Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-47082 Authorization Flaw in CVE-2026-47082 (CVE-2026-47082)
vulnerability in CVE-2026-47082 (CVE-2026-47082). Risk of unauthorized operations or information disclosure.
CVE-2026-47081 Authorization Flaw in CVE-2026-47081 (CVE-2026-47081)
vulnerability in CVE-2026-47081 (CVE-2026-47081). Risk of unauthorized operations or information disclosure.
CVE-2026-46515 Vulnerability in CVE-2026-46515 (CVE-2026-46515)
vulnerability in CVE-2026-46515 (CVE-2026-46515). Risk of unauthorized operations or information disclosure.
CVE-2026-46514 Vulnerability in CVE-2026-46514 (CVE-2026-46514)
vulnerability in CVE-2026-46514 (CVE-2026-46514). Confidential information can be exposed externally.
CVE-2026-46513 Vulnerability in CVE-2026-46513 (CVE-2026-46513)
vulnerability in CVE-2026-46513 (CVE-2026-46513). Confidential information can be exposed externally.
CVE-2026-46512 Code Injection in CVE-2026-46512 (CVE-2026-46512)
code injection in CVE-2026-46512 (CVE-2026-46512). Successful exploitation can lead to full system takeover.
CVE-2026-46404 SSRF (Server-Side Request Forgery) in CVE-2026-46404 (CVE-2026-46404)
SSRF in CVE-2026-46404 (CVE-2026-46404). Confidential information can be exposed externally.
CVE-2026-46353 Vulnerability in CVE-2026-46353 (CVE-2026-46353)
vulnerability in CVE-2026-46353 (CVE-2026-46353). Confidential information can be exposed externally.
CVE-2026-46351 Vulnerability in CVE-2026-46351 (CVE-2026-46351)
vulnerability in CVE-2026-46351 (CVE-2026-46351). Confidential information can be exposed externally.
CVE-2026-53718 Vulnerability in github.com/envoyproxy/gateway (CVE-2026-53718)
vulnerability in github.com/envoyproxy/gateway (CVE-2026-53718). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.4` or later.
CVE-2026-50166 Vulnerability in github.com/kumahq/kuma/v2 (CVE-2026-50166)
vulnerability in github.com/kumahq/kuma/v2 (CVE-2026-50166). Risk of unauthorized operations or information disclosure. Exploitable via ``kumactl``. Mitigation: upgrade to `2.13.7` or later.
CVE-2026-46687 Vulnerability in CVE-2026-46687 (CVE-2026-46687)
vulnerability in CVE-2026-46687 (CVE-2026-46687). Risk of unauthorized operations or information disclosure.
CVE-2026-46686 Cross-Site Scripting (XSS) in CVE-2026-46686 (CVE-2026-46686)
cross-site scripting in CVE-2026-46686 (CVE-2026-46686). Risk of unauthorized operations or information disclosure.
CVE-2026-46336 Path Traversal in path-traversal (CVE-2026-46336)
path traversal in path-traversal (CVE-2026-46336). Data can be tampered with by attackers.
CVE-2026-45336 Vulnerability in flask (CVE-2026-45336)
vulnerability in flask (CVE-2026-45336). Confidential information can be exposed externally.
CVE-2026-15945 Vulnerability in redhat (CVE-2026-15945)
vulnerability in redhat (CVE-2026-15945). Risk of unauthorized operations or information disclosure.
CVE-2021-27137 KEV [KEV] Vulnerability in Dd-wrt c (CVE-2021-27137)
vulnerability in Dd-wrt c (CVE-2021-27137). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-15737 Vulnerability in Amazon aws (CVE-2026-15737)
vulnerability in Amazon aws (CVE-2026-15737). Confidential information can be exposed externally.
CVE-2026-9046 Vulnerability in CVE-2026-9046 (CVE-2026-9046)
vulnerability in CVE-2026-9046 (CVE-2026-9046). Successful exploitation can lead to full system takeover.
CVE-2026-6511 Vulnerability in CVE-2026-6511 (CVE-2026-6511)
vulnerability in CVE-2026-6511 (CVE-2026-6511). Confidential information can be exposed externally.
CVE-2026-63088 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-63088)
SSRF in ssrf (CVE-2026-63088). Confidential information can be exposed externally.
CVE-2026-63087 Vulnerability in CVE-2026-63087 (CVE-2026-63087)
vulnerability in CVE-2026-63087 (CVE-2026-63087). Successful exploitation can lead to full system takeover.
CVE-2026-63086 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-63086)
SSRF in ssrf (CVE-2026-63086). Confidential information can be exposed externally.
CVE-2026-63085 Authorization Flaw in CVE-2026-63085 (CVE-2026-63085)
vulnerability in CVE-2026-63085 (CVE-2026-63085). Successful exploitation can lead to full system takeover.
CVE-2026-57074 Out-of-Bounds Read in CVE-2026-57074 (CVE-2026-57074)
vulnerability in CVE-2026-57074 (CVE-2026-57074). Confidential information can be exposed externally.
CVE-2026-57073 Out-of-Bounds Read in CVE-2026-57073 (CVE-2026-57073)
vulnerability in CVE-2026-57073 (CVE-2026-57073). Confidential information can be exposed externally.
CVE-2026-55548 Vulnerability in org.yamcs:yamcs-core (CVE-2026-55548)
vulnerability in org.yamcs:yamcs-core (CVE-2026-55548). Risk of unauthorized operations or information disclosure. Exploitable via ``PacketsApi.exportPackets``. Mitigation: upgrade to `5.12.8` or later.
CVE-2026-55407 Vulnerability in buffa (CVE-2026-55407)
vulnerability in buffa (CVE-2026-55407). Risk of unauthorized operations or information disclosure. Exploitable via ``decode_unknown_field``. Mitigation: upgrade to `0.8.0` or later.
CVE-2026-55406 Information Disclosure in buffa (CVE-2026-55406)
vulnerability in buffa (CVE-2026-55406). Risk of unauthorized operations or information disclosure. Exploitable via ``buffa``. Mitigation: upgrade to `0.7.0` or later.
CVE-2026-50012 Vulnerability in squid-cache (CVE-2026-50012)
vulnerability in squid-cache (CVE-2026-50012). Risk of unauthorized operations or information disclosure.
CVE-2026-47729 Out-of-Bounds Read in squid-cache (CVE-2026-47729)
vulnerability in squid-cache (CVE-2026-47729). Confidential information can be exposed externally.
CVE-2026-45795 Vulnerability in CVE-2026-45795 (CVE-2026-45795)
vulnerability in CVE-2026-45795 (CVE-2026-45795). Risk of unauthorized operations or information disclosure.
CVE-2026-45612 Out-of-Bounds Read in c (CVE-2026-45612)
vulnerability in c (CVE-2026-45612). Confidential information can be exposed externally.
CVE-2026-3031 Vulnerability in CVE-2026-3031 (CVE-2026-3031)
vulnerability in CVE-2026-3031 (CVE-2026-3031). Successful exploitation can lead to full system takeover.
CVE-2026-14371 OS Command Injection in CVE-2026-14371 (CVE-2026-14371)
OS command injection in CVE-2026-14371 (CVE-2026-14371). Risk of unauthorized operations or information disclosure.
CVE-2026-13401 Vulnerability in c (CVE-2026-13401)
vulnerability in c (CVE-2026-13401). Risk of unauthorized operations or information disclosure.
CVE-2026-13397 Vulnerability in c (CVE-2026-13397)
vulnerability in c (CVE-2026-13397). Risk of unauthorized operations or information disclosure.
CVE-2026-13104 Vulnerability in CVE-2026-13104 (CVE-2026-13104)
vulnerability in CVE-2026-13104 (CVE-2026-13104). Successful exploitation can lead to full system takeover.
CVE-2026-13103 Path Traversal in path-traversal (CVE-2026-13103)
path traversal in path-traversal (CVE-2026-13103). Successful exploitation can lead to full system takeover.
CVE-2026-10590 Vulnerability in CVE-2026-10590 (CVE-2026-10590)
vulnerability in CVE-2026-10590 (CVE-2026-10590). Data can be tampered with by attackers.
CVE-2026-10589 Out-of-Bounds Write in CVE-2026-10589 (CVE-2026-10589)
out-of-bounds write in CVE-2026-10589 (CVE-2026-10589). Data can be tampered with by attackers.
CVE-2026-10588 Vulnerability in CVE-2026-10588 (CVE-2026-10588)
vulnerability in CVE-2026-10588 (CVE-2026-10588). Confidential information can be exposed externally.
CVE-2026-10587 Out-of-Bounds Write in CVE-2026-10587 (CVE-2026-10587)
out-of-bounds write in CVE-2026-10587 (CVE-2026-10587). Data can be tampered with by attackers.
CVE-2025-45870 Path Traversal in path-traversal (CVE-2025-45870)
path traversal in path-traversal (CVE-2025-45870). Confidential information can be exposed externally.
CVE-2026-63082 Vulnerability in CVE-2026-63082 (CVE-2026-63082)
vulnerability in CVE-2026-63082 (CVE-2026-63082). Risk of unauthorized operations or information disclosure.
CVE-2026-63081 Cross-Site Scripting (XSS) in CVE-2026-63081 (CVE-2026-63081)
cross-site scripting in CVE-2026-63081 (CVE-2026-63081). Risk of unauthorized operations or information disclosure.
CVE-2026-59867 Path Traversal in Microsoft.OpenApi.Kiota (CVE-2026-59867)
path traversal in Microsoft.OpenApi.Kiota (CVE-2026-59867). Confidential information can be exposed externally. Exploitable via ``REMOTE_KIOTA_PROP``. Mitigation: upgrade to `1.29.1` or later.
CVE-2026-59866 Path Traversal in Microsoft.OpenApi.Kiota (CVE-2026-59866)
path traversal in Microsoft.OpenApi.Kiota (CVE-2026-59866). Risk of unauthorized operations or information disclosure. Exploitable via ``clientClassName``. Mitigation: upgrade to `1.29.1` or later.
CVE-2026-59865 Code Injection in Microsoft.OpenApi.Kiota (CVE-2026-59865)
code injection in Microsoft.OpenApi.Kiota (CVE-2026-59865). Risk of unauthorized operations or information disclosure. Exploitable via ``dependencyInstallCommand``. Mitigation: upgrade to `1.29.1` or later.
CVE-2026-59864 Path Traversal in Microsoft.OpenApi.Kiota (CVE-2026-59864)
path traversal in Microsoft.OpenApi.Kiota (CVE-2026-59864). Risk of unauthorized operations or information disclosure. Exploitable via ``static_template.file``. Mitigation: upgrade to `1.29.1` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →