Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-69836 KEV [KEV] Unsafe Deserialization in Microsoft deserialization (CVE-2026-69836)
vulnerability in Microsoft deserialization (CVE-2026-69836). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-69558 Vulnerability in microsoft (CVE-2026-69558)
vulnerability in microsoft (CVE-2026-69558). Confidential information can be exposed externally.
CVE-2026-69555 Authorization Flaw in microsoft (CVE-2026-69555)
vulnerability in microsoft (CVE-2026-69555). Confidential information can be exposed externally.
CVE-2026-69543 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-69543)
SSRF in ssrf (CVE-2026-69543). Successful exploitation can lead to full system takeover.
CVE-2026-69519 Vulnerability in microsoft (CVE-2026-69519)
vulnerability in microsoft (CVE-2026-69519). Confidential information can be exposed externally.
CVE-2026-69419 Vulnerability in CVE-2026-69419 (CVE-2026-69419)
vulnerability in CVE-2026-69419 (CVE-2026-69419). Successful exploitation can lead to full system takeover.
CVE-2026-69400 Path Traversal in path-traversal (CVE-2026-69400)
path traversal in path-traversal (CVE-2026-69400). Successful exploitation can lead to full system takeover.
CVE-2026-68789 SQL Injection in sqli (CVE-2026-68789)
SQL injection in sqli (CVE-2026-68789). Successful exploitation can lead to full system takeover.
CVE-2026-68782 SQL Injection in sqli (CVE-2026-68782)
SQL injection in sqli (CVE-2026-68782). Successful exploitation can lead to full system takeover.
CVE-2026-66800 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-66800)
SSRF in ssrf (CVE-2026-66800). Confidential information can be exposed externally.
CVE-2026-66309 Vulnerability in microsoft (CVE-2026-66309)
vulnerability in microsoft (CVE-2026-66309). Successful exploitation can lead to full system takeover.
CVE-2026-65816 Vulnerability in microsoft (CVE-2026-65816)
vulnerability in microsoft (CVE-2026-65816). Successful exploitation can lead to full system takeover.
CVE-2026-65801 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-65801)
SSRF in ssrf (CVE-2026-65801). Successful exploitation can lead to full system takeover.
CVE-2026-65770 Vulnerability in apache (CVE-2026-65770)
vulnerability in apache (CVE-2026-65770). Successful exploitation can lead to full system takeover.
CVE-2026-64773 Vulnerability in CVE-2026-64773 (CVE-2026-64773)
vulnerability in CVE-2026-64773 (CVE-2026-64773). Risk of unauthorized operations or information disclosure.
CVE-2026-63509 Vulnerability in path-traversal (CVE-2026-63509)
vulnerability in path-traversal (CVE-2026-63509). Successful exploitation can lead to full system takeover.
CVE-2026-62945 Vulnerability in CVE-2026-62945 (CVE-2026-62945)
vulnerability in CVE-2026-62945 (CVE-2026-62945). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/trips/`.
CVE-2026-62834 Vulnerability in microsoft (CVE-2026-62834)
vulnerability in microsoft (CVE-2026-62834). Confidential information can be exposed externally.
CVE-2026-55894 Out-of-Bounds Read in c (CVE-2026-55894)
vulnerability in c (CVE-2026-55894). Risk of unauthorized operations or information disclosure.
CVE-2026-55893 Vulnerability in c (CVE-2026-55893)
vulnerability in c (CVE-2026-55893). Risk of unauthorized operations or information disclosure.
CVE-2026-55769 Vulnerability in CVE-2026-55769 (CVE-2026-55769)
vulnerability in CVE-2026-55769 (CVE-2026-55769). Risk of unauthorized operations or information disclosure.
CVE-2026-55765 Vulnerability in CVE-2026-55765 (CVE-2026-55765)
vulnerability in CVE-2026-55765 (CVE-2026-55765). Successful exploitation can lead to full system takeover.
CVE-2026-55491 Cross-Site Scripting (XSS) in CVE-2026-55491 (CVE-2026-55491)
cross-site scripting in CVE-2026-55491 (CVE-2026-55491). Risk of unauthorized operations or information disclosure.
CVE-2026-55489 Vulnerability in CVE-2026-55489 (CVE-2026-55489)
vulnerability in CVE-2026-55489 (CVE-2026-55489). Risk of unauthorized operations or information disclosure.
CVE-2026-55015 Vulnerability in CVE-2026-55015 (CVE-2026-55015)
vulnerability in CVE-2026-55015 (CVE-2026-55015). Risk of unauthorized operations or information disclosure.
CVE-2026-55013 Vulnerability in CVE-2026-55013 (CVE-2026-55013)
vulnerability in CVE-2026-55013 (CVE-2026-55013). Confidential information can be exposed externally.
CVE-2026-54509 Vulnerability in CVE-2026-54509 (CVE-2026-54509)
vulnerability in CVE-2026-54509 (CVE-2026-54509). Confidential information can be exposed externally. Exploitable via `GET /api/journeys/`.
CVE-2026-54508 SSRF (Server-Side Request Forgery) in CVE-2026-54508 (CVE-2026-54508)
SSRF in CVE-2026-54508 (CVE-2026-54508). Risk of unauthorized operations or information disclosure.
CVE-2026-54505 Cross-Site Scripting (XSS) in c (CVE-2026-54505)
cross-site scripting in c (CVE-2026-54505). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/journeys/suggestions`.
CVE-2026-54389 Vulnerability in deserialization (CVE-2026-54389)
vulnerability in deserialization (CVE-2026-54389). Risk of unauthorized operations or information disclosure.
CVE-2026-49436 Cross-Site Scripting (XSS) in CVE-2026-49436 (CVE-2026-49436)
cross-site scripting in CVE-2026-49436 (CVE-2026-49436). Confidential information can be exposed externally. Exploitable via `POST /api/v2/bulk/links`.
CVE-2026-49217 Vulnerability in CVE-2026-49217 (CVE-2026-49217)
vulnerability in CVE-2026-49217 (CVE-2026-49217). Data can be tampered with by attackers.
CVE-2026-46682 SQL Injection in CVE-2026-46682 (CVE-2026-46682)
SQL injection in CVE-2026-46682 (CVE-2026-46682). Confidential information can be exposed externally.
CVE-2026-46355 Authentication Bypass in CVE-2026-46355 (CVE-2026-46355)
authentication bypass in CVE-2026-46355 (CVE-2026-46355). Data can be tampered with by attackers.
CVE-2026-19783 Out-of-Bounds Write in privilege-escalation (CVE-2026-19783)
out-of-bounds write in privilege-escalation (CVE-2026-19783). Successful exploitation can lead to full system takeover.
CVE-2026-19449 Privilege Escalation in ibm (CVE-2026-19449)
vulnerability in ibm (CVE-2026-19449). Successful exploitation can lead to full system takeover.
CVE-2026-19448 Vulnerability in dos (CVE-2026-19448)
vulnerability in dos (CVE-2026-19448). Risk of unauthorized operations or information disclosure.
CVE-2026-19446 Vulnerability in ibm (CVE-2026-19446)
vulnerability in ibm (CVE-2026-19446). Risk of unauthorized operations or information disclosure.
CVE-2026-19442 Vulnerability in privilege-escalation (CVE-2026-19442)
vulnerability in privilege-escalation (CVE-2026-19442). Successful exploitation can lead to full system takeover.
CVE-2026-19437 Out-of-Bounds Write in ibm (CVE-2026-19437)
out-of-bounds write in ibm (CVE-2026-19437). Successful exploitation can lead to full system takeover.
CVE-2026-18842 Out-of-Bounds Write in ibm (CVE-2026-18842)
out-of-bounds write in ibm (CVE-2026-18842). Successful exploitation can lead to full system takeover.
CVE-2026-18840 Vulnerability in ibm (CVE-2026-18840)
vulnerability in ibm (CVE-2026-18840). Successful exploitation can lead to full system takeover.
CVE-2026-18835 OS Command Injection in ibm (CVE-2026-18835)
OS command injection in ibm (CVE-2026-18835). Successful exploitation can lead to full system takeover.
CVE-2026-18832 Out-of-Bounds Write in ibm (CVE-2026-18832)
out-of-bounds write in ibm (CVE-2026-18832). Successful exploitation can lead to full system takeover.
CVE-2026-18828 Out-of-Bounds Write in dos (CVE-2026-18828)
out-of-bounds write in dos (CVE-2026-18828). Risk of unauthorized operations or information disclosure.
CVE-2026-18824 OS Command Injection in CVE-2026-18824 (CVE-2026-18824)
OS command injection in CVE-2026-18824 (CVE-2026-18824). Successful exploitation can lead to full system takeover.
CVE-2026-18822 Vulnerability in dos (CVE-2026-18822)
vulnerability in dos (CVE-2026-18822). Risk of unauthorized operations or information disclosure.
CVE-2026-18716 Out-of-Bounds Read in dos (CVE-2026-18716)
vulnerability in dos (CVE-2026-18716). Risk of unauthorized operations or information disclosure.
CVE-2026-18670 Vulnerability in dos (CVE-2026-18670)
vulnerability in dos (CVE-2026-18670). Risk of unauthorized operations or information disclosure.
CVE-2026-17436 Out-of-Bounds Write in ibm (CVE-2026-17436)
out-of-bounds write in ibm (CVE-2026-17436). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →