Security advisories — page 10

• CVE-2026-104873highCVE-2026-104873 updated by NVD
• CVE-2026-86472mediumCVE-2026-86472 updated by NVD
• CVE-2026-86818mediumCVE-2026-86818 updated by NVD
• CVE-2026-88976mediumCVE-2026-88976 updated by NVD
• CVE-2026-78682highCVE-2026-78682 updated by NVD
• CVE-2026-55784highCVE-2026-55784 updated by NVD
• CVE-2026-13505highCVE-2026-13505 updated by NVD
• CVE-2026-71847highCVE-2026-71847 updated by NVD
• CVE-2026-71313mediumCVE-2026-71313 updated by NVD
• CVE-2026-10051mediumCVE-2026-10051 updated by NVD
• CVE-2026-57282mediumCVE-2026-57282 updated by NVD
• CVE-2026-53475criticalAssisted Migration Agent: Hardcoded insecure Transport Layer Security (TLS) connections during vCenter communi
• CVE-2026-11466lowCVE-2026-11466 updated by NVD
• CVE-2026-25160criticalAlist has Insecure TLS Config
• CVE-2026-0767mediumWithdrawn Advisory: Open WebUI/ZDI-CAN-28259
• CVE-2025-71354highCVE-2025-71354 updated by NVD
• CVE-2026-116687lowCVE-2026-116687 updated by NVD
• CVE-2026-114609mediumCVE-2026-114609 updated by NVD
• CVE-2026-104266mediumCVE-2026-104266 updated by NVD
• CVE-2026-108259highCVE-2026-108259 updated by NVD
• CVE-2026-105848mediumCVE-2026-105848 updated by NVD
• CVE-2026-105806highCVE-2026-105806 updated by NVD
• CVE-2026-105847highCVE-2026-105847 updated by NVD
• CVE-2026-58191mediumAppium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig* routes
• CVE-2026-55534highCVE-2026-55534 updated by NVD
• CVE-2026-68508highCVE-2026-68508 updated by NVD
• CVE-2026-47132mediumCVE-2026-47132 updated by NVD
• CVE-2026-67439mediumCVE-2026-67439 updated by NVD
• CVE-2024-7708highCVE-2024-7708 updated by NVD
• CVE-2026-67354highCVE-2026-67354 updated by NVD
• CVE-2026-6634lowCVE-2026-6634 updated by NVD
• CVE-2026-109841mediumCVE-2026-109841 updated by NVD
• CVE-2026-112957mediumCVE-2026-112957 updated by NVD
• CVE-2026-105642highCVE-2026-105642 updated by NVD
• CVE-2026-106504mediumCVE-2026-106504 updated by NVD
• CVE-2026-101915lowCVE-2026-101915 updated by NVD
• CVE-2026-101914mediumCVE-2026-101914 updated by NVD
• CVE-2026-59163criticalCVE-2026-59163 updated by NVD
• CVE-2026-55547mediumCVE-2026-55547 updated by NVD
• CVE-2026-48786mediumCVE-2026-48786 updated by NVD
• CVE-2026-64664mediumCVE-2026-64664 updated by NVD
• CVE-2026-73301mediumCVE-2026-73301 updated by NVD
• CVE-2026-9029highCVE-2026-9029 updated by NVD
• CVE-2026-42597mediumGotenberg allows Chromium URL conversion routes to read arbitrary files under /tmp via file:// scheme
• CVE-2026-56381mediumCVE-2026-56381 updated by NVD
• CVE-2026-103004mediumCVE-2026-103004 updated by NVD
• CVE-2026-72811criticalCVE-2026-72811 updated by NVD
• CVE-2026-71428criticalCVE-2026-71428 updated by NVD
• CVE-2026-81892highCVE-2026-81892 updated by NVD
• CVE-2026-70487mediumCVE-2026-70487 updated by NVD
• CVE-2026-50558mediumCVE-2026-50558 updated by NVD
• CVE-2026-57299mediumCVE-2026-57299 updated by NVD
• CVE-2026-57297mediumCVE-2026-57297 updated by NVD
• CVE-2026-44644mediumCVE-2026-44644 updated by NVD
• CVE-2026-107222mediumCVE-2026-107222 updated by NVD
• CVE-2026-107225mediumCVE-2026-107225 updated by NVD
• CVE-2026-59723highCVE-2026-59723 updated by NVD
• CVE-2026-71543highCVE-2026-71543 updated by NVD
• CVE-2026-72794criticalCVE-2026-72794 updated by NVD
• CVE-2026-54757highCVE-2026-54757 updated by NVD
• CVE-2026-63743mediumCVE-2026-63743 updated by NVD
• CVE-2026-105862highCVE-2026-105862 updated by NVD
• CVE-2025-71390mediumCVE-2025-71390 updated by NVD
• CVE-2026-56743mediumCilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is conf
• CVE-2026-52800highGogs Vulnerable to CSRF Leading to Organization Owner Takeover
• CVE-2026-55170lowOpenFGA Improper Policy Enforcement
• CVE-2026-54290highCVE-2026-54290 updated by NVD
• CVE-2026-50888highKoillection has an authenticated Server-Side Request Forgery issue
• CVE-2026-5199lowTemporal Server: attacker-controlled namespace could signal, delete, and reset workflows or activities in a vi
• CVE-2026-113776highCVE-2026-113776 updated by NVD
• CVE-2026-55531mediumCVE-2026-55531 updated by NVD
• CVE-2026-43983highPocket ID: OIDC refresh token flow bypasses authorization revocation, account disabling, and group restriction
• CVE-2026-59888mediumCVE-2026-59888 updated by NVD
• CVE-2026-67353mediumCVE-2026-67353 updated by NVD
• CVE-2026-41840mediumCVE-2026-41840 updated by NVD
• CVE-2026-45712mediumCVE-2026-45712 updated by NVD
• CVE-2025-37727mediumCVE-2025-37727 updated by NVD
• CVE-2026-113787mediumCVE-2026-113787 updated by NVD
• CVE-2026-119190highCVE-2026-119190 updated by NVD
• CVE-2026-105699highCVE-2026-105699 updated by NVD
• CVE-2026-88011mediumCVE-2026-88011 updated by NVD
• CVE-2026-86082highCVE-2026-86082 updated by NVD
• CVE-2026-82395mediumCVE-2026-82395 updated by NVD
• CVE-2026-71415highCVE-2026-71415 updated by NVD
• CVE-2026-55067mediumCVE-2026-55067 updated by NVD
• CVE-2026-70473highCVE-2026-70473 updated by NVD
• CVE-2026-70472highCVE-2026-70472 updated by NVD
• CVE-2026-69262highCVE-2026-69262 updated by NVD
• CVE-2026-69257highCVE-2026-69257 updated by NVD
• CVE-2026-25534criticalSpinnaker clouddriver and orca URL validation bypass via underscores in hostnames
• CVE-2026-79772mediumCVE-2026-79772 updated by NVD
• CVE-2026-63406mediumCVE-2026-63406 updated by NVD
• CVE-2026-68587criticalCVE-2026-68587 updated by NVD
• CVE-2026-73491lowCVE-2026-73491 updated by NVD
• CVE-2026-6873lowCVE-2026-6873 updated by NVD
• CVE-2026-94484mediumCVE-2026-94484 updated by NVD
• CVE-2026-94483highCVE-2026-94483 updated by NVD
• CVE-2026-107220mediumCVE-2026-107220 updated by NVD
• CVE-2026-26287highCVE-2026-26287 updated by NVD
• CVE-2026-104872mediumCVE-2026-104872 updated by NVD
• CVE-2026-56736highCVE-2026-56736 updated by NVD
• CVE-2026-57439mediumCVE-2026-57439 updated by NVD
• CVE-2026-54356highCVE-2026-54356 updated by NVD
• CVE-2026-54624mediumCVE-2026-54624 updated by NVD
• CVE-2026-70483lowCVE-2026-70483 updated by NVD
• CVE-2026-64865mediumCVE-2026-64865 updated by NVD
• CVE-2026-58230highCVE-2026-58230 updated by NVD
• CVE-2026-54706mediumCVE-2026-54706 updated by NVD
• CVE-2026-54660highCVE-2026-54660 updated by NVD
• CVE-2026-58418mediumCVE-2026-58418 updated by NVD
• CVE-2026-112949mediumCVE-2026-112949 updated by NVD
• CVE-2026-97687highCVE-2026-97687 updated by NVD
• CVE-2026-63498highCVE-2026-63498 updated by NVD
• CVE-2026-33625highCVE-2026-33625 updated by NVD
• CVE-2026-69216mediumCVE-2026-69216 updated by NVD
• CVE-2026-73650highCVE-2026-73650 updated by NVD
• CVE-2026-114510highCVE-2026-114510 updated by NVD
• CVE-2026-113800mediumCVE-2026-113800 updated by NVD
• CVE-2026-76846highCVE-2026-76846 updated by NVD
• CVE-2026-72698highCVE-2026-72698 updated by NVD
• CVE-2026-78679highCVE-2026-78679 updated by NVD
• CVE-2026-72793criticalCVE-2026-72793 updated by NVD
• CVE-2026-72795criticalCVE-2026-72795 updated by NVD
• CVE-2026-72801highCVE-2026-72801 updated by NVD
• CVE-2026-68586criticalCVE-2026-68586 updated by NVD
• CVE-2026-55594mediumImageMagick: Stack Overflow in MVG decoder due to missing depth check.
• CVE-2025-64104highCVE-2025-64104 updated by NVD
• CVE-2026-115917lowCVE-2026-115917 updated by NVD
• CVE-2026-105682lowCVE-2026-105682 updated by NVD
• CVE-2026-69190mediumCVE-2026-69190 updated by NVD
• CVE-2026-78678highCVE-2026-78678 updated by NVD
• CVE-2026-54717mediumCVE-2026-54717 updated by NVD
• CVE-2026-71434mediumCVE-2026-71434 updated by NVD
• CVE-2026-59218mediumOpen WebUI: Account enumeration via observable login timing discrepancy
• CVE-2026-6062mediumMattermost doesn't validate channel ownership of an existing subscription before applying edits
• CVE-2026-41727mediumCVE-2026-41727 updated by NVD
• CVE-2026-118652mediumCVE-2026-118652 updated by NVD
• CVE-2026-18540lowCVE-2026-18540 updated by NVD
• CVE-2026-84292highCVE-2026-84292 updated by NVD
• CVE-2026-61596highCVE-2026-61596 updated by NVD
• CVE-2026-63003mediumCVE-2026-63003 updated by NVD
• CVE-2026-54622mediumCVE-2026-54622 updated by NVD
• CVE-2026-53440mediumCVE-2026-53440 updated by NVD
• CVE-2025-71392criticalCVE-2025-71392 updated by NVD
• CVE-2026-77364mediumCVE-2026-77364 updated by NVD
• CVE-2026-106495mediumCVE-2026-106495 updated by NVD
• CVE-2026-105860highCVE-2026-105860 updated by NVD
• CVE-2026-106492highCVE-2026-106492 updated by NVD
• CVE-2026-76089highCVE-2026-76089 updated by NVD
• CVE-2026-86049highCVE-2026-86049 updated by NVD
• CVE-2026-86996mediumCVE-2026-86996 updated by NVD
• CVE-2026-72921highCVE-2026-72921 updated by NVD
• CVE-2026-55694highCVE-2026-55694 updated by NVD
• CVE-2026-65601mediumCVE-2026-65601 updated by NVD
• CVE-2026-67319mediumCVE-2026-67319 updated by NVD
• CVE-2026-12482mediumCVE-2026-12482 updated by NVD
• CVE-2026-21724mediumGrafana OSS: Authorization bypass allows users with Editor role to modify protected webhook URLs without permi
• CVE-2026-107231highCVE-2026-107231 updated by NVD
• CVE-2026-91127highCVE-2026-91127 updated by NVD
• CVE-2026-72790mediumCVE-2026-72790 updated by NVD
• CVE-2026-72792mediumCVE-2026-72792 updated by NVD
• CVE-2026-72797mediumCVE-2026-72797 updated by NVD
• CVE-2026-72799mediumCVE-2026-72799 updated by NVD
• CVE-2026-72800mediumCVE-2026-72800 updated by NVD
• CVE-2026-72802mediumCVE-2026-72802 updated by NVD
• CVE-2026-72803mediumCVE-2026-72803 updated by NVD
• CVE-2026-72805mediumCVE-2026-72805 updated by NVD
• CVE-2026-73840mediumCVE-2026-73840 updated by NVD
• CVE-2026-68520mediumCVE-2026-68520 updated by NVD
• CVE-2026-71311mediumCVE-2026-71311 updated by NVD
• CVE-2026-53609criticalCVE-2026-53609 updated by NVD
• CVE-2026-57283mediumCVE-2026-57283 updated by NVD
• CVE-2026-45831highCVE-2026-45831 updated by NVD
• CVE-2026-31887highShopware: Unauthenticated data extraction possible through store-api.order endpoint
• CVE-2026-105679highCVE-2026-105679 updated by NVD
• CVE-2026-106456mediumCVE-2026-106456 updated by NVD
• CVE-2026-63670mediumCVE-2026-63670 updated by NVD
• CVE-2026-55481mediumCVE-2026-55481 updated by NVD
• CVE-2026-71849lowCVE-2026-71849 updated by NVD
• CVE-2026-67424highCVE-2026-67424 updated by NVD
• CVE-2026-54291highPostgreSQL JDBC Driver: Silent channel-binding authentication downgrade via unsupported certificate algorithms
• CVE-2026-52812highGogs: LFS dedupe path leaks private repo content across tenants
• CVE-2026-56367lowImageMagick: Integer Overflow in PSB (PSD v2) RLE decoding path causes heap Out of Bounds reads for 32-bit bui
• CVE-2026-107395mediumCVE-2026-107395 updated by NVD
• CVE-2026-107382mediumCVE-2026-107382 updated by NVD
• CVE-2026-57170highCVE-2026-57170 updated by NVD
• CVE-2026-15603mediumCVE-2026-15603 updated by NVD
• CVE-2026-43910highCVE-2026-43910 updated by NVD
• CVE-2026-54673highCVE-2026-54673 updated by NVD
• CVE-2026-12252highCVE-2026-12252 updated by NVD
• CVE-2026-48507highCVE-2026-48507 updated by NVD
• CVE-2026-27732highAVideo has Authenticated Server-Side Request Forgery via downloadURL in aVideoEncoder.json.php
• CVE-2025-66614mediumApache Tomcat - Client certificate verification bypass
• CVE-2026-113726highCVE-2026-113726 updated by NVD
• CVE-2026-102682mediumCVE-2026-102682 updated by NVD
• CVE-2026-105747mediumCVE-2026-105747 updated by NVD
• CVE-2026-103918mediumCVE-2026-103918 updated by NVD
• CVE-2026-12957highCVE-2026-12957 updated by NVD
• CVE-2026-55452mediumCVE-2026-55452 updated by NVD
• CVE-2026-63135highCVE-2026-63135 updated by NVD
• CVE-2026-53439mediumCVE-2026-53439 updated by NVD
• CVE-2026-112934mediumCVE-2026-112934 updated by NVD
• CVE-2026-111063mediumCVE-2026-111063 updated by NVD
• CVE-2026-107841mediumCVE-2026-107841 updated by NVD
• CVE-2026-107397mediumCVE-2026-107397 updated by NVD
• CVE-2026-73292highCVE-2026-73292 updated by NVD
• CVE-2026-55859mediumCVE-2026-55859 updated by NVD
• CVE-2026-71307highCVE-2026-71307 updated by NVD
• CVE-2026-54764mediumTraefik: ForwardAuth middleware leaks X-Forwarded-Port spoofing via untrusted X-Forwarded-Proto when trustForw
• CVE-2026-66063mediumCVE-2026-66063 updated by NVD
• CVE-2026-7120mediumCVE-2026-7120 updated by NVD
• CVE-2026-73651mediumCVE-2026-73651 updated by NVD
• CVE-2026-67339mediumCVE-2026-67339 updated by NVD
• CVE-2026-112936mediumCVE-2026-112936 updated by NVD
• CVE-2026-114617mediumCVE-2026-114617 updated by NVD
• CVE-2026-110095lowCVE-2026-110095 updated by NVD
• CVE-2026-61630mediumCVE-2026-61630 updated by NVD
• CVE-2026-71537mediumCVE-2026-71537 updated by NVD
• CVE-2026-73245mediumCVE-2026-73245 updated by NVD
• CVE-2026-75931highCVE-2026-75931 updated by NVD
• CVE-2026-76172highCVE-2026-76172 updated by NVD
• CVE-2026-55593mediumCVE-2026-55593 updated by NVD
• CVE-2026-73303highCVE-2026-73303 updated by NVD
• CVE-2026-61544highCVE-2026-61544 updated by NVD
• CVE-2026-105647mediumCVE-2026-105647 updated by NVD
• CVE-2026-84992mediumCVE-2026-84992 updated by NVD
• CVE-2026-77405criticalCVE-2026-77405 updated by NVD
• CVE-2026-54707mediumCVE-2026-54707 updated by NVD
• CVE-2026-54082mediumCVE-2026-54082 updated by NVD
• CVE-2026-53838mediumCVE-2026-53838 updated by NVD
• CVE-2026-57291mediumCVE-2026-57291 updated by NVD
• CVE-2025-49015mediumCouchbase .NET SDK (client library) does not properly enable hostname verification for TLS certificates
• CVE-2026-119283highCVE-2026-119283 updated by NVD
• CVE-2026-11746criticalCVE-2026-11746 updated by NVD
• CVE-2026-88017highCVE-2026-88017 updated by NVD
• CVE-2026-81725mediumCVE-2026-81725 updated by NVD
• CVE-2026-14643mediumCVE-2026-14643 updated by NVD
• CVE-2026-67355highCVE-2026-67355 updated by NVD
• CVE-2026-40994highCVE-2026-40994 updated by NVD
• CVE-2026-47121mediumCVE-2026-47121 updated by NVD
• CVE-2026-57175mediumCVE-2026-57175 updated by NVD
• CVE-2026-12210lowCVE-2026-12210 updated by NVD
• CVE-2026-61824highCVE-2026-61824 updated by NVD
• CVE-2026-10223lowCVE-2026-10223 updated by NVD
• CVE-2026-82416highCVE-2026-82416 updated by NVD
• CVE-2026-46438mediumCVE-2026-46438 updated by NVD
• CVE-2026-93981lowCVE-2026-93981 updated by NVD
• CVE-2026-55228highCVE-2026-55228 updated by NVD
• CVE-2026-72782highCVE-2026-72782 updated by NVD
• CVE-2026-50569mediumFission: HTTPTrigger admission omits RelativeURL / Prefix validation; kubectl apply bypasses CLI checks
• CVE-2026-53675mediumCVE-2026-53675 updated by NVD
• CVE-2026-41697mediumCVE-2026-41697 updated by NVD
• CVE-2026-27892mediumCVE-2026-27892 updated by NVD
• CVE-2026-62374highCVE-2026-62374 updated by NVD
• CVE-2026-107719mediumCVE-2026-107719 updated by NVD
• CVE-2026-105742lowCVE-2026-105742 updated by NVD
• CVE-2026-76081mediumCVE-2026-76081 updated by NVD
• CVE-2026-79674highCVE-2026-79674 updated by NVD
• CVE-2026-70591mediumCVE-2026-70591 updated by NVD
• CVE-2026-53607lowCVE-2026-53607 updated by NVD
• CVE-2026-114618mediumCVE-2026-114618 updated by NVD
• CVE-2026-105846mediumCVE-2026-105846 updated by NVD
• CVE-2026-58269highCVE-2026-58269 updated by NVD
• CVE-2026-71433mediumCVE-2026-71433 updated by NVD
• CVE-2026-58661mediumCVE-2026-58661 updated by NVD
• CVE-2026-40985mediumCVE-2026-40985 updated by NVD
• CVE-2026-4600highCVE-2026-4600 updated by NVD
• CVE-2026-73845mediumCVE-2026-73845 updated by NVD
• CVE-2026-55696mediumCVE-2026-55696 updated by NVD
• CVE-2026-14793mediumCVE-2026-14793 updated by NVD
• CVE-2026-54704mediumCVE-2026-54704 updated by NVD
• CVE-2026-49447mediumCVE-2026-49447 updated by NVD
• CVE-2026-73424mediumCVE-2026-73424 updated by NVD
• CVE-2026-7879mediumCVE-2026-7879 updated by NVD
• CVE-2026-111757mediumCVE-2026-111757 updated by NVD
• CVE-2026-108372highCVE-2026-108372 updated by NVD
• CVE-2026-107215highCVE-2026-107215 updated by NVD
• CVE-2026-73844lowCVE-2026-73844 updated by NVD
• CVE-2026-59223mediumOpen WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary mat
• CVE-2026-12515mediumCVE-2026-12515 updated by NVD
• CVE-2026-41000lowCVE-2026-41000 updated by NVD
• CVE-2026-40991mediumCVE-2026-40991 updated by NVD
• CVE-2026-24834mediumKata Container to Guest micro VM privilege escalation
• CVE-2026-107724highCVE-2026-107724 updated by NVD
• CVE-2026-105748mediumCVE-2026-105748 updated by NVD
• CVE-2026-106563mediumCVE-2026-106563 updated by NVD
• CVE-2026-87995highCVE-2026-87995 updated by NVD
• CVE-2026-68921mediumCVE-2026-68921 updated by NVD
• CVE-2026-81723mediumCVE-2026-81723 updated by NVD
• CVE-2026-55856mediumCVE-2026-55856 updated by NVD
• CVE-2026-70485highCVE-2026-70485 updated by NVD
• CVE-2026-59715lowOpen WebUI: Unauthenticated WebSocket Access to Collaborative Document Handlers (ydoc:awareness:update, ydoc:d
• CVE-2026-55423mediumCVE-2026-55423 updated by NVD
• CVE-2026-55883highCVE-2026-55883 updated by NVD
• CVE-2026-48522mediumCVE-2026-48522 updated by NVD
• CVE-2026-108360mediumCVE-2026-108360 updated by NVD
• CVE-2026-106487lowCVE-2026-106487 updated by NVD
• CVE-2026-46434highCVE-2026-46434 updated by NVD
• CVE-2026-57171highCVE-2026-57171 updated by NVD
• CVE-2026-61612mediumCVE-2026-61612 updated by NVD
• CVE-2026-84380mediumCVE-2026-84380 updated by NVD
• CVE-2026-63669mediumCVE-2026-63669 updated by NVD
• CVE-2026-69146mediumCVE-2026-69146 updated by NVD
• CVE-2026-18446highCVE-2026-18446 updated by NVD
• CVE-2026-16221highCVE-2026-16221 updated by NVD
• CVE-2026-48819mediumCVE-2026-48819 updated by NVD
• CVE-2026-57305mediumCVE-2026-57305 updated by NVD
• CVE-2026-57295mediumCVE-2026-57295 updated by NVD
• CVE-2026-46680highcontainerd user ID handling bypass allows runAsNonRoot evasion
• CVE-2026-112909mediumCVE-2026-112909 updated by NVD
• CVE-2026-113649mediumCVE-2026-113649 updated by NVD
• CVE-2026-107804mediumCVE-2026-107804 updated by NVD
• CVE-2026-75975highCVE-2026-75975 updated by NVD
• CVE-2026-75899highCVE-2026-75899 updated by NVD
• CVE-2026-54260mediumWagtail: Denial of service via unbounded filter specs in the image preview
• CVE-2026-53466mediumImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow
• CVE-2026-6733lowundici vulnerable to HTTP response queue poisoning via keep-alive socket reuse
• CVE-2026-11465lowCVE-2026-11465 updated by NVD
• CVE-2026-103028mediumCVE-2026-103028 updated by NVD
• CVE-2026-43976highCVE-2026-43976 updated by NVD
• CVE-2026-71416highCVE-2026-71416 updated by NVD
• CVE-2026-61825highCVE-2026-61825 updated by NVD
• CVE-2026-57176mediumCVE-2026-57176 updated by NVD
• CVE-2026-11745highCVE-2026-11745 updated by NVD
• CVE-2026-55535mediumCVE-2026-55535 updated by NVD
• CVE-2026-11624criticalCVE-2026-11624 updated by NVD
• CVE-2026-9796mediumCVE-2026-9796 updated by NVD
• CVE-2026-40071mediumpyload-ng has a WebUI JSON permission mismatch that lets ADD/DELETE users invoke MODIFY-only actions
• CVE-2026-112915mediumCVE-2026-112915 updated by NVD
• CVE-2026-72779highCVE-2026-72779 updated by NVD
• CVE-2024-13484highOpenShift GitOps Operator Namespace Isolation Break
• CVE-2026-115730lowCVE-2026-115730 updated by NVD
• CVE-2026-106506mediumCVE-2026-106506 updated by NVD
• CVE-2026-88006mediumCVE-2026-88006 updated by NVD
• CVE-2026-87999highCVE-2026-87999 updated by NVD
• CVE-2026-88005mediumCVE-2026-88005 updated by NVD
• CVE-2026-69148highCVE-2026-69148 updated by NVD
• CVE-2026-50221mediumCVE-2026-50221 updated by NVD
• CVE-2026-33471criticalCVE-2026-33471 updated by NVD
• CVE-2026-84315highCVE-2026-84315 updated by NVD
• CVE-2026-72701mediumCVE-2026-72701 updated by NVD
• CVE-2026-46696lowCVE-2026-46696 updated by NVD
• CVE-2026-48776mediumLangGraph SDK has unsafe URL path construction
• CVE-2026-95838mediumCVE-2026-95838 updated by NVD
• CVE-2026-62376highCVE-2026-62376 updated by NVD
• CVE-2026-106100highCVE-2026-106100 updated by NVD
• CVE-2026-73262mediumCVE-2026-73262 updated by NVD
• CVE-2026-71293mediumCVE-2026-71293 updated by NVD
• CVE-2026-65899mediumCVE-2026-65899 updated by NVD
• CVE-2026-43972mediumCVE-2026-43972 updated by NVD
• CVE-2026-102675highCVE-2026-102675 updated by NVD
• CVE-2026-77339mediumCVE-2026-77339 updated by NVD
• CVE-2026-53949mediumCVE-2026-53949 updated by NVD
• CVE-2026-66053mediumCVE-2026-66053 updated by NVD
• CVE-2026-12202lowCVE-2026-12202 updated by NVD
• CVE-2026-112912lowCVE-2026-112912 updated by NVD
• CVE-2026-105752lowCVE-2026-105752 updated by NVD
• CVE-2026-103922criticalCVE-2026-103922 updated by NVD
• CVE-2026-87994mediumCVE-2026-87994 updated by NVD
• CVE-2026-87997mediumCVE-2026-87997 updated by NVD
• CVE-2026-19418highCVE-2026-19418 updated by NVD
• CVE-2026-59732mediumCVE-2026-59732 updated by NVD
• CVE-2026-54020mediumCVE-2026-54020 updated by NVD
• CVE-2026-70488mediumCVE-2026-70488 updated by NVD
• CVE-2026-69246highCVE-2026-69246 updated by NVD
• CVE-2026-68930mediumCVE-2026-68930 updated by NVD
• CVE-2026-46606highCVE-2026-46606 updated by NVD
• CVE-2026-53438mediumCVE-2026-53438 updated by NVD
• CVE-2026-114616highCVE-2026-114616 updated by NVD
• CVE-2026-113714lowCVE-2026-113714 updated by NVD
• CVE-2026-106459highCVE-2026-106459 updated by NVD
• CVE-2026-105741highCVE-2026-105741 updated by NVD
• CVE-2026-86540highCVE-2026-86540 updated by NVD
• CVE-2026-59176highCVE-2026-59176 updated by NVD
• CVE-2026-54134highCVE-2026-54134 updated by NVD
• CVE-2026-12537criticalGemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses
• CVE-2026-113732highCVE-2026-113732 updated by NVD
• CVE-2026-106496lowCVE-2026-106496 updated by NVD
• CVE-2026-85152highCVE-2026-85152 updated by NVD
• CVE-2026-71303highCVE-2026-71303 updated by NVD
• CVE-2026-55403lowCVE-2026-55403 updated by NVD
• CVE-2026-59225mediumOpen WebUI: Arena task endpoints can bypass underlying model access controls
• CVE-2026-41706mediumCVE-2026-41706 updated by NVD
• CVE-2026-61433highCVE-2026-61433 updated by NVD
• CVE-2026-61823highCVE-2026-61823 updated by NVD
• CVE-2026-87017mediumCVE-2026-87017 updated by NVD
• CVE-2026-53608highCVE-2026-53608 updated by NVD
• CVE-2026-40987highCVE-2026-40987 updated by NVD
• CVE-2026-85747mediumCVE-2026-85747 updated by NVD
• CVE-2026-84321mediumCVE-2026-84321 updated by NVD
• CVE-2026-71318mediumCVE-2026-71318 updated by NVD
• CVE-2026-54690highCVE-2026-54690 updated by NVD
• CVE-2026-54691highCVE-2026-54691 updated by NVD
• CVE-2024-58367highCVE-2024-58367 updated by NVD
• CVE-2026-110180mediumCVE-2026-110180 updated by NVD
• CVE-2026-107380mediumCVE-2026-107380 updated by NVD
• CVE-2026-101916highCVE-2026-101916 updated by NVD
• CVE-2026-55825lowCVE-2026-55825 updated by NVD
• CVE-2026-54763highTraefik: Incomplete fix for CVE-2026-33433 + CVE-2026-39858 cross-cohort: headerField underscore-variant ident
• CVE-2026-54705mediumCVE-2026-54705 updated by NVD
• CVE-2026-57307mediumCVE-2026-57307 updated by NVD
• CVE-2026-9073mediumforeman-mcp-server Inserts Sensitive Information into Log File
• CVE-2026-10720mediumCVE-2026-10720 updated by NVD
• CVE-2026-118651mediumCVE-2026-118651 updated by NVD
• CVE-2026-116691mediumCVE-2026-116691 updated by NVD
• CVE-2026-113798mediumCVE-2026-113798 updated by NVD
• CVE-2026-57449highCVE-2026-57449 updated by NVD
• CVE-2026-87996highCVE-2026-87996 updated by NVD
• CVE-2026-70490mediumCVE-2026-70490 updated by NVD
• CVE-2026-73652highCVE-2026-73652 updated by NVD
• CVE-2026-53830mediumCVE-2026-53830 updated by NVD
• CVE-2025-67505highCVE-2025-67505 updated by NVD
• CVE-2026-119186mediumCVE-2026-119186 updated by NVD
• CVE-2026-107285mediumCVE-2026-107285 updated by NVD
• CVE-2026-102904mediumCVE-2026-102904 updated by NVD
• CVE-2026-72809highCVE-2026-72809 updated by NVD
• CVE-2026-70604highCVE-2026-70604 updated by NVD
• CVE-2026-53947mediumCVE-2026-53947 updated by NVD
• CVE-2026-53878mediumCVE-2026-53878 updated by NVD
• CVE-2026-41719mediumCVE-2026-41719 updated by NVD
• CVE-2026-119201mediumCVE-2026-119201 updated by NVD
• CVE-2026-112906mediumCVE-2026-112906 updated by NVD
• CVE-2026-108260highCVE-2026-108260 updated by NVD
• CVE-2026-70626highCVE-2026-70626 updated by NVD
• CVE-2026-55637highCVE-2026-55637 updated by NVD
• CVE-2026-55526highCVE-2026-55526 updated by NVD
• CVE-2026-63640mediumCVE-2026-63640 updated by NVD
• CVE-2026-12261mediumCVE-2026-12261 updated by NVD
• CVE-2026-11529lowCVE-2026-11529 updated by NVD
• CVE-2026-22696criticaldcap-qvl has Missing Verification for QE Identity
• CVE-2026-118778mediumCVE-2026-118778 updated by NVD
• CVE-2026-110306mediumCVE-2026-110306 updated by NVD
• CVE-2026-96628mediumCVE-2026-96628 updated by NVD
• CVE-2026-105755mediumCVE-2026-105755 updated by NVD
• CVE-2026-61672highCVE-2026-61672 updated by NVD
• CVE-2026-53950highCVE-2026-53950 updated by NVD
• CVE-2026-12484highCVE-2026-12484 updated by NVD
• CVE-2026-41003highCVE-2026-41003 updated by NVD
• CVE-2026-21727lowCVE-2026-21727 updated by NVD
• CVE-2026-103288highCVE-2026-103288 updated by NVD
• CVE-2026-54893lowCVE-2026-54893 updated by NVD
• CVE-2026-107392mediumCVE-2026-107392 updated by NVD
• CVE-2026-54263highWagtail: Reflected XSS in dynamic image URL generator view
• CVE-2026-102279lowCVE-2026-102279 updated by NVD
• CVE-2026-77616mediumCVE-2026-77616 updated by NVD
• CVE-2026-73222highCVE-2026-73222 updated by NVD
• CVE-2026-52809mediumCVE-2026-52809 updated by NVD
• CVE-2026-77387mediumCVE-2026-77387 updated by NVD
• CVE-2026-61742criticalCVE-2026-61742 updated by NVD
• CVE-2026-63733mediumCVE-2026-63733 updated by NVD
• CVE-2026-55622highCVE-2026-55622 updated by NVD
• CVE-2026-55621highCVE-2026-55621 updated by NVD
• CVE-2026-54261mediumWagtail: Improper permission handling in image preview
• CVE-2026-71478mediumCVE-2026-71478 updated by NVD
• CVE-2026-73563mediumCVE-2026-73563 updated by NVD
• CVE-2026-58424highCVE-2026-58424 updated by NVD
• CVE-2026-47304highCVE-2026-47304 updated by NVD
• CVE-2026-40986mediumCVE-2026-40986 updated by NVD
• CVE-2026-96889highCVE-2026-96889 updated by NVD
• CVE-2026-86080mediumCVE-2026-86080 updated by NVD
• CVE-2026-55476mediumCVE-2026-55476 updated by NVD
• CVE-2026-55448mediumCVE-2026-55448 updated by NVD
• CVE-2026-7776highCVE-2026-7776 updated by NVD
• CVE-2026-77362mediumCVE-2026-77362 updated by NVD
• CVE-2026-86994mediumCVE-2026-86994 updated by NVD
• CVE-2026-72807highCVE-2026-72807 updated by NVD
• CVE-2026-61663mediumCVE-2026-61663 updated by NVD
• CVE-2026-53834highOpenClaw: QQBot pre-dispatch slash commands could skip allowFrom checks
• CVE-2026-102269mediumCVE-2026-102269 updated by NVD
• CVE-2026-63118mediumCVE-2026-63118 updated by NVD
• CVE-2026-53467mediumImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchanged
• CVE-2026-8384mediumCVE-2026-8384 updated by NVD
• CVE-2026-59710mediumshowdown allows stored cross-site scripting through table header ID injection
• CVE-2026-53831highCVE-2026-53831 updated by NVD
• CVE-2026-53722mediumNuxt: Reflected XSS in ` ` via unsanitised `javascript:` or `data:` URL
• CVE-2026-40993highCVE-2026-40993 updated by NVD
• CVE-2026-118656mediumCVE-2026-118656 updated by NVD
• CVE-2026-106562mediumCVE-2026-106562 updated by NVD
• CVE-2026-106561mediumCVE-2026-106561 updated by NVD
• CVE-2026-92950criticalCVE-2026-92950 updated by NVD
• CVE-2026-63342mediumCVE-2026-63342 updated by NVD
• CVE-2026-88016highCVE-2026-88016 updated by NVD
• CVE-2026-55857mediumCVE-2026-55857 updated by NVD
• CVE-2026-70605mediumCVE-2026-70605 updated by NVD
• CVE-2026-53944mediumCVE-2026-53944 updated by NVD
• CVE-2026-41730mediumCVE-2026-41730 updated by NVD
• CVE-2026-41839mediumCVE-2026-41839 updated by NVD
• CVE-2026-6657highCVE-2026-6657 updated by NVD
• CVE-2024-58356lowCVE-2024-58356 updated by NVD
• CVE-2026-105678mediumCVE-2026-105678 updated by NVD
• CVE-2026-102831highCVE-2026-102831 updated by NVD
• CVE-2026-102268criticalCVE-2026-102268 updated by NVD
• CVE-2026-84947lowCVE-2026-84947 updated by NVD
• CVE-2026-81871mediumCVE-2026-81871 updated by NVD
• CVE-2026-63123mediumCVE-2026-63123 updated by NVD
• CVE-2026-6790mediumCVE-2026-6790 updated by NVD
• CVE-2026-53914mediumCVE-2026-53914 updated by NVD
• CVE-2026-103929highCVE-2026-103929 updated by NVD
• CVE-2026-107396mediumCVE-2026-107396 updated by NVD
• CVE-2026-104183mediumCVE-2026-104183 updated by NVD