Security advisories — page 7

• CVE-2026-79770highCVE-2026-79770 updated by NVD
• CVE-2026-9769highCVE-2026-9769 updated by NVD
• CVE-2026-55541highCVE-2026-55541 updated by NVD
• CVE-2026-54765mediumTraefik: Gateway HTTPRoute backendRef filters can leak backend context across routes sharing a Service:port
• CVE-2026-71312highCVE-2026-71312 updated by NVD
• CVE-2026-69198mediumCVE-2026-69198 updated by NVD
• CVE-2026-67431highCVE-2026-67431 updated by NVD
• CVE-2026-55415highCVE-2026-55415 updated by NVD
• CVE-2026-55590mediumCakePHP Authentication: Open redirect weakness via backslash bypass
• CVE-2026-56266criticalCrawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution
• CVE-2026-41006highCVE-2026-41006 updated by NVD
• CVE-2026-46356mediumFleet: IP spoofing allows bypassing API rate limiting
• CVE-2026-72812mediumCVE-2026-72812 updated by NVD
• CVE-2026-63004mediumCVE-2026-63004 updated by NVD
• CVE-2026-69243mediumCVE-2026-69243 updated by NVD
• CVE-2026-67322highCVE-2026-67322 updated by NVD
• CVE-2024-4029mediumWildfly vulnerable to denial of service
• CVE-2026-73229mediumCVE-2026-73229 updated by NVD
• CVE-2026-55566mediumCVE-2026-55566 updated by NVD
• CVE-2026-52855criticalCVE-2026-52855 updated by NVD
• CVE-2026-50570highFission: Incomplete capability denylist in Environment/Function PodSpec validation allows tenant-added CAP_SYS
• CVE-2026-81525highCVE-2026-81525 updated by NVD
• CVE-2026-48599highgRPC Erlang package's path bindings are overridable by query string and request body
• CVE-2026-54756mediumJodit has prototype pollution via Jodit.configure() / ConfigMerge
• CVE-2026-54546mediumCVE-2026-54546 updated by NVD
• CVE-2026-76839highCVE-2026-76839 updated by NVD
• CVE-2026-55540highCVE-2026-55540 updated by NVD
• CVE-2026-55528highCVE-2026-55528 updated by NVD
• CVE-2026-55772highCVE-2026-55772 updated by NVD
• CVE-2026-46448mediumOpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
• CVE-2026-35596mediumVikunja has Broken Access Control on Label Read via SQL Operator Precedence Bug
• CVE-2026-61559criticalCVE-2026-61559 updated by NVD
• CVE-2026-56677highCVE-2026-56677 updated by NVD
• CVE-2026-85058highCVE-2026-85058 updated by NVD
• CVE-2026-84367lowCVE-2026-84367 updated by NVD
• CVE-2026-55066highCVE-2026-55066 updated by NVD
• CVE-2026-54664highCVE-2026-54664 updated by NVD
• CVE-2026-54661highCVE-2026-54661 updated by NVD
• CVE-2026-54662highCVE-2026-54662 updated by NVD
• CVE-2026-88001mediumCVE-2026-88001 updated by NVD
• CVE-2026-55834mediumCVE-2026-55834 updated by NVD
• CVE-2026-54746mediumCVE-2026-54746 updated by NVD
• CVE-2026-52888mediumNocoBase: Sensitive Data Exposure via SQL Blacklist Bypass
• CVE-2026-59728mediumCVE-2026-59728 updated by NVD
• CVE-2026-87012mediumCVE-2026-87012 updated by NVD
• CVE-2026-87013mediumCVE-2026-87013 updated by NVD
• CVE-2026-55064mediumCVE-2026-55064 updated by NVD
• CVE-2026-69263highCVE-2026-69263 updated by NVD
• CVE-2026-54603highCVE-2026-54603 updated by NVD
• CVE-2026-65599mediumCVE-2026-65599 updated by NVD
• CVE-2026-50146highAstro: Reflected XSS via unescaped slot name
• CVE-2026-65914mediumCVE-2026-65914 updated by NVD
• CVE-2026-63199highCVE-2026-63199 updated by NVD
• CVE-2026-87998highCVE-2026-87998 updated by NVD
• CVE-2026-73087lowCVE-2026-73087 updated by NVD
• CVE-2026-75858highCVE-2026-75858 updated by NVD
• CVE-2026-81724mediumCVE-2026-81724 updated by NVD
• CVE-2026-71315highCVE-2026-71315 updated by NVD
• CVE-2026-70484mediumCVE-2026-70484 updated by NVD
• CVE-2026-65598highCVE-2026-65598 updated by NVD
• CVE-2026-56665mediumZITADEL: Missing Token Expiration (`exp`) Validation in JWT IdP Provider
• CVE-2026-65834mediumCVE-2026-65834 updated by NVD
• CVE-2026-10222lowCVE-2026-10222 updated by NVD
• CVE-2026-44569highOpen WebUI's Insecure Message Access Breaks Authorization
• CVE-2026-59254mediumn8n: External Secrets Accessible via Workflow Expressions Outside Credentials
• CVE-2026-53782medium@steipete/summarize vulnerable to SSRF via podcast:transcript URL fetch
• CVE-2026-45709mediumCVE-2026-45709 updated by NVD
• CVE-2026-86993mediumCVE-2026-86993 updated by NVD
• CVE-2026-80206highCVE-2026-80206 updated by NVD
• CVE-2026-54720mediumSilverstripe Framework: Possible XSS attack through media embed
• CVE-2026-54284highCVE-2026-54284 updated by NVD
• CVE-2026-71491highCVE-2026-71491 updated by NVD
• CVE-2026-54712mediumOpenTelemetry Javaagent RMI context propagation allows resource exhaustion
• CVE-2026-54609highCVE-2026-54609 updated by NVD
• CVE-2026-59207highn8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector
• CVE-2026-41849highCVE-2026-41849 updated by NVD
• CVE-2026-59148high@Mockoon/commons-server: Unauthenticated admin API + wildcard CORS allows mock-state hijack and secret theft
• CVE-2026-68927lowCVE-2026-68927 updated by NVD
• CVE-2026-54737highCVE-2026-54737 updated by NVD
• CVE-2026-41696mediumCVE-2026-41696 updated by NVD
• CVE-2026-32599mediumCVE-2026-32599 updated by NVD
• CVE-2026-86084mediumCVE-2026-86084 updated by NVD
• CVE-2026-84379mediumCVE-2026-84379 updated by NVD
• CVE-2026-73558mediumCVE-2026-73558 updated by NVD
• CVE-2026-82417mediumCVE-2026-82417 updated by NVD
• CVE-2026-55558mediumCVE-2026-55558 updated by NVD
• CVE-2026-70492highCVE-2026-70492 updated by NVD
• CVE-2026-81726highCVE-2026-81726 updated by NVD
• CVE-2026-70491mediumCVE-2026-70491 updated by NVD
• CVE-2026-70479highCVE-2026-70479 updated by NVD
• CVE-2026-69252highCVE-2026-69252 updated by NVD
• CVE-2026-48169highCVE-2026-48169 updated by NVD
• CVE-2025-71401criticalCVE-2025-71401 updated by NVD
• CVE-2026-69214mediumCVE-2026-69214 updated by NVD
• CVE-2026-55643highCVE-2026-55643 updated by NVD
• CVE-2026-70608highCVE-2026-70608 updated by NVD
• CVE-2026-59227mediumOpen WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation p
• CVE-2026-55538highCVE-2026-55538 updated by NVD
• CVE-2026-70588mediumCVE-2026-70588 updated by NVD
• CVE-2026-59819lowLiteLLM: Local file read via request-supplied OIDC file references
• CVE-2026-72796mediumCVE-2026-72796 updated by NVD
• CVE-2026-60093mediumCVE-2026-60093 updated by NVD
• CVE-2026-59817mediumGhost: Paid gift memberships obtainable at minimal cost via the donations feature
• CVE-2026-6739mediumMattermost doesn't require system-level permission when patching protected default system roles
• CVE-2026-41720highCVE-2026-41720 updated by NVD
• CVE-2026-72798criticalCVE-2026-72798 updated by NVD
• CVE-2026-68517mediumCVE-2026-68517 updated by NVD
• CVE-2026-86085mediumCVE-2026-86085 updated by NVD
• CVE-2026-84368lowCVE-2026-84368 updated by NVD
• CVE-2026-73555mediumCVE-2026-73555 updated by NVD
• CVE-2026-72804criticalCVE-2026-72804 updated by NVD
• CVE-2026-59215lowOpen WebUI: Private channel messages can be disclosed through cross-channel thread parent_id binding
• CVE-2026-7184mediumMattermost doesn't sanitize the Remote Cluster API response on PATCH operations
• CVE-2026-85720mediumCVE-2026-85720 updated by NVD
• CVE-2026-15305mediumCVE-2026-15305 updated by NVD
• CVE-2026-71211highCVE-2026-71211 updated by NVD
• CVE-2026-54272mediumCVE-2026-54272 updated by NVD
• CVE-2026-63397highCVE-2026-63397 updated by NVD
• CVE-2026-82659highCVE-2026-82659 updated by NVD
• CVE-2026-88976mediumCVE-2026-88976 updated by NVD
• CVE-2026-78682highCVE-2026-78682 updated by NVD
• CVE-2026-55784highCVE-2026-55784 updated by NVD
• CVE-2026-13505highCVE-2026-13505 updated by NVD
• CVE-2026-71847highCVE-2026-71847 updated by NVD
• CVE-2026-71313mediumCVE-2026-71313 updated by NVD
• CVE-2026-10051mediumEclipse Jetty: Cross-Request Leakage for trailers on HTTP/1.1 keep-alive connections
• CVE-2026-53475criticalAssisted Migration Agent: Hardcoded insecure Transport Layer Security (TLS) connections during vCenter communi
• CVE-2026-11466lowCVE-2026-11466 updated by NVD
• CVE-2026-0767mediumWithdrawn Advisory: Open WebUI/ZDI-CAN-28259
• CVE-2025-71354highPicklescan has a missing detection when calling built-in python idlelib.debugobj.ObjectTreeItem
• CVE-2026-58191mediumAppium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig* routes
• CVE-2026-55534highCVE-2026-55534 updated by NVD
• CVE-2026-68508highCVE-2026-68508 updated by NVD
• CVE-2026-69249highCVE-2026-69249 updated by NVD
• CVE-2026-67439mediumCVE-2026-67439 updated by NVD
• CVE-2024-7708highEclipse Jetty: DoS attack triggering OutOfMemory with 100-Continue requests
• CVE-2026-67354highCVE-2026-67354 updated by NVD
• CVE-2026-6634lowMemos has an Incorrect Privilege Assignment issue
• CVE-2026-59163criticalCVE-2026-59163 updated by NVD
• CVE-2026-73557mediumCVE-2026-73557 updated by NVD
• CVE-2026-55547mediumCVE-2026-55547 updated by NVD
• CVE-2026-48786mediumCVE-2026-48786 updated by NVD
• CVE-2026-64664mediumCVE-2026-64664 updated by NVD
• CVE-2026-73301mediumCVE-2026-73301 updated by NVD
• CVE-2026-42597mediumGotenberg allows Chromium URL conversion routes to read arbitrary files under /tmp via file:// scheme
• CVE-2026-56381lowCraft CMS Vulnerable to Stored XSS via User Group Name in User Permissions Page
• CVE-2026-72811criticalCVE-2026-72811 updated by NVD
• CVE-2026-71428criticalCVE-2026-71428 updated by NVD
• CVE-2026-81892highCVE-2026-81892 updated by NVD
• CVE-2026-70487mediumCVE-2026-70487 updated by NVD
• CVE-2026-50558mediumCVE-2026-50558 updated by NVD
• CVE-2026-72794criticalCVE-2026-72794 updated by NVD
• CVE-2026-54757highCVE-2026-54757 updated by NVD
• CVE-2026-63743mediumCVE-2026-63743 updated by NVD
• CVE-2025-71390mediumCVE-2025-71390 updated by NVD
• CVE-2026-56743mediumCilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is conf
• CVE-2026-52800highGogs Vulnerable to CSRF Leading to Organization Owner Takeover
• CVE-2026-55170lowOpenFGA Improper Policy Enforcement
• CVE-2026-54290highhono: CORS Middleware reflects any Origin with credentials when `origin` defaults to the wildcard
• CVE-2026-50888highKoillection has an authenticated Server-Side Request Forgery issue
• CVE-2026-5199lowTemporal Server: attacker-controlled namespace could signal, delete, and reset workflows or activities in a vi
• CVE-2026-55531mediumCVE-2026-55531 updated by NVD
• CVE-2026-43983highPocket ID: OIDC refresh token flow bypasses authorization revocation, account disabling, and group restriction
• CVE-2026-59888mediumjackson-databind: @JsonIgnore on a Record property is bypassed with a PropertyNamingStrategy
• CVE-2026-67353mediumCVE-2026-67353 updated by NVD
• CVE-2026-41840mediumCVE-2026-41840 updated by NVD
• CVE-2026-45712mediumCVE-2026-45712 updated by NVD
• CVE-2026-88011mediumCVE-2026-88011 updated by NVD
• CVE-2026-86082highCVE-2026-86082 updated by NVD
• CVE-2026-82395mediumCVE-2026-82395 updated by NVD
• CVE-2026-71415highCVE-2026-71415 updated by NVD
• CVE-2026-55067mediumCVE-2026-55067 updated by NVD
• CVE-2026-70473highCVE-2026-70473 updated by NVD
• CVE-2026-70472highCVE-2026-70472 updated by NVD
• CVE-2026-69262highCVE-2026-69262 updated by NVD
• CVE-2026-69257highCVE-2026-69257 updated by NVD
• CVE-2026-25534criticalSpinnaker clouddriver and orca URL validation bypass via underscores in hostnames
• CVE-2026-79772mediumCVE-2026-79772 updated by NVD
• CVE-2026-63406mediumCVE-2026-63406 updated by NVD
• CVE-2026-68587criticalCVE-2026-68587 updated by NVD
• CVE-2026-73491lowCVE-2026-73491 updated by NVD
• CVE-2026-6873lowCVE-2026-6873 updated by NVD
• CVE-2026-54356highCVE-2026-54356 updated by NVD
• CVE-2026-54624mediumCVE-2026-54624 updated by NVD
• CVE-2026-70483lowCVE-2026-70483 updated by NVD
• CVE-2026-64865mediumCVE-2026-64865 updated by NVD
• CVE-2026-58230highCVE-2026-58230 updated by NVD
• CVE-2026-54706mediumCVE-2026-54706 updated by NVD
• CVE-2026-54660highCVE-2026-54660 updated by NVD
• CVE-2026-58418mediumGitea: SSRF via HTTP Redirect in Repository Migration
• CVE-2026-33625highCVE-2026-33625 updated by NVD
• CVE-2026-69216mediumCVE-2026-69216 updated by NVD
• CVE-2026-73650highCVE-2026-73650 updated by NVD
• CVE-2026-76846highCVE-2026-76846 updated by NVD
• CVE-2026-72698highCVE-2026-72698 updated by NVD
• CVE-2026-78679highCVE-2026-78679 updated by NVD
• CVE-2026-72793criticalCVE-2026-72793 updated by NVD
• CVE-2026-72795criticalCVE-2026-72795 updated by NVD
• CVE-2026-72801highCVE-2026-72801 updated by NVD
• CVE-2026-68586criticalCVE-2026-68586 updated by NVD
• CVE-2026-63311mediumCVE-2026-63311 updated by NVD
• CVE-2026-55594mediumImageMagick: Stack Overflow in MVG decoder due to missing depth check.
• CVE-2026-78678highCVE-2026-78678 updated by NVD
• CVE-2026-54717mediumCVE-2026-54717 updated by NVD
• CVE-2026-71434mediumCVE-2026-71434 updated by NVD
• CVE-2026-59218mediumOpen WebUI: Account enumeration via observable login timing discrepancy
• CVE-2026-6062mediumMattermost doesn't validate channel ownership of an existing subscription before applying edits
• CVE-2026-41727mediumCVE-2026-41727 updated by NVD
• CVE-2026-61596highCVE-2026-61596 updated by NVD
• CVE-2026-63003mediumCVE-2026-63003 updated by NVD
• CVE-2026-54622mediumCVE-2026-54622 updated by NVD
• CVE-2026-53440mediumJenkins: Open Redirect phishing attacks possible via "from" parameter in "Delegate to servlet c
• CVE-2025-71392criticalCVE-2025-71392 updated by NVD
• CVE-2026-86049highCVE-2026-86049 updated by NVD
• CVE-2026-86996mediumCVE-2026-86996 updated by NVD
• CVE-2026-72921highCVE-2026-72921 updated by NVD
• CVE-2026-55694highCVE-2026-55694 updated by NVD
• CVE-2026-65601mediumCVE-2026-65601 updated by NVD
• CVE-2026-67319mediumCVE-2026-67319 updated by NVD
• CVE-2026-12482mediumCVE-2026-12482 updated by NVD
• CVE-2026-21724mediumGrafana OSS: Authorization bypass allows users with Editor role to modify protected webhook URLs without permi
• CVE-2026-91127highCVE-2026-91127 updated by NVD
• CVE-2026-72790mediumCVE-2026-72790 updated by NVD
• CVE-2026-72792mediumCVE-2026-72792 updated by NVD
• CVE-2026-72797mediumCVE-2026-72797 updated by NVD
• CVE-2026-72799mediumCVE-2026-72799 updated by NVD
• CVE-2026-72800mediumCVE-2026-72800 updated by NVD
• CVE-2026-72802mediumCVE-2026-72802 updated by NVD
• CVE-2026-72803mediumCVE-2026-72803 updated by NVD
• CVE-2026-72805mediumCVE-2026-72805 updated by NVD
• CVE-2026-73840mediumCVE-2026-73840 updated by NVD
• CVE-2026-68520mediumCVE-2026-68520 updated by NVD
• CVE-2026-71311mediumCVE-2026-71311 updated by NVD
• CVE-2026-53609criticalApostrophe has Server-Side Prototype Pollution in apos.util.set via patch operators that leads to process-wide
• CVE-2026-45831highChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission ap
• CVE-2026-31887highShopware: Unauthenticated data extraction possible through store-api.order endpoint
• CVE-2026-63670mediumCVE-2026-63670 updated by NVD
• CVE-2026-55481mediumSnipe-IT has CSS Injection via `header_color` Setting
• CVE-2026-71849lowCVE-2026-71849 updated by NVD
• CVE-2026-67424highCVE-2026-67424 updated by NVD
• CVE-2026-54291highPostgreSQL JDBC Driver: Silent channel-binding authentication downgrade via unsupported certificate algorithms
• CVE-2026-52812highGogs: LFS dedupe path leaks private repo content across tenants
• CVE-2026-15603mediumCVE-2026-15603 updated by NVD
• CVE-2026-43910highCVE-2026-43910 updated by NVD
• CVE-2026-54673highCVE-2026-54673 updated by NVD
• CVE-2026-48507highCVE-2026-48507 updated by NVD
• CVE-2026-27732highAVideo has Authenticated Server-Side Request Forgery via downloadURL in aVideoEncoder.json.php
• CVE-2025-66614mediumApache Tomcat - Client certificate verification bypass
• CVE-2026-69088highCVE-2026-69088 updated by NVD
• CVE-2026-55452mediumSnipe-IT has CSV formula injection in Activity Report export
• CVE-2026-63135highCVE-2026-63135 updated by NVD
• CVE-2026-53439mediumJenkins exposes other users' timezone and view names to users with Overall/Read permission
• CVE-2026-73292highCVE-2026-73292 updated by NVD
• CVE-2026-55859mediumCVE-2026-55859 updated by NVD
• CVE-2026-71307highCVE-2026-71307 updated by NVD
• CVE-2026-54764mediumTraefik: ForwardAuth middleware leaks X-Forwarded-Port spoofing via untrusted X-Forwarded-Proto when trustForw
• CVE-2026-66063mediumCVE-2026-66063 updated by NVD
• CVE-2026-7120mediumCVE-2026-7120 updated by NVD
• CVE-2026-73651mediumCVE-2026-73651 updated by NVD
• CVE-2026-67339mediumCVE-2026-67339 updated by NVD
• CVE-2026-71537mediumCVE-2026-71537 updated by NVD
• CVE-2026-73245mediumCVE-2026-73245 updated by NVD
• CVE-2026-75931highCVE-2026-75931 updated by NVD
• CVE-2026-76172highCVE-2026-76172 updated by NVD
• CVE-2026-55593mediumCVE-2026-55593 updated by NVD
• CVE-2026-73303highCVE-2026-73303 updated by NVD
• CVE-2026-61544highCVE-2026-61544 updated by NVD
• CVE-2026-84992mediumCVE-2026-84992 updated by NVD
• CVE-2026-77405criticalCVE-2026-77405 updated by NVD
• CVE-2026-54707mediumCVE-2026-54707 updated by NVD
• CVE-2026-54082mediumCVE-2026-54082 updated by NVD
• CVE-2026-53838mediumCVE-2026-53838 updated by NVD
• CVE-2026-11746criticalCentral Dogma: Hard-coded ZooKeeper replication secret 'ch4n63m3' with silent fallback enables cluster takeove
• CVE-2026-88017highCVE-2026-88017 updated by NVD
• CVE-2026-81725mediumCVE-2026-81725 updated by NVD
• CVE-2026-14643mediumCVE-2026-14643 updated by NVD
• CVE-2026-67355highCVE-2026-67355 updated by NVD
• CVE-2026-40994highCVE-2026-40994 updated by NVD
• CVE-2026-47121mediumCVE-2026-47121 updated by NVD
• CVE-2026-12210lowCVE-2026-12210 updated by NVD
• CVE-2026-61824highCVE-2026-61824 updated by NVD
• CVE-2026-10223lowCVE-2026-10223 updated by NVD
• CVE-2026-55228highCVE-2026-55228 updated by NVD
• CVE-2026-72782highCVE-2026-72782 updated by NVD
• CVE-2026-50569mediumFission: HTTPTrigger admission omits RelativeURL / Prefix validation; kubectl apply bypasses CLI checks
• CVE-2026-53675mediumCVE-2026-53675 updated by NVD
• CVE-2026-41697mediumCVE-2026-41697 updated by NVD
• CVE-2026-27892mediumCVE-2026-27892 updated by NVD
• CVE-2026-76081mediumCVE-2026-76081 updated by NVD
• CVE-2026-79674highCVE-2026-79674 updated by NVD
• CVE-2026-70591mediumCVE-2026-70591 updated by NVD
• CVE-2026-53607low@apostrophecms/file pretty-URL Vulnerable to Unauthenticated SSRF via Host header
• CVE-2026-71433mediumCVE-2026-71433 updated by NVD
• CVE-2026-58661mediumn8n: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File Uploads
• CVE-2026-40985mediumCVE-2026-40985 updated by NVD
• CVE-2026-4600highCVE-2026-4600 updated by NVD
• CVE-2026-73845mediumCVE-2026-73845 updated by NVD
• CVE-2026-55696mediumCVE-2026-55696 updated by NVD
• CVE-2026-14793mediumCraft CMS: Missing authorization check allows non-admin control panel users to reorder Global Sets
• CVE-2026-54704mediumOpenTelemetry Java Instrumentation: JDBC Auto-Instrumentation Logging Clear-Text Passwords
• CVE-2026-49447mediumCVE-2026-49447 updated by NVD
• CVE-2026-73424mediumCVE-2026-73424 updated by NVD
• CVE-2026-7879mediumCVE-2026-7879 updated by NVD
• CVE-2026-73844lowCVE-2026-73844 updated by NVD
• CVE-2026-59223mediumOpen WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary mat
• CVE-2026-12515mediumCVE-2026-12515 updated by NVD
• CVE-2026-41000lowCVE-2026-41000 updated by NVD
• CVE-2026-40991mediumCVE-2026-40991 updated by NVD
• CVE-2026-24834mediumKata Container to Guest micro VM privilege escalation
• CVE-2026-87995highCVE-2026-87995 updated by NVD
• CVE-2026-68921mediumCVE-2026-68921 updated by NVD
• CVE-2026-81723mediumCVE-2026-81723 updated by NVD
• CVE-2026-55856mediumCVE-2026-55856 updated by NVD
• CVE-2026-70485highCVE-2026-70485 updated by NVD
• CVE-2026-59715lowOpen WebUI: Unauthenticated WebSocket Access to Collaborative Document Handlers (ydoc:awareness:update, ydoc:d
• CVE-2026-55883highTilt: Cross-site WebSocket hijacking of the Tilt HUD stream
• CVE-2026-48522mediumPyJWKClient: missing scheme allowlist enables CVE-2024-21643-class SSRF + token forgery via file://, ftp://, d
• CVE-2026-84380mediumCVE-2026-84380 updated by NVD
• CVE-2026-63669mediumCVE-2026-63669 updated by NVD
• CVE-2026-69146mediumCVE-2026-69146 updated by NVD
• CVE-2026-18446highCVE-2026-18446 updated by NVD
• CVE-2026-16221highCVE-2026-16221 updated by NVD
• CVE-2026-48819mediumCVE-2026-48819 updated by NVD
• CVE-2026-46680highcontainerd user ID handling bypass allows runAsNonRoot evasion
• CVE-2026-75975highCVE-2026-75975 updated by NVD
• CVE-2026-75899highCVE-2026-75899 updated by NVD
• CVE-2026-54260mediumWagtail: Denial of service via unbounded filter specs in the image preview
• CVE-2026-53466mediumImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow
• CVE-2026-6733lowundici vulnerable to HTTP response queue poisoning via keep-alive socket reuse
• CVE-2026-11465lowCVE-2026-11465 updated by NVD
• CVE-2026-11745highCentral Dogma: SSH host-key verification permanently disabled in Git mirror (SshGitMirror)
• CVE-2026-55535mediumCVE-2026-55535 updated by NVD
• CVE-2026-11624criticalCVE-2026-11624 updated by NVD
• CVE-2026-9796mediumCVE-2026-9796 updated by NVD
• CVE-2026-72779highCVE-2026-72779 updated by NVD
• CVE-2024-13484highOpenShift GitOps Operator Namespace Isolation Break
• CVE-2026-88006mediumCVE-2026-88006 updated by NVD
• CVE-2026-87999highCVE-2026-87999 updated by NVD
• CVE-2026-88005mediumCVE-2026-88005 updated by NVD
• CVE-2026-69148highCVE-2026-69148 updated by NVD
• CVE-2026-47214highDocling: Unsafe URI and Path Handling in HTML Backend
• CVE-2026-46696lowCVE-2026-46696 updated by NVD
• CVE-2026-48776mediumLangGraph SDK has unsafe URL path construction
• CVE-2026-73262mediumCVE-2026-73262 updated by NVD
• CVE-2026-71293mediumCVE-2026-71293 updated by NVD
• CVE-2026-65899mediumCVE-2026-65899 updated by NVD
• CVE-2026-43972mediumCVE-2026-43972 updated by NVD
• CVE-2026-77339mediumCVE-2026-77339 updated by NVD
• CVE-2026-53949mediumGhost Content API filter bypass reveals private fields
• CVE-2026-66053mediumCVE-2026-66053 updated by NVD
• CVE-2026-12202lowCVE-2026-12202 updated by NVD
• CVE-2026-87994mediumCVE-2026-87994 updated by NVD
• CVE-2026-87997mediumCVE-2026-87997 updated by NVD
• CVE-2026-19418highCVE-2026-19418 updated by NVD
• CVE-2026-59732mediumCVE-2026-59732 updated by NVD
• CVE-2026-54020mediumCVE-2026-54020 updated by NVD
• CVE-2026-70488mediumCVE-2026-70488 updated by NVD
• CVE-2026-69246highCVE-2026-69246 updated by NVD
• CVE-2026-68930mediumCVE-2026-68930 updated by NVD
• CVE-2026-46606highGlances is Vulnerable to Command Injection via KVM/QEMU VM Domain Names in glances/plugins/vms/engines/virsh.p
• CVE-2026-53438mediumJenkins: Missing permission check allows unauthorized cancellation of queue items
• CVE-2026-84308mediumCVE-2026-84308 updated by NVD
• CVE-2026-54134highCVE-2026-54134 updated by NVD
• CVE-2026-71303highCVE-2026-71303 updated by NVD
• CVE-2026-55403lowCVE-2026-55403 updated by NVD
• CVE-2026-59225mediumOpen WebUI: Arena task endpoints can bypass underlying model access controls
• CVE-2026-41706mediumCVE-2026-41706 updated by NVD
• CVE-2026-87017mediumCVE-2026-87017 updated by NVD
• CVE-2026-53608high@apostrophecms/seo Vulnerable to Stored XSS via Unsanitized Google Analytics / GTM ID Injected into Script Tag
• CVE-2026-40987highCVE-2026-40987 updated by NVD
• CVE-2026-71318mediumCVE-2026-71318 updated by NVD
• CVE-2026-54690highCVE-2026-54690 updated by NVD
• CVE-2026-54691highCVE-2026-54691 updated by NVD
• CVE-2024-58367highCVE-2024-58367 updated by NVD
• CVE-2026-55825lowCVE-2026-55825 updated by NVD
• CVE-2026-54763highTraefik: Incomplete fix for CVE-2026-33433 + CVE-2026-39858 cross-cohort: headerField underscore-variant ident
• CVE-2026-53501highCVE-2026-53501 updated by NVD
• CVE-2026-54705mediumCVE-2026-54705 updated by NVD
• CVE-2026-10720mediumCanonical MicroCeph: path traversal issue in the remote-import AP
• CVE-2026-87996highCVE-2026-87996 updated by NVD
• CVE-2026-70490mediumCVE-2026-70490 updated by NVD
• CVE-2026-73652highCVE-2026-73652 updated by NVD
• CVE-2026-53830mediumCVE-2026-53830 updated by NVD
• CVE-2025-67505highRace condition in the Okta Java SDK
• CVE-2026-72809highCVE-2026-72809 updated by NVD
• CVE-2026-70604highCVE-2026-70604 updated by NVD
• CVE-2026-53947mediumGhost: Member existence leak via magic link sign-in response
• CVE-2026-53878mediumDjango: DomainNameValidator permits newline characters that may enable HTTP header injection
• CVE-2026-41719mediumCVE-2026-41719 updated by NVD
• CVE-2026-70626highCVE-2026-70626 updated by NVD
• CVE-2026-55637highCVE-2026-55637 updated by NVD
• CVE-2026-55526highCVE-2026-55526 updated by NVD
• CVE-2026-63640mediumCVE-2026-63640 updated by NVD
• CVE-2026-11529lowCVE-2026-11529 updated by NVD
• CVE-2026-61672highCVE-2026-61672 updated by NVD
• CVE-2026-53950highXSS in Ghost's ActivityPub client
• CVE-2026-12484highCVE-2026-12484 updated by NVD
• CVE-2026-41003highCVE-2026-41003 updated by NVD
• CVE-2026-54263highWagtail: Reflected XSS in dynamic image URL generator view
• CVE-2026-77616mediumCVE-2026-77616 updated by NVD
• CVE-2026-73222highCVE-2026-73222 updated by NVD
• CVE-2026-52809mediumGogs's password-reset tokens use account-activation lifetime, ignoring RESET_PASSWORD_CODE_LIVES
• CVE-2026-63733mediumCVE-2026-63733 updated by NVD
• CVE-2026-55622highCVE-2026-55622 updated by NVD
• CVE-2026-55621highCVE-2026-55621 updated by NVD
• CVE-2026-54261mediumWagtail: Improper permission handling in image preview
• CVE-2026-71478mediumCVE-2026-71478 updated by NVD
• CVE-2026-73563mediumCVE-2026-73563 updated by NVD
• CVE-2026-58424highGitea: Permanent Fork PR Workflow Approval Gate Bypass
• CVE-2026-47304highCVE-2026-47304 updated by NVD
• CVE-2026-40986mediumCVE-2026-40986 updated by NVD
• CVE-2026-86080mediumCVE-2026-86080 updated by NVD
• CVE-2026-55476mediumSnipe-IT Vulnerable to Unauthorized Asset Request Cancellation via Unguarded cancel_by_admin Parameter
• CVE-2026-7776highHashicorp Boundary workers are vulnerable to a denial-of-service condition during node enrollment TLS handshak
• CVE-2026-86994mediumCVE-2026-86994 updated by NVD
• CVE-2026-72807highCVE-2026-72807 updated by NVD
• CVE-2026-61663mediumCVE-2026-61663 updated by NVD
• CVE-2026-53834highOpenClaw: QQBot pre-dispatch slash commands could skip allowFrom checks
• CVE-2026-63118mediumCVE-2026-63118 updated by NVD
• CVE-2026-53467mediumImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchanged
• CVE-2026-8384mediumEclipse Jetty: Path parameter traversal
• CVE-2026-59710mediumshowdown allows stored cross-site scripting through table header ID injection
• CVE-2026-53831highCVE-2026-53831 updated by NVD
• CVE-2026-53722mediumNuxt: Reflected XSS in ` ` via unsanitised `javascript:` or `data:` URL
• CVE-2026-40993highCVE-2026-40993 updated by NVD
• CVE-2026-88016highCVE-2026-88016 updated by NVD
• CVE-2026-55857mediumCVE-2026-55857 updated by NVD
• CVE-2026-54249mediumCVE-2026-54249 updated by NVD
• CVE-2026-70605mediumCVE-2026-70605 updated by NVD
• CVE-2026-53944mediumGhost: Private IP filtering bypass to make server-side requests to internal services
• CVE-2026-41730mediumCVE-2026-41730 updated by NVD
• CVE-2026-41839mediumCVE-2026-41839 updated by NVD
• CVE-2026-6657highCVE-2026-6657 updated by NVD
• CVE-2024-58356lowCVE-2024-58356 updated by NVD
• CVE-2026-81871mediumCVE-2026-81871 updated by NVD
• CVE-2026-63123mediumCVE-2026-63123 updated by NVD
• CVE-2026-6790mediumEclipse Jetty: HTTP Authority/Host mismatch
• CVE-2026-53914mediumJetBrains Kotlin: Unsafe Deserialization in Kotlin Build Cache Enables Code Execution
• CVE-2026-63127highCVE-2026-63127 updated by NVD
• CVE-2026-54164mediumAPI Platform Core: Relation IRIs are not type-checked: a related resource can be denormalised as the wrong res
• CVE-2026-70590mediumCVE-2026-70590 updated by NVD
• CVE-2026-65902mediumCVE-2026-65902 updated by NVD
• CVE-2026-72925mediumCVE-2026-72925 updated by NVD
• CVE-2026-68585mediumCVE-2026-68585 updated by NVD
• CVE-2026-55779mediumCVE-2026-55779 updated by NVD
• CVE-2026-55524highCVE-2026-55524 updated by NVD
• CVE-2026-72785criticalCVE-2026-72785 updated by NVD
• CVE-2026-61700lowCVE-2026-61700 updated by NVD
• CVE-2026-55406mediumBuffa has a Use-After-Free in OwnedView via Unsound 'static Lifetime Promotion in Deref
• CVE-2026-55582highCVE-2026-55582 updated by NVD
• CVE-2026-55703mediumCVE-2026-55703 updated by NVD
• CVE-2026-17106highCVE-2026-17106 updated by NVD
• CVE-2026-68923mediumCVE-2026-68923 updated by NVD
• CVE-2026-68945highCVE-2026-68945 updated by NVD
• CVE-2026-73419mediumCVE-2026-73419 updated by NVD
• CVE-2026-4137highCVE-2026-4137 updated by NVD
• CVE-2026-70480mediumCVE-2026-70480 updated by NVD
• CVE-2026-65835mediumCVE-2026-65835 updated by NVD
• CVE-2026-55391highCVE-2026-55391 updated by NVD
• CVE-2026-50132highBudibase has an Account Impersonation Issue — Chat Identity Link Hijacking via Missing Consent & CSRF
• CVE-2025-71398mediumCVE-2025-71398 updated by NVD
• CVE-2026-71435mediumCVE-2026-71435 updated by NVD
• CVE-2026-46428criticalCVE-2026-46428 updated by NVD
• CVE-2026-73409mediumCVE-2026-73409 updated by NVD
• CVE-2026-59896mediumhono/jsx does not isolate context per request, leading to cross-request data disclosure
• CVE-2026-12681highGo-Attestation: Hash injection into trusted measurement list via unskipped SignatureHeaderSize vendor bytes in
• CVE-2026-41837mediumCVE-2026-41837 updated by NVD
• CVE-2026-55479mediumSnipe-IT has incorrect permission for legacy license checkin API
• CVE-2026-71497mediumCVE-2026-71497 updated by NVD
• CVE-2026-6046mediumMattermost doesn't validate that a username returned during bot registration belongs to a bot account
• CVE-2026-53442mediumJenkins does not encrypt secrets from POST config.xml submissions before storing them in job configurations
• CVE-2026-55557highCVE-2026-55557 updated by NVD
• CVE-2026-53951highCopier has a trust-prefix bypass via path traversal that runs tasks unprompted
• CVE-2026-53837mediumCVE-2026-53837 updated by NVD
• CVE-2026-41700highCVE-2026-41700 updated by NVD
• CVE-2026-70601highCVE-2026-70601 updated by NVD
• CVE-2026-81870lowCVE-2026-81870 updated by NVD
• CVE-2026-59895mediumHono: Server-Side XSS via JSX Escaping Bypass in cx() Utility
• CVE-2026-59711mediumshowdown metadata title handling allows cross-site scripting
• CVE-2026-49401highDeno: Permission Bypass via Unicode Normalization Mismatch on macOS (APFS)
• CVE-2026-52840lowEasy!Appointments has server-side request forgery in CalDAV connection test that exposes the deployment's inte
• CVE-2026-59882mediumguzzlehttp/psr7: Host Confusion via Weak URI Host Validation
• CVE-2026-54287mediumhono: AWS Lambda adapter merges multiple `Set-Cookie` headers into one value, dropping cookies on ALB single-h
• CVE-2026-41853mediumCVE-2026-41853 updated by NVD
• CVE-2026-65903mediumCVE-2026-65903 updated by NVD
• CVE-2026-62383mediumCVE-2026-62383 updated by NVD
• CVE-2026-73295mediumCVE-2026-73295 updated by NVD
• CVE-2026-84371mediumCVE-2026-84371 updated by NVD
• CVE-2026-69248mediumCVE-2026-69248 updated by NVD
• CVE-2026-55651highEasy!Appointments Vulnerable to Appointments Takeover via Excessive Data Exposure
• CVE-2026-52838lowEasy!Appointments disable_booking_message rendered as raw HTML on public booking page — Stored XSS
• CVE-2026-45293highCVE-2026-45293 updated by NVD
• CVE-2025-71408highCVE-2025-71408 updated by NVD
• CVE-2026-53925highGlances has arbitrary file write and command execution via `secure_popen` redirection and chaining operators i
• CVE-2026-86039highCVE-2026-86039 updated by NVD
• CVE-2026-49400lowCVE-2026-49400 updated by NVD
• CVE-2026-55227mediumCVE-2026-55227 updated by NVD
• CVE-2026-63466mediumCVE-2026-63466 updated by NVD
• CVE-2026-75834mediumCVE-2026-75834 updated by NVD
• CVE-2026-88013lowCVE-2026-88013 updated by NVD