Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-3872 |
|
Open Redirect in redhat (CVE-2026-3872)
vulnerability in redhat (CVE-2026-3872). Confidential information can be exposed externally.
|
| CVE-2026-35092 |
|
Vulnerability in dos (CVE-2026-35092)
vulnerability in dos (CVE-2026-35092). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35091 |
|
Vulnerability in dos (CVE-2026-35091)
vulnerability in dos (CVE-2026-35091). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5201 |
|
Vulnerability in dos (CVE-2026-5201)
vulnerability in dos (CVE-2026-5201). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-21710 |
|
Vulnerability in node (CVE-2026-21710)
vulnerability in node (CVE-2026-21710). Risk of unauthorized operations or information disclosure. Exploitable via ``TypeError``. Mitigation: upgrade to `20.20.2, 22.22.2, 24.14.1, 25.8.2` or later.
|
| CVE-2026-5119 |
|
Vulnerability in gnome (CVE-2026-5119)
vulnerability in gnome (CVE-2026-5119). Confidential information can be exposed externally.
|
| CVE-2026-5121 |
|
Vulnerability in libarchive (CVE-2026-5121)
vulnerability in libarchive (CVE-2026-5121). Confidential information can be exposed externally.
|
| CVE-2026-28369 |
|
Vulnerability in io.undertow:undertow-parent (CVE-2026-28369)
vulnerability in io.undertow:undertow-parent (CVE-2026-28369). Confidential information can be exposed externally.
|
| CVE-2026-28368 |
|
Vulnerability in io.undertow:undertow-parent (CVE-2026-28368)
vulnerability in io.undertow:undertow-parent (CVE-2026-28368). Confidential information can be exposed externally.
|
| CVE-2026-28367 |
|
Vulnerability in io.undertow:undertow-parent (CVE-2026-28367)
vulnerability in io.undertow:undertow-parent (CVE-2026-28367). Confidential information can be exposed externally.
|
| CVE-2026-4948 |
|
Vulnerability in firewalld (CVE-2026-4948)
vulnerability in firewalld (CVE-2026-4948). Data can be tampered with by attackers.
|
| CVE-2026-2100 |
|
Vulnerability in dos (CVE-2026-2100)
vulnerability in dos (CVE-2026-2100). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-0968 |
|
Vulnerability in dos (CVE-2026-0968)
vulnerability in dos (CVE-2026-0968). Risk of unauthorized operations or information disclosure. Exploitable via ``SSH_FXP_NAME``.
|
| CVE-2026-0966 |
|
Vulnerability in dos (CVE-2026-0966)
vulnerability in dos (CVE-2026-0966). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-0967 |
|
Vulnerability in dos (CVE-2026-0967)
vulnerability in dos (CVE-2026-0967). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-0965 |
|
Vulnerability in dos (CVE-2026-0965)
vulnerability in dos (CVE-2026-0965). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-0964 |
|
Path Traversal in libssh (CVE-2026-0964)
path traversal in libssh (CVE-2026-0964). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4887 |
|
Vulnerability in dos (CVE-2026-4887)
vulnerability in dos (CVE-2026-4887). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4897 |
|
Vulnerability in dos (CVE-2026-4897)
vulnerability in dos (CVE-2026-4897). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4874 |
|
SSRF (Server-Side Request Forgery) in org.keycloak:keycloak-services (CVE-2026-4874)
SSRF in org.keycloak:keycloak-services (CVE-2026-4874). Risk of unauthorized operations or information disclosure. Exploitable via ``client_session_host``. Mitigation: upgrade to `26.4.13` or later.
|
| CVE-2026-4775 |
|
Vulnerability in dos (CVE-2026-4775)
vulnerability in dos (CVE-2026-4775). Successful exploitation can lead to full system takeover.
|
| CVE-2026-4647 |
|
Out-of-Bounds Read in gnu (CVE-2026-4647)
vulnerability in gnu (CVE-2026-4647). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-31277 KEV |
|
[KEV] Buffer Overflow in Apple multiple-products (CVE-2025-31277)
vulnerability in Apple multiple-products (CVE-2025-31277). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-4426 |
|
Vulnerability in dos (CVE-2026-4426)
vulnerability in dos (CVE-2026-4426). Risk of unauthorized operations or information disclosure. Exploitable via ``pz_log2_bs``.
|
| CVE-2026-4424 |
|
Out-of-Bounds Read in libarchive (CVE-2026-4424)
vulnerability in libarchive (CVE-2026-4424). Confidential information can be exposed externally.
|
| CVE-2026-4366 |
|
SSRF (Server-Side Request Forgery) in redhat (CVE-2026-4366)
SSRF in redhat (CVE-2026-4366). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2575 |
|
Vulnerability in dos (CVE-2026-2575)
vulnerability in dos (CVE-2026-2575). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2603 |
|
Vulnerability in org.keycloak:keycloak-services (CVE-2026-2603)
vulnerability in org.keycloak:keycloak-services (CVE-2026-2603). Confidential information can be exposed externally. Mitigation: upgrade to `26.5.5` or later.
|
| CVE-2026-2092 |
|
Vulnerability in org.keycloak:keycloak-services (CVE-2026-2092)
vulnerability in org.keycloak:keycloak-services (CVE-2026-2092). Confidential information can be exposed externally. Mitigation: upgrade to `26.4.10` or later.
|
| CVE-2026-4271 |
|
Use-After-Free in dos (CVE-2026-4271)
vulnerability in dos (CVE-2026-4271). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3442 |
|
Out-of-Bounds Read in dos (CVE-2026-3442)
vulnerability in dos (CVE-2026-3442). Confidential information can be exposed externally.
|
| CVE-2026-3441 |
|
Out-of-Bounds Read in dos (CVE-2026-3441)
vulnerability in dos (CVE-2026-3441). Confidential information can be exposed externally.
|
| CVE-2025-8766 |
|
Vulnerability in privilege-escalation (CVE-2025-8766)
vulnerability in privilege-escalation (CVE-2025-8766). Successful exploitation can lead to full system takeover.
|
| CVE-2025-57849 |
|
Vulnerability in privilege-escalation (CVE-2025-57849)
vulnerability in privilege-escalation (CVE-2025-57849). Successful exploitation can lead to full system takeover.
|
| CVE-2026-3497 |
|
Vulnerability in canonical (CVE-2026-3497)
vulnerability in canonical (CVE-2026-3497). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2376 |
|
Open Redirect in redhat (CVE-2026-2376)
vulnerability in redhat (CVE-2026-2376). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2366 |
|
Vulnerability in redhat (CVE-2026-2366)
vulnerability in redhat (CVE-2026-2366). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3429 |
|
Vulnerability in redhat (CVE-2026-3429)
vulnerability in redhat (CVE-2026-3429). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3047 |
|
Vulnerability in redhat (CVE-2026-3047)
vulnerability in redhat (CVE-2026-3047). Successful exploitation can lead to full system takeover.
|
| CVE-2026-3009 |
|
Authorization Flaw in redhat (CVE-2026-3009)
vulnerability in redhat (CVE-2026-3009). Confidential information can be exposed externally.
|
| CVE-2025-12801 |
|
Vulnerability in redhat (CVE-2025-12801)
vulnerability in redhat (CVE-2025-12801). Confidential information can be exposed externally.
|
| CVE-2025-12150 |
|
Vulnerability in redhat (CVE-2025-12150)
vulnerability in redhat (CVE-2025-12150). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-26103 |
|
Vulnerability in redhat (CVE-2026-26103)
vulnerability in redhat (CVE-2026-26103). Data can be tampered with by attackers.
|
| CVE-2026-1709 |
|
Vulnerability in keylime (CVE-2026-1709)
vulnerability in keylime (CVE-2026-1709). Data can be tampered with by attackers. Mitigation: upgrade to `7.12.0` or later.
|
| CVE-2026-0992 |
|
Vulnerability in redhat (CVE-2026-0992)
vulnerability in redhat (CVE-2026-0992). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-0989 |
|
Vulnerability in xmlsoft (CVE-2026-0989)
vulnerability in xmlsoft (CVE-2026-0989). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-0990 |
|
Vulnerability in dos (CVE-2026-0990)
vulnerability in dos (CVE-2026-0990). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-12543 |
|
Vulnerability in redhat (CVE-2025-12543)
vulnerability in redhat (CVE-2025-12543). Confidential information can be exposed externally. Exploitable via `Host header`.
|
| CVE-2025-14512 |
|
Vulnerability in dos (CVE-2025-14512)
vulnerability in dos (CVE-2025-14512). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-14087 |
|
Vulnerability in dos (CVE-2025-14087)
vulnerability in dos (CVE-2025-14087). Risk of unauthorized operations or information disclosure.
|