Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-82469 |
|
Vulnerability in CVE-2026-82469 (CVE-2026-82469)
vulnerability in CVE-2026-82469 (CVE-2026-82469). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-81826 |
|
Vulnerability in CVE-2026-81826 (CVE-2026-81826)
vulnerability in CVE-2026-81826 (CVE-2026-81826). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-62342 |
|
Vulnerability in CVE-2025-62342 (CVE-2025-62342)
vulnerability in CVE-2025-62342 (CVE-2025-62342). Confidential information can be exposed externally.
|
| CVE-2026-73180 |
|
Vulnerability in apache (CVE-2026-73180)
vulnerability in apache (CVE-2026-73180). Confidential information can be exposed externally.
|
| CVE-2026-79664 |
|
Vulnerability in CVE-2026-79664 (CVE-2026-79664)
vulnerability in CVE-2026-79664 (CVE-2026-79664). Confidential information can be exposed externally.
|
| CVE-2026-77130 |
|
Vulnerability in CVE-2026-77130 (CVE-2026-77130)
vulnerability in CVE-2026-77130 (CVE-2026-77130). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75554 |
|
Vulnerability in CVE-2026-75554 (CVE-2026-75554)
vulnerability in CVE-2026-75554 (CVE-2026-75554). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14950 |
|
Vulnerability in CVE-2026-14950 (CVE-2026-14950)
vulnerability in CVE-2026-14950 (CVE-2026-14950). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65984 |
|
Vulnerability in CVE-2026-65984 (CVE-2026-65984)
vulnerability in CVE-2026-65984 (CVE-2026-65984). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/refresh`.
|
| CVE-2026-45791 |
|
Vulnerability in CVE-2026-45791 (CVE-2026-45791)
vulnerability in CVE-2026-45791 (CVE-2026-45791). Confidential information can be exposed externally.
|
| CVE-2026-73611 |
|
Vulnerability in CVE-2026-73611 (CVE-2026-73611)
vulnerability in CVE-2026-73611 (CVE-2026-73611). Confidential information can be exposed externally.
|
| CVE-2026-66376 |
|
Credentials for a deleted user may remain valid for a short period under specific conditions.
Credentials for a deleted user may remain valid for a short period under specific conditions.
|
| CVE-2026-17600 |
|
Vulnerability in CVE-2026-17600 (CVE-2026-17600)
vulnerability in CVE-2026-17600 (CVE-2026-17600). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48079 |
|
Vulnerability in CVE-2026-48079 (CVE-2026-48079)
vulnerability in CVE-2026-48079 (CVE-2026-48079). Confidential information can be exposed externally. Exploitable via ``access_token``.
|
| CVE-2025-12317 |
|
Vulnerability in CVE-2025-12317 (CVE-2025-12317)
vulnerability in CVE-2025-12317 (CVE-2025-12317). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-12627 |
|
Vulnerability in wso2 (CVE-2025-12627)
vulnerability in wso2 (CVE-2025-12627). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-8995 |
|
Vulnerability in wso2 (CVE-2024-8995)
vulnerability in wso2 (CVE-2024-8995). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-60053 |
|
Vulnerability in apache (CVE-2026-60053)
vulnerability in apache (CVE-2026-60053). Confidential information can be exposed externally.
|
| CVE-2026-39924 |
|
Vulnerability in CVE-2026-39924 (CVE-2026-39924)
vulnerability in CVE-2026-39924 (CVE-2026-39924). Confidential information can be exposed externally.
|
| CVE-2026-71206 |
|
Shiori's CheckToken function (internal/domains/auth.go) validates only the JWT's HMAC signature...
Shiori's CheckToken function (internal/domains/auth.go) validates only the JWT's HMAC signature...
|
| CVE-2026-14465 |
|
Vulnerability in CVE-2026-14465 (CVE-2026-14465)
vulnerability in CVE-2026-14465 (CVE-2026-14465). Confidential information can be exposed externally.
|
| CVE-2026-51953 |
|
Vulnerability in CVE-2026-51953 (CVE-2026-51953)
vulnerability in CVE-2026-51953 (CVE-2026-51953). Confidential information can be exposed externally.
|
| CVE-2024-40683 |
|
Vulnerability in ibm (CVE-2024-40683)
vulnerability in ibm (CVE-2024-40683). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14227 |
|
Vulnerability in cisa (CVE-2026-14227)
vulnerability in cisa (CVE-2026-14227). Confidential information can be exposed externally.
|
| CVE-2026-16970 |
|
Vulnerability in CVE-2026-16970 (CVE-2026-16970)
vulnerability in CVE-2026-16970 (CVE-2026-16970). Confidential information can be exposed externally.
|
| CVE-2026-66400 |
|
Vulnerability in CVE-2026-66400 (CVE-2026-66400)
vulnerability in CVE-2026-66400 (CVE-2026-66400). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14996 |
|
Vulnerability in ibm (CVE-2026-14996)
vulnerability in ibm (CVE-2026-14996). Confidential information can be exposed externally.
|
| CVE-2026-15967 |
|
Vulnerability in progress (CVE-2026-15967)
vulnerability in progress (CVE-2026-15967). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64829 |
|
Vulnerability in CVE-2026-64829 (CVE-2026-64829)
vulnerability in CVE-2026-64829 (CVE-2026-64829). Confidential information can be exposed externally.
|
| CVE-2026-56583 |
|
Vulnerability in hcltech (CVE-2026-56583)
vulnerability in hcltech (CVE-2026-56583). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63753 |
|
Vulnerability in surrealdb (CVE-2026-63753)
vulnerability in surrealdb (CVE-2026-63753). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16206 |
|
Vulnerability in django (CVE-2026-16206)
vulnerability in django (CVE-2026-16206). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63089 |
|
Vulnerability in CVE-2026-63089 (CVE-2026-63089)
vulnerability in CVE-2026-63089 (CVE-2026-63089). Confidential information can be exposed externally.
|
| CVE-2026-63175 |
|
Vulnerability in CVE-2026-63175 (CVE-2026-63175)
vulnerability in CVE-2026-63175 (CVE-2026-63175). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61452 |
|
Vulnerability in CVE-2026-61452 (CVE-2026-61452)
vulnerability in CVE-2026-61452 (CVE-2026-61452). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56400 |
|
Vulnerability in openwebui (CVE-2026-56400)
vulnerability in openwebui (CVE-2026-56400). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48329 |
|
Vulnerability in adobe (CVE-2026-48329)
vulnerability in adobe (CVE-2026-48329). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44383 |
|
Vulnerability in CVE-2026-44383 (CVE-2026-44383)
vulnerability in CVE-2026-44383 (CVE-2026-44383). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56665 |
|
Vulnerability in CVE-2026-56665 (CVE-2026-56665)
vulnerability in CVE-2026-56665 (CVE-2026-56665). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56664 |
|
Vulnerability in github.com/zitadel/zitadel (CVE-2026-56664)
vulnerability in github.com/zitadel/zitadel (CVE-2026-56664). Risk of unauthorized operations or information disclosure. Exploitable via ``maxAge``. Mitigation: upgrade to `1.80.0-v2.20.0.20260615122908-fad02c6d9f45` or later.
|
| CVE-2026-28564 |
|
Vulnerability in apache (CVE-2026-28564)
vulnerability in apache (CVE-2026-28564). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59219 |
|
Vulnerability in open-webui (CVE-2026-59219)
vulnerability in open-webui (CVE-2026-59219). Confidential information can be exposed externally. Exploitable via `POST /api/v1/auths/signout`. Mitigation: upgrade to `0.10.0` or later.
|
| CVE-2026-42172 |
|
Vulnerability in CVE-2026-42172 (CVE-2026-42172)
vulnerability in CVE-2026-42172 (CVE-2026-42172). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43918 |
|
Vulnerability in CVE-2026-43918 (CVE-2026-43918)
vulnerability in CVE-2026-43918 (CVE-2026-43918). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46455 |
|
Vulnerability in org.apache.camel:camel-keycloak (CVE-2026-46455)
vulnerability in org.apache.camel:camel-keycloak (CVE-2026-46455). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-14725 |
|
Vulnerability in CVE-2026-14725 (CVE-2026-14725)
vulnerability in CVE-2026-14725 (CVE-2026-14725). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-36359 |
|
Vulnerability in ibm (CVE-2025-36359)
vulnerability in ibm (CVE-2025-36359). Confidential information can be exposed externally.
|
| CVE-2026-54479 |
|
Vulnerability in CVE-2026-54479 (CVE-2026-54479)
vulnerability in CVE-2026-54479 (CVE-2026-54479). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71335 |
|
Vulnerability in flowiseai (CVE-2025-71335)
vulnerability in flowiseai (CVE-2025-71335). Confidential information can be exposed externally.
|
| CVE-2026-9705 |
|
Vulnerability in redhat (CVE-2026-9705)
vulnerability in redhat (CVE-2026-9705). Risk of unauthorized operations or information disclosure.
|