Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-266 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-53862	Privilege Escalation in openclaw (CVE-2026-53862) vulnerability in openclaw (CVE-2026-53862). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.5.12` or later.	Medium	Cwe 266 Cwe 345 Openclaw	3 weeks ago
CVE-2026-53847	Vulnerability in openclaw (CVE-2026-53847) vulnerability in openclaw (CVE-2026-53847). Risk of unauthorized operations or information disclosure. Exploitable via ``operator.write``. Mitigation: upgrade to `2026.5.6` or later.	Medium	Privilege Escalation Cwe 266 Openclaw	3 weeks ago
CVE-2026-12289	Privilege Escalation in privilege-escalation (CVE-2026-12289) vulnerability in privilege-escalation (CVE-2026-12289). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 269 Mozilla Firefox +2	3 weeks ago
CVE-2026-12294	Vulnerability in mozilla (CVE-2026-12294) vulnerability in mozilla (CVE-2026-12294). Successful exploitation can lead to full system takeover.	Critical	Cwe 693 Mozilla Firefox Thunderbird +1	3 weeks ago
CVE-2026-49780	Customer Privilege Escalation in Dokan <= 5.0.2 versions. Customer Privilege Escalation in Dokan <= 5.0.2 versions.	High	Privilege Escalation Cwe 266	3 weeks ago
CVE-2026-48889	Subscriber Privilege Escalation in Amelia <= 2.3 versions. Subscriber Privilege Escalation in Amelia <= 2.3 versions.	High	Privilege Escalation Cwe 266	3 weeks ago
CVE-2026-49063	Unauthenticated Privilege Escalation in Listdom <= 5.5.0 versions. Unauthenticated Privilege Escalation in Listdom <= 5.5.0 versions.	High	Privilege Escalation Cwe 266	3 weeks ago
CVE-2026-49083	Contributor Privilege Escalation in LatePoint <= 5.5.1 versions. Contributor Privilege Escalation in LatePoint <= 5.5.1 versions.	High	Privilege Escalation Cwe 266	3 weeks ago
CVE-2026-39587	Unauthenticated Privilege Escalation in WP BASE Booking <= 5.9.0 versions. Unauthenticated Privilege Escalation in WP BASE Booking <= 5.9.0 versions.	High	Privilege Escalation Cwe 266	3 weeks ago
CVE-2026-39579	Contributor Privilege Escalation in B Blocks <= 2.0.31 versions. Contributor Privilege Escalation in B Blocks <= 2.0.31 versions.	High	Privilege Escalation Cwe 266	3 weeks ago
CVE-2026-39583	Unauthenticated Privilege Escalation in Datalogics Ecommerce Delivery <= 2.6.62 versions. Unauthenticated Privilege Escalation in Datalogics Ecommerce Delivery <= 2.6.62 versions.	Critical	Privilege Escalation Cwe 266	3 weeks ago
CVE-2026-39470	Shop manager Privilege Escalation in WooCommerce Cart Abandonment Recovery < 2.1.0 versions. Shop manager Privilege Escalation in WooCommerce Cart Abandonment Recovery < 2.1.0 versions.	High	Privilege Escalation Cwe 266	3 weeks ago
CVE-2026-27407	Editor Privilege Escalation in AI Engine <= 3.4.9 versions. Editor Privilege Escalation in AI Engine <= 3.4.9 versions.	High	Privilege Escalation Cwe 266	3 weeks ago
CVE-2026-34901	Unauthenticated Privilege Escalation in iControlWP <= 5.5.3 versions. Unauthenticated Privilege Escalation in iControlWP <= 5.5.3 versions.	Critical	Privilege Escalation Cwe 266	3 weeks ago
CVE-2026-49111	Vulnerability in privilege-escalation (CVE-2026-49111) vulnerability in privilege-escalation (CVE-2026-49111). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 266	3 weeks ago
CVE-2026-12217	Vulnerability in CVE-2026-12217 (CVE-2026-12217) vulnerability in CVE-2026-12217 (CVE-2026-12217). Successful exploitation can lead to full system takeover.	High	Cwe 266 Cwe 269	3 weeks ago
CVE-2026-12212	Vulnerability in CVE-2026-12212 (CVE-2026-12212) vulnerability in CVE-2026-12212 (CVE-2026-12212). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 284	3 weeks ago
CVE-2026-12213	Vulnerability in CVE-2026-12213 (CVE-2026-12213) vulnerability in CVE-2026-12213 (CVE-2026-12213). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 285	3 weeks ago
CVE-2026-12201	Vulnerability in CVE-2026-12201 (CVE-2026-12201) vulnerability in CVE-2026-12201 (CVE-2026-12201). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 275	3 weeks ago
CVE-2026-44173	Authorization Flaw in mariadb (CVE-2026-44173) vulnerability in mariadb (CVE-2026-44173). Risk of unauthorized operations or information disclosure.	Medium	Cwe 863 MariaDB Cwe 266	3 weeks ago
CVE-2026-45830	Vulnerability in trychroma (CVE-2026-45830) vulnerability in trychroma (CVE-2026-45830). Successful exploitation can lead to full system takeover.	High	Python Cwe 639 Trychroma Chromadb +1	3 weeks ago
CVE-2026-49060	Vulnerability in privilege-escalation (CVE-2026-49060) vulnerability in privilege-escalation (CVE-2026-49060). Successful exploitation can lead to full system takeover.	Critical	Privilege Escalation Cwe 266	3 weeks ago
CVE-2026-53814	Information Disclosure in openclaw (CVE-2026-53814) vulnerability in openclaw (CVE-2026-53814). Confidential information can be exposed externally. Mitigation: upgrade to `2026.5.20` or later.	High	Privilege Escalation Cwe 266 Openclaw	3 weeks ago
CVE-2026-47169	Vulnerability in c (CVE-2026-47169) vulnerability in c (CVE-2026-47169). Risk of unauthorized operations or information disclosure.		C Cwe 266	3 weeks ago
CVE-2026-45490	Improper authorization in .NET allows an authorized attacker to elevate privileges locally. Improper authorization in .NET allows an authorized attacker to elevate privileges locally.	High	C# Cwe 285 Cwe 863 Microsoft +3	4 weeks ago
CVE-2025-10263	Vulnerability in CVE-2025-10263 (CVE-2025-10263) vulnerability in CVE-2025-10263 (CVE-2025-10263). Confidential information can be exposed externally.	Critical	Cwe 362 Cwe 266	4 weeks ago
CVE-2026-11620	Vulnerability in CVE-2026-11620 (CVE-2026-11620) vulnerability in CVE-2026-11620 (CVE-2026-11620). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 272	4 weeks ago
CVE-2026-11619	Vulnerability in CVE-2026-11619 (CVE-2026-11619) vulnerability in CVE-2026-11619 (CVE-2026-11619). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 266 Cwe 285	4 weeks ago
CVE-2026-11554	Vulnerability in CVE-2026-11554 (CVE-2026-11554) vulnerability in CVE-2026-11554 (CVE-2026-11554). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 272	4 weeks ago
CVE-2026-11555	Vulnerability in dlink (CVE-2026-11555) vulnerability in dlink (CVE-2026-11555). Risk of unauthorized operations or information disclosure.	Low	Cwe 266 Cwe 272 Dlink Dgs 1100 08Pd Firmware +1	4 weeks ago
CVE-2026-11532	Vulnerability in CVE-2026-11532 (CVE-2026-11532) vulnerability in CVE-2026-11532 (CVE-2026-11532). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 266 Cwe 284	4 weeks ago
CVE-2026-11533	Vulnerability in CVE-2026-11533 (CVE-2026-11533) vulnerability in CVE-2026-11533 (CVE-2026-11533). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 266 Cwe 285	4 weeks ago
CVE-2026-11521	Vulnerability in CVE-2026-11521 (CVE-2026-11521) vulnerability in CVE-2026-11521 (CVE-2026-11521). Risk of unauthorized operations or information disclosure.	Medium	Java Cwe 266 Cwe 285	1 month ago
CVE-2026-11519	Vulnerability in CVE-2026-11519 (CVE-2026-11519) vulnerability in CVE-2026-11519 (CVE-2026-11519). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 266 Cwe 285	1 month ago
CVE-2026-11497	Vulnerability in dlink (CVE-2026-11497) vulnerability in dlink (CVE-2026-11497). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 272 Dlink Dcs 5615 Firmware +1	1 month ago
CVE-2026-11494	Vulnerability in CVE-2026-11494 (CVE-2026-11494) vulnerability in CVE-2026-11494 (CVE-2026-11494). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 272	1 month ago
CVE-2026-11492	Vulnerability in dlink (CVE-2026-11492) vulnerability in dlink (CVE-2026-11492). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 272 Dlink Dir 823G Firmware +1	1 month ago
CVE-2026-11476	Vulnerability in CVE-2026-11476 (CVE-2026-11476) vulnerability in CVE-2026-11476 (CVE-2026-11476). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 266 Cwe 285	1 month ago
CVE-2026-11466	Vulnerability in CVE-2026-11466 (CVE-2026-11466) vulnerability in CVE-2026-11466 (CVE-2026-11466). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 284	1 month ago
CVE-2026-11462	A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.6.0.22. This... A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.6.0.22. This...	High	PHP Cwe 266 Cwe 285 Remote Code Execution	1 month ago
CVE-2026-11438	Vulnerability in CVE-2026-11438 (CVE-2026-11438) vulnerability in CVE-2026-11438 (CVE-2026-11438). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 285	1 month ago
CVE-2026-11440	Vulnerability in CVE-2026-11440 (CVE-2026-11440) vulnerability in CVE-2026-11440 (CVE-2026-11440). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 285	1 month ago
CVE-2026-11439	Vulnerability in CVE-2026-11439 (CVE-2026-11439) vulnerability in CVE-2026-11439 (CVE-2026-11439). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 285	1 month ago
CVE-2026-11441	Vulnerability in CVE-2026-11441 (CVE-2026-11441) vulnerability in CVE-2026-11441 (CVE-2026-11441). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 285	1 month ago
CVE-2026-11336	Vulnerability in CVE-2026-11336 (CVE-2026-11336) vulnerability in CVE-2026-11336 (CVE-2026-11336). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 266 Cwe 285	1 month ago
CVE-2026-10876	Vulnerability in CVE-2026-10876 (CVE-2026-10876) vulnerability in CVE-2026-10876 (CVE-2026-10876). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 285	1 month ago
CVE-2025-15656	Vulnerability in privilege-escalation (CVE-2025-15656) vulnerability in privilege-escalation (CVE-2025-15656). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 266	1 month ago
CVE-2026-10693	Vulnerability in CVE-2026-10693 (CVE-2026-10693) vulnerability in CVE-2026-10693 (CVE-2026-10693). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 285	1 month ago
CVE-2025-53209	Vulnerability in privilege-escalation (CVE-2025-53209) vulnerability in privilege-escalation (CVE-2025-53209). Successful exploitation can lead to full system takeover.	Critical	Privilege Escalation Cwe 266	1 month ago
CVE-2026-10294	Vulnerability in c (CVE-2026-10294) vulnerability in c (CVE-2026-10294). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 266 Cwe 285	1 month ago

Vulnerabilities

🍪 About cookies