Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: auth-bypass Clear

ID	Title	Severity	Tags	Detected
CVE-2026-8198	Information Disclosure in wordpress (CVE-2026-8198) vulnerability in wordpress (CVE-2026-8198). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`.	Medium	WordPress Authentication Bypass Cwe 200	9 hours ago
CVE-2026-44313	SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-44313) SSRF in ssrf (CVE-2026-44313). Confidential information can be exposed externally. Exploitable via `GET /api/v1/archives/{linkId}`.	Critical	Server-Side Request Forgery Cwe 918 Authentication Bypass Credential Leak +14	22 hours ago
CVE-2026-42354	Vulnerability in sso (CVE-2026-42354) vulnerability in sso (CVE-2026-42354). Confidential information can be exposed externally. Exploitable via ``Moved``.	Critical	Cwe 290 Authentication Bypass Sso SAML +10	23 hours ago
CVE-2026-41070	Authentication Bypass in openvpn (CVE-2026-41070) authentication bypass in openvpn (CVE-2026-41070). Confidential information can be exposed externally. Exploitable via ``plugin``.	Critical	Cwe 287 Openvpn OpenID Connect Authentication Bypass +12	1 day ago
CVE-2026-25199	Information Disclosure in apache (CVE-2026-25199) vulnerability in apache (CVE-2026-25199). Confidential information can be exposed externally.	Critical	Apache Cwe 200 Cloudstack Authentication Bypass +10	1 day ago
CVE-2026-8153	OS Command Injection in iot-embedded (CVE-2026-8153) OS command injection in iot-embedded (CVE-2026-8153). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Os Network Iot Embedded +8	1 day ago
CVE-2013-10075	Vulnerability in apache (CVE-2013-10075) vulnerability in apache (CVE-2013-10075). Confidential information can be exposed externally.	Critical	Apache Cwe 672 Chorny Perl +12	1 day ago
CVE-2025-69690	Unsafe Deserialization in deserialization (CVE-2025-69690) vulnerability in deserialization (CVE-2025-69690). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 502 Cwe 915 Remote Code Execution +13	1 day ago
CVE-2023-46453	SQL Injection in network-device (CVE-2023-46453) SQL injection in network-device (CVE-2023-46453). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 89 Sql Injection Network Device +11	1 day ago
CVE-2024-51092	OS Command Injection in command-injection (CVE-2024-51092) OS command injection in command-injection (CVE-2024-51092). Confidential information can be exposed externally. Exploitable via ``version_netsnmp``.	Critical	PHP Cwe 78 Authentication Bypass Command Injection +11	1 day ago
CVE-2026-41501	Command Injection in electerm (CVE-2026-41501) command injection in electerm (CVE-2026-41501). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `> 3.2.0` or later.	Critical	JavaScript Cwe 77 Electerm Project Electerm +11	1 day ago
CVE-2026-41500	Command Injection in electerm-project (CVE-2026-41500) command injection in electerm-project (CVE-2026-41500). Successful exploitation can lead to full system takeover. Exploitable via ``releaseInfo.name``. Mitigation: upgrade to `> 3.2.0` or later.	Critical	JavaScript Cwe 77 Electerm Project Electerm +10	1 day ago
CVE-2026-6736	Vulnerability in CVE-2026-6736 (CVE-2026-6736) vulnerability in CVE-2026-6736 (CVE-2026-6736). Risk of unauthorized operations or information disclosure.		Authentication Bypass Cwe 306	2 days ago
CVE-2026-33823	Vulnerability in microsoft (CVE-2026-33823) vulnerability in microsoft (CVE-2026-33823). Confidential information can be exposed externally.	Critical	Cwe 285 Microsoft Teams Authentication Bypass +11	2 days ago
CVE-2026-41902	Vulnerability in laravel (CVE-2026-41902) vulnerability in laravel (CVE-2026-41902). Confidential information can be exposed externally. Exploitable via `Referer header`.	Critical	PHP Laravel Cwe 613 Authentication Bypass +8	2 days ago
CVE-2025-63704	Vulnerability in prototype-pollution (CVE-2025-63704) vulnerability in prototype-pollution (CVE-2025-63704). Successful exploitation can lead to full system takeover.	Critical	Cwe 1321 Prototype Pollution npm JavaScript +11	2 days ago
CVE-2026-43198	Vulnerability in linux (CVE-2026-43198) vulnerability in linux (CVE-2026-43198). Successful exploitation can lead to full system takeover.	Critical	Linux Tcp Race Condition Cve 2026 43198 +8	3 days ago
CVE-2026-43117	Vulnerability in linux (CVE-2026-43117) vulnerability in linux (CVE-2026-43117). Confidential information can be exposed externally.	Critical	Linux Linux Kernel Os Privilege Escalation +11	3 days ago
CVE-2026-35579	Authentication Bypass in github.com/coredns/coredns (CVE-2026-35579) authentication bypass in github.com/coredns/coredns (CVE-2026-35579). Successful exploitation can lead to full system takeover. Exploitable via ``tsigStatus``. Mitigation: upgrade to `1.14.3` or later.	Critical	Cwe 287 Corednsio Coredns Go +19	4 days ago
CVE-2026-33190	Authentication Bypass in github.com/coredns/coredns (CVE-2026-33190) authentication bypass in github.com/coredns/coredns (CVE-2026-33190). Confidential information can be exposed externally. Mitigation: upgrade to `1.14.3` or later.	High	Cwe 303 Corednsio Coredns Go +3	4 days ago
CVE-2026-38431	Code Injection in frappe (CVE-2026-38431) code injection in frappe (CVE-2026-38431). Successful exploitation can lead to full system takeover.	Critical	Cwe 94 Frappe Erpnext Server-Side Template Injection +15	4 days ago
CVE-2026-42087	SQL Injection in sqli (CVE-2026-42087) SQL injection in sqli (CVE-2026-42087). Confidential information can be exposed externally. Exploitable via ``tsdb_lookup``.	Critical	SQL Injection Cwe 89 Openc3 Cosmos +11	5 days ago
CVE-2026-31431 KEV	[KEV] Vulnerability in Linux redhat (CVE-2026-31431) vulnerability in Linux redhat (CVE-2026-31431). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Cwe 669 Linux Linux Kernel Redhat +53	1 week ago
CVE-2026-41940 KEV	[KEV] Vulnerability in Webpros cpanel-whm-and-wp2-wordpress-squared (CVE-2026-41940) vulnerability in Webpros cpanel-whm-and-wp2-wordpress-squared (CVE-2026-41940). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Webpros Cpanel Whm And Wp2 Wordpress Squared Cwe 306 WordPress +6	1 week ago
CVE-2024-57726 KEV	[KEV] Vulnerability in Simplehelp auth (CVE-2024-57726) vulnerability in Simplehelp auth (CVE-2024-57726). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Simplehelp Cwe 862 Remote Code Execution Authentication Bypass +10	2 weeks ago
CVE-2025-32975 KEV	[KEV] Authentication Bypass in Quest kace-systems-management-appliance-sma (CVE-2025-32975) authentication bypass in Quest kace-systems-management-appliance-sma (CVE-2025-32975). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Quest Kace Systems Management Appliance Sma Cwe 287 Authentication Bypass	2 weeks ago
CVE-2026-20128 KEV	[KEV] Vulnerability in Cisco catalyst-sd-wan-manager (CVE-2026-20128) vulnerability in Cisco catalyst-sd-wan-manager (CVE-2026-20128). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Cisco Catalyst Sd Wan Manager Cwe 257 Authentication Bypass	2 weeks ago
CVE-2023-27351 KEV	[KEV] Authentication Bypass in Papercut ngmf (CVE-2023-27351) authentication bypass in Papercut ngmf (CVE-2023-27351). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Papercut Ngmf Cwe 287 Authentication Bypass +11	2 weeks ago
CVE-2025-2749 KEV	[KEV] Path Traversal in Kentico path-traversal (CVE-2025-2749) path traversal in Kentico path-traversal (CVE-2025-2749). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Kentico Kentico Xperience Cwe 22 Cwe 434 +10	2 weeks ago
CVE-2026-34197 KEV	[KEV] Vulnerability in Apache activemq (CVE-2026-34197) vulnerability in Apache activemq (CVE-2026-34197). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apache Activemq Cwe 20 Cwe 94 +9	3 weeks ago
CVE-2012-1854 KEV	[KEV] Vulnerability in Microsoft visual-basic-for-applications-vba (CVE-2012-1854) vulnerability in Microsoft visual-basic-for-applications-vba (CVE-2012-1854). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Visual Basic For Applications Vba Cwe 426 Vba +7	3 weeks ago

Vulnerabilities

🍪 About cookies