Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-77812 Vulnerability in CVE-2026-77812 (CVE-2026-77812)
vulnerability in CVE-2026-77812 (CVE-2026-77812). Risk of unauthorized operations or information disclosure.
CVE-2026-77815 Vulnerability in CVE-2026-77815 (CVE-2026-77815)
vulnerability in CVE-2026-77815 (CVE-2026-77815). Confidential information can be exposed externally.
CVE-2026-77087 Vulnerability in CVE-2026-77087 (CVE-2026-77087)
vulnerability in CVE-2026-77087 (CVE-2026-77087). Successful exploitation can lead to full system takeover. Exploitable via `Host header`.
CVE-2026-63343 Vulnerability in CVE-2026-63343 (CVE-2026-63343)
vulnerability in CVE-2026-63343 (CVE-2026-63343). Successful exploitation can lead to full system takeover. Exploitable via ``metadata.yaml``.
CVE-2026-63125 Vulnerability in CVE-2026-63125 (CVE-2026-63125)
vulnerability in CVE-2026-63125 (CVE-2026-63125). Successful exploitation can lead to full system takeover. Exploitable via ``can_create_images``.
CVE-2026-62941 Authorization Flaw in CVE-2026-62941 (CVE-2026-62941)
vulnerability in CVE-2026-62941 (CVE-2026-62941). Successful exploitation can lead to full system takeover. Exploitable via ``AllowInstanceCreation``.
CVE-2026-62940 Vulnerability in CVE-2026-62940 (CVE-2026-62940)
vulnerability in CVE-2026-62940 (CVE-2026-62940). Successful exploitation can lead to full system takeover. Exploitable via ``security.privileged``.
CVE-2026-62867 Vulnerability in CVE-2026-62867 (CVE-2026-62867)
vulnerability in CVE-2026-62867 (CVE-2026-62867). Successful exploitation can lead to full system takeover. Exploitable via ``block.create_options``.
CVE-2026-62313 Authorization Flaw in c (CVE-2026-62313)
vulnerability in c (CVE-2026-62313). Risk of unauthorized operations or information disclosure. Exploitable via ``security.idmap.isolated``.
CVE-2026-55622 Vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-55622)
vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-55622). Confidential information can be exposed externally. Exploitable via `POST /1.0/instances`. Mitigation: upgrade to `7.2.0` or later.
CVE-2026-55621 Vulnerability in github.com/lxc/incus/v7 (CVE-2026-55621)
vulnerability in github.com/lxc/incus/v7 (CVE-2026-55621). Confidential information can be exposed externally. Exploitable via ``req.Source.Project``. Mitigation: upgrade to `7.2.0` or later.
CVE-2026-50278 Out-of-Bounds Read in CVE-2026-50278 (CVE-2026-50278)
vulnerability in CVE-2026-50278 (CVE-2026-50278). Risk of unauthorized operations or information disclosure. Exploitable via ``icSigEmbeddedV5ProfileTag``.
CVE-2026-77806 Code Injection in CVE-2026-77806 (CVE-2026-77806)
code injection in CVE-2026-77806 (CVE-2026-77806). Successful exploitation can lead to full system takeover.
CVE-2026-75946 Vulnerability in CVE-2026-75946 (CVE-2026-75946)
vulnerability in CVE-2026-75946 (CVE-2026-75946). Risk of unauthorized operations or information disclosure.
CVE-2026-15580 Vulnerability in CVE-2026-15580 (CVE-2026-15580)
vulnerability in CVE-2026-15580 (CVE-2026-15580). Risk of unauthorized operations or information disclosure.
CVE-2026-77780 Vulnerability in CVE-2026-77780 (CVE-2026-77780)
vulnerability in CVE-2026-77780 (CVE-2026-77780). Risk of unauthorized operations or information disclosure. Exploitable via `POST /transaction/save`.
CVE-2026-77028 Cross-Site Scripting (XSS) in CVE-2026-77028 (CVE-2026-77028)
cross-site scripting in CVE-2026-77028 (CVE-2026-77028). Risk of unauthorized operations or information disclosure.
CVE-2026-76613 SQL Injection in sqli (CVE-2026-76613)
SQL injection in sqli (CVE-2026-76613). Risk of unauthorized operations or information disclosure.
CVE-2026-76612 Cross-Site Scripting (XSS) in CVE-2026-76612 (CVE-2026-76612)
cross-site scripting in CVE-2026-76612 (CVE-2026-76612). Risk of unauthorized operations or information disclosure.
CVE-2026-76611 Path Traversal in CVE-2026-76611 (CVE-2026-76611)
path traversal in CVE-2026-76611 (CVE-2026-76611). Risk of unauthorized operations or information disclosure.
CVE-2026-75115 Path Traversal in CVE-2026-75115 (CVE-2026-75115)
path traversal in CVE-2026-75115 (CVE-2026-75115). Risk of unauthorized operations or information disclosure.
CVE-2026-59654 Vulnerability in apache (CVE-2026-59654)
vulnerability in apache (CVE-2026-59654). Risk of unauthorized operations or information disclosure.
CVE-2026-77776 Vulnerability in CVE-2026-77776 (CVE-2026-77776)
vulnerability in CVE-2026-77776 (CVE-2026-77776). Confidential information can be exposed externally.
CVE-2026-77775 SSRF (Server-Side Request Forgery) in CVE-2026-77775 (CVE-2026-77775)
SSRF in CVE-2026-77775 (CVE-2026-77775). Confidential information can be exposed externally. Exploitable via `Authorization header`.
CVE-2026-77759 Vulnerability in CVE-2026-77759 (CVE-2026-77759)
vulnerability in CVE-2026-77759 (CVE-2026-77759). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/transaction/{id}`.
CVE-2026-77029 Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo < 4.1.66
Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo < 4.1.66
CVE-2026-59318 Authorization Flaw in privilege-escalation (CVE-2026-59318)
vulnerability in privilege-escalation (CVE-2026-59318). Confidential information can be exposed externally.
CVE-2026-59308 Vulnerability in CVE-2026-59308 (CVE-2026-59308)
vulnerability in CVE-2026-59308 (CVE-2026-59308). Risk of unauthorized operations or information disclosure.
CVE-2026-59279 Vulnerability in dos (CVE-2026-59279)
vulnerability in dos (CVE-2026-59279). Risk of unauthorized operations or information disclosure.
CVE-2026-19848 Vulnerability in wordpress (CVE-2026-19848)
vulnerability in wordpress (CVE-2026-19848). Risk of unauthorized operations or information disclosure.
CVE-2026-18356 Vulnerability in wordpress (CVE-2026-18356)
vulnerability in wordpress (CVE-2026-18356). Risk of unauthorized operations or information disclosure.
CVE-2026-17559 Authorization Flaw in wordpress (CVE-2026-17559)
vulnerability in wordpress (CVE-2026-17559). Risk of unauthorized operations or information disclosure.
CVE-2026-16650 Vulnerability in wordpress (CVE-2026-16650)
vulnerability in wordpress (CVE-2026-16650). Risk of unauthorized operations or information disclosure.
CVE-2026-15150 Vulnerability in wordpress (CVE-2026-15150)
vulnerability in wordpress (CVE-2026-15150). Risk of unauthorized operations or information disclosure.
CVE-2026-15046 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15046)
vulnerability in wordpress (CVE-2026-15046). Risk of unauthorized operations or information disclosure.
CVE-2026-13176 SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-13176)
SSRF in wordpress (CVE-2026-13176). Risk of unauthorized operations or information disclosure.
CVE-2026-77769 Vulnerability in CVE-2026-77769 (CVE-2026-77769)
vulnerability in CVE-2026-77769 (CVE-2026-77769). Confidential information can be exposed externally.
CVE-2026-77768 Vulnerability in CVE-2026-77768 (CVE-2026-77768)
vulnerability in CVE-2026-77768 (CVE-2026-77768). Confidential information can be exposed externally.
CVE-2026-77767 Vulnerability in CVE-2026-77767 (CVE-2026-77767)
vulnerability in CVE-2026-77767 (CVE-2026-77767). Confidential information can be exposed externally.
CVE-2026-77763 Path Traversal in CVE-2026-77763 (CVE-2026-77763)
path traversal in CVE-2026-77763 (CVE-2026-77763). Data can be tampered with by attackers.
CVE-2026-77761 Vulnerability in CVE-2026-77761 (CVE-2026-77761)
vulnerability in CVE-2026-77761 (CVE-2026-77761). Risk of unauthorized operations or information disclosure.
CVE-2026-77686 Vulnerability in CVE-2026-77686 (CVE-2026-77686)
vulnerability in CVE-2026-77686 (CVE-2026-77686). Risk of unauthorized operations or information disclosure.
CVE-2026-77683 Vulnerability in CVE-2026-77683 (CVE-2026-77683)
vulnerability in CVE-2026-77683 (CVE-2026-77683). Successful exploitation can lead to full system takeover.
CVE-2026-77086 Path Traversal in path-traversal (CVE-2026-77086)
path traversal in path-traversal (CVE-2026-77086). Successful exploitation can lead to full system takeover.
CVE-2026-59296 Vulnerability in CVE-2026-59296 (CVE-2026-59296)
vulnerability in CVE-2026-59296 (CVE-2026-59296). Data can be tampered with by attackers.
CVE-2026-15576 Vulnerability in CVE-2026-15576 (CVE-2026-15576)
vulnerability in CVE-2026-15576 (CVE-2026-15576). Risk of unauthorized operations or information disclosure.
CVE-2026-14208 Vulnerability in c (CVE-2026-14208)
vulnerability in c (CVE-2026-14208). Risk of unauthorized operations or information disclosure.
CVE-2026-77755 Vulnerability in CVE-2026-77755 (CVE-2026-77755)
vulnerability in CVE-2026-77755 (CVE-2026-77755). Risk of unauthorized operations or information disclosure.
CVE-2026-77751 Path Traversal in path-traversal (CVE-2026-77751)
path traversal in path-traversal (CVE-2026-77751). Risk of unauthorized operations or information disclosure.
CVE-2026-77681 Vulnerability in CVE-2026-77681 (CVE-2026-77681)
vulnerability in CVE-2026-77681 (CVE-2026-77681). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →