Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-862 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-56341	Information Disclosure in wwbn/avideo (CVE-2026-56341) vulnerability in wwbn/avideo (CVE-2026-56341). Confidential information can be exposed externally. Exploitable via ``index.php``.	High	PHP C# Cwe 862	2 months ago
CVE-2026-12119	Vulnerability in wordpress (CVE-2026-12119) vulnerability in wordpress (CVE-2026-12119). Data can be tampered with by attackers.	Medium	PHP WordPress Cwe 862	2 months ago
CVE-2026-11912	Vulnerability in wordpress (CVE-2026-11912) vulnerability in wordpress (CVE-2026-11912). Data can be tampered with by attackers.	High	WordPress Cwe 862	2 months ago
CVE-2026-56213	Vulnerability in CVE-2026-56213 (CVE-2026-56213) vulnerability in CVE-2026-56213 (CVE-2026-56213). Risk of unauthorized operations or information disclosure.	Medium	Cwe 862	2 months ago
CVE-2026-48582	Vulnerability in microsoft (CVE-2026-48582) vulnerability in microsoft (CVE-2026-48582). Confidential information can be exposed externally.	Critical	Cwe 862 Microsoft Exchange Online	2 months ago
CVE-2026-12238	Vulnerability in wordpress (CVE-2026-12238) vulnerability in wordpress (CVE-2026-12238). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 862	2 months ago
CVE-2026-49288	Information Disclosure in statamic/cms (CVE-2026-49288) vulnerability in statamic/cms (CVE-2026-49288). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.73.23` or later.	Medium	Laravel Cwe 200 Cwe 862 Cwe 863	2 months ago
CVE-2026-49291	Vulnerability in mcp-memory-service (CVE-2026-49291) vulnerability in mcp-memory-service (CVE-2026-49291). Data can be tampered with by attackers. Exploitable via `POST /api/memories`. Mitigation: upgrade to `10.65.3` or later.	High	Cwe 862	2 months ago
CVE-2026-49357	Vulnerability in line-desktop-mcp (CVE-2026-49357) vulnerability in line-desktop-mcp (CVE-2026-49357). Risk of unauthorized operations or information disclosure. Exploitable via ``fbed0d2d3048e63f48a356a1267ed8ec5e78f3ae``. Mitigation: upgrade to `1.1.2` or later.		Cwe 306 Cwe 862	2 months ago
CVE-2026-6798	Vulnerability in wordpress (CVE-2026-6798) vulnerability in wordpress (CVE-2026-6798). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 862	2 months ago
CVE-2026-3640	Vulnerability in wordpress (CVE-2026-3640) vulnerability in wordpress (CVE-2026-3640). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 862	2 months ago
CVE-2026-9013	Vulnerability in wordpress (CVE-2026-9013) vulnerability in wordpress (CVE-2026-9013). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 862	2 months ago
CVE-2026-10779	Vulnerability in wordpress (CVE-2026-10779) vulnerability in wordpress (CVE-2026-10779). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 862	2 months ago
CVE-2026-10034	Vulnerability in wordpress (CVE-2026-10034) vulnerability in wordpress (CVE-2026-10034). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cross-Site Request Forgery Cwe 862	2 months ago
CVE-2026-52866	Vulnerability in CVE-2026-52866 (CVE-2026-52866) vulnerability in CVE-2026-52866 (CVE-2026-52866). Risk of unauthorized operations or information disclosure.	Medium	Cwe 862	2 months ago
CVE-2026-49205	Vulnerability in thorsten/phpmyfaq (CVE-2026-49205) vulnerability in thorsten/phpmyfaq (CVE-2026-49205). Confidential information can be exposed externally. Exploitable via `POST /api/v4.0/category`. Mitigation: upgrade to `4.1.4` or later.	Medium	Cwe 862	2 months ago
CVE-2026-57494	Vulnerability in @agenticmail/api (CVE-2026-57494) vulnerability in @agenticmail/api (CVE-2026-57494). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/agenticmail/tasks/pending`. Mitigation: upgrade to `0.9.64` or later.		Cwe 639 Cwe 862	2 months ago
CVE-2026-11719	Vulnerability in github.com/googleapis/mcp-toolbox (CVE-2026-11719) vulnerability in github.com/googleapis/mcp-toolbox (CVE-2026-11719). Confidential information can be exposed externally. Mitigation: upgrade to `1.4.0` or later.	High	Cwe 862 Google Mcp Toolbox For Databases	2 months ago
CVE-2026-54695	Vulnerability in pipecat-ai (CVE-2026-54695) vulnerability in pipecat-ai (CVE-2026-54695). Risk of unauthorized operations or information disclosure. Exploitable via `POST /start`. Mitigation: upgrade to `1.4.0` or later.	High	Python Cwe 862 Pipecat	2 months ago
CVE-2026-54005	Vulnerability in getkirby/cms (CVE-2026-54005) vulnerability in getkirby/cms (CVE-2026-54005). Risk of unauthorized operations or information disclosure. Exploitable via ``pages.access``. Mitigation: upgrade to `5.4.4` or later.		Cwe 862	2 months ago
CVE-2026-54004	Vulnerability in getkirby/cms (CVE-2026-54004) vulnerability in getkirby/cms (CVE-2026-54004). Risk of unauthorized operations or information disclosure. Exploitable via ``content.fileRedirects``. Mitigation: upgrade to `5.4.4` or later.		Cwe 862	2 months ago
CVE-2026-49274	Vulnerability in getkirby/cms (CVE-2026-49274) vulnerability in getkirby/cms (CVE-2026-49274). Risk of unauthorized operations or information disclosure. Exploitable via ``pages``. Mitigation: upgrade to `5.4.4` or later.		Cwe 862	2 months ago
CVE-2026-28573	Vulnerability in dos (CVE-2026-28573) vulnerability in dos (CVE-2026-28573). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Google Android Samsung +2	2 months ago
CVE-2026-12093	Vulnerability in wordpress (CVE-2026-12093) vulnerability in wordpress (CVE-2026-12093). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 862	2 months ago
CVE-2026-9199	Vulnerability in wordpress (CVE-2026-9199) vulnerability in wordpress (CVE-2026-9199). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 862	2 months ago
CVE-2026-10029	Vulnerability in wordpress (CVE-2026-10029) vulnerability in wordpress (CVE-2026-10029). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 862	2 months ago
CVE-2026-12407	Vulnerability in wordpress (CVE-2026-12407) vulnerability in wordpress (CVE-2026-12407). Successful exploitation can lead to full system takeover.	High	WordPress Cwe 862	2 months ago
CVE-2026-55518	Vulnerability in avo (CVE-2026-55518) vulnerability in avo (CVE-2026-55518). Confidential information can be exposed externally. Exploitable via `GET /resources/`. Mitigation: upgrade to `4.0.0.beta.51` or later.	Critical	Ruby Ruby on Rails Privilege Escalation Cwe 639 +2	2 months ago
CVE-2026-12515	Vulnerability in katello (CVE-2026-12515) vulnerability in katello (CVE-2026-12515). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.21.0.rc1` or later.	Medium	Cwe 862	2 months ago
CVE-2026-54810	Vulnerability in CVE-2026-54810 (CVE-2026-54810) vulnerability in CVE-2026-54810 (CVE-2026-54810). Risk of unauthorized operations or information disclosure.	High	Cwe 862	2 months ago
CVE-2026-54415	Privilege Escalation in CVE-2026-54415 (CVE-2026-54415) vulnerability in CVE-2026-54415 (CVE-2026-54415). Confidential information can be exposed externally.	High	PHP Cwe 269 Cwe 862	2 months ago
CVE-2025-69189	Vulnerability in CVE-2025-69189 (CVE-2025-69189) vulnerability in CVE-2025-69189 (CVE-2025-69189). Risk of unauthorized operations or information disclosure.	High	Cwe 862	2 months ago
CVE-2026-8383	Vulnerability in wordpress (CVE-2026-8383) vulnerability in wordpress (CVE-2026-8383). Risk of unauthorized operations or information disclosure. Exploitable via ``edit``.	Medium	WordPress Cwe 862	2 months ago
CVE-2026-54802	Unauthenticated Broken Authentication in SMS Alert Order Notifications <= 3.9.3 versions. Unauthenticated Broken Authentication in SMS Alert Order Notifications <= 3.9.3 versions.	High	Cwe 862	2 months ago
CVE-2026-45436	Subscriber Broken Access Control in WPBakery Page Builder <= 8.7.2 versions. Subscriber Broken Access Control in WPBakery Page Builder <= 8.7.2 versions.	Medium	Cwe 862	2 months ago
CVE-2026-49057	Unauthenticated Broken Access Control in JobSearch <= 3.2.7 versions. Unauthenticated Broken Access Control in JobSearch <= 3.2.7 versions.	High	Cwe 862	2 months ago
CVE-2026-49072	Unauthenticated Broken Access Control in WooCommerce Anti-Fraud <= 7.2.6 versions. Unauthenticated Broken Access Control in WooCommerce Anti-Fraud <= 7.2.6 versions.	Medium	Cwe 862	2 months ago
CVE-2026-49081	Unauthenticated Broken Access Control in User Registration Stripe <= 1.3.12 versions. Unauthenticated Broken Access Control in User Registration Stripe <= 1.3.12 versions.	High	Cwe 862	2 months ago
CVE-2026-40726	Unauthenticated Broken Access Control in User Registration Stripe <= 1.3.14 versions. Unauthenticated Broken Access Control in User Registration Stripe <= 1.3.14 versions.	High	Cwe 862	2 months ago
CVE-2026-39595	Author Broken Access Control in W3 Total Cache <= 2.9.1 versions. Author Broken Access Control in W3 Total Cache <= 2.9.1 versions.	Medium	Cwe 862	2 months ago
CVE-2026-40722	Vulnerability in CVE-2026-40722 (CVE-2026-40722) vulnerability in CVE-2026-40722 (CVE-2026-40722). Risk of unauthorized operations or information disclosure.	Medium	Cwe 862	2 months ago
CVE-2026-40723	Subscriber Broken Access Control in Bricks Builder <= 2.1.4 versions. Subscriber Broken Access Control in Bricks Builder <= 2.1.4 versions.	Medium	Cwe 862	2 months ago
CVE-2026-28587	Vulnerability in google (CVE-2026-28587) vulnerability in google (CVE-2026-28587). Confidential information can be exposed externally.	Medium	Java Cwe 862 Google Android	2 months ago
CVE-2026-28615	Vulnerability in google (CVE-2026-28615) vulnerability in google (CVE-2026-28615). Successful exploitation can lead to full system takeover.	High	Cwe 862 Google Android	2 months ago
CVE-2026-39433	Subscriber Arbitrary Content Deletion in WPAMS < 49.5.3 versions. Subscriber Arbitrary Content Deletion in WPAMS < 49.5.3 versions.	Medium	Cwe 862	2 months ago
CVE-2026-22343	Unauthenticated Broken Access Control in WordPress Dating Theme <= 11.2.0 versions. Unauthenticated Broken Access Control in WordPress Dating Theme <= 11.2.0 versions.	High	WordPress Cwe 862	2 months ago
CVE-2026-24610	Subscriber Broken Access Control in MetForm Pro <= 3.9.1 versions. Subscriber Broken Access Control in MetForm Pro <= 3.9.1 versions.	Medium	Cwe 862	2 months ago
CVE-2026-24611	Unauthenticated Broken Access Control in MetForm Pro <= 3.9.1 versions. Unauthenticated Broken Access Control in MetForm Pro <= 3.9.1 versions.	Critical	Cwe 862	2 months ago
CVE-2026-24575	Subscriber Broken Access Control in WishList Member X <= 3.29.0 versions. Subscriber Broken Access Control in WishList Member X <= 3.29.0 versions.	Medium	Cwe 862	2 months ago
CVE-2026-0081	Vulnerability in google (CVE-2026-0081) vulnerability in google (CVE-2026-0081). Successful exploitation can lead to full system takeover.	High	Cwe 862 Google Android	2 months ago

Vulnerabilities

🍪 About cookies