Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-11818 |
|
Vulnerability in wordpress (CVE-2026-11818)
vulnerability in wordpress (CVE-2026-11818). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44918 |
|
Vulnerability in CVE-2026-44918 (CVE-2026-44918)
vulnerability in CVE-2026-44918 (CVE-2026-44918). Confidential information can be exposed externally.
|
| CVE-2026-15320 |
|
Vulnerability in CVE-2026-15320 (CVE-2026-15320)
vulnerability in CVE-2026-15320 (CVE-2026-15320). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59853 |
|
Vulnerability in CVE-2026-59853 (CVE-2026-59853)
vulnerability in CVE-2026-59853 (CVE-2026-59853). Confidential information can be exposed externally.
|
| CVE-2026-46413 |
|
Vulnerability in discourse (CVE-2026-46413)
vulnerability in discourse (CVE-2026-46413). Data can be tampered with by attackers.
|
| CVE-2026-33802 |
|
Vulnerability in dos (CVE-2026-33802)
vulnerability in dos (CVE-2026-33802). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59226 |
|
Vulnerability in open-webui (CVE-2026-59226)
vulnerability in open-webui (CVE-2026-59226). Risk of unauthorized operations or information disclosure. Exploitable via ``pending``. Mitigation: upgrade to `0.10.0` or later.
|
| CVE-2026-59227 |
|
Vulnerability in open-webui (CVE-2026-59227)
vulnerability in open-webui (CVE-2026-59227). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/images/edit`. Mitigation: upgrade to `0.10.0` or later.
|
| CVE-2026-59225 |
|
Vulnerability in open-webui (CVE-2026-59225)
vulnerability in open-webui (CVE-2026-59225). Risk of unauthorized operations or information disclosure. Exploitable via ``selected_model_id``. Mitigation: upgrade to `0.10.0` or later.
|
| CVE-2026-59216 |
|
Code Injection in open-webui (CVE-2026-59216)
code injection in open-webui (CVE-2026-59216). Confidential information can be exposed externally. Exploitable via `POST /api/v1/chat/completions`. Mitigation: upgrade to `0.10.0` or later.
|
| CVE-2026-59217 |
|
Vulnerability in open-webui (CVE-2026-59217)
vulnerability in open-webui (CVE-2026-59217). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/knowledge/`. Mitigation: upgrade to `0.10.0` or later.
|
| CVE-2026-12593 |
|
Vulnerability in CVE-2026-12593 (CVE-2026-12593)
vulnerability in CVE-2026-12593 (CVE-2026-12593). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/users/`.
|
| CVE-2026-4298 |
|
Vulnerability in wordpress (CVE-2026-4298)
vulnerability in wordpress (CVE-2026-4298). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9240 |
|
Vulnerability in wordpress (CVE-2026-9240)
vulnerability in wordpress (CVE-2026-9240). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9021 |
|
Vulnerability in wordpress (CVE-2026-9021)
vulnerability in wordpress (CVE-2026-9021). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9028 |
|
Vulnerability in wordpress (CVE-2026-9028)
vulnerability in wordpress (CVE-2026-9028). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9235 |
|
Vulnerability in wordpress (CVE-2026-9235)
vulnerability in wordpress (CVE-2026-9235). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9237 |
|
Vulnerability in wordpress (CVE-2026-9237)
vulnerability in wordpress (CVE-2026-9237). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12428 |
|
Vulnerability in wordpress (CVE-2026-12428)
vulnerability in wordpress (CVE-2026-12428). Confidential information can be exposed externally.
|
| CVE-2026-8996 |
|
Vulnerability in wordpress (CVE-2026-8996)
vulnerability in wordpress (CVE-2026-8996). Confidential information can be exposed externally.
|
| CVE-2026-7558 |
|
Vulnerability in wordpress (CVE-2026-7558)
vulnerability in wordpress (CVE-2026-7558). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8848 |
|
Vulnerability in wordpress (CVE-2026-8848)
vulnerability in wordpress (CVE-2026-8848). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11359 |
|
Vulnerability in wordpress (CVE-2026-11359)
vulnerability in wordpress (CVE-2026-11359). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12406 |
|
Vulnerability in wordpress (CVE-2026-12406)
vulnerability in wordpress (CVE-2026-12406). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14245 |
|
Vulnerability in wordpress (CVE-2026-14245)
vulnerability in wordpress (CVE-2026-14245). Successful exploitation can lead to full system takeover. Exploitable via ``form_nonce``.
|
| CVE-2026-31309 |
|
Vulnerability in CVE-2026-31309 (CVE-2026-31309)
vulnerability in CVE-2026-31309 (CVE-2026-31309). Successful exploitation can lead to full system takeover.
|
| CVE-2026-35552 |
|
Vulnerability in CVE-2026-35552 (CVE-2026-35552)
vulnerability in CVE-2026-35552 (CVE-2026-35552). Confidential information can be exposed externally.
|
| CVE-2026-8472 |
|
Vulnerability in gitlab (CVE-2026-8472)
vulnerability in gitlab (CVE-2026-8472). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7492 |
|
Vulnerability in gitlab (CVE-2026-7492)
vulnerability in gitlab (CVE-2026-7492). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59805 |
|
Vulnerability in CVE-2026-59805 (CVE-2026-59805)
vulnerability in CVE-2026-59805 (CVE-2026-59805). Data can be tampered with by attackers.
|
| CVE-2026-14373 |
|
Vulnerability in c (CVE-2026-14373)
vulnerability in c (CVE-2026-14373). Confidential information can be exposed externally.
|
| CVE-2026-59262 |
|
Vulnerability in CVE-2026-59262 (CVE-2026-59262)
vulnerability in CVE-2026-59262 (CVE-2026-59262). Confidential information can be exposed externally.
|
| CVE-2026-15034 |
|
Cross-Site Request Forgery (CSRF) in flask (CVE-2026-15034)
vulnerability in flask (CVE-2026-15034). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56250 |
|
Vulnerability in dos (CVE-2026-56250)
vulnerability in dos (CVE-2026-56250). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-60124 |
|
Vulnerability in CVE-2026-60124 (CVE-2026-60124)
vulnerability in CVE-2026-60124 (CVE-2026-60124). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5356 |
|
Vulnerability in wordpress (CVE-2026-5356)
vulnerability in wordpress (CVE-2026-5356). Data can be tampered with by attackers.
|
| CVE-2026-12097 |
|
Vulnerability in wordpress (CVE-2026-12097)
vulnerability in wordpress (CVE-2026-12097). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12153 |
|
Vulnerability in wordpress (CVE-2026-12153)
vulnerability in wordpress (CVE-2026-12153). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53487 |
|
Vulnerability in github.com/zxh326/kite (CVE-2026-53487)
vulnerability in github.com/zxh326/kite (CVE-2026-53487). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v1/overview`. Mitigation: upgrade to `0.12.3` or later.
|
| CVE-2026-59704 |
|
Vulnerability in CVE-2026-59704 (CVE-2026-59704)
vulnerability in CVE-2026-59704 (CVE-2026-59704). Confidential information can be exposed externally. Exploitable via `GET /api/video/ai`.
|
| CVE-2026-58473 |
|
Vulnerability in CVE-2026-58473 (CVE-2026-58473)
vulnerability in CVE-2026-58473 (CVE-2026-58473). Confidential information can be exposed externally.
|
| CVE-2026-55417 |
|
Vulnerability in CVE-2026-55417 (CVE-2026-55417)
vulnerability in CVE-2026-55417 (CVE-2026-55417). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53730 |
|
Vulnerability in CVE-2026-53730 (CVE-2026-53730)
vulnerability in CVE-2026-53730 (CVE-2026-53730). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50007 |
|
Vulnerability in CVE-2026-50007 (CVE-2026-50007)
vulnerability in CVE-2026-50007 (CVE-2026-50007). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53514 |
|
Authentication Bypass in better-auth (CVE-2026-53514)
authentication bypass in better-auth (CVE-2026-53514). Confidential information can be exposed externally. Exploitable via ``organization``. Mitigation: upgrade to `1.6.11` or later.
|
| CVE-2026-59708 |
|
Vulnerability in CVE-2026-59708 (CVE-2026-59708)
vulnerability in CVE-2026-59708 (CVE-2026-59708). Confidential information can be exposed externally. Exploitable via `GET /api/v1/public/`.
|
| CVE-2026-59709 |
|
Vulnerability in CVE-2026-59709 (CVE-2026-59709)
vulnerability in CVE-2026-59709 (CVE-2026-59709). Risk of unauthorized operations or information disclosure. Exploitable via `PUT /api/v1/portfolio/holding/`.
|
| CVE-2026-11340 |
|
Vulnerability in CVE-2026-11340 (CVE-2026-11340)
vulnerability in CVE-2026-11340 (CVE-2026-11340). Data can be tampered with by attackers.
|
| CVE-2026-8377 |
|
Vulnerability in CVE-2026-8377 (CVE-2026-8377)
vulnerability in CVE-2026-8377 (CVE-2026-8377). Confidential information can be exposed externally.
|
| CVE-2026-34048 |
|
Vulnerability in CVE-2026-34048 (CVE-2026-34048)
vulnerability in CVE-2026-34048 (CVE-2026-34048). Successful exploitation can lead to full system takeover.
|