-2026-69124). Risk of unauthorized operations or information disclosure.
CVE-2026-69123 Vulnerability in CVE-2026-69123 (CVE-2026-69123)
vulnerability in CVE-2026-69123 (CVE-2026-69123). Risk of unauthorized operations or information disclosure.
CVE-2026-68948 Vulnerability in CVE-2026-68948 (CVE-2026-68948)
vulnerability in CVE-2026-68948 (CVE-2026-68948). Risk of unauthorized operations or information disclosure.
CVE-2026-68947 Vulnerability in CVE-2026-68947 (CVE-2026-68947)
vulnerability in CVE-2026-68947 (CVE-2026-68947). Risk of unauthorized operations or information disclosure.
CVE-2026-68946 Vulnerability in CVE-2026-68946 (CVE-2026-68946)
vulnerability in CVE-2026-68946 (CVE-2026-68946). Risk of unauthorized operations or information disclosure.
CVE-2026-68944 Vulnerability in CVE-2026-68944 (CVE-2026-68944)
vulnerability in CVE-2026-68944 (CVE-2026-68944). Risk of unauthorized operations or information disclosure.
CVE-2026-68943 Vulnerability in CVE-2026-68943 (CVE-2026-68943)
vulnerability in CVE-2026-68943 (CVE-2026-68943). Risk of unauthorized operations or information disclosure.
CVE-2026-68942 Vulnerability in CVE-2026-68942 (CVE-2026-68942)
vulnerability in CVE-2026-68942 (CVE-2026-68942). Risk of unauthorized operations or information disclosure.
CVE-2026-68941 Vulnerability in CVE-2026-68941 (CVE-2026-68941)
vulnerability in CVE-2026-68941 (CVE-2026-68941). Risk of unauthorized operations or information disclosure.
CVE-2026-68480 Vulnerability in CVE-2026-68480 (CVE-2026-68480)
vulnerability in CVE-2026-68480 (CVE-2026-68480). Risk of unauthorized operations or information disclosure.
CVE-2026-67689 SQL Injection in sqli (CVE-2026-67689)
SQL injection in sqli (CVE-2026-67689). Successful exploitation can lead to full system takeover. Exploitable via ``field``.
CVE-2026-67688 Unrestricted File Upload in CVE-2026-67688 (CVE-2026-67688)
vulnerability in CVE-2026-67688 (CVE-2026-67688). Successful exploitation can lead to full system takeover.
CVE-2026-67687 Vulnerability in CVE-2026-67687 (CVE-2026-67687)
vulnerability in CVE-2026-67687 (CVE-2026-67687). Successful exploitation can lead to full system takeover.
CVE-2026-67622 Vulnerability in CVE-2026-67622 (CVE-2026-67622)
vulnerability in CVE-2026-67622 (CVE-2026-67622). Confidential information can be exposed externally.
CVE-2026-67621 Vulnerability in CVE-2026-67621 (CVE-2026-67621)
vulnerability in CVE-2026-67621 (CVE-2026-67621). Data can be tampered with by attackers.
CVE-2026-67422 Vulnerability in pymdown-extensions (CVE-2026-67422)
vulnerability in pymdown-extensions (CVE-2026-67422). Risk of unauthorized operations or information disclosure. Exploitable via ``caret``. Mitigation: upgrade to `10.16.1` or later.
CVE-2026-65400 KEV [KEV] Authentication Bypass in Apple macos (CVE-2026-65400)
authentication bypass in Apple macos (CVE-2026-65400). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-64677 Path Traversal in path-traversal (CVE-2026-64677)
path traversal in path-traversal (CVE-2026-64677). Risk of unauthorized operations or information disclosure.
CVE-2026-64655 Vulnerability in CVE-2026-64655 (CVE-2026-64655)
vulnerability in CVE-2026-64655 (CVE-2026-64655). Risk of unauthorized operations or information disclosure.
CVE-2026-64654 Vulnerability in CVE-2026-64654 (CVE-2026-64654)
vulnerability in CVE-2026-64654 (CVE-2026-64654). Risk of unauthorized operations or information disclosure.
CVE-2026-64653 Path Traversal in CVE-2026-64653 (CVE-2026-64653)
path traversal in CVE-2026-64653 (CVE-2026-64653). Risk of unauthorized operations or information disclosure.
CVE-2026-64652 Vulnerability in CVE-2026-64652 (CVE-2026-64652)
vulnerability in CVE-2026-64652 (CVE-2026-64652). Risk of unauthorized operations or information disclosure.
CVE-2026-63725 OS Command Injection in apache (CVE-2026-63725)
OS command injection in apache (CVE-2026-63725). Successful exploitation can lead to full system takeover.
CVE-2026-63637 Vulnerability in CVE-2026-63637 (CVE-2026-63637)
vulnerability in CVE-2026-63637 (CVE-2026-63637). Confidential information can be exposed externally.
CVE-2026-62857 SSRF (Server-Side Request Forgery) in CVE-2026-62857 (CVE-2026-62857)
SSRF in CVE-2026-62857 (CVE-2026-62857). Risk of unauthorized operations or information disclosure.
CVE-2026-5857 Out-of-Bounds Write in c (CVE-2026-5857)
out-of-bounds write in c (CVE-2026-5857). Successful exploitation can lead to full system takeover.
CVE-2026-5856 Out-of-Bounds Read in c (CVE-2026-5856)
vulnerability in c (CVE-2026-5856). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →