Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-426 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-49145	Vulnerability in CVE-2026-49145 (CVE-2026-49145) vulnerability in CVE-2026-49145 (CVE-2026-49145). Risk of unauthorized operations or information disclosure.	High	Cwe 73 Cwe 426	2 hours ago
CVE-2026-6901	Vulnerability in CVE-2026-6901 (CVE-2026-6901) vulnerability in CVE-2026-6901 (CVE-2026-6901). Confidential information can be exposed externally.	High	Cwe 426	2 days ago
CVE-2026-57919	Vulnerability in privilege-escalation (CVE-2026-57919) vulnerability in privilege-escalation (CVE-2026-57919). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 276 Cwe 426	1 week ago
CVE-2026-46710	Vulnerability in privilege-escalation (CVE-2026-46710) vulnerability in privilege-escalation (CVE-2026-46710). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.9.6` or later.	High	Privilege Escalation Cwe 426 Notepad Plus Plus Notepad	1 week ago
CVE-2026-53865	Vulnerability in openclaw (CVE-2026-53865) vulnerability in openclaw (CVE-2026-53865). Confidential information can be exposed externally. Exploitable via ``trash``. Mitigation: upgrade to `2026.5.2` or later.	High	Path Traversal Cwe 426 Openclaw	3 weeks ago
CVE-2026-53858	Vulnerability in openclaw (CVE-2026-53858) vulnerability in openclaw (CVE-2026-53858). Confidential information can be exposed externally. Exploitable via ``STATE_DIRECTORY``. Mitigation: upgrade to `2026.5.2` or later.	High	Cwe 426 Openclaw	3 weeks ago
CVE-2026-53846	Vulnerability in openclaw (CVE-2026-53846) vulnerability in openclaw (CVE-2026-53846). Confidential information can be exposed externally. Mitigation: upgrade to `2026.4.29` or later.	High	Path Traversal Cwe 426 Openclaw	3 weeks ago
CVE-2026-53842	Vulnerability in openclaw (CVE-2026-53842) vulnerability in openclaw (CVE-2026-53842). Confidential information can be exposed externally. Exploitable via ``gcloud``. Mitigation: upgrade to `2026.5.2` or later.	High	Python Cwe 426 Openclaw	3 weeks ago
CVE-2026-54055	Vulnerability in privilege-escalation (CVE-2026-54055) vulnerability in privilege-escalation (CVE-2026-54055). Data can be tampered with by attackers. Exploitable via ``O_NOFOLLOW``.	Medium	Privilege Escalation Cwe 59 Cwe 367 Cwe 426 +2	3 weeks ago
CVE-2026-53819	Vulnerability in openclaw (CVE-2026-53819) vulnerability in openclaw (CVE-2026-53819). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.5.27` or later.	High	Cwe 426 Openclaw	3 weeks ago
CVE-2026-48565	Vulnerability in microsoft (CVE-2026-48565) vulnerability in microsoft (CVE-2026-48565). Successful exploitation can lead to full system takeover.	High	Cwe 426 Microsoft Windows Narrator Braille	4 weeks ago
CVE-2026-47648	Vulnerability in microsoft (CVE-2026-47648) vulnerability in microsoft (CVE-2026-47648). Successful exploitation can lead to full system takeover.	High	Cwe 426 Microsoft Windows 10 1607 Windows 10 1809 +11	4 weeks ago
CVE-2026-24064	Vulnerability in privilege-escalation (CVE-2026-24064) vulnerability in privilege-escalation (CVE-2026-24064). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 426	4 weeks ago
CVE-2026-11400	CVE-2026-11400 and CVE-2026-11401 Bulletin ID: 2026-039-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 06/025/2026 12:15 PM PDT Description: Amazon Aurora PostgreSQL a fully managed relational database engine that's compatible with PostgreSQL. We identified CVE-2026-11400(JDBC) and CVE-2026-11401(Go), an issue in AWS Wrappers for Amazon Aurora PostgreSQL will allow for privilege escalation to rds_superuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service (RDS) users. Impacted versions: - AWS Advanced JDBC Wrapper >=3.0.0 and < 4.0.1 - AWS Advanced Go Wrapper release 2026-04-06 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.	High	AWS Amazon Cloud Cwe 426 +4	1 month ago
CVE-2026-11401	AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance	High	Cwe 426 AWS Go Privilege Escalation	1 month ago
CVE-2026-45792	Vulnerability in rtk (CVE-2026-45792) vulnerability in rtk (CVE-2026-45792). Data can be tampered with by attackers. Exploitable via ``strip_lines_matching``. Mitigation: upgrade to `0.32.0` or later.	Medium	Rust Cwe 345 Cwe 426 Rtk Ai +1	1 month ago
CVE-2026-45721	Vulnerability in github.com/xyproto/algernon (CVE-2026-45721) vulnerability in github.com/xyproto/algernon (CVE-2026-45721). Successful exploitation can lead to full system takeover. Exploitable via ``DirPage``. Mitigation: upgrade to `1.17.7` or later.	Critical	Remote Code Execution Cwe 20 Cwe 426 Cwe 552	1 month ago
CVE-2026-45772	Vulnerability in turbo (CVE-2026-45772) vulnerability in turbo (CVE-2026-45772). Successful exploitation can lead to full system takeover. Exploitable via ``yarnPath``. Mitigation: upgrade to `2.9.14` or later.	Critical	JavaScript Cwe 426 Vercel Turborepo	1 month ago
CVE-2026-30906	Vulnerability in zoom (CVE-2026-30906) vulnerability in zoom (CVE-2026-30906). Successful exploitation can lead to full system takeover.	High	Cwe 426 Zoom Rooms	1 month ago
CVE-2026-0251	Vulnerability in privilege-escalation (CVE-2026-0251) vulnerability in privilege-escalation (CVE-2026-0251). Risk of unauthorized operations or information disclosure.		Privilege Escalation Cwe 426	1 month ago
CVE-2026-42830	Vulnerability in microsoft (CVE-2026-42830) vulnerability in microsoft (CVE-2026-42830). Data can be tampered with by attackers.	Medium	Cwe 426 Microsoft Azure Monitor Agent	1 month ago
CVE-2026-44477	Vulnerability in github.com/cloudnative-pg/cloudnative-pg (CVE-2026-44477) vulnerability in github.com/cloudnative-pg/cloudnative-pg (CVE-2026-44477). Successful exploitation can lead to full system takeover. Exploitable via ``postgres``. Mitigation: upgrade to `1.29.1` or later.	Critical	Cwe 250 Cwe 271 Cwe 426 Linuxfoundation +1	1 month ago
CVE-2012-1854 KEV	[KEV] Vulnerability in Microsoft visual-basic-for-applications-vba (CVE-2012-1854) vulnerability in Microsoft visual-basic-for-applications-vba (CVE-2012-1854). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Visual Basic For Applications Vba Cwe 426 Vba +7	2 months ago
CVE-2026-39883	Vulnerability in opentelemetry (CVE-2026-39883) vulnerability in opentelemetry (CVE-2026-39883). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.43.0` or later.	High	Cwe 426 Opentelemetry	2 months ago
CVE-2026-24051	Vulnerability in opentelemetry (CVE-2026-24051) vulnerability in opentelemetry (CVE-2026-24051). Successful exploitation can lead to full system takeover.	High	Cwe 426 Opentelemetry	5 months ago
CVE-2024-53866	Vulnerability in pnpm (CVE-2024-53866) vulnerability in pnpm (CVE-2024-53866). Successful exploitation can lead to full system takeover.	Critical	Cwe 426 Pnpm	1 year ago
CVE-2023-4736	Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833. Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833.	High	Cwe 426 Vim Apple macOS	2 years ago
CVE-2021-3305	Vulnerability in feishu (CVE-2021-3305) vulnerability in feishu (CVE-2021-3305). Successful exploitation can lead to full system takeover.	High	Cwe 426 Feishu	3 years ago
CVE-2021-36666	Privilege Escalation in druva (CVE-2021-36666) vulnerability in druva (CVE-2021-36666). Successful exploitation can lead to full system takeover.	High	Cwe 426 Druva Insync Client	3 years ago
CVE-2022-22047 KEV	[KEV] Vulnerability in Microsoft windows (CVE-2022-22047) vulnerability in Microsoft windows (CVE-2022-22047). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 426	3 years ago
CVE-2017-17010	Vulnerability in sony (CVE-2017-17010) vulnerability in sony (CVE-2017-17010). Successful exploitation can lead to full system takeover.	High	Cwe 426 Sony Content Manager Assistant	8 years ago
CVE-2017-10909	Vulnerability in sony (CVE-2017-10909) vulnerability in sony (CVE-2017-10909). Successful exploitation can lead to full system takeover.	High	Cwe 426 Sony Music Center	8 years ago
CVE-2017-17809	Vulnerability in goldenfrog (CVE-2017-17809) vulnerability in goldenfrog (CVE-2017-17809). Successful exploitation can lead to full system takeover.	High	Cwe 426 Goldenfrog Vyprvpn	8 years ago
CVE-2017-16997	Vulnerability in c (CVE-2017-16997) vulnerability in c (CVE-2017-16997). Successful exploitation can lead to full system takeover.	High	C Cwe 426 Gnu Glibc +4	8 years ago
CVE-2017-11397	Vulnerability in trendmicro (CVE-2017-11397) vulnerability in trendmicro (CVE-2017-11397). Successful exploitation can lead to full system takeover.	High	Cwe 426 Trendmicro Encryption For Email	8 years ago
CVE-2017-16690	Vulnerability in sap (CVE-2017-16690) vulnerability in sap (CVE-2017-16690). Successful exploitation can lead to full system takeover.	High	Cwe 426 Sap Plant Connectivity	8 years ago
CVE-2014-8358	Vulnerability in huawei (CVE-2014-8358) vulnerability in huawei (CVE-2014-8358). Successful exploitation can lead to full system takeover.	High	Cwe 426 Huawei Ec156 Firmware Ec156 +4	8 years ago
CVE-2017-13070	Vulnerability in qnap (CVE-2017-13070) vulnerability in qnap (CVE-2017-13070). Successful exploitation can lead to full system takeover.	High	Cwe 426 Qnap Qsync	8 years ago
CVE-2017-10893	Vulnerability in j-lis (CVE-2017-10893) vulnerability in j-lis (CVE-2017-10893). Successful exploitation can lead to full system takeover.	High	Cwe 426 J Lis The Public Certification Service For Individuals	8 years ago
CVE-2017-17069	Vulnerability in amazon (CVE-2017-17069) vulnerability in amazon (CVE-2017-17069). Successful exploitation can lead to full system takeover.	High	Cwe 426 Amazon Audible Microsoft +1	8 years ago
CVE-2017-10892	Vulnerability in sony (CVE-2017-10892) vulnerability in sony (CVE-2017-10892). Successful exploitation can lead to full system takeover.	High	Cwe 426 Sony Music Center	8 years ago
CVE-2017-10891	Vulnerability in sony (CVE-2017-10891) vulnerability in sony (CVE-2017-10891). Successful exploitation can lead to full system takeover.	High	Go Cwe 426 Sony Media Go	8 years ago
CVE-2017-8137	Vulnerability in huawei (CVE-2017-8137) vulnerability in huawei (CVE-2017-8137). Successful exploitation can lead to full system takeover.	High	Cwe 426 Huawei Hedex Lite	8 years ago
CVE-2017-4939	Vulnerability in vmware (CVE-2017-4939) vulnerability in vmware (CVE-2017-4939). Successful exploitation can lead to full system takeover.	High	Cwe 426 Vmware Workstation	8 years ago
CVE-2017-10887	Vulnerability in bookwalker (CVE-2017-10887) vulnerability in bookwalker (CVE-2017-10887). Successful exploitation can lead to full system takeover.	High	Cwe 426 Bookwalker Book Walker Microsoft +1	8 years ago
CVE-2017-12312	Vulnerability in cisco (CVE-2017-12312) vulnerability in cisco (CVE-2017-12312). Successful exploitation can lead to full system takeover.	Medium	Cwe 20 Cwe 426 Cisco Advanced Malware Protection For Endpoints	8 years ago
CVE-2017-12313	Vulnerability in cisco (CVE-2017-12313) vulnerability in cisco (CVE-2017-12313). Successful exploitation can lead to full system takeover.	Medium	Cwe 427 Cwe 20 Cwe 426 Cisco +1	8 years ago
CVE-2017-10885	Vulnerability in sbisec (CVE-2017-10885) vulnerability in sbisec (CVE-2017-10885). Successful exploitation can lead to full system takeover.	High	Cwe 426 Sbisec Hyper Sbi	8 years ago
CVE-2016-6803	Vulnerability in apache (CVE-2016-6803) vulnerability in apache (CVE-2016-6803). Successful exploitation can lead to full system takeover.	High	Apache Cwe 426 Openoffice Microsoft +1	8 years ago
CVE-2017-10825	Vulnerability in flets-w (CVE-2017-10825) vulnerability in flets-w (CVE-2017-10825). Successful exploitation can lead to full system takeover.	High	Cwe 426 Flets W Flets Easy Setup Tool	8 years ago

Vulnerabilities

🍪 About cookies