Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
MINI-jxf9-683h-vvg5 MINI-jxf9-683h-vvg5
CGA-q9xw-7g2w-p466 CGA-q9xw-7g2w-p466
CGA-7m3j-g4c5-pwfw CGA-7m3j-g4c5-pwfw
CGA-chrf-95pv-24f7 CGA-chrf-95pv-24f7
CGA-vr3r-727c-cxpc CGA-vr3r-727c-cxpc
CVE-2026-48785 Path Traversal in github.com/apptainer/apptainer (CVE-2026-48785)
path traversal in github.com/apptainer/apptainer (CVE-2026-48785). Risk of unauthorized operations or information disclosure. Exploitable via ``apptainer.conf``. Mitigation: upgrade to `1.5.1` or later.
CVE-2026-54753 Vulnerability in nx (CVE-2026-54753)
vulnerability in nx (CVE-2026-54753). Confidential information can be exposed externally. Exploitable via `GET /help`. Mitigation: upgrade to `23.0.0-beta.2` or later.
CVE-2026-48090 Use-After-Free in envoy (CVE-2026-48090)
vulnerability in envoy (CVE-2026-48090). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.37.5` or later.
CVE-2026-47220 Vulnerability in envoy (CVE-2026-47220)
vulnerability in envoy (CVE-2026-47220). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`. Mitigation: upgrade to `1.37.5` or later.
CVE-2026-47205 Use-After-Free in envoy (CVE-2026-47205)
vulnerability in envoy (CVE-2026-47205). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.36.9` or later.
CVE-2026-48769 Vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48769)
vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48769). Successful exploitation can lead to full system takeover. Exploitable via `POST /1.0/images`. Mitigation: upgrade to `7.2.0` or later.
CVE-2026-48758 Vulnerability in @sigstore/core (CVE-2026-48758)
vulnerability in @sigstore/core (CVE-2026-48758). Risk of unauthorized operations or information disclosure. Exploitable via ``preAuthEncoding``. Mitigation: upgrade to `3.2.1` or later.
CVE-2026-48756 Vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48756)
vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48756). Risk of unauthorized operations or information disclosure. Exploitable via `POST /1.0/storage-pools/`. Mitigation: upgrade to `7.1.0` or later.
CVE-2026-48755 Vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48755)
vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48755). Successful exploitation can lead to full system takeover. Exploitable via ``compression_algorithm``. Mitigation: upgrade to `7.2.0` or later.
CGA-gpw2-8j67-cgw8 CGA-gpw2-8j67-cgw8
CVE-2026-48754 Vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48754)
vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48754). Risk of unauthorized operations or information disclosure. Exploitable via `POST /1.0/instances`. Mitigation: upgrade to `7.1.0` or later.
CGA-mm7w-cgmv-857p CGA-mm7w-cgmv-857p
CVE-2026-48753 Vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48753)
vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48753). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `7.1.0` or later.
CVE-2026-48752 Vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48752)
vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48752). Successful exploitation can lead to full system takeover. Exploitable via ``templates``. Mitigation: upgrade to `7.2.0` or later.
CVE-2026-56876 Path Traversal in extract-zip (CVE-2026-56876)
path traversal in extract-zip (CVE-2026-56876). Confidential information can be exposed externally.
CVE-2026-11779 Vulnerability in CVE-2026-11779 (CVE-2026-11779)
vulnerability in CVE-2026-11779 (CVE-2026-11779). Risk of unauthorized operations or information disclosure.
CVE-2026-57518 Vulnerability in privilege-escalation (CVE-2026-57518)
vulnerability in privilege-escalation (CVE-2026-57518). Successful exploitation can lead to full system takeover.
CVE-2026-0828 Vulnerability in CVE-2026-0828 (CVE-2026-0828)
vulnerability in CVE-2026-0828 (CVE-2026-0828). Confidential information can be exposed externally.
CVE-2026-5757 Out-of-Bounds Read in ollama (CVE-2026-5757)
vulnerability in ollama (CVE-2026-5757). Confidential information can be exposed externally.
CVE-2026-13434 Vulnerability in kubevirt (CVE-2026-13434)
vulnerability in kubevirt (CVE-2026-13434). Risk of unauthorized operations or information disclosure.
CVE-2026-45195 Vulnerability in imaginationtech (CVE-2026-45195)
vulnerability in imaginationtech (CVE-2026-45195). Successful exploitation can lead to full system takeover.
CVE-2026-0685 Vulnerability in CVE-2026-0685 (CVE-2026-0685)
vulnerability in CVE-2026-0685 (CVE-2026-0685). Successful exploitation can lead to full system takeover.
CVE-2026-21734 Vulnerability in imaginationtech (CVE-2026-21734)
vulnerability in imaginationtech (CVE-2026-21734). Data can be tampered with by attackers.
CVE-2023-20540 Vulnerability in CVE-2023-20540 (CVE-2023-20540)
vulnerability in CVE-2023-20540 (CVE-2023-20540). Risk of unauthorized operations or information disclosure.
CVE-2023-20572 Vulnerability in CVE-2023-20572 (CVE-2023-20572)
vulnerability in CVE-2023-20572 (CVE-2023-20572). Risk of unauthorized operations or information disclosure.
CVE-2025-11919 Vulnerability in CVE-2025-11919 (CVE-2025-11919)
vulnerability in CVE-2025-11919 (CVE-2025-11919). Confidential information can be exposed externally.
CVE-2026-48751 Vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48751)
vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48751). Successful exploitation can lead to full system takeover. Exploitable via ``raw.lxc``. Mitigation: upgrade to `7.2.0` or later.
CVE-2026-48750 Vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48750)
vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48750). Successful exploitation can lead to full system takeover. Exploitable via ``exec_UUID.stdout``. Mitigation: upgrade to `7.2.0` or later.
CVE-2026-48749 Vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48749)
vulnerability in github.com/lxc/incus/v7/cmd/incusd (CVE-2026-48749). Successful exploitation can lead to full system takeover. Exploitable via ``metadata.yaml``. Mitigation: upgrade to `7.2.0` or later.
MAL-2026-6531 Vulnerability in @appupdate/cdn-sync (MAL-2026-6531)
vulnerability in @appupdate/cdn-sync (MAL-2026-6531). Risk of unauthorized operations or information disclosure. Exploitable via ``ProbeStop``.
CGA-gpq8-q48q-3x4f CGA-gpq8-q48q-3x4f
CGA-fcjh-65j7-5hp6 CGA-fcjh-65j7-5hp6
CGA-4jc3-m65r-hf69 CGA-4jc3-m65r-hf69
CGA-436j-9rcw-588x CGA-436j-9rcw-588x
CGA-fcwg-cf6c-5vpc CGA-fcwg-cf6c-5vpc
UBUNTU-CVE-2026-56876 Vulnerability in node-extract-zip (UBUNTU-CVE-2026-56876)
vulnerability in node-extract-zip (UBUNTU-CVE-2026-56876). Confidential information can be exposed externally.
CVE-2026-54341 Out-of-Bounds Read in dos (CVE-2026-54341)
vulnerability in dos (CVE-2026-54341). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.39.0` or later.
CVE-2026-48743 Vulnerability in envoy (CVE-2026-48743)
vulnerability in envoy (CVE-2026-48743). Data can be tampered with by attackers. Exploitable via `GET /pwn`. Mitigation: upgrade to `1.35.11` or later.
CVE-2026-48706 Vulnerability in envoy (CVE-2026-48706)
vulnerability in envoy (CVE-2026-48706). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.35.13` or later.
CVE-2026-48497 Vulnerability in envoy (CVE-2026-48497)
vulnerability in envoy (CVE-2026-48497). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.35.11` or later.
CVE-2026-48044 Vulnerability in envoy (CVE-2026-48044)
vulnerability in envoy (CVE-2026-48044). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.35.11` or later.
CVE-2026-48042 Vulnerability in envoy (CVE-2026-48042)
vulnerability in envoy (CVE-2026-48042). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.35.11` or later.
CVE-2026-47778 Vulnerability in envoy (CVE-2026-47778)
vulnerability in envoy (CVE-2026-47778). Confidential information can be exposed externally. Mitigation: upgrade to `1.35.11` or later.
CVE-2026-47775 Vulnerability in envoy (CVE-2026-47775)
vulnerability in envoy (CVE-2026-47775). Confidential information can be exposed externally. Mitigation: upgrade to `1.35.11` or later.
CVE-2026-47692 Vulnerability in envoy (CVE-2026-47692)
vulnerability in envoy (CVE-2026-47692). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.35.13` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →