Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-43637 |
|
Path Traversal in path-traversal (CVE-2026-43637)
path traversal in path-traversal (CVE-2026-43637). Data can be tampered with by attackers.
|
| CVE-2026-58556 |
|
Vulnerability in CVE-2026-58556 (CVE-2026-58556)
vulnerability in CVE-2026-58556 (CVE-2026-58556). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59838 |
|
Vulnerability in fortinet (CVE-2026-59838)
vulnerability in fortinet (CVE-2026-59838). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58557 |
|
Vulnerability in CVE-2026-58557 (CVE-2026-58557)
vulnerability in CVE-2026-58557 (CVE-2026-58557). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-60065 |
|
Out-of-Bounds Read in nginx (CVE-2026-60065)
vulnerability in nginx (CVE-2026-60065). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58559 |
|
Vulnerability in dos (CVE-2026-58559)
vulnerability in dos (CVE-2026-58559). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58555 |
|
Vulnerability in CVE-2026-58555 (CVE-2026-58555)
vulnerability in CVE-2026-58555 (CVE-2026-58555). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58554 |
|
Information Disclosure in CVE-2026-58554 (CVE-2026-58554)
vulnerability in CVE-2026-58554 (CVE-2026-58554). Confidential information can be exposed externally.
|
| CVE-2026-60062 |
|
Path Traversal in nginx (CVE-2026-60062)
path traversal in nginx (CVE-2026-60062). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58551 |
|
Vulnerability in CVE-2026-58551 (CVE-2026-58551)
vulnerability in CVE-2026-58551 (CVE-2026-58551). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58550 |
|
Vulnerability in CVE-2026-58550 (CVE-2026-58550)
vulnerability in CVE-2026-58550 (CVE-2026-58550). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58552 |
|
Vulnerability in CVE-2026-58552 (CVE-2026-58552)
vulnerability in CVE-2026-58552 (CVE-2026-58552). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58549 |
|
Vulnerability in CVE-2026-58549 (CVE-2026-58549)
vulnerability in CVE-2026-58549 (CVE-2026-58549). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46458 |
|
Vulnerability in CVE-2026-46458 (CVE-2026-46458)
vulnerability in CVE-2026-46458 (CVE-2026-46458). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46459 |
|
Vulnerability in CVE-2026-46459 (CVE-2026-46459)
vulnerability in CVE-2026-46459 (CVE-2026-46459). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15809 |
|
Vulnerability in CVE-2026-15809 (CVE-2026-15809)
vulnerability in CVE-2026-15809 (CVE-2026-15809). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15779 |
|
Vulnerability in privilege-escalation (CVE-2026-15779)
vulnerability in privilege-escalation (CVE-2026-15779). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62294 |
|
Vulnerability in CVE-2026-62294 (CVE-2026-62294)
vulnerability in CVE-2026-62294 (CVE-2026-62294). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61836 |
|
Vulnerability in directus (CVE-2026-61836)
vulnerability in directus (CVE-2026-61836). Confidential information can be exposed externally. Exploitable via ``version``. Mitigation: upgrade to `12.0.0` or later.
|
| CVE-2026-61835 |
|
SSRF (Server-Side Request Forgery) in directus (CVE-2026-61835)
SSRF in directus (CVE-2026-61835). Confidential information can be exposed externally. Exploitable via ``IMPORT_IP_DENY_LIST``. Mitigation: upgrade to `12.0.0` or later.
|
| CVE-2026-61740 |
|
Authentication Bypass in lightrag-hku (CVE-2026-61740)
authentication bypass in lightrag-hku (CVE-2026-61740). Risk of unauthorized operations or information disclosure. Exploitable via `DELETE /documents`. Mitigation: upgrade to `1.5.4` or later.
|
| CVE-2026-61736 |
|
Vulnerability in lightrag-hku (CVE-2026-61736)
vulnerability in lightrag-hku (CVE-2026-61736). Confidential information can be exposed externally. Mitigation: upgrade to `1.5.4` or later.
|
| CVE-2026-61684 |
|
Vulnerability in CVE-2026-61684 (CVE-2026-61684)
vulnerability in CVE-2026-61684 (CVE-2026-61684). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61646 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-61646)
SSRF in ssrf (CVE-2026-61646). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61644 |
|
Authorization Flaw in CVE-2026-61644 (CVE-2026-61644)
vulnerability in CVE-2026-61644 (CVE-2026-61644). Confidential information can be exposed externally. Exploitable via `POST /api/core/chat/record/getCollectionQuote`.
|
| CVE-2026-61613 |
|
Vulnerability in CVE-2026-61613 (CVE-2026-61613)
vulnerability in CVE-2026-61613 (CVE-2026-61613). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54563 |
|
Authorization Flaw in github.com/cloudreve/Cloudreve/v4 (CVE-2026-54563)
vulnerability in github.com/cloudreve/Cloudreve/v4 (CVE-2026-54563). Confidential information can be exposed externally. Exploitable via `GET /dav/`. Mitigation: upgrade to `4.0.0-20260606032813-26b6b1044b02` or later.
|
| CVE-2026-54562 |
|
SSRF (Server-Side Request Forgery) in github.com/cloudreve/Cloudreve/v4 (CVE-2026-54562)
SSRF in github.com/cloudreve/Cloudreve/v4 (CVE-2026-54562). Confidential information can be exposed externally. Exploitable via `POST /api/v4/workflow/download`. Mitigation: upgrade to `4.0.0-20260606025411-aaebf317a78f` or later.
|
| CVE-2026-54560 |
|
Authorization Flaw in github.com/cloudreve/Cloudreve/v4 (CVE-2026-54560)
vulnerability in github.com/cloudreve/Cloudreve/v4 (CVE-2026-54560). Confidential information can be exposed externally. Exploitable via `POST /api/v4/session/oauth/token`. Mitigation: upgrade to `4.0.0-20260606015557-ed20843dc3df` or later.
|
| CVE-2026-33213 |
|
Open Redirect in redash (CVE-2026-33213)
vulnerability in redash (CVE-2026-33213). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62175 |
|
Vulnerability in CVE-2026-62175 (CVE-2026-62175)
vulnerability in CVE-2026-62175 (CVE-2026-62175). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61871 |
|
Vulnerability in dos (CVE-2026-61871)
vulnerability in dos (CVE-2026-61871). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61869 |
|
Vulnerability in dos (CVE-2026-61869)
vulnerability in dos (CVE-2026-61869). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61873 |
|
Vulnerability in path-traversal (CVE-2026-61873)
vulnerability in path-traversal (CVE-2026-61873). Data can be tampered with by attackers.
|
| CVE-2026-61867 |
|
Vulnerability in dos (CVE-2026-61867)
vulnerability in dos (CVE-2026-61867). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61872 |
|
Vulnerability in CVE-2026-61872 (CVE-2026-61872)
vulnerability in CVE-2026-61872 (CVE-2026-61872). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61868 |
|
Vulnerability in dos (CVE-2026-61868)
vulnerability in dos (CVE-2026-61868). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61864 |
|
Vulnerability in CVE-2026-61864 (CVE-2026-61864)
vulnerability in CVE-2026-61864 (CVE-2026-61864). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61865 |
|
Vulnerability in CVE-2026-61865 (CVE-2026-61865)
vulnerability in CVE-2026-61865 (CVE-2026-61865). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61866 |
|
Vulnerability in imagemagick (CVE-2026-61866)
vulnerability in imagemagick (CVE-2026-61866). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61464 |
|
Vulnerability in dos (CVE-2026-61464)
vulnerability in dos (CVE-2026-61464). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61452 |
|
Vulnerability in CVE-2026-61452 (CVE-2026-61452)
vulnerability in CVE-2026-61452 (CVE-2026-61452). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61859 |
|
Vulnerability in imagemagick (CVE-2026-61859)
vulnerability in imagemagick (CVE-2026-61859). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61446 |
|
Code Injection in path-traversal (CVE-2026-61446)
code injection in path-traversal (CVE-2026-61446). Successful exploitation can lead to full system takeover.
|
| CVE-2026-61438 |
|
OS Command Injection in CVE-2026-61438 (CVE-2026-61438)
OS command injection in CVE-2026-61438 (CVE-2026-61438). Successful exploitation can lead to full system takeover.
|
| CVE-2026-61453 |
|
Cross-Site Scripting (XSS) in CVE-2026-61453 (CVE-2026-61453)
cross-site scripting in CVE-2026-61453 (CVE-2026-61453). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.1` or later.
|
| CVE-2026-61449 |
|
Vulnerability in CVE-2026-61449 (CVE-2026-61449)
vulnerability in CVE-2026-61449 (CVE-2026-61449). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.2` or later.
|
| CVE-2026-61443 |
|
Path Traversal in CVE-2026-61443 (CVE-2026-61443)
path traversal in CVE-2026-61443 (CVE-2026-61443). Confidential information can be exposed externally.
|
| CVE-2026-61440 |
|
Vulnerability in CVE-2026-61440 (CVE-2026-61440)
vulnerability in CVE-2026-61440 (CVE-2026-61440). Data can be tampered with by attackers.
|
| CVE-2026-61451 |
|
Open Redirect in CVE-2026-61451 (CVE-2026-61451)
vulnerability in CVE-2026-61451 (CVE-2026-61451). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/v1/auth/forgot-password`.
|