Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-18252 |
|
Vulnerability in CVE-2026-18252 (CVE-2026-18252)
vulnerability in CVE-2026-18252 (CVE-2026-18252). Confidential information can be exposed externally.
|
| CVE-2026-76139 |
|
Vulnerability in CVE-2026-76139 (CVE-2026-76139)
vulnerability in CVE-2026-76139 (CVE-2026-76139). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75569 |
|
Vulnerability in CVE-2026-75569 (CVE-2026-75569)
vulnerability in CVE-2026-75569 (CVE-2026-75569). Confidential information can be exposed externally.
|
| CVE-2026-22306 |
|
Vulnerability in CVE-2026-22306 (CVE-2026-22306)
vulnerability in CVE-2026-22306 (CVE-2026-22306). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62680 |
|
Path Traversal in CVE-2026-62680 (CVE-2026-62680)
path traversal in CVE-2026-62680 (CVE-2026-62680). Confidential information can be exposed externally.
|
| CVE-2026-45272 |
|
Code Injection in CVE-2026-45272 (CVE-2026-45272)
code injection in CVE-2026-45272 (CVE-2026-45272). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73073 |
|
Code Injection in c (CVE-2026-73073)
code injection in c (CVE-2026-73073). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73367 |
|
Unauthenticated Remote File Inclusion in Easy Google Maps < 1.14.2 versions.
Unauthenticated Remote File Inclusion in Easy Google Maps < 1.14.2 versions.
|
| CVE-2026-19884 |
|
Vulnerability in CVE-2026-19884 (CVE-2026-19884)
vulnerability in CVE-2026-19884 (CVE-2026-19884). Risk of unauthorized operations or information disclosure. Exploitable via ``git``.
|
| CVE-2026-6464 |
|
Vulnerability in postgresql (CVE-2026-6464)
vulnerability in postgresql (CVE-2026-6464). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18408 |
|
Vulnerability in postgresql (CVE-2026-18408)
vulnerability in postgresql (CVE-2026-18408). Successful exploitation can lead to full system takeover.
|
| CVE-2026-71471 |
|
Vulnerability in CVE-2026-71471 (CVE-2026-71471)
vulnerability in CVE-2026-71471 (CVE-2026-71471). Confidential information can be exposed externally. Exploitable via ``Collector.ImageOverride``.
|
| CVE-2026-54981 |
|
Vulnerability in microsoft (CVE-2026-54981)
vulnerability in microsoft (CVE-2026-54981). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62902 |
|
Vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62902)
vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62902). Confidential information can be exposed externally. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-73076 |
|
Code Injection in CVE-2026-73076 (CVE-2026-73076)
code injection in CVE-2026-73076 (CVE-2026-73076). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15560 |
|
Vulnerability in CVE-2026-15560 (CVE-2026-15560)
vulnerability in CVE-2026-15560 (CVE-2026-15560). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66843 |
|
Vulnerability in rrrene (CVE-2026-66843)
vulnerability in rrrene (CVE-2026-66843). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55522 |
|
Code Injection in praisonaiagents (CVE-2026-55522)
code injection in praisonaiagents (CVE-2026-55522). Successful exploitation can lead to full system takeover. Exploitable via ``tools.py``. Mitigation: upgrade to `1.6.58` or later.
|
| CVE-2026-67623 |
|
Mistral Vibe before 2.23.3 contains a remote code execution vulnerability that allows attackers...
Mistral Vibe before 2.23.3 contains a remote code execution vulnerability that allows attackers...
|
| CVE-2026-66902 |
|
OS Command Injection in c (CVE-2026-66902)
OS command injection in c (CVE-2026-66902). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73851 |
|
Path Traversal in Microsoft.OpenApi.Kiota (CVE-2026-73851)
path traversal in Microsoft.OpenApi.Kiota (CVE-2026-73851). Risk of unauthorized operations or information disclosure. Exploitable via ``static_template``. Mitigation: upgrade to `1.29.1` or later.
|
| CVE-2026-66141 |
|
Vulnerability in privilege-escalation (CVE-2026-66141)
vulnerability in privilege-escalation (CVE-2026-66141). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65908 |
|
Vulnerability in jetbrains (CVE-2026-65908)
vulnerability in jetbrains (CVE-2026-65908). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64811 |
|
Vulnerability in jetbrains (CVE-2026-64811)
vulnerability in jetbrains (CVE-2026-64811). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64809 |
|
Vulnerability in jetbrains (CVE-2026-64809)
vulnerability in jetbrains (CVE-2026-64809). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64807 |
|
Vulnerability in jetbrains (CVE-2026-64807)
vulnerability in jetbrains (CVE-2026-64807). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64806 |
|
Vulnerability in jetbrains (CVE-2026-64806)
vulnerability in jetbrains (CVE-2026-64806). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64805 |
|
Vulnerability in jetbrains (CVE-2026-64805)
vulnerability in jetbrains (CVE-2026-64805). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64808 |
|
Vulnerability in jetbrains (CVE-2026-64808)
vulnerability in jetbrains (CVE-2026-64808). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64804 |
|
Vulnerability in jetbrains (CVE-2026-64804)
vulnerability in jetbrains (CVE-2026-64804). Successful exploitation can lead to full system takeover.
|
| CVE-2026-0770 KEV |
|
[KEV] Vulnerability in langflow (CVE-2026-0770)
vulnerability in langflow (CVE-2026-0770). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-44359 |
|
Code Injection in CVE-2026-44359 (CVE-2026-44359)
code injection in CVE-2026-44359 (CVE-2026-44359). Confidential information can be exposed externally.
|
| CVE-2026-16085 |
|
Vulnerability in CVE-2026-16085 (CVE-2026-16085)
vulnerability in CVE-2026-16085 (CVE-2026-16085). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57860 |
|
Vulnerability in c (CVE-2026-57860)
vulnerability in c (CVE-2026-57860). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62222 |
|
Vulnerability in openclaw (CVE-2026-62222)
vulnerability in openclaw (CVE-2026-62222). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59867 |
|
Path Traversal in Microsoft.OpenApi.Kiota (CVE-2026-59867)
path traversal in Microsoft.OpenApi.Kiota (CVE-2026-59867). Confidential information can be exposed externally. Exploitable via ``REMOTE_KIOTA_PROP``. Mitigation: upgrade to `1.29.1` or later.
|
| CVE-2026-59865 |
|
Code Injection in Microsoft.OpenApi.Kiota (CVE-2026-59865)
code injection in Microsoft.OpenApi.Kiota (CVE-2026-59865). Risk of unauthorized operations or information disclosure. Exploitable via ``dependencyInstallCommand``. Mitigation: upgrade to `1.29.1` or later.
|
| CVE-2026-59864 |
|
Path Traversal in Microsoft.OpenApi.Kiota (CVE-2026-59864)
path traversal in Microsoft.OpenApi.Kiota (CVE-2026-59864). Risk of unauthorized operations or information disclosure. Exploitable via ``static_template.file``. Mitigation: upgrade to `1.29.1` or later.
|
| CVE-2026-40501 |
|
Vulnerability in CVE-2026-40501 (CVE-2026-40501)
vulnerability in CVE-2026-40501 (CVE-2026-40501). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50562 |
|
Vulnerability in CVE-2026-50562 (CVE-2026-50562)
vulnerability in CVE-2026-50562 (CVE-2026-50562). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24226 |
|
Vulnerability in CVE-2026-24226 (CVE-2026-24226)
vulnerability in CVE-2026-24226 (CVE-2026-24226). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57102 |
|
Information Disclosure in microsoft (CVE-2026-57102)
vulnerability in microsoft (CVE-2026-57102). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15519 |
|
Vulnerability in CVE-2026-15519 (CVE-2026-15519)
vulnerability in CVE-2026-15519 (CVE-2026-15519). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59831 |
|
Vulnerability in CVE-2026-59831 (CVE-2026-59831)
vulnerability in CVE-2026-59831 (CVE-2026-59831). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49986 |
|
Vulnerability in neuro-cortex-memory (CVE-2026-49986)
vulnerability in neuro-cortex-memory (CVE-2026-49986). Risk of unauthorized operations or information disclosure. Exploitable via ``CLAUDE_PROJECT_DIR``. Mitigation: upgrade to `3.18.0` or later.
|
| CVE-2026-58116 |
|
Code Injection in hiyouga (CVE-2026-58116)
code injection in hiyouga (CVE-2026-58116). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13751 |
|
Vulnerability in snowflake (CVE-2026-13751)
vulnerability in snowflake (CVE-2026-13751). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55698 |
|
Vulnerability in pnpm (CVE-2026-55698)
vulnerability in pnpm (CVE-2026-55698). Successful exploitation can lead to full system takeover. Exploitable via ``a93449314f398cf4bdf2e28d033c02d37395ad22``. Mitigation: upgrade to `11.5.3` or later.
|
| CVE-2026-55697 |
|
OS Command Injection in pnpm (CVE-2026-55697)
OS command injection in pnpm (CVE-2026-55697). Successful exploitation can lead to full system takeover. Exploitable via ``a93449314f398cf4bdf2e28d033c02d37395ad22``. Mitigation: upgrade to `11.5.3` or later.
|
| CVE-2026-55487 |
|
Vulnerability in pnpm (CVE-2026-55487)
vulnerability in pnpm (CVE-2026-55487). Successful exploitation can lead to full system takeover. Exploitable via ``bf1b731ee6``. Mitigation: upgrade to `10.34.2` or later.
|