Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-46135 Vulnerability in linux (CVE-2026-46135)
vulnerability in linux (CVE-2026-46135). Successful exploitation can lead to full system takeover.
CVE-2026-46137 Vulnerability in linux (CVE-2026-46137)
vulnerability in linux (CVE-2026-46137). Successful exploitation can lead to full system takeover.
CVE-2026-46119 Out-of-Bounds Read in linux (CVE-2026-46119)
vulnerability in linux (CVE-2026-46119). Confidential information can be exposed externally.
CVE-2026-46115 Vulnerability in linux (CVE-2026-46115)
vulnerability in linux (CVE-2026-46115). Successful exploitation can lead to full system takeover.
CVE-2026-4408 OS Command Injection in redhat (CVE-2026-4408)
OS command injection in redhat (CVE-2026-4408). Successful exploitation can lead to full system takeover.
CVE-2026-32999 Code Injection in CVE-2026-32999 (CVE-2026-32999)
code injection in CVE-2026-32999 (CVE-2026-32999). Successful exploitation can lead to full system takeover.
CVE-2026-46621 Code Injection in org.yamcs:yamcs-core (CVE-2026-46621)
code injection in org.yamcs:yamcs-core (CVE-2026-46621). Successful exploitation can lead to full system takeover. Exploitable via ``ChangeMissionDatabase``. Mitigation: upgrade to `5.12.7` or later.
CVE-2026-46562 Code Injection in org.yamcs:yamcs-core (CVE-2026-46562)
code injection in org.yamcs:yamcs-core (CVE-2026-46562). Successful exploitation can lead to full system takeover. Exploitable via `PATCH /api/mdb/{instance}/{processor}/algorithms/{name`. Mitigation: upgrade to `5.12.7` or later.
CVE-2026-8362 Vulnerability in CVE-2026-8362 (CVE-2026-8362)
vulnerability in CVE-2026-8362 (CVE-2026-8362). Successful exploitation can lead to full system takeover.
CVE-2026-8363 Vulnerability in CVE-2026-8363 (CVE-2026-8363)
vulnerability in CVE-2026-8363 (CVE-2026-8363). Successful exploitation can lead to full system takeover.
CVE-2026-8364 Vulnerability in CVE-2026-8364 (CVE-2026-8364)
vulnerability in CVE-2026-8364 (CVE-2026-8364). Successful exploitation can lead to full system takeover.
CVE-2026-45069 Vulnerability in symfony/security-http (CVE-2026-45069)
vulnerability in symfony/security-http (CVE-2026-45069). Confidential information can be exposed externally. Exploitable via ``OidcTokenHandler``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-44888 Code Injection in CVE-2026-44888 (CVE-2026-44888)
code injection in CVE-2026-44888 (CVE-2026-44888). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026-05-07` or later.
CVE-2026-45102 Vulnerability in CVE-2026-45102 (CVE-2026-45102)
vulnerability in CVE-2026-45102 (CVE-2026-45102). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.0.98` or later.
CVE-2026-44590 OS Command Injection in CVE-2026-44590 (CVE-2026-44590)
OS command injection in CVE-2026-44590 (CVE-2026-44590). Data can be tampered with by attackers. Mitigation: upgrade to `0.16.1` or later.
CVE-2026-44887 Code Injection in CVE-2026-44887 (CVE-2026-44887)
code injection in CVE-2026-44887 (CVE-2026-44887). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026-05-07` or later.
CVE-2026-25879 SQL Injection in langroid (CVE-2026-25879)
SQL injection in langroid (CVE-2026-25879). Successful exploitation can lead to full system takeover. Exploitable via ``query``. Mitigation: upgrade to `0.63.0` or later.
CVE-2026-9726 Vulnerability in drupal/basket (CVE-2026-9726)
vulnerability in drupal/basket (CVE-2026-9726). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.1.17` or later.
CVE-2026-45618 Code Injection in liquidjs (CVE-2026-45618)
code injection in liquidjs (CVE-2026-45618). Successful exploitation can lead to full system takeover. Exploitable via ``this``. Mitigation: upgrade to `10.26.0` or later.
CVE-2026-48150 Vulnerability in @budibase/server (CVE-2026-48150)
vulnerability in @budibase/server (CVE-2026-48150). Confidential information can be exposed externally. Exploitable via `GET /api/global/self/api_key`. Mitigation: upgrade to `3.39.0` or later.
CVE-2026-46425 Vulnerability in CVE-2026-46425 (CVE-2026-46425)
vulnerability in CVE-2026-46425 (CVE-2026-46425). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.38.2` or later.
CVE-2026-45063 Vulnerability in symfony/security-http (CVE-2026-45063)
vulnerability in symfony/security-http (CVE-2026-45063). Confidential information can be exposed externally. Exploitable via ``X509Authenticator``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-45972 Use-After-Free in linux (CVE-2026-45972)
vulnerability in linux (CVE-2026-45972). Successful exploitation can lead to full system takeover.
CVE-2026-45898 Vulnerability in c (CVE-2026-45898)
vulnerability in c (CVE-2026-45898). Successful exploitation can lead to full system takeover.
CVE-2026-7524 Path Traversal in langflow (CVE-2026-7524)
path traversal in langflow (CVE-2026-7524). Successful exploitation can lead to full system takeover.
CVE-2026-7876 IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19
IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19
CVE-2026-8175 Vulnerability in dos (CVE-2026-8175)
vulnerability in dos (CVE-2026-8175). Successful exploitation can lead to full system takeover.
CVE-2026-46039 Vulnerability in linux (CVE-2026-46039)
vulnerability in linux (CVE-2026-46039). Successful exploitation can lead to full system takeover.
CVE-2026-46043 Vulnerability in linux (CVE-2026-46043)
vulnerability in linux (CVE-2026-46043). Confidential information can be exposed externally.
CVE-2026-45988 Vulnerability in linux (CVE-2026-45988)
vulnerability in linux (CVE-2026-45988). Successful exploitation can lead to full system takeover.
CVE-2026-42756 Path Traversal in path-traversal (CVE-2026-42756)
path traversal in path-traversal (CVE-2026-42756). Successful exploitation can lead to full system takeover.
CVE-2026-42757 Path Traversal in path-traversal (CVE-2026-42757)
path traversal in path-traversal (CVE-2026-42757). Successful exploitation can lead to full system takeover.
CVE-2026-42758 Vulnerability in privilege-escalation (CVE-2026-42758)
vulnerability in privilege-escalation (CVE-2026-42758). Successful exploitation can lead to full system takeover.
CVE-2026-42761 SQL Injection in sqli (CVE-2026-42761)
SQL injection in sqli (CVE-2026-42761). Confidential information can be exposed externally.
CVE-2026-42747 SQL Injection in sqli (CVE-2026-42747)
SQL injection in sqli (CVE-2026-42747). Confidential information can be exposed externally.
CVE-2026-42748 Unrestricted File Upload in CVE-2026-42748 (CVE-2026-42748)
vulnerability in CVE-2026-42748 (CVE-2026-42748). Successful exploitation can lead to full system takeover.
CVE-2026-42755 SQL Injection in sqli (CVE-2026-42755)
SQL injection in sqli (CVE-2026-42755). Confidential information can be exposed externally.
CVE-2026-42740 SQL Injection in sqli (CVE-2026-42740)
SQL injection in sqli (CVE-2026-42740). Confidential information can be exposed externally.
CVE-2026-42727 SQL Injection in sqli (CVE-2026-42727)
SQL injection in sqli (CVE-2026-42727). Confidential information can be exposed externally.
CVE-2026-42731 Vulnerability in privilege-escalation (CVE-2026-42731)
vulnerability in privilege-escalation (CVE-2026-42731). Successful exploitation can lead to full system takeover.
CVE-2026-49002 Vulnerability in CVE-2026-49002 (CVE-2026-49002)
vulnerability in CVE-2026-49002 (CVE-2026-49002). Confidential information can be exposed externally.
CVE-2025-12686 Vulnerability in synology (CVE-2025-12686)
vulnerability in synology (CVE-2025-12686). Successful exploitation can lead to full system takeover.
CVE-2026-5760 Code Injection in jvn (CVE-2026-5760)
code injection in jvn (CVE-2026-5760). Successful exploitation can lead to full system takeover.
CVE-2026-8760 Vulnerability in wordpress (CVE-2026-8760)
vulnerability in wordpress (CVE-2026-8760). Successful exploitation can lead to full system takeover.
CVE-2026-8450 Vulnerability in CVE-2026-8450 (CVE-2026-8450)
vulnerability in CVE-2026-8450 (CVE-2026-8450). Confidential information can be exposed externally.
CVE-2026-44632 Code Injection in org.yamcs:yamcs-core (CVE-2026-44632)
code injection in org.yamcs:yamcs-core (CVE-2026-44632). Successful exploitation can lead to full system takeover. Exploitable via ``ChangeMissionDatabase``. Mitigation: upgrade to `5.12.7` or later.
CVE-2026-48027 KEV [KEV] Vulnerability in nx (CVE-2026-48027)
vulnerability in nx (CVE-2026-48027). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-44210 Vulnerability in github.com/kata-containers/kata-containers (CVE-2026-44210)
vulnerability in github.com/kata-containers/kata-containers (CVE-2026-44210). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.0.0-20260519062212-ffa59ce3aa78` or later.
CVE-2026-9642 Vulnerability in deltaww (CVE-2026-9642)
vulnerability in deltaww (CVE-2026-9642). Successful exploitation can lead to full system takeover.
CVE-2026-44449 Vulnerability in c (CVE-2026-44449)
vulnerability in c (CVE-2026-44449). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.9.7` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →