Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-64211 Vulnerability in linux (CVE-2026-64211)
vulnerability in linux (CVE-2026-64211). Risk of unauthorized operations or information disclosure.
CVE-2026-64210 Vulnerability in c (CVE-2026-64210)
vulnerability in c (CVE-2026-64210). Risk of unauthorized operations or information disclosure.
CVE-2026-64209 Out-of-Bounds Read in linux (CVE-2026-64209)
vulnerability in linux (CVE-2026-64209). Confidential information can be exposed externally.
CVE-2026-64208 Vulnerability in linux (CVE-2026-64208)
vulnerability in linux (CVE-2026-64208). Risk of unauthorized operations or information disclosure.
CVE-2026-17039 Authorization Flaw in CVE-2026-17039 (CVE-2026-17039)
vulnerability in CVE-2026-17039 (CVE-2026-17039). Risk of unauthorized operations or information disclosure.
CVE-2026-73851 Path Traversal in Microsoft.OpenApi.Kiota (CVE-2026-73851)
path traversal in Microsoft.OpenApi.Kiota (CVE-2026-73851). Risk of unauthorized operations or information disclosure. Exploitable via ``static_template``. Mitigation: upgrade to `1.29.1` or later.
CVE-2026-59952 Vulnerability in valibot (CVE-2026-59952)
vulnerability in valibot (CVE-2026-59952). Risk of unauthorized operations or information disclosure. Exploitable via ``valibot``. Mitigation: upgrade to `1.2.0` or later.
CVE-2026-59940 Unsafe Deserialization in seroval (CVE-2026-59940)
vulnerability in seroval (CVE-2026-59940). Successful exploitation can lead to full system takeover. Exploitable via ``seroval``. Mitigation: upgrade to `1.5.3` or later.
CVE-2026-59949 Vulnerability in at.yawk.lz4:lz4-java (CVE-2026-59949)
vulnerability in at.yawk.lz4:lz4-java (CVE-2026-59949). Risk of unauthorized operations or information disclosure. Exploitable via ``off``. Mitigation: upgrade to `1.11.1` or later.
GHSA-866w-xmhq-wj7x Vulnerability in @sveltejs/kit (GHSA-866w-xmhq-wj7x)
vulnerability in @sveltejs/kit (GHSA-866w-xmhq-wj7x). Risk of unauthorized operations or information disclosure. Exploitable via ``file``. Mitigation: upgrade to `2.69.1` or later.
GHSA-wqjv-9729-c5q2 Vulnerability in @sveltejs/kit (GHSA-wqjv-9729-c5q2)
vulnerability in @sveltejs/kit (GHSA-wqjv-9729-c5q2). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.69.1` or later.
CVE-2026-63632 Out-of-Bounds Read in onnx (CVE-2026-63632)
vulnerability in onnx (CVE-2026-63632). Risk of unauthorized operations or information disclosure. Exploitable via ``B_shape``. Mitigation: upgrade to `1.22.0` or later.
GHSA-qq9h-g4jm-xgf3 Authentication Bypass in better-auth (GHSA-qq9h-g4jm-xgf3)
authentication bypass in better-auth (GHSA-qq9h-g4jm-xgf3). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0-beta.10` or later.
GHSA-h3rm-78g3-j7cp Vulnerability in @better-auth/stripe (GHSA-h3rm-78g3-j7cp)
vulnerability in @better-auth/stripe (GHSA-h3rm-78g3-j7cp). Risk of unauthorized operations or information disclosure. Exploitable via ``authorizeReference``. Mitigation: upgrade to `1.7.0-beta.10` or later.
GHSA-rjg6-39jm-rgg4 Vulnerability in @better-auth/scim (GHSA-rjg6-39jm-rgg4)
vulnerability in @better-auth/scim (GHSA-rjg6-39jm-rgg4). Risk of unauthorized operations or information disclosure. Exploitable via `DELETE /scim/v2/Users/`. Mitigation: upgrade to `1.7.0-beta.10` or later.
CVE-2026-55729 Information Disclosure in CVE-2026-55729 (CVE-2026-55729)
vulnerability in CVE-2026-55729 (CVE-2026-55729). Risk of unauthorized operations or information disclosure. Exploitable via ``localStorage``.
CVE-2026-66004 Path Traversal in path-traversal (CVE-2026-66004)
path traversal in path-traversal (CVE-2026-66004). Data can be tampered with by attackers.
CVE-2026-66007 Path Traversal in path-traversal (CVE-2026-66007)
path traversal in path-traversal (CVE-2026-66007). Confidential information can be exposed externally.
CVE-2026-8789 Authorization Flaw in wordpress (CVE-2026-8789)
vulnerability in wordpress (CVE-2026-8789). Data can be tampered with by attackers. Exploitable via ``ea_delete_multiple_connections``.
CVE-2026-8308 Cross-Site Scripting (XSS) in CVE-2026-8308 (CVE-2026-8308)
cross-site scripting in CVE-2026-8308 (CVE-2026-8308). Risk of unauthorized operations or information disclosure.
CVE-2026-66005 Vulnerability in CVE-2026-66005 (CVE-2026-66005)
vulnerability in CVE-2026-66005 (CVE-2026-66005). Risk of unauthorized operations or information disclosure.
CVE-2026-16798 Vulnerability in devolutions (CVE-2026-16798)
vulnerability in devolutions (CVE-2026-16798). Confidential information can be exposed externally.
CVE-2026-66006 Vulnerability in lakefs (CVE-2026-66006)
vulnerability in lakefs (CVE-2026-66006). Risk of unauthorized operations or information disclosure.
CVE-2026-58586 Vulnerability in CVE-2026-58586 (CVE-2026-58586)
vulnerability in CVE-2026-58586 (CVE-2026-58586). Successful exploitation can lead to full system takeover.
CVE-2026-55728 Vulnerability in CVE-2026-55728 (CVE-2026-55728)
vulnerability in CVE-2026-55728 (CVE-2026-55728). Risk of unauthorized operations or information disclosure. Exploitable via ``cmd_ipaddr_conflict``.
CVE-2026-55731 Vulnerability in dos (CVE-2026-55731)
vulnerability in dos (CVE-2026-55731). Risk of unauthorized operations or information disclosure.
CVE-2026-49326 Vulnerability in apache (CVE-2026-49326)
vulnerability in apache (CVE-2026-49326). Confidential information can be exposed externally.
CVE-2026-55730 Cross-Site Scripting (XSS) in CVE-2026-55730 (CVE-2026-55730)
cross-site scripting in CVE-2026-55730 (CVE-2026-55730). Risk of unauthorized operations or information disclosure. Exploitable via ``project``.
CVE-2026-17059 Vulnerability in redhat (CVE-2026-17059)
vulnerability in redhat (CVE-2026-17059). Confidential information can be exposed externally.
CVE-2026-16800 Code Injection in devolutions (CVE-2026-16800)
code injection in devolutions (CVE-2026-16800). Successful exploitation can lead to full system takeover.
CVE-2026-16802 Vulnerability in devolutions (CVE-2026-16802)
vulnerability in devolutions (CVE-2026-16802). Confidential information can be exposed externally.
CVE-2026-58630 Vulnerability in microsoft (CVE-2026-58630)
vulnerability in microsoft (CVE-2026-58630). Confidential information can be exposed externally.
CVE-2026-16799 Vulnerability in devolutions (CVE-2026-16799)
vulnerability in devolutions (CVE-2026-16799). Risk of unauthorized operations or information disclosure.
CVE-2026-55732 Out-of-Bounds Read in CVE-2026-55732 (CVE-2026-55732)
vulnerability in CVE-2026-55732 (CVE-2026-55732). Risk of unauthorized operations or information disclosure. Exploitable via ``bacdt_datetime_to_tod``.
CVE-2026-16801 Code Injection in devolutions (CVE-2026-16801)
code injection in devolutions (CVE-2026-16801). Successful exploitation can lead to full system takeover.
CVE-2026-56163 Vulnerability in microsoft (CVE-2026-56163)
vulnerability in microsoft (CVE-2026-56163). Successful exploitation can lead to full system takeover.
CVE-2026-57106 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-57106)
SSRF in ssrf (CVE-2026-57106). Successful exploitation can lead to full system takeover.
CVE-2026-12502 Privilege Escalation in CVE-2026-12502 (CVE-2026-12502)
vulnerability in CVE-2026-12502 (CVE-2026-12502). Risk of unauthorized operations or information disclosure. Exploitable via ``superadmin``.
CVE-2026-66008 Vulnerability in CVE-2026-66008 (CVE-2026-66008)
vulnerability in CVE-2026-66008 (CVE-2026-66008). Risk of unauthorized operations or information disclosure.
CVE-2026-12496 Cross-Site Scripting (XSS) in CVE-2026-12496 (CVE-2026-12496)
cross-site scripting in CVE-2026-12496 (CVE-2026-12496). Risk of unauthorized operations or information disclosure. Exploitable via `POST /da`.
CVE-2026-17048 Information Disclosure in redhat (CVE-2026-17048)
vulnerability in redhat (CVE-2026-17048). Confidential information can be exposed externally.
CVE-2026-66009 Vulnerability in CVE-2026-66009 (CVE-2026-66009)
vulnerability in CVE-2026-66009 (CVE-2026-66009). Risk of unauthorized operations or information disclosure.
CVE-2026-45811 Vulnerability in apache (CVE-2026-45811)
vulnerability in apache (CVE-2026-45811). Successful exploitation can lead to full system takeover.
CVE-2026-7484 Vulnerability in CVE-2026-7484 (CVE-2026-7484)
vulnerability in CVE-2026-7484 (CVE-2026-7484). Risk of unauthorized operations or information disclosure.
CVE-2026-66010 Cross-Site Scripting (XSS) in cure53 (CVE-2026-66010)
cross-site scripting in cure53 (CVE-2026-66010). Risk of unauthorized operations or information disclosure.
CVE-2026-12504 Authentication Bypass in CVE-2026-12504 (CVE-2026-12504)
authentication bypass in CVE-2026-12504 (CVE-2026-12504). Risk of unauthorized operations or information disclosure.
CVE-2026-66143 Vulnerability in apache (CVE-2026-66143)
vulnerability in apache (CVE-2026-66143). Risk of unauthorized operations or information disclosure.
CVE-2026-45816 Vulnerability in apache (CVE-2026-45816)
vulnerability in apache (CVE-2026-45816). Risk of unauthorized operations or information disclosure.
CVE-2026-66142 Vulnerability in apache (CVE-2026-66142)
vulnerability in apache (CVE-2026-66142). Risk of unauthorized operations or information disclosure.
CVE-2026-46452 Vulnerability in apache (CVE-2026-46452)
vulnerability in apache (CVE-2026-46452). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →