Security advisories — page 6

• CVE-2026-48588lowDjango: cache middleware may expose private responses when unrelated request cookies are present
• CVE-2026-63755highCVE-2026-63755 updated by NVD
• CVE-2026-58197highCVE-2026-58197 updated by NVD
• CVE-2026-77281mediumCVE-2026-77281 updated by NVD
• CVE-2026-55548mediumYamcs: Insecure Direct Object Reference (IDOR) in PacketsApi allows unprivileged users to dump all telemetry p
• CVE-2026-76217highCVE-2026-76217 updated by NVD
• CVE-2026-67321mediumCVE-2026-67321 updated by NVD
• CVE-2026-41851mediumCVE-2026-41851 updated by NVD
• CVE-2026-41850highCVE-2026-41850 updated by NVD
• CVE-2026-65915highCVE-2026-65915 updated by NVD
• CVE-2026-64607mediumCVE-2026-64607 updated by NVD
• CVE-2026-35193lowCVE-2026-35193 updated by NVD
• CVE-2026-56385lowCraft CMS: Authorized asset "preview file" requests bypass allows users without asset access to retr
• CVE-2026-88008highCVE-2026-88008 updated by NVD
• CVE-2026-77465highCVE-2026-77465 updated by NVD
• CVE-2026-53965mediumCVE-2026-53965 updated by NVD
• CVE-2026-68922mediumCVE-2026-68922 updated by NVD
• CVE-2026-63740highCVE-2026-63740 updated by NVD
• CVE-2026-50636highCVE-2026-50636 updated by NVD
• CVE-2026-61711mediumCVE-2026-61711 updated by NVD
• CVE-2026-53502highCVE-2026-53502 updated by NVD
• CVE-2026-54593highCVE-2026-54593 updated by NVD
• CVE-2026-48491highCVE-2026-48491 updated by NVD
• CVE-2026-71326lowCVE-2026-71326 updated by NVD
• CVE-2026-83610mediumCVE-2026-83610 updated by NVD
• CVE-2026-55841highCVE-2026-55841 updated by NVD
• CVE-2026-59821lowLiteLLM: Custom Code Guardrails production endpoints bypass code safety checks
• CVE-2026-88015mediumCVE-2026-88015 updated by NVD
• CVE-2026-54606highCVE-2026-54606 updated by NVD
• CVE-2026-63621mediumCVE-2026-63621 updated by NVD
• CVE-2026-76905highCVE-2026-76905 updated by NVD
• CVE-2026-69259criticalCVE-2026-69259 updated by NVD
• CVE-2026-67437highCVE-2026-67437 updated by NVD
• CVE-2026-50195mediumcontainerd: CRI checkpoint import allows local image tag poisoning
• CVE-2026-48587lowCVE-2026-48587 updated by NVD
• CVE-2026-75513criticalCVE-2026-75513 updated by NVD
• CVE-2026-83611mediumCVE-2026-83611 updated by NVD
• CVE-2026-52837mediumCVE-2026-52837 updated by NVD
• CVE-2026-40998highCVE-2026-40998 updated by NVD
• CVE-2026-41856highCVE-2026-41856 updated by NVD
• CVE-2026-42151highCVE-2026-42151 updated by NVD
• CVE-2026-83615highCVE-2026-83615 updated by NVD
• CVE-2026-83614highCVE-2026-83614 updated by NVD
• CVE-2026-75596highCVE-2026-75596 updated by NVD
• CVE-2026-55212highPimcore: Insufficient Permission Check on Class Definition Creation Endpoint Allows Privilege Escalation
• CVE-2026-54735criticalCVE-2026-54735 updated by NVD
• CVE-2026-73568highCVE-2026-73568 updated by NVD
• CVE-2026-85999mediumCVE-2026-85999 updated by NVD
• CVE-2026-85721highCVE-2026-85721 updated by NVD
• CVE-2026-84382highCVE-2026-84382 updated by NVD
• CVE-2026-69083criticalCVE-2026-69083 updated by NVD
• CVE-2026-69086highCVE-2026-69086 updated by NVD
• CVE-2026-82397highCVE-2026-82397 updated by NVD
• CVE-2026-52797highGogs: Overwriting critical files results in a denial of service
• CVE-2026-70646highCVE-2026-70646 updated by NVD
• CVE-2026-71557mediumCVE-2026-71557 updated by NVD
• CVE-2026-59884highCVE-2026-59884 updated by NVD
• CVE-2026-83616highCVE-2026-83616 updated by NVD
• CVE-2026-83608highCVE-2026-83608 updated by NVD
• CVE-2026-83607highCVE-2026-83607 updated by NVD
• CVE-2026-83605highCVE-2026-83605 updated by NVD
• CVE-2026-55065highCVE-2026-55065 updated by NVD
• CVE-2026-53430highgRPC Erlang package has unbounded gzip decompression (decompression bomb)
• CVE-2026-73412mediumCVE-2026-73412 updated by NVD
• CVE-2026-10142highCVE-2026-10142 updated by NVD
• CVE-2026-9798mediumCVE-2026-9798 updated by NVD
• CVE-2026-77037highCVE-2026-77037 updated by NVD
• CVE-2026-77414criticalCVE-2026-77414 updated by NVD
• CVE-2026-62996mediumCVE-2026-62996 updated by NVD
• CVE-2026-41732highCVE-2026-41732 updated by NVD
• CVE-2026-71488highCVE-2026-71488 updated by NVD
• CVE-2026-69185highCVE-2026-69185 updated by NVD
• CVE-2026-54638highCVE-2026-54638 updated by NVD
• CVE-2026-73493highCVE-2026-73493 updated by NVD
• CVE-2026-59889mediumjackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization
• CVE-2026-59887highCVE-2026-59887 updated by NVD
• CVE-2026-9496highCVE-2026-9496 updated by NVD
• CVE-2026-34476highApache SkyWalking MCP: Server-Side Request Forgery via SW-URL Header in MCP Server
• CVE-2026-84363mediumCVE-2026-84363 updated by NVD
• CVE-2026-54623highCVE-2026-54623 updated by NVD
• CVE-2026-55771highCedar-Java has policy injection, type confusion, and incorrect equality comparison vulnerabilities
• CVE-2026-50163highCVE-2026-50163 updated by NVD
• CVE-2026-45830highChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's col
• CVE-2024-7038lowWithdrawn Advisory: open-webui allows enumeration of file names and traversal of directories by observing the
• CVE-2026-83613highCVE-2026-83613 updated by NVD
• CVE-2026-55858mediumCVE-2026-55858 updated by NVD
• CVE-2026-55475mediumSnipe-IT's import created_by can be overwritten
• CVE-2026-48854highgRPC Erlang package has unbounded request body accumulation in `read_full_body/3`
• CVE-2026-62325criticalCVE-2026-62325 updated by NVD
• CVE-2026-54465mediumCVE-2026-54465 updated by NVD
• CVE-2026-54463mediumCVE-2026-54463 updated by NVD
• CVE-2026-54285mediumCVE-2026-54285 updated by NVD
• CVE-2026-48039criticalCVE-2026-48039 updated by NVD
• CVE-2026-75828criticalCVE-2026-75828 updated by NVD
• CVE-2026-62674criticalCVE-2026-62674 updated by NVD
• CVE-2026-64850highCVE-2026-64850 updated by NVD
• CVE-2026-55484highCVE-2026-55484 updated by NVD
• CVE-2026-55247criticalCVE-2026-55247 updated by NVD
• CVE-2026-54693highCVE-2026-54693 updated by NVD
• CVE-2026-73643highCVE-2026-73643 updated by NVD
• CVE-2026-58422highGitea: Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts
• CVE-2026-55873mediumSeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user
• CVE-2026-55462mediumSnipe-IT has an authorization bypass on print inventory page
• CVE-2026-69250highCVE-2026-69250 updated by NVD
• CVE-2026-56317lowCross-site scripting via slot content in Nuxt's head components
• CVE-2026-45833criticalChromaDB has a code injection vulnerability
• CVE-2026-71486mediumCVE-2026-71486 updated by NVD
• CVE-2026-63667mediumCVE-2026-63667 updated by NVD
• CVE-2026-68501mediumCVE-2026-68501 updated by NVD
• CVE-2026-41843mediumCVE-2026-41843 updated by NVD
• CVE-2026-81505highCVE-2026-81505 updated by NVD
• CVE-2026-55581highCVE-2026-55581 updated by NVD
• CVE-2026-69149highCVE-2026-69149 updated by NVD
• CVE-2026-59936highpypdf: Possible infinite loop for not terminated inline images
• CVE-2026-59937mediumpypdf: Possible long runtimes for repeated malformed cross-reference entries
• CVE-2026-40110highCVE-2026-40110 updated by NVD
• CVE-2026-75837criticalCVE-2026-75837 updated by NVD
• CVE-2026-81516highCVE-2026-81516 updated by NVD
• CVE-2026-81515highCVE-2026-81515 updated by NVD
• CVE-2026-68537highCVE-2026-68537 updated by NVD
• CVE-2026-68523highCVE-2026-68523 updated by NVD
• CVE-2026-87011highCVE-2026-87011 updated by NVD
• CVE-2026-54770mediumCVE-2026-54770 updated by NVD
• CVE-2026-55419mediumCVE-2026-55419 updated by NVD
• CVE-2026-53505highCVE-2026-53505 updated by NVD
• CVE-2026-67427highCVE-2026-67427 updated by NVD
• CVE-2026-59886highCVE-2026-59886 updated by NVD
• CVE-2026-59885highCVE-2026-59885 updated by NVD
• CVE-2026-67312mediumCVE-2026-67312 updated by NVD
• CVE-2026-70482highCVE-2026-70482 updated by NVD
• CVE-2026-54653highCVE-2026-54653 updated by NVD
• CVE-2026-55533highCVE-2026-55533 updated by NVD
• CVE-2026-54245highCVE-2026-54245 updated by NVD
• CVE-2026-67428highCVE-2026-67428 updated by NVD
• CVE-2026-64863criticalCVE-2026-64863 updated by NVD
• CVE-2026-52810highGogs allows users to write to readonly repositories using receive-pack + service=git-upload-pack confusion
• CVE-2026-61709mediumCVE-2026-61709 updated by NVD
• CVE-2026-84370highCVE-2026-84370 updated by NVD
• CVE-2026-55515mediumSnipe-IT: Cross-company deletion of pending checkout acceptances via unscoped report endpoint
• CVE-2026-54553mediumCVE-2026-54553 updated by NVD
• CVE-2026-62897highCVE-2026-62897 updated by NVD
• CVE-2026-73413highCVE-2026-73413 updated by NVD
• CVE-2026-73411mediumCVE-2026-73411 updated by NVD
• CVE-2026-56394lowCraft CMS has authenticated path traversal in `assets/icon`, allowing local `.svg` file read
• CVE-2026-48524lowPyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)
• CVE-2026-88009highCVE-2026-88009 updated by NVD
• CVE-2026-55867mediumCVE-2026-55867 updated by NVD
• CVE-2026-70607mediumCVE-2026-70607 updated by NVD
• CVE-2026-53504highCVE-2026-53504 updated by NVD
• CVE-2026-52856highCVE-2026-52856 updated by NVD
• CVE-2026-87016highCVE-2026-87016 updated by NVD
• CVE-2026-86076highCVE-2026-86076 updated by NVD
• CVE-2026-81889highCVE-2026-81889 updated by NVD
• CVE-2026-73654highCVE-2026-73654 updated by NVD
• CVE-2026-65014mediumCVE-2026-65014 updated by NVD
• CVE-2026-9162mediumMattermost doesn't invalidate cached authentication state for active WebSocket connections during global sessi
• CVE-2026-74907highCVE-2026-74907 updated by NVD
• CVE-2026-85717mediumCVE-2026-85717 updated by NVD
• CVE-2026-76222highCVE-2026-76222 updated by NVD
• CVE-2026-73508mediumCVE-2026-73508 updated by NVD
• CVE-2026-54299highAstro: Host header SSRF in prerendered error page fetch
• CVE-2026-61590highCVE-2026-61590 updated by NVD
• CVE-2026-73430mediumCVE-2026-73430 updated by NVD
• CVE-2026-5052mediumHashiCorp Vault has Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS
• CVE-2026-69204criticalCVE-2026-69204 updated by NVD
• CVE-2026-55848highCVE-2026-55848 updated by NVD
• CVE-2026-55472mediumSnipe-IT's API Location Creation Bypasses FMCS Parent-Child Company Boundary Validation
• CVE-2026-55545mediumCVE-2026-55545 updated by NVD
• CVE-2026-58421highGitea: Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service
• CVE-2026-67315mediumCVE-2026-67315 updated by NVD
• CVE-2026-56384mediumCraft CMS: Authenticated "assets/preview-thumb" discloses signed fallback transform preview link to
• CVE-2026-41721mediumCVE-2026-41721 updated by NVD
• CVE-2026-40988highCVE-2026-40988 updated by NVD
• CVE-2026-75913highCVE-2026-75913 updated by NVD
• CVE-2026-55688mediumCVE-2026-55688 updated by NVD
• CVE-2026-67214highCVE-2026-67214 updated by NVD
• CVE-2026-59212mediumOpen WebUI: Model meta.knowledge read-only file access can be upgraded to file write/delete
• CVE-2026-55474highSnipe-IT vulnerable to directory traversal in displaySig
• CVE-2026-8798highCVE-2026-8798 updated by NVD
• CVE-2026-44907highCVE-2026-44907 updated by NVD
• CVE-2026-53781medium@steipete/summarize is Vulnerable to Disk Exhaustion via Crafted Media Responses
• CVE-2026-83617highCVE-2026-83617 updated by NVD
• CVE-2026-83618highCVE-2026-83618 updated by NVD
• CVE-2026-63435mediumCVE-2026-63435 updated by NVD
• CVE-2026-55891unknownCVE-2026-55891 updated by NVD
• CVE-2026-69151highCVE-2026-69151 updated by NVD
• CVE-2026-54722highCVE-2026-54722 updated by NVD
• CVE-2026-39243mediumdecompress allows arbitrary hardlink creation during archive extraction
• CVE-2026-41717highCVE-2026-41717 updated by NVD
• CVE-2026-61795mediumCVE-2026-61795 updated by NVD
• CVE-2026-61794mediumCVE-2026-61794 updated by NVD
• CVE-2026-84365mediumCVE-2026-84365 updated by NVD
• CVE-2026-55153highmchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadge
• CVE-2026-16796highCVE-2026-16796 updated by NVD
• CVE-2026-59729mediumCVE-2026-59729 updated by NVD
• CVE-2026-73498highCVE-2026-73498 updated by NVD
• CVE-2026-54665mediumApache NiFi fails to validate proxy host headers when constructing qualified URLs
• CVE-2026-53698mediumSilverpeas mishandles the "Personal space" feature that is selected when no componentId is set
• CVE-2026-69206mediumCVE-2026-69206 updated by NVD
• CVE-2026-83609highCVE-2026-83609 updated by NVD
• CVE-2026-71436mediumCVE-2026-71436 updated by NVD
• CVE-2026-58659highCVE-2026-58659 updated by NVD
• CVE-2026-63748mediumCVE-2026-63748 updated by NVD
• CVE-2026-48813highCVE-2026-48813 updated by NVD
• CVE-2026-50891highFilestash allows attackers to escalate privileges via sending a crafted request
• CVE-2026-73427lowCVE-2026-73427 updated by NVD
• CVE-2026-85063mediumCVE-2026-85063 updated by NVD
• CVE-2026-71554mediumCVE-2026-71554 updated by NVD
• CVE-2026-34905mediumCVE-2026-34905 updated by NVD
• CVE-2026-9358lowCVE-2026-9358 updated by NVD
• CVE-2026-71319criticalCVE-2026-71319 updated by NVD
• CVE-2026-54464mediumCVE-2026-54464 updated by NVD
• CVE-2026-50879highlinx-server has an issue in the uploadPostHandler component that allows attackers to cause a Denial of Service
• CVE-2026-86079mediumCVE-2026-86079 updated by NVD
• CVE-2026-71492mediumCVE-2026-71492 updated by NVD
• CVE-2026-55764highCVE-2026-55764 updated by NVD
• CVE-2026-55641high9router: Unauthenticated `/v1` proxy access via `Host`-header spoofing → open AI relay + SSRF
• CVE-2026-28740highGitea: Git LFS object reuse allows non-Code access to authorize private source objects
• CVE-2026-54090highFile Browser has a Command Execution Allowlist Bypass via Shell Metacharacter Injection
• CVE-2026-63461mediumCVE-2026-63461 updated by NVD
• CVE-2026-61568criticalCVE-2026-61568 updated by NVD
• CVE-2026-59151criticalCVE-2026-59151 updated by NVD
• CVE-2026-86081highCVE-2026-86081 updated by NVD
• CVE-2026-75912highCVE-2026-75912 updated by NVD
• CVE-2026-70609mediumCVE-2026-70609 updated by NVD
• CVE-2026-11393highCVE-2026-11393 updated by NVD
• CVE-2026-59222mediumOpen WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentials
• CVE-2026-9689mediumCVE-2026-9689 updated by NVD
• CVE-2026-61842mediumCVE-2026-61842 updated by NVD
• CVE-2026-82394mediumCVE-2026-82394 updated by NVD
• CVE-2026-73228mediumCVE-2026-73228 updated by NVD
• CVE-2026-55527highCVE-2026-55527 updated by NVD
• CVE-2026-73567criticalCVE-2026-73567 updated by NVD
• CVE-2026-73306mediumCVE-2026-73306 updated by NVD
• CVE-2026-59891criticalCVE-2026-59891 updated by NVD
• CVE-2026-32686mediumCVE-2026-32686 updated by NVD
• CVE-2026-86073mediumCVE-2026-86073 updated by NVD
• CVE-2026-84378mediumCVE-2026-84378 updated by NVD
• CVE-2026-54133criticaljmespath.php has CompilerRuntime code injection via unescaped function names
• CVE-2026-69240criticalCVE-2026-69240 updated by NVD
• CVE-2026-54908mediumPion DTLS vulnerable to denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange messag
• CVE-2026-54725criticalCVE-2026-54725 updated by NVD
• CVE-2026-54078highCVE-2026-54078 updated by NVD
• CVE-2026-54079highCVE-2026-54079 updated by NVD
• CVE-2026-44210mediumCVE-2026-44210 updated by NVD
• CVE-2026-42571criticalCVE-2026-42571 updated by NVD
• CVE-2026-33665highn8n: LDAP Email-Based Account Linking Allows Privilege Escalation and Account Takeover
• CVE-2026-56393lowCraft CMS Vulnerable to Stored XSS in Settings Names and Field Options
• CVE-2026-73560mediumCVE-2026-73560 updated by NVD
• CVE-2026-55248criticalCVE-2026-55248 updated by NVD
• CVE-2026-45019highCVE-2026-45019 updated by NVD
• CVE-2026-67425highCVE-2026-67425 updated by NVD
• CVE-2026-67213highCVE-2026-67213 updated by NVD
• CVE-2026-8074lowMattermost doesn't enforce bot-specific permission checks on the user active status endpoint
• CVE-2026-75595criticalCVE-2026-75595 updated by NVD
• CVE-2026-82562mediumCVE-2026-82562 updated by NVD
• CVE-2026-63337highCVE-2026-63337 updated by NVD
• CVE-2026-70657mediumCVE-2026-70657 updated by NVD
• CVE-2026-71851criticalCVE-2026-71851 updated by NVD
• CVE-2026-41848lowCVE-2026-41848 updated by NVD
• CVE-2026-85716lowCVE-2026-85716 updated by NVD
• CVE-2026-79921highCVE-2026-79921 updated by NVD
• CVE-2026-73556mediumCVE-2026-73556 updated by NVD
• CVE-2026-61556highCVE-2026-61556 updated by NVD
• CVE-2026-54563highCloudreve WebDAV (`/dav`) has Path Traversal / Broken Access Control — scoped DAV credential escapes its confi
• CVE-2026-47686criticalCVE-2026-47686 updated by NVD
• CVE-2026-59259mediumn8n: External Secrets Permission Bypass via Expression Parser Mismatch
• CVE-2026-55886mediumjodit: Prototype pollution in Jodit via Jodit.modules.Helpers.set()
• CVE-2026-71309highCVE-2026-71309 updated by NVD
• CVE-2026-53599highCVE-2026-53599 updated by NVD
• CVE-2026-59257mediumn8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation
• CVE-2026-12208mediumCVE-2026-12208 updated by NVD
• CVE-2026-75831mediumCVE-2026-75831 updated by NVD
• CVE-2026-72810criticalCVE-2026-72810 updated by NVD
• CVE-2026-54766mediumCVE-2026-54766 updated by NVD
• CVE-2026-59989criticalCVE-2026-59989 updated by NVD
• CVE-2026-69255criticalCVE-2026-69255 updated by NVD
• CVE-2026-13697highCVE-2026-13697 updated by NVD
• CVE-2026-73307mediumCVE-2026-73307 updated by NVD
• CVE-2026-59820mediumLiteLLM: Arbitrary file write via path traversal in Skills archive extraction
• CVE-2026-41841mediumCVE-2026-41841 updated by NVD
• CVE-2026-43966mediumCVE-2026-43966 updated by NVD
• CVE-2026-44788mediumCVE-2026-44788 updated by NVD
• CVE-2026-77634highCVE-2026-77634 updated by NVD
• CVE-2026-71553highCVE-2026-71553 updated by NVD
• CVE-2026-42350mediumCVE-2026-42350 updated by NVD
• CVE-2026-65959mediumCVE-2026-65959 updated by NVD
• CVE-2026-69253criticalCVE-2026-69253 updated by NVD
• CVE-2026-54588criticalPoweradmin has Host Header Injection in OIDC redirect_uri, SAML ACS/SLO URL, and Logout Redirect Construction.
• CVE-2026-50886criticalProject Firefly III has incorrect access control in the webhook management component
• CVE-2026-84303mediumCVE-2026-84303 updated by NVD
• CVE-2026-68584criticalCVE-2026-68584 updated by NVD
• CVE-2026-55855mediumCVE-2026-55855 updated by NVD
• CVE-2026-64665highCVE-2026-64665 updated by NVD
• CVE-2026-73422mediumCVE-2026-73422 updated by NVD
• CVE-2026-45711mediumCVE-2026-45711 updated by NVD
• CVE-2026-55461mediumSnipe-IT has an Open Redirect After User Edit
• CVE-2026-47683highCVE-2026-47683 updated by NVD
• CVE-2026-13506highCVE-2026-13506 updated by NVD
• CVE-2026-58423highGitea: LFS authentication bypass via malformed SSH sub-verb allows unauthorized read access to private reposit
• CVE-2026-59727lowCVE-2026-59727 updated by NVD
• CVE-2026-7387highMattermost doesn't require role-management authorization when setting the scheme_admin flag on group syncable
• CVE-2026-18401mediumCVE-2026-18401 updated by NVD
• CVE-2026-85061criticalCVE-2026-85061 updated by NVD
• CVE-2026-18504mediumCVE-2026-18504 updated by NVD
• CVE-2026-62680highCVE-2026-62680 updated by NVD
• CVE-2026-54614mediumCVE-2026-54614 updated by NVD
• CVE-2026-54572highrclone: Unvalidated symlink target in local `--links` — arbitrary file write from an untrusted remote
• CVE-2026-63758mediumCVE-2026-63758 updated by NVD
• CVE-2026-56383lowCraft CMS has Stored XSS in Table Field in its "Row Heading" Column Type
• CVE-2026-66064mediumCVE-2026-66064 updated by NVD
• CVE-2026-59216highOpen WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id
• CVE-2026-72697highCVE-2026-72697 updated by NVD
• CVE-2026-79676highCVE-2026-79676 updated by NVD
• CVE-2026-72806mediumCVE-2026-72806 updated by NVD
• CVE-2026-54910highCVE-2026-54910 updated by NVD
• CVE-2026-54511highCVE-2026-54511 updated by NVD
• CVE-2026-73647mediumCVE-2026-73647 updated by NVD
• CVE-2026-41728highCVE-2026-41728 updated by NVD
• CVE-2026-88000mediumCVE-2026-88000 updated by NVD
• CVE-2026-88002mediumCVE-2026-88002 updated by NVD
• CVE-2026-64662mediumCVE-2026-64662 updated by NVD
• CVE-2026-70493mediumCVE-2026-70493 updated by NVD
• CVE-2026-59219highOpen WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logout
• CVE-2026-6961highMattermost doesn't sanitize FileInfo.Name received from federated peers during shared channel file sync
• CVE-2026-77567highCVE-2026-77567 updated by NVD
• CVE-2026-55763highCVE-2026-55763 updated by NVD
• CVE-2026-47835highSpring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFi
• CVE-2026-10221mediumCVE-2026-10221 updated by NVD
• CVE-2026-79771mediumCVE-2026-79771 updated by NVD
• CVE-2026-63458highCVE-2026-63458 updated by NVD
• CVE-2026-61625mediumCVE-2026-61625 updated by NVD
• CVE-2026-59226lowOpen WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocation
• CVE-2026-59938mediumpypdf: Possible large memory usage for wrong image dimensions
• CVE-2026-46607highGlances has Insecure Pickle Deserialization in its Version Cache that Leads to Arbitrary Code Execution
• CVE-2026-45674highCVE-2026-45674 updated by NVD
• CVE-2026-11477lowCVE-2026-11477 updated by NVD
• CVE-2026-88012mediumCVE-2026-88012 updated by NVD
• CVE-2026-55588mediumCVE-2026-55588 updated by NVD
• CVE-2026-55425mediumCVE-2026-55425 updated by NVD
• CVE-2026-54556highCVE-2026-54556 updated by NVD
• CVE-2026-55619mediumCVE-2026-55619 updated by NVD
• CVE-2026-77354highCVE-2026-77354 updated by NVD
• CVE-2026-55839highCVE-2026-55839 updated by NVD
• CVE-2026-59881mediumCVE-2026-59881 updated by NVD
• CVE-2026-54081mediumCVE-2026-54081 updated by NVD
• CVE-2026-54080mediumCVE-2026-54080 updated by NVD
• CVE-2024-56526highOXID eShop May Display User Information
• CVE-2026-83619highCVE-2026-83619 updated by NVD
• CVE-2026-83612highCVE-2026-83612 updated by NVD
• CVE-2026-83606highCVE-2026-83606 updated by NVD
• CVE-2026-65842highCVE-2026-65842 updated by NVD
• CVE-2026-82398mediumCVE-2026-82398 updated by NVD
• CVE-2026-53653highGrav: Unauthenticated denial of service via unbounded image derivative dimensions
• CVE-2026-50567highFission: Zip Slip in pkg/utils/zip.go:Unarchive allows fetcher to write outside the destination directory
• CVE-2026-54696lowRuby json: JSON generator heap buffer overflow when streaming to an IO
• CVE-2026-55689mediumOpenFGA: OIDC audience validation skipped when --authn-oidc-audience is unset
• CVE-2026-11986mediumCVE-2026-11986 updated by NVD
• CVE-2026-11470lowCVE-2026-11470 updated by NVD
• CVE-2026-86071lowCVE-2026-86071 updated by NVD
• CVE-2026-61597mediumCVE-2026-61597 updated by NVD
• CVE-2026-54732mediumCVE-2026-54732 updated by NVD
• CVE-2026-55618mediumCVE-2026-55618 updated by NVD
• CVE-2026-69244highCVE-2026-69244 updated by NVD
• CVE-2026-65841mediumCVE-2026-65841 updated by NVD
• CVE-2026-61588mediumCVE-2026-61588 updated by NVD
• CVE-2026-61634unknownCVE-2026-61634 updated by NVD
• CVE-2026-76219highCVE-2026-76219 updated by NVD
• CVE-2026-70481mediumCVE-2026-70481 updated by NVD
• CVE-2026-6673mediumMattermost doesn't authenticate Atlassian Connect installed callbacks, allowing a remote unauthenticated attac
• CVE-2026-41007highCVE-2026-41007 updated by NVD
• CVE-2026-54754criticalCVE-2026-54754 updated by NVD
• CVE-2026-70592mediumCVE-2026-70592 updated by NVD
• CVE-2026-58419highGitea: Notification API leaks private issue metadata after access revocation
• CVE-2026-53474criticalOpenshift Migration Advisor: Improper input sanitization allows specially crafted RVTools .xlsx files to inclu
• CVE-2024-9355mediumCVE-2024-9355 updated by NVD
• CVE-2026-71316highCVE-2026-71316 updated by NVD
• CVE-2026-70494highCVE-2026-70494 updated by NVD
• CVE-2026-59213lowOpen WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builde
• CVE-2026-59206highn8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration
• CVE-2026-52845highCaddy: FastCGI header normalization bypass in `forward_auth copy_headers`
• CVE-2026-85078mediumCVE-2026-85078 updated by NVD
• CVE-2026-88059mediumCVE-2026-88059 updated by NVD
• CVE-2026-73086highCVE-2026-73086 updated by NVD
• CVE-2026-64663mediumCVE-2026-64663 updated by NVD
• CVE-2026-70475highCVE-2026-70475 updated by NVD
• CVE-2026-56820highCVE-2026-56820 updated by NVD
• CVE-2026-62676highCVE-2026-62676 updated by NVD
• CVE-2026-55464mediumSnipe-IT vulnerable to stored XSS via Markdown custom field
• CVE-2026-62909highCVE-2026-62909 updated by NVD
• CVE-2026-70489mediumCVE-2026-70489 updated by NVD
• CVE-2026-9856highCVE-2026-9856 updated by NVD
• CVE-2026-69160mediumCVE-2026-69160 updated by NVD
• CVE-2026-88046mediumCVE-2026-88046 updated by NVD
• CVE-2026-77635criticalCVE-2026-77635 updated by NVD
• CVE-2026-78681highCVE-2026-78681 updated by NVD
• CVE-2026-76969criticalCVE-2026-76969 updated by NVD
• CVE-2026-73644criticalCVE-2026-73644 updated by NVD
• CVE-2026-59209highn8n: Shared Credential Header Leak via HTTP Request Pagination Expression
• CVE-2026-55773highCedarJava has policy injection vulnerability
• CVE-2026-50631highCVE-2026-50631 updated by NVD
• CVE-2026-53469criticalOpenshift Migration Advisor lacks proper authorization and filtering for its DELETE /api/v1/sources API
• CVE-2026-44570highOpen WebUI has inconsistent authorization controls within memories API
• CVE-2026-72789criticalCVE-2026-72789 updated by NVD
• CVE-2026-84307lowCVE-2026-84307 updated by NVD
• CVE-2026-63335mediumCVE-2026-63335 updated by NVD
• CVE-2026-73308mediumCVE-2026-73308 updated by NVD
• CVE-2026-63751mediumCVE-2026-63751 updated by NVD
• CVE-2025-61682highCVE-2025-61682 updated by NVD
• CVE-2026-63459highCVE-2026-63459 updated by NVD
• CVE-2026-61592highCVE-2026-61592 updated by NVD
• CVE-2026-78683criticalCVE-2026-78683 updated by NVD
• CVE-2026-71556highCVE-2026-71556 updated by NVD
• CVE-2026-69192highCVE-2026-69192 updated by NVD
• CVE-2026-54729highCVE-2026-54729 updated by NVD
• CVE-2026-13346mediumCVE-2026-13346 updated by NVD
• CVE-2026-59217mediumOpen WebUI: Upload `metadata.knowledge_id` bypasses the knowledge-base write-access check (read-only users can
• CVE-2026-54286mediumhono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)
• CVE-2026-86075highCVE-2026-86075 updated by NVD
• CVE-2026-77078highCVE-2026-77078 updated by NVD
• CVE-2026-85062mediumCVE-2026-85062 updated by NVD
• CVE-2026-73843criticalCVE-2026-73843 updated by NVD
• CVE-2026-69127mediumCVE-2026-69127 updated by NVD
• CVE-2026-55536criticalCVE-2026-55536 updated by NVD
• CVE-2026-55525highCVE-2026-55525 updated by NVD
• CVE-2026-10740mediums2n-quic has excessive memory allocation
• CVE-2026-71848mediumCVE-2026-71848 updated by NVD
• CVE-2026-66062mediumCVE-2026-66062 updated by NVD
• CVE-2026-69251criticalCVE-2026-69251 updated by NVD
• CVE-2026-67426criticalCVE-2026-67426 updated by NVD
• CVE-2026-67430mediumCVE-2026-67430 updated by NVD
• CVE-2026-73429mediumCVE-2026-73429 updated by NVD
• CVE-2026-54421mediumCVE-2026-54421 updated by NVD
• CVE-2026-53476criticalAssisted Migration Agent: Path traversal in gzipped tarball handling enables arbitrary file write and remote c
• CVE-2026-59965highCVE-2026-59965 updated by NVD
• CVE-2026-18654mediumCVE-2026-18654 updated by NVD
• CVE-2026-71437mediumCVE-2026-71437 updated by NVD
• CVE-2026-70593mediumCVE-2026-70593 updated by NVD
• CVE-2026-59890mediumsetuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/
• CVE-2026-88004highCVE-2026-88004 updated by NVD
• CVE-2026-73495highCVE-2026-73495 updated by NVD
• CVE-2026-48501highCVE-2026-48501 updated by NVD
• CVE-2026-70474highCVE-2026-70474 updated by NVD
• CVE-2026-15925criticalSnowflake Connector for Python improperly verifies TLS hostnames
• CVE-2026-41855highCVE-2026-41855 updated by NVD
• CVE-2026-53500highCVE-2026-53500 updated by NVD
• CVE-2026-5139mediumMattermost doesn't enforce administrator authorization on the {{setDefaultInstance}} call within the {{/gitlab
• CVE-2026-50887criticalshlink has a Server-Side Request Forgery issue
• CVE-2026-49138mediumCVE-2026-49138 updated by NVD
• CVE-2026-75523mediumCVE-2026-75523 updated by NVD
• CVE-2026-70476highCVE-2026-70476 updated by NVD
• CVE-2026-67435mediumCVE-2026-67435 updated by NVD
• CVE-2026-54666highCVE-2026-54666 updated by NVD
• CVE-2026-59224highOpen WebUI: Terminal proxy forwards a spoofable, integrity-unbound user identity to the upstream (X-User-Id he
• CVE-2026-59214highOpen WebUI: Stored web worker XSS via Pyodide
• CVE-2026-20909mediumGitea exposes tracked time entries without repository authorization
• CVE-2026-50884highstatping-ng allows attackers to escalate privileges to Administrator and access sensitive components
• CVE-2026-53471criticalOpenshift Migration Advisor agent-API fails to validate JWT source_id claim, allowing cross-tenant data manipu
• CVE-2026-56666mediumZITADEL: Auto-linking by email: IdP-side email verification is not checked
• CVE-2026-50650highCVE-2026-50650 updated by NVD
• CVE-2026-8404lowCVE-2026-8404 updated by NVD
• CVE-2026-55785lowCVE-2026-55785 updated by NVD
• CVE-2026-61807mediumCVE-2026-61807 updated by NVD
• CVE-2026-55223mediumc3p0 can, in combination with other libraries, compose to a "sink" for deserialization gadgets
• CVE-2026-52796lowGogs has DoS in rendering issue index pattern
• CVE-2026-63738mediumCVE-2026-63738 updated by NVD
• CVE-2026-72808mediumCVE-2026-72808 updated by NVD
• CVE-2026-55571highCVE-2026-55571 updated by NVD
• CVE-2026-54719highCVE-2026-54719 updated by NVD
• CVE-2026-54338mediumCVE-2026-54338 updated by NVD
• CVE-2026-53436mediumJenkins Open Redirect via Relative Path Segments in Post-Login Redirect URL
• CVE-2026-61682criticalCVE-2026-61682 updated by NVD
• CVE-2026-53877mediumDjango: GDALRaster may over-read heap memory when constructed from bytes
• CVE-2026-57495highCVE-2026-57495 updated by NVD
• CVE-2026-11500lowCVE-2026-11500 updated by NVD
• CVE-2026-42523criticalJenkins GitHub Plugin has an XSS vulnerability
• CVE-2026-87015mediumCVE-2026-87015 updated by NVD
• CVE-2026-86995mediumCVE-2026-86995 updated by NVD
• CVE-2026-86078mediumCVE-2026-86078 updated by NVD
• CVE-2026-19693highCVE-2026-19693 updated by NVD
• CVE-2026-53668mediumCVE-2026-53668 updated by NVD
• CVE-2026-53470criticalOpenshift Migration Advisor: Broken access control in migration-planner image-url endpoint exposes other users
• CVE-2026-41711mediumCVE-2026-41711 updated by NVD
• CVE-2026-41710mediumCVE-2026-41710 updated by NVD
• CVE-2026-84369mediumCVE-2026-84369 updated by NVD
• CVE-2026-63641lowCVE-2026-63641 updated by NVD
• CVE-2026-59893highCVE-2026-59893 updated by NVD
• CVE-2026-70471highCVE-2026-70471 updated by NVD
• CVE-2026-67316mediumCVE-2026-67316 updated by NVD
• CVE-2026-87014mediumCVE-2026-87014 updated by NVD
• CVE-2026-86083highCVE-2026-86083 updated by NVD
• CVE-2026-82333highCVE-2026-82333 updated by NVD
• CVE-2026-76098highCVE-2026-76098 updated by NVD
• CVE-2026-55854mediumCVE-2026-55854 updated by NVD
• CVE-2026-59992mediumCVE-2026-59992 updated by NVD
• CVE-2026-54768mediumCVE-2026-54768 updated by NVD
• CVE-2026-45820mediumCVE-2026-45820 updated by NVD
• CVE-2026-63761mediumCVE-2026-63761 updated by NVD
• CVE-2026-41708highSpring Cloud Sleuth instrumentation of Spring TX DoS vulnerability
• CVE-2026-50634mediumCVE-2026-50634 updated by NVD