Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-43637 Path Traversal in path-traversal (CVE-2026-43637)
path traversal in path-traversal (CVE-2026-43637). Data can be tampered with by attackers.
CVE-2026-58556 Vulnerability in CVE-2026-58556 (CVE-2026-58556)
vulnerability in CVE-2026-58556 (CVE-2026-58556). Risk of unauthorized operations or information disclosure.
CVE-2026-59838 Vulnerability in fortinet (CVE-2026-59838)
vulnerability in fortinet (CVE-2026-59838). Risk of unauthorized operations or information disclosure.
CVE-2026-58557 Vulnerability in CVE-2026-58557 (CVE-2026-58557)
vulnerability in CVE-2026-58557 (CVE-2026-58557). Risk of unauthorized operations or information disclosure.
CVE-2026-60065 Out-of-Bounds Read in nginx (CVE-2026-60065)
vulnerability in nginx (CVE-2026-60065). Risk of unauthorized operations or information disclosure.
CVE-2026-58559 Vulnerability in dos (CVE-2026-58559)
vulnerability in dos (CVE-2026-58559). Risk of unauthorized operations or information disclosure.
CVE-2026-58555 Vulnerability in CVE-2026-58555 (CVE-2026-58555)
vulnerability in CVE-2026-58555 (CVE-2026-58555). Risk of unauthorized operations or information disclosure.
CVE-2026-58554 Information Disclosure in CVE-2026-58554 (CVE-2026-58554)
vulnerability in CVE-2026-58554 (CVE-2026-58554). Confidential information can be exposed externally.
CVE-2026-60062 Path Traversal in nginx (CVE-2026-60062)
path traversal in nginx (CVE-2026-60062). Risk of unauthorized operations or information disclosure.
CVE-2026-58551 Vulnerability in CVE-2026-58551 (CVE-2026-58551)
vulnerability in CVE-2026-58551 (CVE-2026-58551). Risk of unauthorized operations or information disclosure.
CVE-2026-58550 Vulnerability in CVE-2026-58550 (CVE-2026-58550)
vulnerability in CVE-2026-58550 (CVE-2026-58550). Risk of unauthorized operations or information disclosure.
CVE-2026-58552 Vulnerability in CVE-2026-58552 (CVE-2026-58552)
vulnerability in CVE-2026-58552 (CVE-2026-58552). Risk of unauthorized operations or information disclosure.
CVE-2026-58549 Vulnerability in CVE-2026-58549 (CVE-2026-58549)
vulnerability in CVE-2026-58549 (CVE-2026-58549). Risk of unauthorized operations or information disclosure.
CVE-2026-46458 Vulnerability in CVE-2026-46458 (CVE-2026-46458)
vulnerability in CVE-2026-46458 (CVE-2026-46458). Risk of unauthorized operations or information disclosure.
CVE-2026-46459 Vulnerability in CVE-2026-46459 (CVE-2026-46459)
vulnerability in CVE-2026-46459 (CVE-2026-46459). Risk of unauthorized operations or information disclosure.
CVE-2026-15809 Vulnerability in CVE-2026-15809 (CVE-2026-15809)
vulnerability in CVE-2026-15809 (CVE-2026-15809). Successful exploitation can lead to full system takeover.
CVE-2026-15779 Vulnerability in privilege-escalation (CVE-2026-15779)
vulnerability in privilege-escalation (CVE-2026-15779). Risk of unauthorized operations or information disclosure.
CVE-2026-62294 Vulnerability in CVE-2026-62294 (CVE-2026-62294)
vulnerability in CVE-2026-62294 (CVE-2026-62294). Risk of unauthorized operations or information disclosure.
CVE-2026-61836 Vulnerability in directus (CVE-2026-61836)
vulnerability in directus (CVE-2026-61836). Confidential information can be exposed externally. Exploitable via ``version``. Mitigation: upgrade to `12.0.0` or later.
CVE-2026-61835 SSRF (Server-Side Request Forgery) in directus (CVE-2026-61835)
SSRF in directus (CVE-2026-61835). Confidential information can be exposed externally. Exploitable via ``IMPORT_IP_DENY_LIST``. Mitigation: upgrade to `12.0.0` or later.
CVE-2026-61740 Authentication Bypass in lightrag-hku (CVE-2026-61740)
authentication bypass in lightrag-hku (CVE-2026-61740). Risk of unauthorized operations or information disclosure. Exploitable via `DELETE /documents`. Mitigation: upgrade to `1.5.4` or later.
CVE-2026-61736 Vulnerability in lightrag-hku (CVE-2026-61736)
vulnerability in lightrag-hku (CVE-2026-61736). Confidential information can be exposed externally. Mitigation: upgrade to `1.5.4` or later.
CVE-2026-61684 Vulnerability in CVE-2026-61684 (CVE-2026-61684)
vulnerability in CVE-2026-61684 (CVE-2026-61684). Risk of unauthorized operations or information disclosure.
CVE-2026-61646 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-61646)
SSRF in ssrf (CVE-2026-61646). Risk of unauthorized operations or information disclosure.
CVE-2026-61644 Authorization Flaw in CVE-2026-61644 (CVE-2026-61644)
vulnerability in CVE-2026-61644 (CVE-2026-61644). Confidential information can be exposed externally. Exploitable via `POST /api/core/chat/record/getCollectionQuote`.
CVE-2026-61613 Vulnerability in CVE-2026-61613 (CVE-2026-61613)
vulnerability in CVE-2026-61613 (CVE-2026-61613). Risk of unauthorized operations or information disclosure.
CVE-2026-54563 Authorization Flaw in github.com/cloudreve/Cloudreve/v4 (CVE-2026-54563)
vulnerability in github.com/cloudreve/Cloudreve/v4 (CVE-2026-54563). Confidential information can be exposed externally. Exploitable via `GET /dav/`. Mitigation: upgrade to `4.0.0-20260606032813-26b6b1044b02` or later.
CVE-2026-54562 SSRF (Server-Side Request Forgery) in github.com/cloudreve/Cloudreve/v4 (CVE-2026-54562)
SSRF in github.com/cloudreve/Cloudreve/v4 (CVE-2026-54562). Confidential information can be exposed externally. Exploitable via `POST /api/v4/workflow/download`. Mitigation: upgrade to `4.0.0-20260606025411-aaebf317a78f` or later.
CVE-2026-54560 Authorization Flaw in github.com/cloudreve/Cloudreve/v4 (CVE-2026-54560)
vulnerability in github.com/cloudreve/Cloudreve/v4 (CVE-2026-54560). Confidential information can be exposed externally. Exploitable via `POST /api/v4/session/oauth/token`. Mitigation: upgrade to `4.0.0-20260606015557-ed20843dc3df` or later.
CVE-2026-33213 Open Redirect in redash (CVE-2026-33213)
vulnerability in redash (CVE-2026-33213). Risk of unauthorized operations or information disclosure.
CVE-2026-62175 Vulnerability in CVE-2026-62175 (CVE-2026-62175)
vulnerability in CVE-2026-62175 (CVE-2026-62175). Risk of unauthorized operations or information disclosure.
CVE-2026-61871 Vulnerability in dos (CVE-2026-61871)
vulnerability in dos (CVE-2026-61871). Risk of unauthorized operations or information disclosure.
CVE-2026-61869 Vulnerability in dos (CVE-2026-61869)
vulnerability in dos (CVE-2026-61869). Risk of unauthorized operations or information disclosure.
CVE-2026-61873 Vulnerability in path-traversal (CVE-2026-61873)
vulnerability in path-traversal (CVE-2026-61873). Data can be tampered with by attackers.
CVE-2026-61867 Vulnerability in dos (CVE-2026-61867)
vulnerability in dos (CVE-2026-61867). Risk of unauthorized operations or information disclosure.
CVE-2026-61872 Vulnerability in CVE-2026-61872 (CVE-2026-61872)
vulnerability in CVE-2026-61872 (CVE-2026-61872). Risk of unauthorized operations or information disclosure.
CVE-2026-61868 Vulnerability in dos (CVE-2026-61868)
vulnerability in dos (CVE-2026-61868). Risk of unauthorized operations or information disclosure.
CVE-2026-61864 Vulnerability in CVE-2026-61864 (CVE-2026-61864)
vulnerability in CVE-2026-61864 (CVE-2026-61864). Risk of unauthorized operations or information disclosure.
CVE-2026-61865 Vulnerability in CVE-2026-61865 (CVE-2026-61865)
vulnerability in CVE-2026-61865 (CVE-2026-61865). Risk of unauthorized operations or information disclosure.
CVE-2026-61866 Vulnerability in imagemagick (CVE-2026-61866)
vulnerability in imagemagick (CVE-2026-61866). Risk of unauthorized operations or information disclosure.
CVE-2026-61464 Vulnerability in dos (CVE-2026-61464)
vulnerability in dos (CVE-2026-61464). Risk of unauthorized operations or information disclosure.
CVE-2026-61452 Vulnerability in CVE-2026-61452 (CVE-2026-61452)
vulnerability in CVE-2026-61452 (CVE-2026-61452). Risk of unauthorized operations or information disclosure.
CVE-2026-61859 Vulnerability in imagemagick (CVE-2026-61859)
vulnerability in imagemagick (CVE-2026-61859). Risk of unauthorized operations or information disclosure.
CVE-2026-61446 Code Injection in path-traversal (CVE-2026-61446)
code injection in path-traversal (CVE-2026-61446). Successful exploitation can lead to full system takeover.
CVE-2026-61438 OS Command Injection in CVE-2026-61438 (CVE-2026-61438)
OS command injection in CVE-2026-61438 (CVE-2026-61438). Successful exploitation can lead to full system takeover.
CVE-2026-61453 Cross-Site Scripting (XSS) in CVE-2026-61453 (CVE-2026-61453)
cross-site scripting in CVE-2026-61453 (CVE-2026-61453). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.1` or later.
CVE-2026-61449 Vulnerability in CVE-2026-61449 (CVE-2026-61449)
vulnerability in CVE-2026-61449 (CVE-2026-61449). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.2` or later.
CVE-2026-61443 Path Traversal in CVE-2026-61443 (CVE-2026-61443)
path traversal in CVE-2026-61443 (CVE-2026-61443). Confidential information can be exposed externally.
CVE-2026-61440 Vulnerability in CVE-2026-61440 (CVE-2026-61440)
vulnerability in CVE-2026-61440 (CVE-2026-61440). Data can be tampered with by attackers.
CVE-2026-61451 Open Redirect in CVE-2026-61451 (CVE-2026-61451)
vulnerability in CVE-2026-61451 (CVE-2026-61451). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/v1/auth/forgot-password`.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →