Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-51252 Vulnerability in CVE-2026-51252 (CVE-2026-51252)
vulnerability in CVE-2026-51252 (CVE-2026-51252). Successful exploitation can lead to full system takeover.
CVE-2026-62424 Vulnerability in CVE-2026-62424 (CVE-2026-62424)
vulnerability in CVE-2026-62424 (CVE-2026-62424). Risk of unauthorized operations or information disclosure.
CVE-2026-62435 Vulnerability in CVE-2026-62435 (CVE-2026-62435)
vulnerability in CVE-2026-62435 (CVE-2026-62435). Risk of unauthorized operations or information disclosure.
CVE-2026-59878 Vulnerability in apache (CVE-2026-59878)
vulnerability in apache (CVE-2026-59878). Risk of unauthorized operations or information disclosure.
CVE-2026-62426 Vulnerability in c (CVE-2026-62426)
vulnerability in c (CVE-2026-62426). Successful exploitation can lead to full system takeover.
CVE-2026-62428 Vulnerability in CVE-2026-62428 (CVE-2026-62428)
vulnerability in CVE-2026-62428 (CVE-2026-62428). Successful exploitation can lead to full system takeover.
CVE-2026-62431 Vulnerability in CVE-2026-62431 (CVE-2026-62431)
vulnerability in CVE-2026-62431 (CVE-2026-62431). Risk of unauthorized operations or information disclosure.
CVE-2026-62429 Vulnerability in CVE-2026-62429 (CVE-2026-62429)
vulnerability in CVE-2026-62429 (CVE-2026-62429). Confidential information can be exposed externally.
CVE-2026-62433 Vulnerability in CVE-2026-62433 (CVE-2026-62433)
vulnerability in CVE-2026-62433 (CVE-2026-62433). Risk of unauthorized operations or information disclosure.
CVE-2026-62425 Vulnerability in CVE-2026-62425 (CVE-2026-62425)
vulnerability in CVE-2026-62425 (CVE-2026-62425). Risk of unauthorized operations or information disclosure.
CVE-2026-62423 Vulnerability in CVE-2026-62423 (CVE-2026-62423)
vulnerability in CVE-2026-62423 (CVE-2026-62423). Risk of unauthorized operations or information disclosure.
CVE-2026-42493 Vulnerability in CVE-2026-42493 (CVE-2026-42493)
vulnerability in CVE-2026-42493 (CVE-2026-42493). Risk of unauthorized operations or information disclosure.
CVE-2026-62432 Vulnerability in CVE-2026-62432 (CVE-2026-62432)
vulnerability in CVE-2026-62432 (CVE-2026-62432). Risk of unauthorized operations or information disclosure.
CVE-2026-42495 Vulnerability in CVE-2026-42495 (CVE-2026-42495)
vulnerability in CVE-2026-42495 (CVE-2026-42495). Risk of unauthorized operations or information disclosure.
CVE-2026-62427 Vulnerability in c (CVE-2026-62427)
vulnerability in c (CVE-2026-62427). Successful exploitation can lead to full system takeover.
CVE-2026-41874 Vulnerability in privilege-escalation (CVE-2026-41874)
vulnerability in privilege-escalation (CVE-2026-41874). Risk of unauthorized operations or information disclosure.
CVE-2026-42494 Out-of-Bounds Read in CVE-2026-42494 (CVE-2026-42494)
vulnerability in CVE-2026-42494 (CVE-2026-42494). Risk of unauthorized operations or information disclosure.
CVE-2026-42492 Vulnerability in CVE-2026-42492 (CVE-2026-42492)
vulnerability in CVE-2026-42492 (CVE-2026-42492). Risk of unauthorized operations or information disclosure.
CVE-2026-61487 Vulnerability in apache (CVE-2026-61487)
vulnerability in apache (CVE-2026-61487). Data can be tampered with by attackers.
CVE-2026-7187 Vulnerability in CVE-2026-7187 (CVE-2026-7187)
vulnerability in CVE-2026-7187 (CVE-2026-7187). Successful exploitation can lead to full system takeover.
CVE-2026-67173 SSRF (Server-Side Request Forgery) in CVE-2026-67173 (CVE-2026-67173)
SSRF in CVE-2026-67173 (CVE-2026-67173). Risk of unauthorized operations or information disclosure.
CVE-2026-66919 Cross-Site Scripting (XSS) in CVE-2026-66919 (CVE-2026-66919)
cross-site scripting in CVE-2026-66919 (CVE-2026-66919). Risk of unauthorized operations or information disclosure.
CVE-2026-66920 Vulnerability in dos (CVE-2026-66920)
vulnerability in dos (CVE-2026-66920). Risk of unauthorized operations or information disclosure.
CVE-2026-65882 Cross-Site Scripting (XSS) in CVE-2026-65882 (CVE-2026-65882)
cross-site scripting in CVE-2026-65882 (CVE-2026-65882). Risk of unauthorized operations or information disclosure.
CVE-2026-66918 Cross-Site Scripting (XSS) in CVE-2026-66918 (CVE-2026-66918)
cross-site scripting in CVE-2026-66918 (CVE-2026-66918). Risk of unauthorized operations or information disclosure.
CVE-2026-65881 Information Disclosure in CVE-2026-65881 (CVE-2026-65881)
vulnerability in CVE-2026-65881 (CVE-2026-65881). Confidential information can be exposed externally.
CVE-2026-49332 Vulnerability in CVE-2026-49332 (CVE-2026-49332)
vulnerability in CVE-2026-49332 (CVE-2026-49332). Confidential information can be exposed externally.
CVE-2026-18047 Vulnerability in tomcat (CVE-2026-18047)
vulnerability in tomcat (CVE-2026-18047). Risk of unauthorized operations or information disclosure.
CVE-2026-18038 Information Disclosure in CVE-2026-18038 (CVE-2026-18038)
vulnerability in CVE-2026-18038 (CVE-2026-18038). Risk of unauthorized operations or information disclosure.
CVE-2026-15393 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15393)
cross-site scripting in wordpress (CVE-2026-15393). Risk of unauthorized operations or information disclosure.
CVE-2026-15016 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15016)
cross-site scripting in wordpress (CVE-2026-15016). Risk of unauthorized operations or information disclosure.
GHSA-vg6v-j97m-h5xq SSRF (Server-Side Request Forgery) in @novu/application-generic (GHSA-vg6v-j97m-h5xq)
SSRF in @novu/application-generic (GHSA-vg6v-j97m-h5xq). Risk of unauthorized operations or information disclosure. Exploitable via `POST /workflow-http-step`. Mitigation: upgrade to `3.17.0` or later.
CVE-2026-61609 Vulnerability in pterodactyl/panel (CVE-2026-61609)
vulnerability in pterodactyl/panel (CVE-2026-61609). Risk of unauthorized operations or information disclosure. Exploitable via `POST /auth/login`. Mitigation: upgrade to `1.13.0` or later.
CVE-2026-54545 Path Traversal in @wakaru/cli (CVE-2026-54545)
path traversal in @wakaru/cli (CVE-2026-54545). Data can be tampered with by attackers. Mitigation: upgrade to `1.4.0` or later.
CVE-2026-47427 Vulnerability in github.com/github/github-mcp-server (CVE-2026-47427)
vulnerability in github.com/github/github-mcp-server (CVE-2026-47427). Risk of unauthorized operations or information disclosure. Exploitable via ``CompletionsHandler``. Mitigation: upgrade to `1.1.0` or later.
CVE-2026-45293 Vulnerability in wp-coding-standards/wpcs (CVE-2026-45293)
vulnerability in wp-coding-standards/wpcs (CVE-2026-45293). Successful exploitation can lead to full system takeover. Exploitable via ``WordPress.WP.EnqueuedResourceParameters``. Mitigation: upgrade to `3.4.1` or later.
CVE-2026-43910 Vulnerability in io.appium:java-client (CVE-2026-43910)
vulnerability in io.appium:java-client (CVE-2026-43910). Confidential information can be exposed externally. Exploitable via `POST /wd/hub/session`. Mitigation: upgrade to `10.1.1` or later.
GHSA-hp74-gm6m-2qm5 Authentication Bypass in github.com/pocket-id/pocket-id/backend (GHSA-hp74-gm6m-2qm5)
authentication bypass in github.com/pocket-id/pocket-id/backend (GHSA-hp74-gm6m-2qm5). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/webauthn/reauthenticate`. Mitigation: upgrade to `0.0.0-20260419162744-978ac87deffe` or later.
CVE-2026-66913 Vulnerability in CVE-2026-66913 (CVE-2026-66913)
vulnerability in CVE-2026-66913 (CVE-2026-66913). Risk of unauthorized operations or information disclosure.
CVE-2026-15025 Vulnerability in wordpress (CVE-2026-15025)
vulnerability in wordpress (CVE-2026-15025). Confidential information can be exposed externally.
CVE-2026-21047 Out-of-Bounds Write in CVE-2026-21047 (CVE-2026-21047)
out-of-bounds write in CVE-2026-21047 (CVE-2026-21047). Risk of unauthorized operations or information disclosure.
CVE-2026-16773 Information Disclosure in wordpress (CVE-2026-16773)
vulnerability in wordpress (CVE-2026-16773). Risk of unauthorized operations or information disclosure.
CVE-2026-13440 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13440)
cross-site scripting in wordpress (CVE-2026-13440). Risk of unauthorized operations or information disclosure.
CVE-2026-15444 SQL Injection in wordpress (CVE-2026-15444)
SQL injection in wordpress (CVE-2026-15444). Confidential information can be exposed externally.
CVE-2026-13110 Vulnerability in wordpress (CVE-2026-13110)
vulnerability in wordpress (CVE-2026-13110). Risk of unauthorized operations or information disclosure.
CVE-2026-4648 Vulnerability in CVE-2026-4648 (CVE-2026-4648)
vulnerability in CVE-2026-4648 (CVE-2026-4648). Risk of unauthorized operations or information disclosure.
CVE-2026-16774 Vulnerability in wordpress (CVE-2026-16774)
vulnerability in wordpress (CVE-2026-16774). Risk of unauthorized operations or information disclosure.
CVE-2026-15411 Vulnerability in wordpress (CVE-2026-15411)
vulnerability in wordpress (CVE-2026-15411). Risk of unauthorized operations or information disclosure.
CVE-2026-65880 Code Injection in CVE-2026-65880 (CVE-2026-65880)
code injection in CVE-2026-65880 (CVE-2026-65880). Risk of unauthorized operations or information disclosure.
CVE-2026-63303 Vulnerability in path-traversal (CVE-2026-63303)
vulnerability in path-traversal (CVE-2026-63303). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →