Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-0411 |
|
Information Disclosure in netgear (CVE-2026-0411)
vulnerability in netgear (CVE-2026-0411). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50508 |
|
Information Disclosure in microsoft (CVE-2026-50508)
vulnerability in microsoft (CVE-2026-50508). Confidential information can be exposed externally.
|
| CVE-2026-47284 |
|
Information Disclosure in microsoft (CVE-2026-47284)
vulnerability in microsoft (CVE-2026-47284). Confidential information can be exposed externally.
|
| CVE-2026-45594 |
|
Information Disclosure in microsoft (CVE-2026-45594)
vulnerability in microsoft (CVE-2026-45594). Confidential information can be exposed externally.
|
| CVE-2026-49742 |
|
Path Traversal in typo3/cms-core (CVE-2026-49742)
path traversal in typo3/cms-core (CVE-2026-49742). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.3.3` or later.
|
| CVE-2026-47351 |
|
Information Disclosure in typo3/cms-core (CVE-2026-47351)
vulnerability in typo3/cms-core (CVE-2026-47351). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.3.3` or later.
|
| CVE-2026-34905 |
|
Information Disclosure in github.com/apache/incubator-answer (CVE-2026-34905)
vulnerability in github.com/apache/incubator-answer (CVE-2026-34905). Confidential information can be exposed externally. Mitigation: upgrade to `1.7.2-0.20260509071350-11c80384f13a` or later.
|
| CVE-2026-7542 |
|
Information Disclosure in wordpress (CVE-2026-7542)
vulnerability in wordpress (CVE-2026-7542). Confidential information can be exposed externally.
|
| CVE-2026-41980 |
|
Information Disclosure in CVE-2026-41980 (CVE-2026-41980)
vulnerability in CVE-2026-41980 (CVE-2026-41980). Confidential information can be exposed externally.
|
| CVE-2026-47735 |
|
Information Disclosure in github.com/basekick-labs/arc (CVE-2026-47735)
vulnerability in github.com/basekick-labs/arc (CVE-2026-47735). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/query`. Mitigation: upgrade to `2026.06.1` or later.
|
| CVE-2026-45536 |
|
Information Disclosure in io.netty:netty-transport-native-epoll (CVE-2026-45536)
vulnerability in io.netty:netty-transport-native-epoll (CVE-2026-45536). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.1.135.Final` or later.
|
| CVE-2026-11464 |
|
Information Disclosure in CVE-2026-11464 (CVE-2026-11464)
vulnerability in CVE-2026-11464 (CVE-2026-11464). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11459 |
|
Information Disclosure in CVE-2026-11459 (CVE-2026-11459)
vulnerability in CVE-2026-11459 (CVE-2026-11459). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11458 |
|
Information Disclosure in CVE-2026-11458 (CVE-2026-11458)
vulnerability in CVE-2026-11458 (CVE-2026-11458). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11424 |
|
Information Disclosure in ssrf (CVE-2026-11424)
vulnerability in ssrf (CVE-2026-11424). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.1.1` or later.
|
| CVE-2026-11431 |
|
Path Traversal in path-traversal (CVE-2026-11431)
path traversal in path-traversal (CVE-2026-11431). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.1.1` or later.
|
| CVE-2026-47743 |
|
Cross-Site Scripting (XSS) in shopper/framework (CVE-2026-47743)
cross-site scripting in shopper/framework (CVE-2026-47743). Confidential information can be exposed externally. Exploitable via ``Hidden``. Mitigation: upgrade to `2.8.0` or later.
|
| CVE-2026-47379 |
|
Information Disclosure in nocodb (CVE-2026-47379)
vulnerability in nocodb (CVE-2026-47379). Risk of unauthorized operations or information disclosure. Exploitable via ``View.ts``. Mitigation: upgrade to `2026.05.1` or later.
|
| CVE-2026-11271 |
|
Information Disclosure in google (CVE-2026-11271)
vulnerability in google (CVE-2026-11271). Confidential information can be exposed externally.
|
| CVE-2026-47655 |
|
Information Disclosure in microsoft (CVE-2026-47655)
vulnerability in microsoft (CVE-2026-47655). Confidential information can be exposed externally.
|
| CVE-2026-11209 |
|
Information Disclosure in google (CVE-2026-11209)
vulnerability in google (CVE-2026-11209). Confidential information can be exposed externally.
|
| CVE-2026-11203 |
|
Information Disclosure in google (CVE-2026-11203)
vulnerability in google (CVE-2026-11203). Confidential information can be exposed externally.
|
| CVE-2026-11182 |
|
Information Disclosure in google (CVE-2026-11182)
vulnerability in google (CVE-2026-11182). Confidential information can be exposed externally.
|
| CVE-2026-11180 |
|
Information Disclosure in google (CVE-2026-11180)
vulnerability in google (CVE-2026-11180). Confidential information can be exposed externally.
|
| CVE-2026-11168 |
|
Information Disclosure in google (CVE-2026-11168)
vulnerability in google (CVE-2026-11168). Confidential information can be exposed externally.
|
| CVE-2026-11162 |
|
Information Disclosure in google (CVE-2026-11162)
vulnerability in google (CVE-2026-11162). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48009 |
|
Information Disclosure in shopware/platform (CVE-2026-48009)
vulnerability in shopware/platform (CVE-2026-48009). Confidential information can be exposed externally. Exploitable via `POST /api/search/user-recovery`. Mitigation: upgrade to `6.6.10.18` or later.
|
| CVE-2025-69755 |
|
OS Command Injection in CVE-2025-69755 (CVE-2025-69755)
OS command injection in CVE-2025-69755 (CVE-2025-69755). Confidential information can be exposed externally.
|
| CVE-2026-10864 |
|
Information Disclosure in misp (CVE-2026-10864)
vulnerability in misp (CVE-2026-10864). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10854 |
|
Information Disclosure in misp (CVE-2026-10854)
vulnerability in misp (CVE-2026-10854). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44486 |
|
Information Disclosure in axios (CVE-2026-44486)
vulnerability in axios (CVE-2026-44486). Confidential information can be exposed externally. Exploitable via `GET /start`. Mitigation: upgrade to `0.32.0` or later.
|
| CVE-2026-50224 |
|
Information Disclosure in acer (CVE-2026-50224)
vulnerability in acer (CVE-2026-50224). Confidential information can be exposed externally.
|
| CVE-2026-50210 |
|
Information Disclosure in acer (CVE-2026-50210)
vulnerability in acer (CVE-2026-50210). Confidential information can be exposed externally.
|
| CVE-2026-49193 |
|
Information Disclosure in acer (CVE-2026-49193)
vulnerability in acer (CVE-2026-49193). Confidential information can be exposed externally.
|
| CVE-2026-49187 |
|
Information Disclosure in acer (CVE-2026-49187)
vulnerability in acer (CVE-2026-49187). Confidential information can be exposed externally.
|
| CVE-2026-40495 |
|
Information Disclosure in CVE-2026-40495 (CVE-2026-40495)
vulnerability in CVE-2026-40495 (CVE-2026-40495). Risk of unauthorized operations or information disclosure. Exploitable via ``hide_version_public``.
|
| CVE-2026-36602 |
|
Information Disclosure in CVE-2026-36602 (CVE-2026-36602)
vulnerability in CVE-2026-36602 (CVE-2026-36602). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-36611 |
|
Information Disclosure in CVE-2026-36611 (CVE-2026-36611)
vulnerability in CVE-2026-36611 (CVE-2026-36611). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-36618 |
|
Information Disclosure in CVE-2026-36618 (CVE-2026-36618)
vulnerability in CVE-2026-36618 (CVE-2026-36618). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-36615 |
|
Information Disclosure in CVE-2026-36615 (CVE-2026-36615)
vulnerability in CVE-2026-36615 (CVE-2026-36615). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41032 |
|
Information Disclosure in CVE-2026-41032 (CVE-2026-41032)
vulnerability in CVE-2026-41032 (CVE-2026-41032). Confidential information can be exposed externally.
|
| CVE-2026-32625 |
|
Information Disclosure in librechat (CVE-2026-32625)
vulnerability in librechat (CVE-2026-32625). Confidential information can be exposed externally.
|
| CVE-2026-45080 |
|
Information Disclosure in apache (CVE-2026-45080)
vulnerability in apache (CVE-2026-45080). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8993 |
|
Vulnerability in ssrf (CVE-2026-8993)
vulnerability in ssrf (CVE-2026-8993). Confidential information can be exposed externally.
|
| CVE-2026-28511 |
|
Information Disclosure in elabftw (CVE-2026-28511)
vulnerability in elabftw (CVE-2026-28511). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40965 |
|
Information Disclosure in CVE-2026-40965 (CVE-2026-40965)
vulnerability in CVE-2026-40965 (CVE-2026-40965). Confidential information can be exposed externally. Mitigation: upgrade to `78.13.0` or later.
|
| CVE-2026-45286 |
|
Information Disclosure in nextcloud (CVE-2026-45286)
vulnerability in nextcloud (CVE-2026-45286). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45277 |
|
Information Disclosure in nextcloud (CVE-2026-45277)
vulnerability in nextcloud (CVE-2026-45277). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45267 |
|
Information Disclosure in CVE-2026-45267 (CVE-2026-45267)
vulnerability in CVE-2026-45267 (CVE-2026-45267). Confidential information can be exposed externally.
|
| CVE-2026-10254 |
|
Information Disclosure in CVE-2026-10254 (CVE-2026-10254)
vulnerability in CVE-2026-10254 (CVE-2026-10254). Risk of unauthorized operations or information disclosure.
|