Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-409 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-58107	Vulnerability in dos (CVE-2026-58107) vulnerability in dos (CVE-2026-58107). Risk of unauthorized operations or information disclosure.		Denial of Service Cwe 409 Cwe 770	1 day ago
CVE-2026-59274	Vulnerability in CVE-2026-59274 (CVE-2026-59274) vulnerability in CVE-2026-59274 (CVE-2026-59274). Risk of unauthorized operations or information disclosure.	Medium	Cwe 409	3 days ago
CVE-2026-80189	Vulnerability in CVE-2026-80189 (CVE-2026-80189) vulnerability in CVE-2026-80189 (CVE-2026-80189). Risk of unauthorized operations or information disclosure.	Medium	Cwe 409	3 days ago
CVE-2026-54556	Vulnerability in org.http4s:http4s-ember-core_2.12 (CVE-2026-54556) vulnerability in org.http4s:http4s-ember-core_2.12 (CVE-2026-54556). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.23.35` or later.		Denial of Service Cwe 409	3 days ago
CVE-2026-78206	exceljs-hardened before 5.0.0 decompresses all entries from supplied xlsx archives into memory... exceljs-hardened before 5.0.0 decompresses all entries from supplied xlsx archives into memory...	High	Denial of Service Cwe 409 JavaScript	6 days ago
CVE-2026-53524	Vulnerability in CVE-2026-53524 (CVE-2026-53524) vulnerability in CVE-2026-53524 (CVE-2026-53524). Risk of unauthorized operations or information disclosure.	Medium	Cwe 409	1 week ago
CVE-2026-75476	Tanium addressed a compression bomb vulnerability in Threat Response. Tanium addressed a compression bomb vulnerability in Threat Response.	Low	Cwe 409	1 week ago
CVE-2026-11617	Tanium addressed a compression bomb vulnerability in Findings. Tanium addressed a compression bomb vulnerability in Findings.	Low	Cwe 409	1 week ago
CVE-2026-61690	Vulnerability in CVE-2026-61690 (CVE-2026-61690) vulnerability in CVE-2026-61690 (CVE-2026-61690). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 409	1 week ago
CVE-2026-75936	Vulnerability in dos (CVE-2026-75936) vulnerability in dos (CVE-2026-75936). Risk of unauthorized operations or information disclosure.	High	Java Denial of Service Cwe 409	1 week ago
CVE-2026-19671	Vulnerability in CVE-2026-19671 (CVE-2026-19671) vulnerability in CVE-2026-19671 (CVE-2026-19671). Risk of unauthorized operations or information disclosure.	Medium	Cwe 409	1 week ago
CVE-2026-74046	Vulnerability in dos (CVE-2026-74046) vulnerability in dos (CVE-2026-74046). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 409	1 week ago
CVE-2026-18929	Vulnerability in dos (CVE-2026-18929) vulnerability in dos (CVE-2026-18929). Risk of unauthorized operations or information disclosure.		Denial of Service Cwe 409	1 week ago
CVE-2026-75047	Vulnerability in dos (CVE-2026-75047) vulnerability in dos (CVE-2026-75047). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 409	1 week ago
CVE-2026-14298	Vulnerability in dos (CVE-2026-14298) vulnerability in dos (CVE-2026-14298). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 409 Mattermost Mattermost Server	2 weeks ago
CVE-2026-73232	Vulnerability in dos (CVE-2026-73232) vulnerability in dos (CVE-2026-73232). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 409	2 weeks ago
CVE-2026-68981	Vulnerability in apache (CVE-2026-68981) vulnerability in apache (CVE-2026-68981). Risk of unauthorized operations or information disclosure.	High	Apache Cwe 409 Nifi	3 weeks ago
CVE-2026-10819	Vulnerability in dos (CVE-2026-10819) vulnerability in dos (CVE-2026-10819). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 409 Mattermost Mattermost Server	1 month ago
CVE-2026-48586	Vulnerability in c (CVE-2026-48586) vulnerability in c (CVE-2026-48586). Risk of unauthorized operations or information disclosure.	High	Python Java C Apache +2	1 month ago
CVE-2026-41608	Vulnerability in apache (CVE-2026-41608) vulnerability in apache (CVE-2026-41608). Risk of unauthorized operations or information disclosure.	High	Python Apache Cwe 409 Thrift	1 month ago
CVE-2026-49158	Vulnerability in apache (CVE-2026-49158) vulnerability in apache (CVE-2026-49158). Risk of unauthorized operations or information disclosure.	High	Ruby Apache Cwe 409 Thrift	1 month ago
CVE-2026-55497	Vulnerability in github.com/cloudreve/Cloudreve/v4 (CVE-2026-55497) vulnerability in github.com/cloudreve/Cloudreve/v4 (CVE-2026-55497). Risk of unauthorized operations or information disclosure. Exploitable via `PUT /api/v4/user/setting/avatar`. Mitigation: upgrade to `4.0.0-20260613024411-3607f79bb44c` or later.	Medium	Cwe 400 Cwe 409 Cwe 770	1 month ago
CVE-2026-59932	Vulnerability in phpoffice/phpspreadsheet (CVE-2026-59932) vulnerability in phpoffice/phpspreadsheet (CVE-2026-59932). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.30.6` or later.	High	PHP Denial of Service Cwe 400 Cwe 409	1 month ago
CVE-2026-62963	Vulnerability in CVE-2026-62963 (CVE-2026-62963) vulnerability in CVE-2026-62963 (CVE-2026-62963). Risk of unauthorized operations or information disclosure.		Cwe 409	1 month ago
CVE-2026-61449	Vulnerability in CVE-2026-61449 (CVE-2026-61449) vulnerability in CVE-2026-61449 (CVE-2026-61449). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.2` or later.	Medium	Cwe 409	1 month ago
CVE-2026-15709	Vulnerability in dos (CVE-2026-15709) vulnerability in dos (CVE-2026-15709). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 409	1 month ago
CVE-2026-12588	Vulnerability in dos (CVE-2026-12588) vulnerability in dos (CVE-2026-12588). Risk of unauthorized operations or information disclosure.		Denial of Service Cwe 409	1 month ago
CVE-2026-58486	Vulnerability in dos (CVE-2026-58486) vulnerability in dos (CVE-2026-58486). Risk of unauthorized operations or information disclosure.		JavaScript Denial of Service Cwe 400 Cwe 409	1 month ago
CVE-2026-59193	Vulnerability in getgrav (CVE-2026-59193) vulnerability in getgrav (CVE-2026-59193). Risk of unauthorized operations or information disclosure.	Medium	Cwe 409 Getgrav Grav	1 month ago
CVE-2026-61455	Vulnerability in dos (CVE-2026-61455) vulnerability in dos (CVE-2026-61455). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 409	1 month ago
CVE-2026-59803	Vulnerability in CVE-2026-59803 (CVE-2026-59803) vulnerability in CVE-2026-59803 (CVE-2026-59803). Risk of unauthorized operations or information disclosure.	High	Cwe 409	1 month ago
CVE-2026-59939	Vulnerability in httplib2 (CVE-2026-59939) vulnerability in httplib2 (CVE-2026-59939). Risk of unauthorized operations or information disclosure. Exploitable via ``httplib2``. Mitigation: upgrade to `0.32.0` or later.	High	Python Cwe 409 Httplib2 Project Httplib2	1 month ago
CVE-2026-55078	Vulnerability in github.com/coder/coder/v2 (CVE-2026-55078) vulnerability in github.com/coder/coder/v2 (CVE-2026-55078). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v2/files`. Mitigation: upgrade to `2.29.17` or later.	Medium	Denial of Service Cwe 409 Cwe 770 Coder	1 month ago
CVE-2026-24264	Vulnerability in dos (CVE-2026-24264) vulnerability in dos (CVE-2026-24264). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 409 Nvidia Triton Inference Server +2	1 month ago
CVE-2026-13523	Vulnerability in c (CVE-2026-13523) vulnerability in c (CVE-2026-13523). Risk of unauthorized operations or information disclosure.	Low	C Cwe 404 Cwe 409	2 months ago
CVE-2026-48044	Vulnerability in envoy (CVE-2026-48044) vulnerability in envoy (CVE-2026-48044). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.35.11` or later.	High	Denial of Service Cwe 409 Envoyproxy Envoy	2 months ago
CVE-2026-44160	Vulnerability in fluentd (CVE-2026-44160) vulnerability in fluentd (CVE-2026-44160). Risk of unauthorized operations or information disclosure. Exploitable via ``in_http``. Mitigation: upgrade to `1.19.3` or later.	High	Denial of Service Cwe 409 Fluentd	2 months ago
CVE-2026-48502	Vulnerability in MessagePack (CVE-2026-48502) vulnerability in MessagePack (CVE-2026-48502). Risk of unauthorized operations or information disclosure. Exploitable via ``tokenSize``. Mitigation: upgrade to `3.1.7` or later.	High	C C# Cwe 125 Cwe 190 +8	2 months ago
CVE-2026-48510	Vulnerability in MessagePack (CVE-2026-48510) vulnerability in MessagePack (CVE-2026-48510). Risk of unauthorized operations or information disclosure. Exploitable via ``Lz4Block``. Mitigation: upgrade to `3.1.7` or later.	High	C C# Cwe 409 Cwe 770 +1	2 months ago
CVE-2026-55195	Vulnerability in py7zr (CVE-2026-55195) vulnerability in py7zr (CVE-2026-55195). Risk of unauthorized operations or information disclosure. Exploitable via ``zipfile``. Mitigation: upgrade to `1.1.3` or later.		Python Cwe 409	2 months ago
CVE-2026-47774	Vulnerability in envoy (CVE-2026-47774) vulnerability in envoy (CVE-2026-47774). Risk of unauthorized operations or information disclosure. Exploitable via `Cookie header`. Mitigation: upgrade to `1.35.11, 1.36.7, 1.37.3, 1.38.1` or later.	High	Denial of Service Cwe 405 Cwe 770 Cwe 409 +4	2 months ago
CVE-2026-54233	Vulnerability in vllm (CVE-2026-54233) vulnerability in vllm (CVE-2026-54233). Risk of unauthorized operations or information disclosure. Exploitable via ``SpeechToTextProcessor``. Mitigation: upgrade to `0.24.0` or later.	Medium	Cwe 409 vLLM	2 months ago
CVE-2026-54314	Vulnerability in n8n (CVE-2026-54314) vulnerability in n8n (CVE-2026-54314). Risk of unauthorized operations or information disclosure. Exploitable via ``N8N_COMPRESSION_NODE_MAX_ZIP_ENTRIES``. Mitigation: upgrade to `2.24.0` or later.	High	Cwe 409 N8N	2 months ago
CVE-2026-53430	Vulnerability in grpc (CVE-2026-53430) vulnerability in grpc (CVE-2026-53430). Risk of unauthorized operations or information disclosure. Exploitable via ``GRPC.Compressor``. Mitigation: upgrade to `1.0.0` or later.		Denial of Service Cwe 409	2 months ago
CVE-2026-49855	Vulnerability in tornado (CVE-2026-49855) vulnerability in tornado (CVE-2026-49855). Risk of unauthorized operations or information disclosure. Exploitable via ``HTTPServer``. Mitigation: upgrade to `6.5.6` or later.	High	Python Cwe 409	2 months ago
CVE-2026-54278	Vulnerability in aiohttp (CVE-2026-54278) vulnerability in aiohttp (CVE-2026-54278). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.14.1` or later.	High	Python Denial of Service Cwe 409 Aiohttp	2 months ago
CVE-2026-49975	Vulnerability in apache (CVE-2026-49975) vulnerability in apache (CVE-2026-49975). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.68` or later.	High	Apache Denial of Service Cwe 789 Http Server +8	2 months ago
CVE-2026-49755	Vulnerability in req (CVE-2026-49755) vulnerability in req (CVE-2026-49755). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.6.1` or later.	High	Cwe 409 Wojtekmach Req	2 months ago
CVE-2026-10725	Vulnerability in crux (CVE-2026-10725) vulnerability in crux (CVE-2026-10725). Risk of unauthorized operations or information disclosure.	High	Cwe 409 Crux Protocol	2 months ago
CVE-2026-44018	Vulnerability in docling (CVE-2026-44018) vulnerability in docling (CVE-2026-44018). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.91.0` or later.	Medium	Cwe 409 Cwe 611 Cwe 776 Docling	2 months ago

Vulnerabilities

🍪 About cookies