Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-79068 |
|
Vulnerability in CVE-2026-79068 (CVE-2026-79068)
vulnerability in CVE-2026-79068 (CVE-2026-79068). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79031 |
|
Vulnerability in google (CVE-2026-79031)
vulnerability in google (CVE-2026-79031). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72924 |
|
Vulnerability in CVE-2026-72924 (CVE-2026-72924)
vulnerability in CVE-2026-72924 (CVE-2026-72924). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59308 |
|
Vulnerability in CVE-2026-59308 (CVE-2026-59308)
vulnerability in CVE-2026-59308 (CVE-2026-59308). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73843 |
|
Vulnerability in CVE-2026-73843 (CVE-2026-73843)
vulnerability in CVE-2026-73843 (CVE-2026-73843). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72782 |
|
Vulnerability in CVE-2026-72782 (CVE-2026-72782)
vulnerability in CVE-2026-72782 (CVE-2026-72782). Confidential information can be exposed externally. Mitigation: upgrade to `5.10.6` or later.
|
| CVE-2026-72764 |
|
Vulnerability in CVE-2026-72764 (CVE-2026-72764)
vulnerability in CVE-2026-72764 (CVE-2026-72764). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-70606 |
|
Vulnerability in electron (CVE-2026-70606)
vulnerability in electron (CVE-2026-70606). Confidential information can be exposed externally. Exploitable via ``ProtocolResponse``. Mitigation: upgrade to `40.10.6` or later.
|
| CVE-2026-48499 |
|
Information Disclosure in CVE-2026-48499 (CVE-2026-48499)
vulnerability in CVE-2026-48499 (CVE-2026-48499). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67427 |
|
Flyto2 Core: ${env.VAR} interpolation reads any env secret despite env.get being denylisted
Flyto2 Core: ${env.VAR} interpolation reads any env secret despite env.get being denylisted
|
| CVE-2026-54727 |
|
Vulnerability in proot-distro (CVE-2026-54727)
vulnerability in proot-distro (CVE-2026-54727). Confidential information can be exposed externally. Exploitable via ``restore``. Mitigation: upgrade to `5.1.6` or later.
|
| CVE-2026-54497 |
|
Vulnerability in view_component (CVE-2026-54497)
vulnerability in view_component (CVE-2026-54497). Confidential information can be exposed externally. Exploitable via `Host header`. Mitigation: upgrade to `4.12.0` or later.
|
| CVE-2026-14960 |
|
Privilege Escalation in CVE-2026-14960 (CVE-2026-14960)
vulnerability in CVE-2026-14960 (CVE-2026-14960). Successful exploitation can lead to full system takeover. Exploitable via ``Tdelo64.sys``.
|
| CVE-2026-59835 |
|
Vulnerability in fortinet (CVE-2026-59835)
vulnerability in fortinet (CVE-2026-59835). Confidential information can be exposed externally.
|
| CVE-2026-53657 |
|
Vulnerability in github.com/lima-vm/lima/v2 (CVE-2026-53657)
vulnerability in github.com/lima-vm/lima/v2 (CVE-2026-53657). Successful exploitation can lead to full system takeover. Exploitable via ``qemu``. Mitigation: upgrade to `2.1.3` or later.
|
| CVE-2026-53648 |
|
Vulnerability in CVE-2026-53648 (CVE-2026-53648)
vulnerability in CVE-2026-53648 (CVE-2026-53648). Risk of unauthorized operations or information disclosure. Exploitable via ``servicedownloadable.manage``.
|
| CVE-2026-14611 |
|
Information Disclosure in CVE-2026-14611 (CVE-2026-14611)
vulnerability in CVE-2026-14611 (CVE-2026-14611). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57231 |
|
Information Disclosure in podman-project (CVE-2026-57231)
vulnerability in podman-project (CVE-2026-57231). Confidential information can be exposed externally. Mitigation: upgrade to `5.8.4` or later.
|
| CVE-2026-56077 |
|
Vulnerability in CVE-2026-56077 (CVE-2026-56077)
vulnerability in CVE-2026-56077 (CVE-2026-56077). Confidential information can be exposed externally.
|
| CVE-2026-50202 |
|
Vulnerability in Steeltoe.Security.Authentication.JwtBearer (CVE-2026-50202)
vulnerability in Steeltoe.Security.Authentication.JwtBearer (CVE-2026-50202). Confidential information can be exposed externally. Exploitable via ``TokenKeyResolver``. Mitigation: upgrade to `4.2.0` or later.
|
| CVE-2026-53826 |
|
Vulnerability in c (CVE-2026-53826)
vulnerability in c (CVE-2026-53826). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48096 |
|
Vulnerability in github.com/openfga/openfga (CVE-2026-48096)
vulnerability in github.com/openfga/openfga (CVE-2026-48096). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.16.0` or later.
|
| CVE-2026-42535 |
|
Vulnerability in apache (CVE-2026-42535)
vulnerability in apache (CVE-2026-42535). Data can be tampered with by attackers. Mitigation: upgrade to `2.4.68` or later.
|
| CVE-2025-15653 |
|
Vulnerability in CVE-2025-15653 (CVE-2025-15653)
vulnerability in CVE-2025-15653 (CVE-2025-15653). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47141 |
|
Vulnerability in vm2 (CVE-2026-47141)
vulnerability in vm2 (CVE-2026-47141). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`. Mitigation: upgrade to `3.11.4` or later.
|
| CVE-2026-45077 |
|
Unsafe Deserialization in symfony/monolog-bridge (CVE-2026-45077)
vulnerability in symfony/monolog-bridge (CVE-2026-45077). Risk of unauthorized operations or information disclosure. Exploitable via ``allowed_classes``. Mitigation: upgrade to `8.0.12` or later.
|
| CVE-2026-46430 |
|
Vulnerability in github.com/xyproto/algernon (CVE-2026-46430)
vulnerability in github.com/xyproto/algernon (CVE-2026-46430). Risk of unauthorized operations or information disclosure. Exploitable via ``http.Server.Addr``. Mitigation: upgrade to `1.17.7` or later.
|
| CVE-2026-8958 |
|
Vulnerability in mozilla (CVE-2026-8958)
vulnerability in mozilla (CVE-2026-8958). Confidential information can be exposed externally.
|
| CVE-2026-46723 |
|
Vulnerability in tpwd/ke_search (CVE-2026-46723)
vulnerability in tpwd/ke_search (CVE-2026-46723). Risk of unauthorized operations or information disclosure. Exploitable via ``ke_search``. Mitigation: upgrade to `4.6.7` or later.
|
| CVE-2026-45411 |
|
Vulnerability in vm2 (CVE-2026-45411)
vulnerability in vm2 (CVE-2026-45411). Successful exploitation can lead to full system takeover. Exploitable via ``return``. Mitigation: upgrade to `3.11.3` or later.
|
| CVE-2026-42875 |
|
Vulnerability in github.com/external-secrets/external-secrets (CVE-2026-42875)
vulnerability in github.com/external-secrets/external-secrets (CVE-2026-42875). Risk of unauthorized operations or information disclosure. Exploitable via ``ConfigMap``. Mitigation: upgrade to `2.4.0` or later.
|
| CVE-2026-34095 |
|
Vulnerability in mediawiki (CVE-2026-34095)
vulnerability in mediawiki (CVE-2026-34095). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34094 |
|
Vulnerability in mediawiki (CVE-2026-34094)
vulnerability in mediawiki (CVE-2026-34094). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20160 |
|
Vulnerability in Cisco smart-software-manager-on-prem (CVE-2026-20160)
vulnerability in Cisco smart-software-manager-on-prem (CVE-2026-20160). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44552 |
|
Vulnerability in open-webui (CVE-2026-44552)
vulnerability in open-webui (CVE-2026-44552). Confidential information can be exposed externally. Exploitable via ``REDIS_KEY_PREFIX``. Mitigation: upgrade to `0.9.0` or later.
|
| CVE-2026-44009 |
|
Vulnerability in vm2 (CVE-2026-44009)
vulnerability in vm2 (CVE-2026-44009). Successful exploitation can lead to full system takeover. Exploitable via ``handleException``. Mitigation: upgrade to `3.11.2` or later.
|
| CVE-2026-44008 |
|
Vulnerability in vm2 (CVE-2026-44008)
vulnerability in vm2 (CVE-2026-44008). Successful exploitation can lead to full system takeover. Exploitable via ``neutralizeArraySpeciesBatch``. Mitigation: upgrade to `3.11.2` or later.
|
| CVE-2026-44338 |
|
Vulnerability in PraisonAI (CVE-2026-44338)
vulnerability in PraisonAI (CVE-2026-44338). Risk of unauthorized operations or information disclosure. Exploitable via `POST /chat`. Mitigation: upgrade to `4.6.34` or later.
|
| CVE-2026-41369 |
|
Vulnerability in openclaw (CVE-2026-41369)
vulnerability in openclaw (CVE-2026-41369). Confidential information can be exposed externally.
|
| CVE-2026-41368 |
|
Vulnerability in openclaw (CVE-2026-41368)
vulnerability in openclaw (CVE-2026-41368). Confidential information can be exposed externally.
|
| CVE-2026-41362 |
|
Vulnerability in openclaw (CVE-2026-41362)
vulnerability in openclaw (CVE-2026-41362). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-54502 |
|
Vulnerability in privilege-escalation (CVE-2025-54502)
vulnerability in privilege-escalation (CVE-2025-54502). Successful exploitation can lead to full system takeover.
|
| CVE-2026-39911 |
|
Vulnerability in hedera (CVE-2026-39911)
vulnerability in hedera (CVE-2026-39911). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34765 |
|
Vulnerability in electronjs (CVE-2026-34765)
vulnerability in electronjs (CVE-2026-34765). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `39.8.5` or later.
|
| CVE-2026-34780 |
|
Vulnerability in electronjs (CVE-2026-34780)
vulnerability in electronjs (CVE-2026-34780). Successful exploitation can lead to full system takeover.
|
| CVE-2026-28806 |
|
Vulnerability in nerves-hub (CVE-2026-28806)
vulnerability in nerves-hub (CVE-2026-28806). Successful exploitation can lead to full system takeover.
|
| CVE-2026-2297 |
|
Vulnerability in CVE-2026-2297 (CVE-2026-2297)
vulnerability in CVE-2026-2297 (CVE-2026-2297). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-38670 |
|
Vulnerability in linux (CVE-2025-38670)
vulnerability in linux (CVE-2025-38670). Successful exploitation can lead to full system takeover.
|
| CVE-2025-22069 |
|
Vulnerability in c (CVE-2025-22069)
vulnerability in c (CVE-2025-22069). Successful exploitation can lead to full system takeover.
|
| CVE-2024-13484 |
|
Vulnerability in github.com/redhat-developer/gitops-operator (CVE-2024-13484)
vulnerability in github.com/redhat-developer/gitops-operator (CVE-2024-13484). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.16.2` or later.
|