Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: cwe-862 Clear
ID Title
CVE-2026-11818 Vulnerability in wordpress (CVE-2026-11818)
vulnerability in wordpress (CVE-2026-11818). Risk of unauthorized operations or information disclosure.
CVE-2026-44918 Vulnerability in CVE-2026-44918 (CVE-2026-44918)
vulnerability in CVE-2026-44918 (CVE-2026-44918). Confidential information can be exposed externally.
CVE-2026-15320 Vulnerability in CVE-2026-15320 (CVE-2026-15320)
vulnerability in CVE-2026-15320 (CVE-2026-15320). Risk of unauthorized operations or information disclosure.
CVE-2026-59853 Vulnerability in CVE-2026-59853 (CVE-2026-59853)
vulnerability in CVE-2026-59853 (CVE-2026-59853). Confidential information can be exposed externally.
CVE-2026-46413 Vulnerability in discourse (CVE-2026-46413)
vulnerability in discourse (CVE-2026-46413). Data can be tampered with by attackers.
CVE-2026-33802 Vulnerability in dos (CVE-2026-33802)
vulnerability in dos (CVE-2026-33802). Risk of unauthorized operations or information disclosure.
CVE-2026-59226 Vulnerability in open-webui (CVE-2026-59226)
vulnerability in open-webui (CVE-2026-59226). Risk of unauthorized operations or information disclosure. Exploitable via ``pending``. Mitigation: upgrade to `0.10.0` or later.
CVE-2026-59227 Vulnerability in open-webui (CVE-2026-59227)
vulnerability in open-webui (CVE-2026-59227). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/images/edit`. Mitigation: upgrade to `0.10.0` or later.
CVE-2026-59225 Vulnerability in open-webui (CVE-2026-59225)
vulnerability in open-webui (CVE-2026-59225). Risk of unauthorized operations or information disclosure. Exploitable via ``selected_model_id``. Mitigation: upgrade to `0.10.0` or later.
CVE-2026-59216 Code Injection in open-webui (CVE-2026-59216)
code injection in open-webui (CVE-2026-59216). Confidential information can be exposed externally. Exploitable via `POST /api/v1/chat/completions`. Mitigation: upgrade to `0.10.0` or later.
CVE-2026-59217 Vulnerability in open-webui (CVE-2026-59217)
vulnerability in open-webui (CVE-2026-59217). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/knowledge/`. Mitigation: upgrade to `0.10.0` or later.
CVE-2026-12593 Vulnerability in CVE-2026-12593 (CVE-2026-12593)
vulnerability in CVE-2026-12593 (CVE-2026-12593). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/users/`.
CVE-2026-4298 Vulnerability in wordpress (CVE-2026-4298)
vulnerability in wordpress (CVE-2026-4298). Risk of unauthorized operations or information disclosure.
CVE-2026-9240 Vulnerability in wordpress (CVE-2026-9240)
vulnerability in wordpress (CVE-2026-9240). Risk of unauthorized operations or information disclosure.
CVE-2026-9021 Vulnerability in wordpress (CVE-2026-9021)
vulnerability in wordpress (CVE-2026-9021). Risk of unauthorized operations or information disclosure.
CVE-2026-9028 Vulnerability in wordpress (CVE-2026-9028)
vulnerability in wordpress (CVE-2026-9028). Risk of unauthorized operations or information disclosure.
CVE-2026-9235 Vulnerability in wordpress (CVE-2026-9235)
vulnerability in wordpress (CVE-2026-9235). Risk of unauthorized operations or information disclosure.
CVE-2026-9237 Vulnerability in wordpress (CVE-2026-9237)
vulnerability in wordpress (CVE-2026-9237). Risk of unauthorized operations or information disclosure.
CVE-2026-12428 Vulnerability in wordpress (CVE-2026-12428)
vulnerability in wordpress (CVE-2026-12428). Confidential information can be exposed externally.
CVE-2026-8996 Vulnerability in wordpress (CVE-2026-8996)
vulnerability in wordpress (CVE-2026-8996). Confidential information can be exposed externally.
CVE-2026-7558 Vulnerability in wordpress (CVE-2026-7558)
vulnerability in wordpress (CVE-2026-7558). Risk of unauthorized operations or information disclosure.
CVE-2026-8848 Vulnerability in wordpress (CVE-2026-8848)
vulnerability in wordpress (CVE-2026-8848). Successful exploitation can lead to full system takeover.
CVE-2026-11359 Vulnerability in wordpress (CVE-2026-11359)
vulnerability in wordpress (CVE-2026-11359). Risk of unauthorized operations or information disclosure.
CVE-2026-12406 Vulnerability in wordpress (CVE-2026-12406)
vulnerability in wordpress (CVE-2026-12406). Risk of unauthorized operations or information disclosure.
CVE-2026-14245 Vulnerability in wordpress (CVE-2026-14245)
vulnerability in wordpress (CVE-2026-14245). Successful exploitation can lead to full system takeover. Exploitable via ``form_nonce``.
CVE-2026-31309 Vulnerability in CVE-2026-31309 (CVE-2026-31309)
vulnerability in CVE-2026-31309 (CVE-2026-31309). Successful exploitation can lead to full system takeover.
CVE-2026-35552 Vulnerability in CVE-2026-35552 (CVE-2026-35552)
vulnerability in CVE-2026-35552 (CVE-2026-35552). Confidential information can be exposed externally.
CVE-2026-8472 Vulnerability in gitlab (CVE-2026-8472)
vulnerability in gitlab (CVE-2026-8472). Risk of unauthorized operations or information disclosure.
CVE-2026-7492 Vulnerability in gitlab (CVE-2026-7492)
vulnerability in gitlab (CVE-2026-7492). Risk of unauthorized operations or information disclosure.
CVE-2026-59805 Vulnerability in CVE-2026-59805 (CVE-2026-59805)
vulnerability in CVE-2026-59805 (CVE-2026-59805). Data can be tampered with by attackers.
CVE-2026-14373 Vulnerability in c (CVE-2026-14373)
vulnerability in c (CVE-2026-14373). Confidential information can be exposed externally.
CVE-2026-59262 Vulnerability in CVE-2026-59262 (CVE-2026-59262)
vulnerability in CVE-2026-59262 (CVE-2026-59262). Confidential information can be exposed externally.
CVE-2026-15034 Cross-Site Request Forgery (CSRF) in flask (CVE-2026-15034)
vulnerability in flask (CVE-2026-15034). Risk of unauthorized operations or information disclosure.
CVE-2026-56250 Vulnerability in dos (CVE-2026-56250)
vulnerability in dos (CVE-2026-56250). Risk of unauthorized operations or information disclosure.
CVE-2026-60124 Vulnerability in CVE-2026-60124 (CVE-2026-60124)
vulnerability in CVE-2026-60124 (CVE-2026-60124). Risk of unauthorized operations or information disclosure.
CVE-2026-5356 Vulnerability in wordpress (CVE-2026-5356)
vulnerability in wordpress (CVE-2026-5356). Data can be tampered with by attackers.
CVE-2026-12097 Vulnerability in wordpress (CVE-2026-12097)
vulnerability in wordpress (CVE-2026-12097). Risk of unauthorized operations or information disclosure.
CVE-2026-12153 Vulnerability in wordpress (CVE-2026-12153)
vulnerability in wordpress (CVE-2026-12153). Successful exploitation can lead to full system takeover.
CVE-2026-53487 Vulnerability in github.com/zxh326/kite (CVE-2026-53487)
vulnerability in github.com/zxh326/kite (CVE-2026-53487). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v1/overview`. Mitigation: upgrade to `0.12.3` or later.
CVE-2026-59704 Vulnerability in CVE-2026-59704 (CVE-2026-59704)
vulnerability in CVE-2026-59704 (CVE-2026-59704). Confidential information can be exposed externally. Exploitable via `GET /api/video/ai`.
CVE-2026-58473 Vulnerability in CVE-2026-58473 (CVE-2026-58473)
vulnerability in CVE-2026-58473 (CVE-2026-58473). Confidential information can be exposed externally.
CVE-2026-55417 Vulnerability in CVE-2026-55417 (CVE-2026-55417)
vulnerability in CVE-2026-55417 (CVE-2026-55417). Risk of unauthorized operations or information disclosure.
CVE-2026-53730 Vulnerability in CVE-2026-53730 (CVE-2026-53730)
vulnerability in CVE-2026-53730 (CVE-2026-53730). Risk of unauthorized operations or information disclosure.
CVE-2026-50007 Vulnerability in CVE-2026-50007 (CVE-2026-50007)
vulnerability in CVE-2026-50007 (CVE-2026-50007). Risk of unauthorized operations or information disclosure.
CVE-2026-53514 Authentication Bypass in better-auth (CVE-2026-53514)
authentication bypass in better-auth (CVE-2026-53514). Confidential information can be exposed externally. Exploitable via ``organization``. Mitigation: upgrade to `1.6.11` or later.
CVE-2026-59708 Vulnerability in CVE-2026-59708 (CVE-2026-59708)
vulnerability in CVE-2026-59708 (CVE-2026-59708). Confidential information can be exposed externally. Exploitable via `GET /api/v1/public/`.
CVE-2026-59709 Vulnerability in CVE-2026-59709 (CVE-2026-59709)
vulnerability in CVE-2026-59709 (CVE-2026-59709). Risk of unauthorized operations or information disclosure. Exploitable via `PUT /api/v1/portfolio/holding/`.
CVE-2026-11340 Vulnerability in CVE-2026-11340 (CVE-2026-11340)
vulnerability in CVE-2026-11340 (CVE-2026-11340). Data can be tampered with by attackers.
CVE-2026-8377 Vulnerability in CVE-2026-8377 (CVE-2026-8377)
vulnerability in CVE-2026-8377 (CVE-2026-8377). Confidential information can be exposed externally.
CVE-2026-34048 Vulnerability in CVE-2026-34048 (CVE-2026-34048)
vulnerability in CVE-2026-34048 (CVE-2026-34048). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →