Security advisories — page 8

• CVE-2026-53552criticalCVE-2026-53552 updated by NVD
• CVE-2026-52797highGogs: Overwriting critical files results in a denial of service
• CVE-2026-70646highCVE-2026-70646 updated by NVD
• CVE-2026-118255highCVE-2026-118255 updated by NVD
• CVE-2026-116675highCVE-2026-116675 updated by NVD
• CVE-2026-113654mediumCVE-2026-113654 updated by NVD
• CVE-2026-71557mediumCVE-2026-71557 updated by NVD
• CVE-2026-59884highCVE-2026-59884 updated by NVD
• CVE-2026-109461mediumCVE-2026-109461 updated by NVD
• CVE-2026-91969highCVE-2026-91969 updated by NVD
• CVE-2026-61430highCVE-2026-61430 updated by NVD
• CVE-2026-61429highCVE-2026-61429 updated by NVD
• CVE-2026-83616highCVE-2026-83616 updated by NVD
• CVE-2026-83608highCVE-2026-83608 updated by NVD
• CVE-2026-83607highCVE-2026-83607 updated by NVD
• CVE-2026-83605highCVE-2026-83605 updated by NVD
• CVE-2026-55065highCVE-2026-55065 updated by NVD
• CVE-2026-53430highCVE-2026-53430 updated by NVD
• CVE-2026-73412mediumCVE-2026-73412 updated by NVD
• CVE-2026-10142highCVE-2026-10142 updated by NVD
• CVE-2026-9798mediumCVE-2026-9798 updated by NVD
• CVE-2026-118654mediumCVE-2026-118654 updated by NVD
• CVE-2026-84360highCVE-2026-84360 updated by NVD
• CVE-2026-77037highCVE-2026-77037 updated by NVD
• CVE-2026-77414criticalCVE-2026-77414 updated by NVD
• CVE-2026-62996mediumCVE-2026-62996 updated by NVD
• CVE-2026-41732highCVE-2026-41732 updated by NVD
• CVE-2026-114386mediumCVE-2026-114386 updated by NVD
• CVE-2026-111061mediumCVE-2026-111061 updated by NVD
• CVE-2026-91982mediumCVE-2026-91982 updated by NVD
• CVE-2023-54404highCVE-2023-54404 updated by NVD
• CVE-2026-71488highCVE-2026-71488 updated by NVD
• CVE-2026-69185highCVE-2026-69185 updated by NVD
• CVE-2026-54638highCVE-2026-54638 updated by NVD
• CVE-2026-73493highCVE-2026-73493 updated by NVD
• CVE-2026-59887highCVE-2026-59887 updated by NVD
• CVE-2026-47736highPuma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion
• CVE-2026-9496highCVE-2026-9496 updated by NVD
• CVE-2026-34476highCVE-2026-34476 updated by NVD
• CVE-2026-111767highCVE-2026-111767 updated by NVD
• CVE-2026-113659mediumCVE-2026-113659 updated by NVD
• CVE-2026-104846criticalCVE-2026-104846 updated by NVD
• CVE-2026-84363mediumCVE-2026-84363 updated by NVD
• CVE-2026-54623highCVE-2026-54623 updated by NVD
• CVE-2026-55771highCVE-2026-55771 updated by NVD
• CVE-2026-50163highCVE-2026-50163 updated by NVD
• CVE-2026-45830highCVE-2026-45830 updated by NVD
• CVE-2024-7038lowWithdrawn Advisory: open-webui allows enumeration of file names and traversal of directories by observing the
• CVE-2026-105744highCVE-2026-105744 updated by NVD
• CVE-2026-83613highCVE-2026-83613 updated by NVD
• CVE-2026-55858mediumCVE-2026-55858 updated by NVD
• CVE-2026-55475mediumCVE-2026-55475 updated by NVD
• CVE-2026-48854highCVE-2026-48854 updated by NVD
• CVE-2026-62325criticalCVE-2026-62325 updated by NVD
• CVE-2026-54465mediumCVE-2026-54465 updated by NVD
• CVE-2026-54463mediumCVE-2026-54463 updated by NVD
• CVE-2026-54285mediumCVE-2026-54285 updated by NVD
• CVE-2026-48039criticalCVE-2026-48039 updated by NVD
• CVE-2026-109869highCVE-2026-109869 updated by NVD
• CVE-2026-114055highCVE-2026-114055 updated by NVD
• CVE-2026-73630mediumCVE-2026-73630 updated by NVD
• CVE-2026-64655lowCVE-2026-64655 updated by NVD
• CVE-2026-75828criticalCVE-2026-75828 updated by NVD
• CVE-2026-62674criticalCVE-2026-62674 updated by NVD
• CVE-2026-64850highCVE-2026-64850 updated by NVD
• CVE-2026-55484highCVE-2026-55484 updated by NVD
• CVE-2026-55247criticalCVE-2026-55247 updated by NVD
• CVE-2026-54693highCVE-2026-54693 updated by NVD
• CVE-2026-73643highCVE-2026-73643 updated by NVD
• CVE-2026-58422criticalCVE-2026-58422 updated by NVD
• CVE-2026-116580highCVE-2026-116580 updated by NVD
• CVE-2026-107839highCVE-2026-107839 updated by NVD
• CVE-2026-55873mediumSeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user
• CVE-2026-55462mediumCVE-2026-55462 updated by NVD
• CVE-2026-69250highCVE-2026-69250 updated by NVD
• CVE-2026-56317lowCross-site scripting via slot content in Nuxt's head components
• CVE-2026-45833criticalCVE-2026-45833 updated by NVD
• CVE-2026-96225highCVE-2026-96225 updated by NVD
• CVE-2026-96231highCVE-2026-96231 updated by NVD
• CVE-2026-107375highCVE-2026-107375 updated by NVD
• CVE-2026-62251highCVE-2026-62251 updated by NVD
• CVE-2026-82406highCVE-2026-82406 updated by NVD
• CVE-2026-71486mediumCVE-2026-71486 updated by NVD
• CVE-2026-68501mediumCVE-2026-68501 updated by NVD
• CVE-2026-41843mediumCVE-2026-41843 updated by NVD
• CVE-2026-115419highCVE-2026-115419 updated by NVD
• CVE-2026-104181mediumCVE-2026-104181 updated by NVD
• CVE-2026-81505highCVE-2026-81505 updated by NVD
• CVE-2026-55581highCVE-2026-55581 updated by NVD
• CVE-2026-69149highCVE-2026-69149 updated by NVD
• CVE-2026-59936highCVE-2026-59936 updated by NVD
• CVE-2026-59937mediumCVE-2026-59937 updated by NVD
• CVE-2026-40110highCVE-2026-40110 updated by NVD
• CVE-2026-119200mediumCVE-2026-119200 updated by NVD
• CVE-2026-114144highCVE-2026-114144 updated by NVD
• CVE-2026-114136highCVE-2026-114136 updated by NVD
• CVE-2026-112956mediumCVE-2026-112956 updated by NVD
• CVE-2026-107394mediumCVE-2026-107394 updated by NVD
• CVE-2026-107212highCVE-2026-107212 updated by NVD
• CVE-2026-106449lowCVE-2026-106449 updated by NVD
• CVE-2026-75837criticalCVE-2026-75837 updated by NVD
• CVE-2026-81516highCVE-2026-81516 updated by NVD
• CVE-2026-81515highCVE-2026-81515 updated by NVD
• CVE-2026-68537highCVE-2026-68537 updated by NVD
• CVE-2026-68523highCVE-2026-68523 updated by NVD
• CVE-2026-87011highCVE-2026-87011 updated by NVD
• CVE-2026-81726highCVE-2026-81726 updated by NVD
• CVE-2026-54770mediumCVE-2026-54770 updated by NVD
• CVE-2026-55419mediumCVE-2026-55419 updated by NVD
• CVE-2026-53505highCVE-2026-53505 updated by NVD
• CVE-2026-67427highCVE-2026-67427 updated by NVD
• CVE-2026-59886highCVE-2026-59886 updated by NVD
• CVE-2026-59885highCVE-2026-59885 updated by NVD
• CVE-2026-67312mediumCVE-2026-67312 updated by NVD
• CVE-2026-62286mediumCVE-2026-62286 updated by NVD
• CVE-2026-86062mediumCVE-2026-86062 updated by NVD
• CVE-2026-77272mediumCVE-2026-77272 updated by NVD
• CVE-2026-70482highCVE-2026-70482 updated by NVD
• CVE-2026-54653highCVE-2026-54653 updated by NVD
• CVE-2026-12992highCVE-2026-12992 updated by NVD
• CVE-2026-57284mediumCVE-2026-57284 updated by NVD
• CVE-2026-118246highCVE-2026-118246 updated by NVD
• CVE-2026-118245highCVE-2026-118245 updated by NVD
• CVE-2026-118244highCVE-2026-118244 updated by NVD
• CVE-2026-116796highCVE-2026-116796 updated by NVD
• CVE-2026-116686mediumCVE-2026-116686 updated by NVD
• CVE-2026-102601lowCVE-2026-102601 updated by NVD
• CVE-2026-55533highCVE-2026-55533 updated by NVD
• CVE-2026-54245highCVE-2026-54245 updated by NVD
• CVE-2026-67428highCVE-2026-67428 updated by NVD
• CVE-2026-64863criticalCVE-2026-64863 updated by NVD
• CVE-2026-52810highGogs allows users to write to readonly repositories using receive-pack + service=git-upload-pack confusion
• CVE-2026-2950mediumCVE-2026-2950 updated by NVD
• CVE-2026-118759highCVE-2026-118759 updated by NVD
• CVE-2026-113669mediumCVE-2026-113669 updated by NVD
• CVE-2026-107293lowCVE-2026-107293 updated by NVD
• CVE-2026-85740highCVE-2026-85740 updated by NVD
• CVE-2026-61709mediumCVE-2026-61709 updated by NVD
• CVE-2026-55515mediumCVE-2026-55515 updated by NVD
• CVE-2026-54553mediumCVE-2026-54553 updated by NVD
• CVE-2026-62897highCVE-2026-62897 updated by NVD
• CVE-2026-73413highCVE-2026-73413 updated by NVD
• CVE-2026-73411mediumCVE-2026-73411 updated by NVD
• CVE-2026-56394highCVE-2026-56394 updated by NVD
• CVE-2026-48524lowCVE-2026-48524 updated by NVD
• CVE-2026-27614criticalBugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering
• CVE-2026-118666mediumCVE-2026-118666 updated by NVD
• CVE-2026-114605highCVE-2026-114605 updated by NVD
• CVE-2026-102834highCVE-2026-102834 updated by NVD
• CVE-2026-100353highCVE-2026-100353 updated by NVD
• CVE-2026-102603mediumCVE-2026-102603 updated by NVD
• CVE-2026-107217highCVE-2026-107217 updated by NVD
• CVE-2026-107219highCVE-2026-107219 updated by NVD
• CVE-2026-88009highCVE-2026-88009 updated by NVD
• CVE-2026-55867mediumCVE-2026-55867 updated by NVD
• CVE-2026-70607mediumCVE-2026-70607 updated by NVD
• CVE-2026-53504highCVE-2026-53504 updated by NVD
• CVE-2026-52856highCVE-2026-52856 updated by NVD
• CVE-2026-62197mediumOpenClaw: Browser CDP discovery could accept blocked WebSocket URLs
• CVE-2026-107721mediumCVE-2026-107721 updated by NVD
• CVE-2026-92692mediumCVE-2026-92692 updated by NVD
• CVE-2026-77560highCVE-2026-77560 updated by NVD
• CVE-2026-87016highCVE-2026-87016 updated by NVD
• CVE-2026-86076highCVE-2026-86076 updated by NVD
• CVE-2026-63311mediumCVE-2026-63311 updated by NVD
• CVE-2026-81889highCVE-2026-81889 updated by NVD
• CVE-2026-73654highCVE-2026-73654 updated by NVD
• CVE-2026-65014mediumCVE-2026-65014 updated by NVD
• CVE-2026-9162mediumMattermost doesn't invalidate cached authentication state for active WebSocket connections during global sessi
• CVE-2026-44646mediumCVE-2026-44646 updated by NVD
• CVE-2026-116591highCVE-2026-116591 updated by NVD
• CVE-2026-96644highCVE-2026-96644 updated by NVD
• CVE-2026-96643highCVE-2026-96643 updated by NVD
• CVE-2026-96642highCVE-2026-96642 updated by NVD
• CVE-2026-96637highCVE-2026-96637 updated by NVD
• CVE-2026-107806criticalCVE-2026-107806 updated by NVD
• CVE-2026-74907highCVE-2026-74907 updated by NVD
• CVE-2026-85717mediumCVE-2026-85717 updated by NVD
• CVE-2026-76222highCVE-2026-76222 updated by NVD
• CVE-2026-73508mediumCVE-2026-73508 updated by NVD
• CVE-2026-54899mediumCVE-2026-54899 updated by NVD
• CVE-2026-54299highCVE-2026-54299 updated by NVD
• CVE-2026-4628mediumCVE-2026-4628 updated by NVD
• CVE-2026-105650highCVE-2026-105650 updated by NVD
• CVE-2026-106455highCVE-2026-106455 updated by NVD
• CVE-2026-90711criticalCVE-2026-90711 updated by NVD
• CVE-2026-61590highCVE-2026-61590 updated by NVD
• CVE-2026-69249highCVE-2026-69249 updated by NVD
• CVE-2026-73430mediumCVE-2026-73430 updated by NVD
• CVE-2026-5052mediumCVE-2026-5052 updated by NVD
• CVE-2025-68939highCVE-2025-68939 updated by NVD
• CVE-2026-62282mediumCVE-2026-62282 updated by NVD
• CVE-2026-69204criticalCVE-2026-69204 updated by NVD
• CVE-2026-55848highCVE-2026-55848 updated by NVD
• CVE-2026-55472mediumCVE-2026-55472 updated by NVD
• CVE-2026-55545mediumCVE-2026-55545 updated by NVD
• CVE-2026-67213highCVE-2026-67213 updated by NVD
• CVE-2026-58421highCVE-2026-58421 updated by NVD
• CVE-2026-67315mediumCVE-2026-67315 updated by NVD
• CVE-2026-56384mediumCVE-2026-56384 updated by NVD
• CVE-2026-41721mediumCVE-2026-41721 updated by NVD
• CVE-2026-40988highCVE-2026-40988 updated by NVD
• CVE-2026-84314highCVE-2026-84314 updated by NVD
• CVE-2026-106454mediumCVE-2026-106454 updated by NVD
• CVE-2026-75913highCVE-2026-75913 updated by NVD
• CVE-2026-55688mediumCVE-2026-55688 updated by NVD
• CVE-2026-67214highCVE-2026-67214 updated by NVD
• CVE-2026-59212mediumOpen WebUI: Model meta.knowledge read-only file access can be upgraded to file write/delete
• CVE-2026-115913mediumCVE-2026-115913 updated by NVD
• CVE-2026-114130lowCVE-2026-114130 updated by NVD
• CVE-2026-114127lowCVE-2026-114127 updated by NVD
• CVE-2026-113671mediumCVE-2026-113671 updated by NVD
• CVE-2026-106560highCVE-2026-106560 updated by NVD
• CVE-2026-55474highCVE-2026-55474 updated by NVD
• CVE-2026-8798highCVE-2026-8798 updated by NVD
• CVE-2026-44907highCVE-2026-44907 updated by NVD
• CVE-2026-57288lowCVE-2026-57288 updated by NVD
• CVE-2026-53781mediumCVE-2026-53781 updated by NVD
• CVE-2026-116589highCVE-2026-116589 updated by NVD
• CVE-2026-113648lowCVE-2026-113648 updated by NVD
• CVE-2026-113651lowCVE-2026-113651 updated by NVD
• CVE-2026-85990highCVE-2026-85990 updated by NVD
• CVE-2026-107289mediumCVE-2026-107289 updated by NVD
• CVE-2026-106116mediumCVE-2026-106116 updated by NVD
• CVE-2026-106114mediumCVE-2026-106114 updated by NVD
• CVE-2026-106500highCVE-2026-106500 updated by NVD
• CVE-2026-83617highCVE-2026-83617 updated by NVD
• CVE-2026-83618highCVE-2026-83618 updated by NVD
• CVE-2026-63435mediumCVE-2026-63435 updated by NVD
• CVE-2026-55891unknownCVE-2026-55891 updated by NVD
• CVE-2026-69151highCVE-2026-69151 updated by NVD
• CVE-2026-54722highCVE-2026-54722 updated by NVD
• CVE-2026-67322highCVE-2026-67322 updated by NVD
• CVE-2026-39243mediumdecompress allows arbitrary hardlink creation during archive extraction
• CVE-2026-41717highCVE-2026-41717 updated by NVD
• CVE-2026-113670mediumCVE-2026-113670 updated by NVD
• CVE-2026-105645mediumCVE-2026-105645 updated by NVD
• CVE-2026-105646mediumCVE-2026-105646 updated by NVD
• CVE-2026-102822lowCVE-2026-102822 updated by NVD
• CVE-2026-61795mediumCVE-2026-61795 updated by NVD
• CVE-2026-61794mediumCVE-2026-61794 updated by NVD
• CVE-2026-84308mediumCVE-2026-84308 updated by NVD
• CVE-2026-84365mediumCVE-2026-84365 updated by NVD
• CVE-2026-55153highCVE-2026-55153 updated by NVD
• CVE-2026-16796highCVE-2026-16796 updated by NVD
• CVE-2026-59729mediumCVE-2026-59729 updated by NVD
• CVE-2026-73498highCVE-2026-73498 updated by NVD
• CVE-2026-54665mediumCVE-2026-54665 updated by NVD
• CVE-2026-53698mediumSilverpeas mishandles the "Personal space" feature that is selected when no componentId is set
• CVE-2026-40048highCVE-2026-40048 updated by NVD
• CVE-2026-115877mediumCVE-2026-115877 updated by NVD
• CVE-2026-115324criticalCVE-2026-115324 updated by NVD
• CVE-2026-105855highCVE-2026-105855 updated by NVD
• CVE-2026-88023mediumCVE-2026-88023 updated by NVD
• CVE-2026-74866mediumCVE-2026-74866 updated by NVD
• CVE-2026-77637lowCVE-2026-77637 updated by NVD
• CVE-2026-69206mediumCVE-2026-69206 updated by NVD
• CVE-2026-83609highCVE-2026-83609 updated by NVD
• CVE-2026-85393highCVE-2026-85393 updated by NVD
• CVE-2026-71436mediumCVE-2026-71436 updated by NVD
• CVE-2026-63748mediumCVE-2026-63748 updated by NVD
• CVE-2026-48813highCVE-2026-48813 updated by NVD
• CVE-2026-50891highFilestash allows attackers to escalate privileges via sending a crafted request
• CVE-2026-73427lowCVE-2026-73427 updated by NVD
• CVE-2026-73049mediumCVE-2026-73049 updated by NVD
• CVE-2026-61446highCVE-2026-61446 updated by NVD
• CVE-2026-106486highCVE-2026-106486 updated by NVD
• CVE-2026-73606mediumCVE-2026-73606 updated by NVD
• CVE-2026-73609mediumCVE-2026-73609 updated by NVD
• CVE-2026-73605mediumCVE-2026-73605 updated by NVD
• CVE-2026-73607mediumCVE-2026-73607 updated by NVD
• CVE-2026-77425mediumCVE-2026-77425 updated by NVD
• CVE-2026-71554mediumCVE-2026-71554 updated by NVD
• CVE-2026-34905mediumCVE-2026-34905 updated by NVD
• CVE-2026-9358lowCVE-2026-9358 updated by NVD
• CVE-2026-61647highCVE-2026-61647 updated by NVD
• CVE-2026-71319criticalCVE-2026-71319 updated by NVD
• CVE-2026-54464mediumCVE-2026-54464 updated by NVD
• CVE-2026-48797criticalBackpropagate: backprop ui --auth and backprop ui --share do not enforce authentication
• CVE-2026-50879highlinx-server has an issue in the uploadPostHandler component that allows attackers to cause a Denial of Service
• CVE-2026-113655mediumCVE-2026-113655 updated by NVD
• CVE-2026-77261highCVE-2026-77261 updated by NVD
• CVE-2026-86079mediumCVE-2026-86079 updated by NVD
• CVE-2026-71492mediumCVE-2026-71492 updated by NVD
• CVE-2026-55764highCVE-2026-55764 updated by NVD
• CVE-2026-55641highCVE-2026-55641 updated by NVD
• CVE-2026-28740highCVE-2026-28740 updated by NVD
• CVE-2026-54090highFile Browser has a Command Execution Allowlist Bypass via Shell Metacharacter Injection
• CVE-2026-113668mediumCVE-2026-113668 updated by NVD
• CVE-2026-107834mediumCVE-2026-107834 updated by NVD
• CVE-2026-59944mediumCVE-2026-59944 updated by NVD
• CVE-2026-63461mediumCVE-2026-63461 updated by NVD
• CVE-2026-61568criticalCVE-2026-61568 updated by NVD
• CVE-2026-59151criticalCVE-2026-59151 updated by NVD
• CVE-2026-86081highCVE-2026-86081 updated by NVD
• CVE-2026-75912highCVE-2026-75912 updated by NVD
• CVE-2026-70609mediumCVE-2026-70609 updated by NVD
• CVE-2026-11393highCVE-2026-11393 updated by NVD
• CVE-2026-59222mediumOpen WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentials
• CVE-2026-9689mediumCVE-2026-9689 updated by NVD
• CVE-2026-109932mediumCVE-2026-109932 updated by NVD
• CVE-2026-109924mediumCVE-2026-109924 updated by NVD
• CVE-2026-112398criticalCVE-2026-112398 updated by NVD
• CVE-2026-112403criticalCVE-2026-112403 updated by NVD
• CVE-2026-61842mediumCVE-2026-61842 updated by NVD
• CVE-2026-82394mediumCVE-2026-82394 updated by NVD
• CVE-2026-73228mediumCVE-2026-73228 updated by NVD
• CVE-2026-55527highCVE-2026-55527 updated by NVD
• CVE-2026-73567criticalCVE-2026-73567 updated by NVD
• CVE-2026-73306mediumCVE-2026-73306 updated by NVD
• CVE-2026-59891criticalCVE-2026-59891 updated by NVD
• CVE-2026-32686mediumCVE-2026-32686 updated by NVD
• CVE-2026-115905criticalCVE-2026-115905 updated by NVD
• CVE-2026-105644mediumCVE-2026-105644 updated by NVD
• CVE-2026-86073mediumCVE-2026-86073 updated by NVD
• CVE-2026-84378mediumCVE-2026-84378 updated by NVD
• CVE-2026-54133criticalCVE-2026-54133 updated by NVD
• CVE-2026-69240criticalCVE-2026-69240 updated by NVD
• CVE-2026-54908mediumCVE-2026-54908 updated by NVD
• CVE-2026-54725criticalCVE-2026-54725 updated by NVD
• CVE-2026-54078highCVE-2026-54078 updated by NVD
• CVE-2026-54079highCVE-2026-54079 updated by NVD
• CVE-2026-44210mediumCVE-2026-44210 updated by NVD
• CVE-2026-42571criticalCVE-2026-42571 updated by NVD
• CVE-2025-14813criticalCVE-2025-14813 updated by NVD
• CVE-2026-33665highn8n: LDAP Email-Based Account Linking Allows Privilege Escalation and Account Takeover
• CVE-2026-56393mediumCVE-2026-56393 updated by NVD
• CVE-2026-56376mediumCVE-2026-56376 updated by NVD
• CVE-2026-55098mediumCVE-2026-55098 updated by NVD
• CVE-2026-114612criticalCVE-2026-114612 updated by NVD
• CVE-2026-92949mediumCVE-2026-92949 updated by NVD
• CVE-2026-73560mediumCVE-2026-73560 updated by NVD
• CVE-2026-55248criticalCVE-2026-55248 updated by NVD
• CVE-2026-45019highCVE-2026-45019 updated by NVD
• CVE-2026-67425highCVE-2026-67425 updated by NVD
• CVE-2026-118664highCVE-2026-118664 updated by NVD
• CVE-2026-8823lowMattermost has an Incorrect Authorization issue
• CVE-2026-8074lowMattermost doesn't enforce bot-specific permission checks on the user active status endpoint
• CVE-2026-115923mediumCVE-2026-115923 updated by NVD
• CVE-2026-113789mediumCVE-2026-113789 updated by NVD
• CVE-2026-113790mediumCVE-2026-113790 updated by NVD
• CVE-2026-113791mediumCVE-2026-113791 updated by NVD
• CVE-2026-107223highCVE-2026-107223 updated by NVD
• CVE-2026-104851highCVE-2026-104851 updated by NVD
• CVE-2026-75595criticalCVE-2026-75595 updated by NVD
• CVE-2026-82562mediumCVE-2026-82562 updated by NVD
• CVE-2026-63337highCVE-2026-63337 updated by NVD
• CVE-2026-70657mediumCVE-2026-70657 updated by NVD
• CVE-2026-71851criticalCVE-2026-71851 updated by NVD
• CVE-2026-41848lowCVE-2026-41848 updated by NVD
• CVE-2026-116797highCVE-2026-116797 updated by NVD
• CVE-2026-100723mediumCVE-2026-100723 updated by NVD
• CVE-2026-85716lowCVE-2026-85716 updated by NVD
• CVE-2026-79921highCVE-2026-79921 updated by NVD
• CVE-2026-114142highCVE-2026-114142 updated by NVD
• CVE-2026-59180lowCVE-2026-59180 updated by NVD
• CVE-2026-106559mediumCVE-2026-106559 updated by NVD
• CVE-2026-73556mediumCVE-2026-73556 updated by NVD
• CVE-2026-61556highCVE-2026-61556 updated by NVD
• CVE-2026-54563highCloudreve WebDAV (`/dav`) has Path Traversal / Broken Access Control — scoped DAV credential escapes its confi
• CVE-2026-47686criticalCVE-2026-47686 updated by NVD
• CVE-2026-54249mediumCVE-2026-54249 updated by NVD
• CVE-2026-59259mediumCVE-2026-59259 updated by NVD
• CVE-2026-55886mediumCVE-2026-55886 updated by NVD
• CVE-2026-56275mediumCVE-2026-56275 updated by NVD
• CVE-2026-114132mediumCVE-2026-114132 updated by NVD
• CVE-2026-106498highCVE-2026-106498 updated by NVD
• CVE-2026-7700lowCVE-2026-7700 updated by NVD
• CVE-2026-49264mediumCVE-2026-49264 updated by NVD
• CVE-2026-71309highCVE-2026-71309 updated by NVD
• CVE-2026-53599highCVE-2026-53599 updated by NVD
• CVE-2026-59257mediumCVE-2026-59257 updated by NVD
• CVE-2026-12208mediumCVE-2026-12208 updated by NVD
• CVE-2026-118775lowCVE-2026-118775 updated by NVD
• CVE-2026-114140highCVE-2026-114140 updated by NVD
• CVE-2026-113657lowCVE-2026-113657 updated by NVD
• CVE-2026-104102mediumCVE-2026-104102 updated by NVD
• CVE-2026-106460mediumCVE-2026-106460 updated by NVD
• CVE-2026-105683lowCVE-2026-105683 updated by NVD
• CVE-2026-77310mediumCVE-2026-77310 updated by NVD
• CVE-2026-76087highCVE-2026-76087 updated by NVD
• CVE-2026-75831mediumCVE-2026-75831 updated by NVD
• CVE-2026-72810criticalCVE-2026-72810 updated by NVD
• CVE-2026-54766mediumCVE-2026-54766 updated by NVD
• CVE-2026-59989criticalCVE-2026-59989 updated by NVD
• CVE-2026-69255criticalCVE-2026-69255 updated by NVD
• CVE-2026-13697highCVE-2026-13697 updated by NVD
• CVE-2026-73307mediumCVE-2026-73307 updated by NVD
• CVE-2026-59820mediumCVE-2026-59820 updated by NVD
• CVE-2026-41841mediumCVE-2026-41841 updated by NVD
• CVE-2026-43966mediumCVE-2026-43966 updated by NVD
• CVE-2026-44788mediumCVE-2026-44788 updated by NVD
• CVE-2026-40179mediumPrometheus has Stored XSS via metric names and label values in Prometheus web UI tooltips and metrics explorer
• CVE-2026-118669highCVE-2026-118669 updated by NVD
• CVE-2026-115916mediumCVE-2026-115916 updated by NVD
• CVE-2026-115911mediumCVE-2026-115911 updated by NVD
• CVE-2026-113710mediumCVE-2026-113710 updated by NVD
• CVE-2026-107844mediumCVE-2026-107844 updated by NVD
• CVE-2026-48484mediumCVE-2026-48484 updated by NVD
• CVE-2026-105757mediumCVE-2026-105757 updated by NVD
• CVE-2026-105756mediumCVE-2026-105756 updated by NVD
• CVE-2026-77634highCVE-2026-77634 updated by NVD
• CVE-2026-42350mediumCVE-2026-42350 updated by NVD
• CVE-2026-65959mediumCVE-2026-65959 updated by NVD
• CVE-2026-69253criticalCVE-2026-69253 updated by NVD
• CVE-2026-54588criticalPoweradmin has Host Header Injection in OIDC redirect_uri, SAML ACS/SLO URL, and Logout Redirect Construction.
• CVE-2026-50886criticalProject Firefly III has incorrect access control in the webhook management component
• CVE-2026-116679mediumCVE-2026-116679 updated by NVD
• CVE-2026-107216highCVE-2026-107216 updated by NVD
• CVE-2026-61681mediumCVE-2026-61681 updated by NVD
• CVE-2026-84303mediumCVE-2026-84303 updated by NVD
• CVE-2026-68584criticalCVE-2026-68584 updated by NVD
• CVE-2026-55855mediumCVE-2026-55855 updated by NVD
• CVE-2026-64665highCVE-2026-64665 updated by NVD
• CVE-2026-73422mediumCVE-2026-73422 updated by NVD
• CVE-2026-45711mediumCVE-2026-45711 updated by NVD
• CVE-2026-61438highCVE-2026-61438 updated by NVD
• CVE-2026-105851criticalCVE-2026-105851 updated by NVD
• CVE-2026-55461mediumCVE-2026-55461 updated by NVD
• CVE-2026-47683highCVE-2026-47683 updated by NVD
• CVE-2026-12372lowCVE-2026-12372 updated by NVD
• CVE-2026-13506highCVE-2026-13506 updated by NVD
• CVE-2026-58423highCVE-2026-58423 updated by NVD
• CVE-2026-59727lowCVE-2026-59727 updated by NVD
• CVE-2026-7387highMattermost doesn't require role-management authorization when setting the scheme_admin flag on group syncable
• CVE-2026-18401mediumCVE-2026-18401 updated by NVD
• CVE-2026-107807highCVE-2026-107807 updated by NVD
• CVE-2026-105849highCVE-2026-105849 updated by NVD
• CVE-2026-85061criticalCVE-2026-85061 updated by NVD
• CVE-2026-18504mediumCVE-2026-18504 updated by NVD
• CVE-2026-62680highCVE-2026-62680 updated by NVD
• CVE-2026-54614mediumCVE-2026-54614 updated by NVD
• CVE-2026-54572highrclone: Unvalidated symlink target in local `--links` — arbitrary file write from an untrusted remote
• CVE-2026-69248mediumCVE-2026-69248 updated by NVD
• CVE-2026-63758mediumCVE-2026-63758 updated by NVD
• CVE-2026-45339mediumOpen WebUI's API key endpoint restrictions bypassed via `x-api-key` header — full message processing on restri
• CVE-2026-56383mediumCVE-2026-56383 updated by NVD
• CVE-2026-77366criticalCVE-2026-77366 updated by NVD
• CVE-2026-77375mediumCVE-2026-77375 updated by NVD
• CVE-2026-105854highCVE-2026-105854 updated by NVD
• CVE-2026-105850highCVE-2026-105850 updated by NVD
• CVE-2026-105758mediumCVE-2026-105758 updated by NVD
• CVE-2026-66064mediumCVE-2026-66064 updated by NVD
• CVE-2026-59216highOpen WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id
• CVE-2026-112954mediumCVE-2026-112954 updated by NVD
• CVE-2026-88010mediumCVE-2026-88010 updated by NVD
• CVE-2026-72697highCVE-2026-72697 updated by NVD
• CVE-2026-79676highCVE-2026-79676 updated by NVD
• CVE-2026-72806mediumCVE-2026-72806 updated by NVD
• CVE-2026-54910highCVE-2026-54910 updated by NVD
• CVE-2023-48238highjson-web-token library is vulnerable to a JWT algorithm confusion attack
• CVE-2026-119280lowCVE-2026-119280 updated by NVD
• CVE-2026-114508mediumCVE-2026-114508 updated by NVD
• CVE-2026-91981mediumCVE-2026-91981 updated by NVD
• CVE-2026-91980mediumCVE-2026-91980 updated by NVD
• CVE-2026-54511highCVE-2026-54511 updated by NVD
• CVE-2026-73647mediumCVE-2026-73647 updated by NVD
• CVE-2026-102695highCVE-2026-102695 updated by NVD
• CVE-2026-41728highCVE-2026-41728 updated by NVD
• CVE-2026-118242highCVE-2026-118242 updated by NVD
• CVE-2026-114610mediumCVE-2026-114610 updated by NVD
• CVE-2026-100409highCVE-2026-100409 updated by NVD
• CVE-2026-91983mediumCVE-2026-91983 updated by NVD
• CVE-2026-107813highCVE-2026-107813 updated by NVD
• CVE-2026-104847highCVE-2026-104847 updated by NVD
• CVE-2026-88000mediumCVE-2026-88000 updated by NVD
• CVE-2026-88002mediumCVE-2026-88002 updated by NVD
• CVE-2026-64662mediumCVE-2026-64662 updated by NVD
• CVE-2026-70493mediumCVE-2026-70493 updated by NVD
• CVE-2026-59219highOpen WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logout
• CVE-2026-66010mediumCVE-2026-66010 updated by NVD
• CVE-2026-6961highMattermost doesn't sanitize FileInfo.Name received from federated peers during shared channel file sync
• CVE-2026-119203highCVE-2026-119203 updated by NVD
• CVE-2026-119204highCVE-2026-119204 updated by NVD
• CVE-2026-119205highCVE-2026-119205 updated by NVD
• CVE-2026-119206highCVE-2026-119206 updated by NVD
• CVE-2026-119207highCVE-2026-119207 updated by NVD
• CVE-2026-119208highCVE-2026-119208 updated by NVD
• CVE-2026-111750mediumCVE-2026-111750 updated by NVD
• CVE-2026-103923lowCVE-2026-103923 updated by NVD
• CVE-2026-77567highCVE-2026-77567 updated by NVD
• CVE-2026-55763highCVE-2026-55763 updated by NVD
• CVE-2026-47835highCVE-2026-47835 updated by NVD
• CVE-2026-10221mediumCVE-2026-10221 updated by NVD
• CVE-2026-79771mediumCVE-2026-79771 updated by NVD
• CVE-2025-32388medium@sveltejs/kit vulnerable to Cross-site Scripting via tracked search_params
• CVE-2026-119210mediumCVE-2026-119210 updated by NVD
• CVE-2026-118655mediumCVE-2026-118655 updated by NVD
• CVE-2026-112958mediumCVE-2026-112958 updated by NVD
• CVE-2026-112951mediumCVE-2026-112951 updated by NVD
• CVE-2026-84933mediumCVE-2026-84933 updated by NVD
• CVE-2026-61788highCVE-2026-61788 updated by NVD
• CVE-2026-62368highCVE-2026-62368 updated by NVD
• CVE-2026-63458highCVE-2026-63458 updated by NVD
• CVE-2026-61625mediumCVE-2026-61625 updated by NVD
• CVE-2026-59226lowOpen WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocation
• CVE-2026-59938mediumCVE-2026-59938 updated by NVD
• CVE-2026-46607highCVE-2026-46607 updated by NVD
• CVE-2026-45674highCVE-2026-45674 updated by NVD
• CVE-2026-11477lowCVE-2026-11477 updated by NVD