Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| MINI-jxf9-683h-vvg5 |
|
MINI-jxf9-683h-vvg5 |
| CGA-q9xw-7g2w-p466 |
|
CGA-q9xw-7g2w-p466 |
| CGA-7m3j-g4c5-pwfw |
|
CGA-7m3j-g4c5-pwfw |
| CGA-chrf-95pv-24f7 |
|
CGA-chrf-95pv-24f7 |
| CGA-vr3r-727c-cxpc |
|
CGA-vr3r-727c-cxpc |
| CVE-2026-48785 |
|
Path Traversal in github.com/apptainer/apptainer (CVE-2026-48785)
path traversal in github.com/apptainer/apptainer (CVE-2026-48785). Risk of unauthorized operations or information disclosure. Exploitable via ``apptainer.conf``. Mitigation: upgrade to `1.5.1` or later.
|
| CVE-2026-54753 |
|
Vulnerability in nx (CVE-2026-54753)
vulnerability in nx (CVE-2026-54753). Confidential information can be exposed externally. Exploitable via `GET /help`. Mitigation: upgrade to `23.0.0-beta.2` or later.
|
| CVE-2026-48090 |
|
Use-After-Free in envoy (CVE-2026-48090)
vulnerability in envoy (CVE-2026-48090). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.37.5` or later.
|
| CVE-2026-47220 |
|
Vulnerability in envoy (CVE-2026-47220)
vulnerability in envoy (CVE-2026-47220). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`. Mitigation: upgrade to `1.37.5` or later.
|
| CVE-2026-47205 |
|
Use-After-Free in envoy (CVE-2026-47205)
vulnerability in envoy (CVE-2026-47205). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.36.9` or later.
|
| CVE-2026-48769 |
|
Vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48769)
vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48769). Successful exploitation can lead to full system takeover. Exploitable via `POST /1.0/images`. Mitigation: upgrade to `7.2.0` or later.
|
| CVE-2026-48758 |
|
Vulnerability in @sigstore/core (CVE-2026-48758)
vulnerability in @sigstore/core (CVE-2026-48758). Risk of unauthorized operations or information disclosure. Exploitable via ``preAuthEncoding``. Mitigation: upgrade to `3.2.1` or later.
|
| CVE-2026-48756 |
|
Vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48756)
vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48756). Risk of unauthorized operations or information disclosure. Exploitable via `POST /1.0/storage-pools/`. Mitigation: upgrade to `7.1.0` or later.
|
| CVE-2026-48755 |
|
Vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48755)
vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48755). Successful exploitation can lead to full system takeover. Exploitable via ``compression_algorithm``. Mitigation: upgrade to `7.2.0` or later.
|
| CGA-gpw2-8j67-cgw8 |
|
CGA-gpw2-8j67-cgw8 |
| CVE-2026-48754 |
|
Vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48754)
vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48754). Risk of unauthorized operations or information disclosure. Exploitable via `POST /1.0/instances`. Mitigation: upgrade to `7.1.0` or later.
|
| CGA-mm7w-cgmv-857p |
|
CGA-mm7w-cgmv-857p |
| CVE-2026-48753 |
|
Vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48753)
vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48753). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `7.1.0` or later.
|
| CVE-2026-48752 |
|
Vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48752)
vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48752). Successful exploitation can lead to full system takeover. Exploitable via ``templates``. Mitigation: upgrade to `7.2.0` or later.
|
| CVE-2026-56876 |
|
Path Traversal in extract-zip (CVE-2026-56876)
path traversal in extract-zip (CVE-2026-56876). Confidential information can be exposed externally.
|
| CVE-2026-11779 |
|
Vulnerability in CVE-2026-11779 (CVE-2026-11779)
vulnerability in CVE-2026-11779 (CVE-2026-11779). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57518 |
|
Vulnerability in privilege-escalation (CVE-2026-57518)
vulnerability in privilege-escalation (CVE-2026-57518). Successful exploitation can lead to full system takeover.
|
| CVE-2026-0828 |
|
Vulnerability in CVE-2026-0828 (CVE-2026-0828)
vulnerability in CVE-2026-0828 (CVE-2026-0828). Confidential information can be exposed externally.
|
| CVE-2026-5757 |
|
Out-of-Bounds Read in ollama (CVE-2026-5757)
vulnerability in ollama (CVE-2026-5757). Confidential information can be exposed externally.
|
| CVE-2026-13434 |
|
Vulnerability in kubevirt (CVE-2026-13434)
vulnerability in kubevirt (CVE-2026-13434). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45195 |
|
Vulnerability in imaginationtech (CVE-2026-45195)
vulnerability in imaginationtech (CVE-2026-45195). Successful exploitation can lead to full system takeover.
|
| CVE-2026-0685 |
|
Vulnerability in CVE-2026-0685 (CVE-2026-0685)
vulnerability in CVE-2026-0685 (CVE-2026-0685). Successful exploitation can lead to full system takeover.
|
| CVE-2026-21734 |
|
Vulnerability in imaginationtech (CVE-2026-21734)
vulnerability in imaginationtech (CVE-2026-21734). Data can be tampered with by attackers.
|
| CVE-2023-20540 |
|
Vulnerability in CVE-2023-20540 (CVE-2023-20540)
vulnerability in CVE-2023-20540 (CVE-2023-20540). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-20572 |
|
Vulnerability in CVE-2023-20572 (CVE-2023-20572)
vulnerability in CVE-2023-20572 (CVE-2023-20572). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-11919 |
|
Vulnerability in CVE-2025-11919 (CVE-2025-11919)
vulnerability in CVE-2025-11919 (CVE-2025-11919). Confidential information can be exposed externally.
|
| CVE-2026-48751 |
|
Vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48751)
vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48751). Successful exploitation can lead to full system takeover. Exploitable via ``raw.lxc``. Mitigation: upgrade to `7.2.0` or later.
|
| CVE-2026-48750 |
|
Vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48750)
vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48750). Successful exploitation can lead to full system takeover. Exploitable via ``exec_UUID.stdout``. Mitigation: upgrade to `7.2.0` or later.
|
| CVE-2026-48749 |
|
Vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48749)
vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48749). Successful exploitation can lead to full system takeover. Exploitable via ``metadata.yaml``. Mitigation: upgrade to `7.2.0` or later.
|
| MAL-2026-6531 |
|
Vulnerability in @appupdate/cdn-sync (MAL-2026-6531)
vulnerability in @appupdate/cdn-sync (MAL-2026-6531). Risk of unauthorized operations or information disclosure. Exploitable via ``ProbeStop``.
|
| CGA-gpq8-q48q-3x4f |
|
CGA-gpq8-q48q-3x4f |
| CGA-fcjh-65j7-5hp6 |
|
CGA-fcjh-65j7-5hp6 |
| CGA-4jc3-m65r-hf69 |
|
CGA-4jc3-m65r-hf69 |
| CGA-436j-9rcw-588x |
|
CGA-436j-9rcw-588x |
| CGA-fcwg-cf6c-5vpc |
|
CGA-fcwg-cf6c-5vpc |
| UBUNTU-CVE-2026-56876 |
|
Vulnerability in node-extract-zip (UBUNTU-CVE-2026-56876)
vulnerability in node-extract-zip (UBUNTU-CVE-2026-56876). Confidential information can be exposed externally.
|
| CVE-2026-54341 |
|
Out-of-Bounds Read in dos (CVE-2026-54341)
vulnerability in dos (CVE-2026-54341). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.39.0` or later.
|
| CVE-2026-48743 |
|
Vulnerability in envoy (CVE-2026-48743)
vulnerability in envoy (CVE-2026-48743). Data can be tampered with by attackers. Exploitable via `GET /pwn`. Mitigation: upgrade to `1.35.11` or later.
|
| CVE-2026-48706 |
|
Vulnerability in envoy (CVE-2026-48706)
vulnerability in envoy (CVE-2026-48706). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.35.13` or later.
|
| CVE-2026-48497 |
|
Vulnerability in envoy (CVE-2026-48497)
vulnerability in envoy (CVE-2026-48497). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.35.11` or later.
|
| CVE-2026-48044 |
|
Vulnerability in envoy (CVE-2026-48044)
vulnerability in envoy (CVE-2026-48044). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.35.11` or later.
|
| CVE-2026-48042 |
|
Vulnerability in envoy (CVE-2026-48042)
vulnerability in envoy (CVE-2026-48042). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.35.11` or later.
|
| CVE-2026-47778 |
|
Vulnerability in envoy (CVE-2026-47778)
vulnerability in envoy (CVE-2026-47778). Confidential information can be exposed externally. Mitigation: upgrade to `1.35.11` or later.
|
| CVE-2026-47775 |
|
Vulnerability in envoy (CVE-2026-47775)
vulnerability in envoy (CVE-2026-47775). Confidential information can be exposed externally. Mitigation: upgrade to `1.35.11` or later.
|
| CVE-2026-47692 |
|
Vulnerability in envoy (CVE-2026-47692)
vulnerability in envoy (CVE-2026-47692). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.35.13` or later.
|