Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-5855 Out-of-Bounds Read in c (CVE-2026-5855)
vulnerability in c (CVE-2026-5855). Risk of unauthorized operations or information disclosure.
CVE-2026-5336 Information Disclosure in wordpress (CVE-2026-5336)
vulnerability in wordpress (CVE-2026-5336). Successful exploitation can lead to full system takeover.
CVE-2026-53984 Vulnerability in CVE-2026-53984 (CVE-2026-53984)
vulnerability in CVE-2026-53984 (CVE-2026-53984). Data can be tampered with by attackers.
CVE-2026-53983 SSRF (Server-Side Request Forgery) in c (CVE-2026-53983)
SSRF in c (CVE-2026-53983). Confidential information can be exposed externally.
CVE-2026-49391 Cross-Site Scripting (XSS) in CVE-2026-49391 (CVE-2026-49391)
cross-site scripting in CVE-2026-49391 (CVE-2026-49391). Risk of unauthorized operations or information disclosure.
CVE-2026-48088 Vulnerability in CVE-2026-48088 (CVE-2026-48088)
vulnerability in CVE-2026-48088 (CVE-2026-48088). Confidential information can be exposed externally. Exploitable via `POST /api/tenants/{tenantId}/staff/{staffId}/crypto`.
CVE-2026-48087 Authentication Bypass in CVE-2026-48087 (CVE-2026-48087)
authentication bypass in CVE-2026-48087 (CVE-2026-48087). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/auth/register/{userId}`.
CVE-2026-48086 Privilege Escalation in privilege-escalation (CVE-2026-48086)
vulnerability in privilege-escalation (CVE-2026-48086). Successful exploitation can lead to full system takeover. Exploitable via ``GLOBAL_ADMIN``.
CVE-2026-48085 Vulnerability in csrf (CVE-2026-48085)
vulnerability in csrf (CVE-2026-48085). Successful exploitation can lead to full system takeover. Exploitable via ``default``.
CVE-2026-48084 Vulnerability in CVE-2026-48084 (CVE-2026-48084)
vulnerability in CVE-2026-48084 (CVE-2026-48084). Confidential information can be exposed externally.
CVE-2026-48083 Vulnerability in dos (CVE-2026-48083)
vulnerability in dos (CVE-2026-48083). Risk of unauthorized operations or information disclosure.
CVE-2026-48082 Vulnerability in CVE-2026-48082 (CVE-2026-48082)
vulnerability in CVE-2026-48082 (CVE-2026-48082). Risk of unauthorized operations or information disclosure. Exploitable via ``tunnelId``.
CVE-2026-48081 Cross-Site Scripting (XSS) in CVE-2026-48081 (CVE-2026-48081)
cross-site scripting in CVE-2026-48081 (CVE-2026-48081). Confidential information can be exposed externally. Exploitable via ``links``.
CVE-2026-48080 Information Disclosure in ssrf (CVE-2026-48080)
vulnerability in ssrf (CVE-2026-48080). Successful exploitation can lead to full system takeover. Exploitable via `GET /api/tenants/{id}`.
CVE-2026-48079 Vulnerability in CVE-2026-48079 (CVE-2026-48079)
vulnerability in CVE-2026-48079 (CVE-2026-48079). Confidential information can be exposed externally. Exploitable via ``access_token``.
CVE-2026-48078 Information Disclosure in CVE-2026-48078 (CVE-2026-48078)
vulnerability in CVE-2026-48078 (CVE-2026-48078). Risk of unauthorized operations or information disclosure. Exploitable via ``isPublic``.
CVE-2026-48077 Vulnerability in CVE-2026-48077 (CVE-2026-48077)
vulnerability in CVE-2026-48077 (CVE-2026-48077). Risk of unauthorized operations or information disclosure. Exploitable via ``encryptedPayload``.
CVE-2026-48076 Authorization Flaw in CVE-2026-48076 (CVE-2026-48076)
vulnerability in CVE-2026-48076 (CVE-2026-48076). Risk of unauthorized operations or information disclosure. Exploitable via ``tenantId``.
CVE-2026-48075 Vulnerability in CVE-2026-48075 (CVE-2026-48075)
vulnerability in CVE-2026-48075 (CVE-2026-48075). Data can be tampered with by attackers. Exploitable via `Authorization header`.
CVE-2026-48074 Authorization Flaw in CVE-2026-48074 (CVE-2026-48074)
vulnerability in CVE-2026-48074 (CVE-2026-48074). Risk of unauthorized operations or information disclosure. Exploitable via ``user_invite``.
CVE-2026-48071 Vulnerability in dos (CVE-2026-48071)
vulnerability in dos (CVE-2026-48071). Risk of unauthorized operations or information disclosure. Exploitable via ``emailHash``.
CVE-2026-47765 Vulnerability in CVE-2026-47765 (CVE-2026-47765)
vulnerability in CVE-2026-47765 (CVE-2026-47765). Risk of unauthorized operations or information disclosure.
CVE-2026-47194 Vulnerability in CVE-2026-47194 (CVE-2026-47194)
vulnerability in CVE-2026-47194 (CVE-2026-47194). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.
CVE-2026-47185 Cross-Site Scripting (XSS) in CVE-2026-47185 (CVE-2026-47185)
cross-site scripting in CVE-2026-47185 (CVE-2026-47185). Risk of unauthorized operations or information disclosure.
CVE-2026-43632 Vulnerability in cpp (CVE-2026-43632)
vulnerability in cpp (CVE-2026-43632). Successful exploitation can lead to full system takeover.
CVE-2026-43631 Vulnerability in cpp (CVE-2026-43631)
vulnerability in cpp (CVE-2026-43631). Successful exploitation can lead to full system takeover.
CVE-2026-43630 Out-of-Bounds Read in cpp (CVE-2026-43630)
vulnerability in cpp (CVE-2026-43630). Risk of unauthorized operations or information disclosure.
CVE-2026-43629 Vulnerability in cpp (CVE-2026-43629)
vulnerability in cpp (CVE-2026-43629). Successful exploitation can lead to full system takeover.
CVE-2026-43628 Out-of-Bounds Read in cpp (CVE-2026-43628)
vulnerability in cpp (CVE-2026-43628). Successful exploitation can lead to full system takeover.
CVE-2026-43627 Vulnerability in cpp (CVE-2026-43627)
vulnerability in cpp (CVE-2026-43627). Successful exploitation can lead to full system takeover.
CVE-2026-41861 Path Traversal in path-traversal (CVE-2026-41861)
path traversal in path-traversal (CVE-2026-41861). Risk of unauthorized operations or information disclosure.
CVE-2026-3418 Unrestricted File Upload in CVE-2026-3418 (CVE-2026-3418)
vulnerability in CVE-2026-3418 (CVE-2026-3418). Successful exploitation can lead to full system takeover.
CVE-2026-3415 Vulnerability in CVE-2026-3415 (CVE-2026-3415)
vulnerability in CVE-2026-3415 (CVE-2026-3415). Confidential information can be exposed externally.
CVE-2026-33181 Vulnerability in CVE-2026-33181 (CVE-2026-33181)
vulnerability in CVE-2026-33181 (CVE-2026-33181). Risk of unauthorized operations or information disclosure.
CVE-2026-1289 Use-After-Free in CVE-2026-1289 (CVE-2026-1289)
vulnerability in CVE-2026-1289 (CVE-2026-1289). Successful exploitation can lead to full system takeover.
CVE-2026-19177 Vulnerability in google (CVE-2026-19177)
vulnerability in google (CVE-2026-19177). Successful exploitation can lead to full system takeover.
CVE-2026-19176 Use-After-Free in google (CVE-2026-19176)
vulnerability in google (CVE-2026-19176). Successful exploitation can lead to full system takeover.
CVE-2026-19175 Use-After-Free in google (CVE-2026-19175)
vulnerability in google (CVE-2026-19175). Successful exploitation can lead to full system takeover.
CVE-2026-19174 Vulnerability in google (CVE-2026-19174)
vulnerability in google (CVE-2026-19174). Successful exploitation can lead to full system takeover.
CVE-2026-19173 Out-of-Bounds Write in google (CVE-2026-19173)
out-of-bounds write in google (CVE-2026-19173). Successful exploitation can lead to full system takeover.
CVE-2026-19172 Use-After-Free in google (CVE-2026-19172)
vulnerability in google (CVE-2026-19172). Successful exploitation can lead to full system takeover.
CVE-2026-19171 Use-After-Free in google (CVE-2026-19171)
vulnerability in google (CVE-2026-19171). Successful exploitation can lead to full system takeover.
CVE-2026-19170 Use-After-Free in google (CVE-2026-19170)
vulnerability in google (CVE-2026-19170). Successful exploitation can lead to full system takeover.
CVE-2026-19169 Vulnerability in privilege-escalation (CVE-2026-19169)
vulnerability in privilege-escalation (CVE-2026-19169). Successful exploitation can lead to full system takeover.
CVE-2026-19168 Vulnerability in google (CVE-2026-19168)
vulnerability in google (CVE-2026-19168). Successful exploitation can lead to full system takeover.
CVE-2026-19167 Vulnerability in google (CVE-2026-19167)
vulnerability in google (CVE-2026-19167). Risk of unauthorized operations or information disclosure.
CVE-2026-19166 Use-After-Free in google (CVE-2026-19166)
vulnerability in google (CVE-2026-19166). Successful exploitation can lead to full system takeover.
CVE-2026-19165 Use-After-Free in google (CVE-2026-19165)
vulnerability in google (CVE-2026-19165). Successful exploitation can lead to full system takeover.
CVE-2026-19164 Vulnerability in google (CVE-2026-19164)
vulnerability in google (CVE-2026-19164). Successful exploitation can lead to full system takeover.
CVE-2026-19163 Use-After-Free in google (CVE-2026-19163)
vulnerability in google (CVE-2026-19163). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →