Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-66756 |
|
Vulnerability in apache (CVE-2026-66756)
vulnerability in apache (CVE-2026-66756). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58428 |
|
Vulnerability in code.gitea.io/gitea (CVE-2026-58428)
vulnerability in code.gitea.io/gitea (CVE-2026-58428). Data can be tampered with by attackers. Exploitable via `PATCH /api/v1/repos/bob/test-repo/releases/1/assets/1`. Mitigation: upgrade to `1.27.0` or later.
|
| CVE-2026-54423 |
|
Vulnerability in CVE-2026-54423 (CVE-2026-54423)
vulnerability in CVE-2026-54423 (CVE-2026-54423). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-0268 |
|
Vulnerability in paloaltonetworks (CVE-2026-0268)
vulnerability in paloaltonetworks (CVE-2026-0268). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-0237 |
|
Vulnerability in paloaltonetworks (CVE-2026-0237)
vulnerability in paloaltonetworks (CVE-2026-0237). Successful exploitation can lead to full system takeover.
|
| CVE-2026-4270 |
|
Vulnerability in Amazon awslabs-aws-api-mcp-server (CVE-2026-4270)
vulnerability in Amazon awslabs-aws-api-mcp-server (CVE-2026-4270). Confidential information can be exposed externally. Mitigation: upgrade to `1.3.9` or later.
|
| CVE-2024-58136 KEV |
|
[KEV] Vulnerability in Yiiframework yii (CVE-2024-58136)
vulnerability in Yiiframework yii (CVE-2024-58136). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-8781 |
|
Vulnerability in privilege-escalation (CVE-2024-8781)
vulnerability in privilege-escalation (CVE-2024-8781). Risk of unauthorized operations or information disclosure.
|