Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-266 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-12799	Vulnerability in litellm (CVE-2026-12799) vulnerability in litellm (CVE-2026-12799). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 285 LiteLLM	2 months ago
CVE-2026-12784	Vulnerability in CVE-2026-12784 (CVE-2026-12784) vulnerability in CVE-2026-12784 (CVE-2026-12784). Successful exploitation can lead to full system takeover.	High	Cwe 266 Cwe 284	2 months ago
CVE-2026-12786	Vulnerability in CVE-2026-12786 (CVE-2026-12786) vulnerability in CVE-2026-12786 (CVE-2026-12786). Successful exploitation can lead to full system takeover.	High	Cwe 266 Cwe 284	2 months ago
CVE-2026-12781	Vulnerability in CVE-2026-12781 (CVE-2026-12781) vulnerability in CVE-2026-12781 (CVE-2026-12781). Successful exploitation can lead to full system takeover.	High	Cwe 266 Cwe 284	2 months ago
CVE-2026-12782	Vulnerability in CVE-2026-12782 (CVE-2026-12782) vulnerability in CVE-2026-12782 (CVE-2026-12782). Successful exploitation can lead to full system takeover.	High	Cwe 266 Cwe 284	2 months ago
CVE-2026-12778	Vulnerability in CVE-2026-12778 (CVE-2026-12778) vulnerability in CVE-2026-12778 (CVE-2026-12778). Successful exploitation can lead to full system takeover.	High	Cwe 266 Cwe 284	2 months ago
CVE-2026-12780	Vulnerability in CVE-2026-12780 (CVE-2026-12780) vulnerability in CVE-2026-12780 (CVE-2026-12780). Successful exploitation can lead to full system takeover.	High	Cwe 266 Cwe 284	2 months ago
CVE-2026-12779	Vulnerability in CVE-2026-12779 (CVE-2026-12779) vulnerability in CVE-2026-12779 (CVE-2026-12779). Successful exploitation can lead to full system takeover.	High	Cwe 266 Cwe 284	2 months ago
CVE-2026-12771	Vulnerability in litellm (CVE-2026-12771) vulnerability in litellm (CVE-2026-12771). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 285 LiteLLM	2 months ago
CVE-2026-12770	Vulnerability in litellm (CVE-2026-12770) vulnerability in litellm (CVE-2026-12770). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 285 LiteLLM	2 months ago
CVE-2026-12529	Vulnerability in CVE-2026-12529 (CVE-2026-12529) vulnerability in CVE-2026-12529 (CVE-2026-12529). Risk of unauthorized operations or information disclosure.	High	PHP Cwe 266 Cwe 284	2 months ago
CVE-2026-54805	Subscriber Privilege Escalation in Falang multilanguage <= 1.4.2 versions. Subscriber Privilege Escalation in Falang multilanguage <= 1.4.2 versions.	High	Privilege Escalation Cwe 266	2 months ago
CVE-2026-54196	Subscriber Privilege Escalation in JetFormBuilder <= 3.6.1 versions. Subscriber Privilege Escalation in JetFormBuilder <= 3.6.1 versions.	Medium	Privilege Escalation Cwe 266	2 months ago
CVE-2026-54807	Unauthenticated Privilege Escalation in Registration Form for WooCommerce <= 1.0.9 versions. Unauthenticated Privilege Escalation in Registration Form for WooCommerce <= 1.0.9 versions.	Critical	Privilege Escalation Cwe 266	2 months ago
CVE-2026-49058	Unauthenticated Privilege Escalation in LoginPress Pro <= 6.2.2 versions. Unauthenticated Privilege Escalation in LoginPress Pro <= 6.2.2 versions.	Critical	Privilege Escalation Cwe 266	2 months ago
CVE-2026-39546	Subscriber Privilege Escalation in MultiLoca <= 4.2.15 versions. Subscriber Privilege Escalation in MultiLoca <= 4.2.15 versions.	High	Privilege Escalation Cwe 266	2 months ago
CVE-2026-27395	Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions. Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions.	Critical	Privilege Escalation Cwe 266	2 months ago
CVE-2025-69179	Unauthenticated Privilege Escalation in Support Ticket Management System <= 1.9 versions. Unauthenticated Privilege Escalation in Support Ticket Management System <= 1.9 versions.	Critical	Privilege Escalation Cwe 266	2 months ago
CVE-2025-69138	Subscriber Privilege Escalation in Genemy <= 1.6.6 versions. Subscriber Privilege Escalation in Genemy <= 1.6.6 versions.	High	Privilege Escalation Cwe 266	2 months ago
CVE-2025-59563	Subscriber Privilege Escalation in Sonaar <= 4.27.4 versions. Subscriber Privilege Escalation in Sonaar <= 4.27.4 versions.	High	Privilege Escalation Cwe 266	2 months ago
CVE-2026-53862	Privilege Escalation in openclaw (CVE-2026-53862) vulnerability in openclaw (CVE-2026-53862). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.5.12` or later.	Medium	Cwe 266 Cwe 345 Openclaw	2 months ago
CVE-2026-53847	Vulnerability in openclaw (CVE-2026-53847) vulnerability in openclaw (CVE-2026-53847). Risk of unauthorized operations or information disclosure. Exploitable via ``operator.write``. Mitigation: upgrade to `2026.5.6` or later.	Medium	Privilege Escalation Cwe 266 Openclaw	2 months ago
CVE-2026-12289	Privilege Escalation in privilege-escalation (CVE-2026-12289) vulnerability in privilege-escalation (CVE-2026-12289). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 269 Mozilla Firefox +2	2 months ago
CVE-2026-12294	Vulnerability in mozilla (CVE-2026-12294) vulnerability in mozilla (CVE-2026-12294). Successful exploitation can lead to full system takeover.	Critical	Cwe 693 Mozilla Firefox Thunderbird +1	2 months ago
CVE-2026-49780	Customer Privilege Escalation in Dokan <= 5.0.2 versions. Customer Privilege Escalation in Dokan <= 5.0.2 versions.	High	Privilege Escalation Cwe 266	2 months ago
CVE-2026-48889	Subscriber Privilege Escalation in Amelia <= 2.3 versions. Subscriber Privilege Escalation in Amelia <= 2.3 versions.	High	Privilege Escalation Cwe 266	2 months ago
CVE-2026-49063	Unauthenticated Privilege Escalation in Listdom <= 5.5.0 versions. Unauthenticated Privilege Escalation in Listdom <= 5.5.0 versions.	High	Privilege Escalation Cwe 266	2 months ago
CVE-2026-49083	Contributor Privilege Escalation in LatePoint <= 5.5.1 versions. Contributor Privilege Escalation in LatePoint <= 5.5.1 versions.	High	Privilege Escalation Cwe 266	2 months ago
CVE-2026-39587	Unauthenticated Privilege Escalation in WP BASE Booking <= 5.9.0 versions. Unauthenticated Privilege Escalation in WP BASE Booking <= 5.9.0 versions.	High	Privilege Escalation Cwe 266	2 months ago
CVE-2026-39579	Contributor Privilege Escalation in B Blocks <= 2.0.31 versions. Contributor Privilege Escalation in B Blocks <= 2.0.31 versions.	High	Privilege Escalation Cwe 266	2 months ago
CVE-2026-39583	Unauthenticated Privilege Escalation in Datalogics Ecommerce Delivery <= 2.6.62 versions. Unauthenticated Privilege Escalation in Datalogics Ecommerce Delivery <= 2.6.62 versions.	Critical	Privilege Escalation Cwe 266	2 months ago
CVE-2026-39470	Shop manager Privilege Escalation in WooCommerce Cart Abandonment Recovery < 2.1.0 versions. Shop manager Privilege Escalation in WooCommerce Cart Abandonment Recovery < 2.1.0 versions.	High	Privilege Escalation Cwe 266	2 months ago
CVE-2026-27407	Editor Privilege Escalation in AI Engine <= 3.4.9 versions. Editor Privilege Escalation in AI Engine <= 3.4.9 versions.	High	Privilege Escalation Cwe 266	2 months ago
CVE-2026-34901	Unauthenticated Privilege Escalation in iControlWP <= 5.5.3 versions. Unauthenticated Privilege Escalation in iControlWP <= 5.5.3 versions.	Critical	Privilege Escalation Cwe 266	2 months ago
CVE-2026-49111	Vulnerability in privilege-escalation (CVE-2026-49111) vulnerability in privilege-escalation (CVE-2026-49111). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 266	2 months ago
CVE-2026-12217	Vulnerability in CVE-2026-12217 (CVE-2026-12217) vulnerability in CVE-2026-12217 (CVE-2026-12217). Successful exploitation can lead to full system takeover.	High	Cwe 266 Cwe 269	2 months ago
CVE-2026-12212	Vulnerability in CVE-2026-12212 (CVE-2026-12212) vulnerability in CVE-2026-12212 (CVE-2026-12212). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 284	2 months ago
CVE-2026-12213	Vulnerability in CVE-2026-12213 (CVE-2026-12213) vulnerability in CVE-2026-12213 (CVE-2026-12213). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 285	2 months ago
CVE-2026-12201	Vulnerability in CVE-2026-12201 (CVE-2026-12201) vulnerability in CVE-2026-12201 (CVE-2026-12201). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 275	2 months ago
CVE-2026-44173	Authorization Flaw in mariadb (CVE-2026-44173) vulnerability in mariadb (CVE-2026-44173). Risk of unauthorized operations or information disclosure.	Medium	Cwe 863 MariaDB Cwe 266	2 months ago
CVE-2026-45830	Vulnerability in chromadb (CVE-2026-45830) vulnerability in chromadb (CVE-2026-45830). Successful exploitation can lead to full system takeover.	High	Python Cwe 639 Trychroma Chromadb +1	2 months ago
CVE-2026-49060	Vulnerability in privilege-escalation (CVE-2026-49060) vulnerability in privilege-escalation (CVE-2026-49060). Successful exploitation can lead to full system takeover.	Critical	Privilege Escalation Cwe 266	2 months ago
CVE-2026-53814	Information Disclosure in openclaw (CVE-2026-53814) vulnerability in openclaw (CVE-2026-53814). Confidential information can be exposed externally. Mitigation: upgrade to `2026.5.20` or later.	High	Privilege Escalation Cwe 266 Openclaw	2 months ago
CVE-2026-47169	Vulnerability in c (CVE-2026-47169) vulnerability in c (CVE-2026-47169). Risk of unauthorized operations or information disclosure.		C Cwe 266	2 months ago
CVE-2026-45490	.NET SDK Elevation of Privilege Vulnerability .NET SDK Elevation of Privilege Vulnerability	High	C# Cwe 285 Cwe 863 Microsoft +3	2 months ago
CVE-2025-10263	Vulnerability in jvn (CVE-2025-10263) vulnerability in jvn (CVE-2025-10263). Confidential information can be exposed externally.	Critical	Cwe 362 Cwe 266 Jvn Japan +1	2 months ago
CVE-2026-11620	Vulnerability in CVE-2026-11620 (CVE-2026-11620) vulnerability in CVE-2026-11620 (CVE-2026-11620). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 272	2 months ago
CVE-2026-11619	Vulnerability in CVE-2026-11619 (CVE-2026-11619) vulnerability in CVE-2026-11619 (CVE-2026-11619). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 266 Cwe 285	2 months ago
CVE-2026-11554	Vulnerability in CVE-2026-11554 (CVE-2026-11554) vulnerability in CVE-2026-11554 (CVE-2026-11554). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 272	2 months ago
CVE-2026-11555	Vulnerability in dlink (CVE-2026-11555) vulnerability in dlink (CVE-2026-11555). Risk of unauthorized operations or information disclosure.	Low	Cwe 266 Cwe 272 Dlink Dgs 1100 08Pd Firmware +1	2 months ago

Vulnerabilities

🍪 About cookies