Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-74242 |
|
Vulnerability in redhat (CVE-2026-74242)
vulnerability in redhat (CVE-2026-74242). Confidential information can be exposed externally.
|
| CVE-2026-19838 |
|
Vulnerability in CVE-2026-19838 (CVE-2026-19838)
vulnerability in CVE-2026-19838 (CVE-2026-19838). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19836 |
|
Vulnerability in CVE-2026-19836 (CVE-2026-19836)
vulnerability in CVE-2026-19836 (CVE-2026-19836). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19834 |
|
Vulnerability in CVE-2026-19834 (CVE-2026-19834)
vulnerability in CVE-2026-19834 (CVE-2026-19834). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19870 |
|
Vulnerability in CVE-2026-19870 (CVE-2026-19870)
vulnerability in CVE-2026-19870 (CVE-2026-19870). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19784 |
|
Vulnerability in CVE-2026-19784 (CVE-2026-19784)
vulnerability in CVE-2026-19784 (CVE-2026-19784). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73841 |
|
Vulnerability in CVE-2026-73841 (CVE-2026-73841)
vulnerability in CVE-2026-73841 (CVE-2026-73841). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.2.0` or later.
|
| CVE-2026-73657 |
|
Path Traversal in CVE-2026-73657 (CVE-2026-73657)
path traversal in CVE-2026-73657 (CVE-2026-73657). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/runs/`.
|
| CVE-2026-73039 |
|
Vulnerability in CVE-2026-73039 (CVE-2026-73039)
vulnerability in CVE-2026-73039 (CVE-2026-73039). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73656 |
|
Vulnerability in CVE-2026-73656 (CVE-2026-73656)
vulnerability in CVE-2026-73656 (CVE-2026-73656). Data can be tampered with by attackers. Exploitable via `POST /api/v1/deployments/`.
|
| CVE-2026-72680 |
|
Vulnerability in CVE-2026-72680 (CVE-2026-72680)
vulnerability in CVE-2026-72680 (CVE-2026-72680). Data can be tampered with by attackers.
|
| CVE-2026-72666 |
|
Vulnerability in CVE-2026-72666 (CVE-2026-72666)
vulnerability in CVE-2026-72666 (CVE-2026-72666). Confidential information can be exposed externally.
|
| CVE-2026-72657 |
|
Vulnerability in CVE-2026-72657 (CVE-2026-72657)
vulnerability in CVE-2026-72657 (CVE-2026-72657). Confidential information can be exposed externally.
|
| CVE-2026-72650 |
|
Vulnerability in CVE-2026-72650 (CVE-2026-72650)
vulnerability in CVE-2026-72650 (CVE-2026-72650). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72629 |
|
Vulnerability in CVE-2026-72629 (CVE-2026-72629)
vulnerability in CVE-2026-72629 (CVE-2026-72629). Confidential information can be exposed externally.
|
| CVE-2026-72741 |
|
Vulnerability in CVE-2026-72741 (CVE-2026-72741)
vulnerability in CVE-2026-72741 (CVE-2026-72741). Confidential information can be exposed externally.
|
| CVE-2026-19734 |
|
Vulnerability in CVE-2026-19734 (CVE-2026-19734)
vulnerability in CVE-2026-19734 (CVE-2026-19734). Risk of unauthorized operations or information disclosure. Exploitable via ``ProductUpdateController``.
|
| CVE-2026-28155 |
|
Unauthenticated Insecure Direct Object References (IDOR) in Do Lasso <= 358 versions.
Unauthenticated Insecure Direct Object References (IDOR) in Do Lasso <= 358 versions.
|
| CVE-2026-73616 |
|
Vulnerability in CVE-2026-73616 (CVE-2026-73616)
vulnerability in CVE-2026-73616 (CVE-2026-73616). Data can be tampered with by attackers.
|
| CVE-2026-73612 |
|
Vulnerability in CVE-2026-73612 (CVE-2026-73612)
vulnerability in CVE-2026-73612 (CVE-2026-73612). Confidential information can be exposed externally.
|
| CVE-2026-73606 |
|
Vulnerability in CVE-2026-73606 (CVE-2026-73606)
vulnerability in CVE-2026-73606 (CVE-2026-73606). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73610 |
|
Vulnerability in CVE-2026-73610 (CVE-2026-73610)
vulnerability in CVE-2026-73610 (CVE-2026-73610). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73488 |
|
Vulnerability in CVE-2026-73488 (CVE-2026-73488)
vulnerability in CVE-2026-73488 (CVE-2026-73488). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v1/organization/customer-default-source`.
|
| CVE-2026-18945 |
|
Vulnerability in wordpress (CVE-2026-18945)
vulnerability in wordpress (CVE-2026-18945). Data can be tampered with by attackers.
|
| CVE-2026-14213 |
|
Vulnerability in wordpress (CVE-2026-14213)
vulnerability in wordpress (CVE-2026-14213). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18750 |
|
Vulnerability in CVE-2026-18750 (CVE-2026-18750)
vulnerability in CVE-2026-18750 (CVE-2026-18750). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18749 |
|
Vulnerability in CVE-2026-18749 (CVE-2026-18749)
vulnerability in CVE-2026-18749 (CVE-2026-18749). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18744 |
|
Vulnerability in CVE-2026-18744 (CVE-2026-18744)
vulnerability in CVE-2026-18744 (CVE-2026-18744). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19130 |
|
Vulnerability in CVE-2026-19130 (CVE-2026-19130)
vulnerability in CVE-2026-19130 (CVE-2026-19130). Confidential information can be exposed externally. Exploitable via ``copiedFrom``.
|
| CVE-2026-72802 |
|
Vulnerability in c (CVE-2026-72802)
vulnerability in c (CVE-2026-72802). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19228 |
|
Vulnerability in gitlab (CVE-2026-19228)
vulnerability in gitlab (CVE-2026-19228). Data can be tampered with by attackers.
|
| CVE-2026-73239 |
|
Vulnerability in apache (CVE-2026-73239)
vulnerability in apache (CVE-2026-73239). Confidential information can be exposed externally.
|
| CVE-2026-73298 |
|
Vulnerability in CVE-2026-73298 (CVE-2026-73298)
vulnerability in CVE-2026-73298 (CVE-2026-73298). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68076 |
|
Vulnerability in apache (CVE-2026-68076)
vulnerability in apache (CVE-2026-68076). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v2/connections/test`.
|
| CVE-2026-18962 |
|
Vulnerability in wordpress (CVE-2026-18962)
vulnerability in wordpress (CVE-2026-18962). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16737 |
|
Vulnerability in wordpress (CVE-2026-16737)
vulnerability in wordpress (CVE-2026-16737). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14858 |
|
Vulnerability in wordpress (CVE-2026-14858)
vulnerability in wordpress (CVE-2026-14858). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14857 |
|
Vulnerability in wordpress (CVE-2026-14857)
vulnerability in wordpress (CVE-2026-14857). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13177 |
|
Vulnerability in wordpress (CVE-2026-13177)
vulnerability in wordpress (CVE-2026-13177). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13612 |
|
Vulnerability in wordpress (CVE-2026-13612)
vulnerability in wordpress (CVE-2026-13612). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66878 |
|
Vulnerability in CVE-2026-66878 (CVE-2026-66878)
vulnerability in CVE-2026-66878 (CVE-2026-66878). Confidential information can be exposed externally.
|
| CVE-2026-64927 |
|
Vulnerability in CVE-2026-64927 (CVE-2026-64927)
vulnerability in CVE-2026-64927 (CVE-2026-64927). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19579 |
|
Vulnerability in snipeitapp (CVE-2026-19579)
vulnerability in snipeitapp (CVE-2026-19579). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48765 |
|
Vulnerability in CVE-2026-48765 (CVE-2026-48765)
vulnerability in CVE-2026-48765 (CVE-2026-48765). Confidential information can be exposed externally. Exploitable via ``credentialsId``.
|
| CVE-2026-69119 |
|
Vulnerability in CVE-2026-69119 (CVE-2026-69119)
vulnerability in CVE-2026-69119 (CVE-2026-69119). Data can be tampered with by attackers. Exploitable via `DELETE /projects/{id}`.
|
| CVE-2026-69117 |
|
Vulnerability in django (CVE-2026-69117)
vulnerability in django (CVE-2026-69117). Confidential information can be exposed externally.
|
| CVE-2026-58650 |
|
Vulnerability in microsoft (CVE-2026-58650)
vulnerability in microsoft (CVE-2026-58650). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48494 |
|
Vulnerability in CVE-2026-48494 (CVE-2026-48494)
vulnerability in CVE-2026-48494 (CVE-2026-48494). Risk of unauthorized operations or information disclosure. Exploitable via ``typebotId``.
|
| CVE-2026-47704 |
|
Vulnerability in CVE-2026-47704 (CVE-2026-47704)
vulnerability in CVE-2026-47704 (CVE-2026-47704). Risk of unauthorized operations or information disclosure. Exploitable via ``typebotId``.
|
| CVE-2026-73068 |
|
Vulnerability in CVE-2026-73068 (CVE-2026-73068)
vulnerability in CVE-2026-73068 (CVE-2026-73068). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/tooljet-db/organizations/`.
|