Security advisories — page 9

• CVE-2026-118262highCVE-2026-118262 updated by NVD
• CVE-2026-105649highCVE-2026-105649 updated by NVD
• CVE-2026-105651highCVE-2026-105651 updated by NVD
• CVE-2026-107221mediumCVE-2026-107221 updated by NVD
• CVE-2026-105760mediumCVE-2026-105760 updated by NVD
• CVE-2026-9205highCVE-2026-9205 updated by NVD
• CVE-2026-56744highCVE-2026-56744 updated by NVD
• CVE-2026-88012mediumCVE-2026-88012 updated by NVD
• CVE-2026-55588mediumCVE-2026-55588 updated by NVD
• CVE-2026-55425mediumCVE-2026-55425 updated by NVD
• CVE-2026-54556highCVE-2026-54556 updated by NVD
• CVE-2026-55619mediumCVE-2026-55619 updated by NVD
• CVE-2026-77354highCVE-2026-77354 updated by NVD
• CVE-2026-55839highCVE-2026-55839 updated by NVD
• CVE-2026-59881mediumCVE-2026-59881 updated by NVD
• CVE-2026-54081mediumCVE-2026-54081 updated by NVD
• CVE-2026-54080mediumCVE-2026-54080 updated by NVD
• CVE-2024-56526highOXID eShop May Display User Information
• CVE-2026-118764mediumCVE-2026-118764 updated by NVD
• CVE-2026-113650mediumCVE-2026-113650 updated by NVD
• CVE-2026-60091mediumCVE-2026-60091 updated by NVD
• CVE-2026-107228mediumCVE-2026-107228 updated by NVD
• CVE-2026-102999highCVE-2026-102999 updated by NVD
• CVE-2026-102998highCVE-2026-102998 updated by NVD
• CVE-2026-103000highCVE-2026-103000 updated by NVD
• CVE-2026-102997highCVE-2026-102997 updated by NVD
• CVE-2026-102996highCVE-2026-102996 updated by NVD
• CVE-2026-102995highCVE-2026-102995 updated by NVD
• CVE-2026-102994highCVE-2026-102994 updated by NVD
• CVE-2026-102993highCVE-2026-102993 updated by NVD
• CVE-2026-101911mediumCVE-2026-101911 updated by NVD
• CVE-2026-59980mediumCVE-2026-59980 updated by NVD
• CVE-2026-83619highCVE-2026-83619 updated by NVD
• CVE-2026-83612highCVE-2026-83612 updated by NVD
• CVE-2026-83606highCVE-2026-83606 updated by NVD
• CVE-2026-65842highCVE-2026-65842 updated by NVD
• CVE-2026-82398mediumCVE-2026-82398 updated by NVD
• CVE-2026-53653highCVE-2026-53653 updated by NVD
• CVE-2026-50567highFission: Zip Slip in pkg/utils/zip.go:Unarchive allows fetcher to write outside the destination directory
• CVE-2026-54696lowCVE-2026-54696 updated by NVD
• CVE-2026-55689mediumOpenFGA: OIDC audience validation skipped when --authn-oidc-audience is unset
• CVE-2026-11986mediumCVE-2026-11986 updated by NVD
• CVE-2026-11470lowCVE-2026-11470 updated by NVD
• CVE-2026-11800highCVE-2026-11800 updated by NVD
• CVE-2026-118763highCVE-2026-118763 updated by NVD
• CVE-2026-113662mediumCVE-2026-113662 updated by NVD
• CVE-2026-105750mediumCVE-2026-105750 updated by NVD
• CVE-2026-97711lowCVE-2026-97711 updated by NVD
• CVE-2026-86071lowCVE-2026-86071 updated by NVD
• CVE-2026-61597mediumCVE-2026-61597 updated by NVD
• CVE-2026-54732mediumCVE-2026-54732 updated by NVD
• CVE-2026-55618mediumCVE-2026-55618 updated by NVD
• CVE-2026-69244highCVE-2026-69244 updated by NVD
• CVE-2026-65841mediumCVE-2026-65841 updated by NVD
• CVE-2026-106102criticalCVE-2026-106102 updated by NVD
• CVE-2026-61588mediumCVE-2026-61588 updated by NVD
• CVE-2026-61634unknownCVE-2026-61634 updated by NVD
• CVE-2026-76219highCVE-2026-76219 updated by NVD
• CVE-2026-70481mediumCVE-2026-70481 updated by NVD
• CVE-2026-56130lowCVE-2026-56130 updated by NVD
• CVE-2026-6673mediumMattermost doesn't authenticate Atlassian Connect installed callbacks, allowing a remote unauthenticated attac
• CVE-2026-41007highCVE-2026-41007 updated by NVD
• CVE-2026-115883mediumCVE-2026-115883 updated by NVD
• CVE-2026-105648mediumCVE-2026-105648 updated by NVD
• CVE-2026-83801mediumCVE-2026-83801 updated by NVD
• CVE-2026-77246highCVE-2026-77246 updated by NVD
• CVE-2026-54754criticalCVE-2026-54754 updated by NVD
• CVE-2026-70592mediumCVE-2026-70592 updated by NVD
• CVE-2026-58419highCVE-2026-58419 updated by NVD
• CVE-2026-53474criticalOpenshift Migration Advisor: Improper input sanitization allows specially crafted RVTools .xlsx files to inclu
• CVE-2024-9355mediumCVE-2024-9355 updated by NVD
• CVE-2026-113717lowCVE-2026-113717 updated by NVD
• CVE-2026-106557highCVE-2026-106557 updated by NVD
• CVE-2026-104874mediumCVE-2026-104874 updated by NVD
• CVE-2026-71316highCVE-2026-71316 updated by NVD
• CVE-2026-70494highCVE-2026-70494 updated by NVD
• CVE-2026-59213lowOpen WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builde
• CVE-2026-59206highCVE-2026-59206 updated by NVD
• CVE-2026-52845highCVE-2026-52845 updated by NVD
• CVE-2026-93451mediumCVE-2026-93451 updated by NVD
• CVE-2026-75597mediumCVE-2026-75597 updated by NVD
• CVE-2026-91129mediumCVE-2026-91129 updated by NVD
• CVE-2026-85078mediumCVE-2026-85078 updated by NVD
• CVE-2026-88059mediumCVE-2026-88059 updated by NVD
• CVE-2026-73086highCVE-2026-73086 updated by NVD
• CVE-2026-64663mediumCVE-2026-64663 updated by NVD
• CVE-2026-70475highCVE-2026-70475 updated by NVD
• CVE-2026-56820highCVE-2026-56820 updated by NVD
• CVE-2026-118662mediumCVE-2026-118662 updated by NVD
• CVE-2026-102821mediumCVE-2026-102821 updated by NVD
• CVE-2026-69088highCVE-2026-69088 updated by NVD
• CVE-2026-62676highCVE-2026-62676 updated by NVD
• CVE-2026-55464mediumCVE-2026-55464 updated by NVD
• CVE-2026-62909highCVE-2026-62909 updated by NVD
• CVE-2026-70489mediumCVE-2026-70489 updated by NVD
• CVE-2026-9856highCVE-2026-9856 updated by NVD
• CVE-2026-69160mediumCVE-2026-69160 updated by NVD
• CVE-2026-116775lowCVE-2026-116775 updated by NVD
• CVE-2026-9799mediumKeycloak allows unauthorized access to resources via uma permission ticket bypass
• CVE-2026-111749lowCVE-2026-111749 updated by NVD
• CVE-2026-106444mediumCVE-2026-106444 updated by NVD
• CVE-2026-61741criticalCVE-2026-61741 updated by NVD
• CVE-2026-56678mediumCVE-2026-56678 updated by NVD
• CVE-2026-83805mediumCVE-2026-83805 updated by NVD
• CVE-2026-88046mediumCVE-2026-88046 updated by NVD
• CVE-2026-77635criticalCVE-2026-77635 updated by NVD
• CVE-2026-78681highCVE-2026-78681 updated by NVD
• CVE-2026-76969criticalCVE-2026-76969 updated by NVD
• CVE-2026-73644criticalCVE-2026-73644 updated by NVD
• CVE-2026-59209highCVE-2026-59209 updated by NVD
• CVE-2026-55773highCVE-2026-55773 updated by NVD
• CVE-2026-50631highCVE-2026-50631 updated by NVD
• CVE-2026-53469criticalOpenshift Migration Advisor lacks proper authorization and filtering for its DELETE /api/v1/sources API
• CVE-2026-44570highOpen WebUI has inconsistent authorization controls within memories API
• CVE-2026-72789criticalCVE-2026-72789 updated by NVD
• CVE-2026-84307lowCVE-2026-84307 updated by NVD
• CVE-2026-63335mediumCVE-2026-63335 updated by NVD
• CVE-2026-73308mediumCVE-2026-73308 updated by NVD
• CVE-2026-54641highCVE-2026-54641 updated by NVD
• CVE-2026-63751mediumCVE-2026-63751 updated by NVD
• CVE-2026-116586mediumCVE-2026-116586 updated by NVD
• CVE-2026-107218mediumCVE-2026-107218 updated by NVD
• CVE-2026-97689highCVE-2026-97689 updated by NVD
• CVE-2026-76086highCVE-2026-76086 updated by NVD
• CVE-2025-61682highCVE-2025-61682 updated by NVD
• CVE-2026-63459highCVE-2026-63459 updated by NVD
• CVE-2026-61592highCVE-2026-61592 updated by NVD
• CVE-2026-78683criticalCVE-2026-78683 updated by NVD
• CVE-2026-71556highCVE-2026-71556 updated by NVD
• CVE-2026-69192highCVE-2026-69192 updated by NVD
• CVE-2026-54729highCVE-2026-54729 updated by NVD
• CVE-2026-13346mediumCVE-2026-13346 updated by NVD
• CVE-2026-59217mediumOpen WebUI: Upload `metadata.knowledge_id` bypasses the knowledge-base write-access check (read-only users can
• CVE-2026-54286mediumCVE-2026-54286 updated by NVD
• CVE-2025-71381mediumCVE-2025-71381 updated by NVD
• CVE-2026-114141highCVE-2026-114141 updated by NVD
• CVE-2026-114143highCVE-2026-114143 updated by NVD
• CVE-2026-112406highCVE-2026-112406 updated by NVD
• CVE-2026-112399highCVE-2026-112399 updated by NVD
• CVE-2026-112892highCVE-2026-112892 updated by NVD
• CVE-2026-112894highCVE-2026-112894 updated by NVD
• CVE-2026-112391mediumCVE-2026-112391 updated by NVD
• CVE-2026-112901mediumCVE-2026-112901 updated by NVD
• CVE-2026-112898mediumCVE-2026-112898 updated by NVD
• CVE-2026-112390highCVE-2026-112390 updated by NVD
• CVE-2026-112392highCVE-2026-112392 updated by NVD
• CVE-2026-112405highCVE-2026-112405 updated by NVD
• CVE-2026-112893highCVE-2026-112893 updated by NVD
• CVE-2026-112394mediumCVE-2026-112394 updated by NVD
• CVE-2026-112400highCVE-2026-112400 updated by NVD
• CVE-2026-112897highCVE-2026-112897 updated by NVD
• CVE-2026-112896highCVE-2026-112896 updated by NVD
• CVE-2026-112895highCVE-2026-112895 updated by NVD
• CVE-2026-112404highCVE-2026-112404 updated by NVD
• CVE-2026-107211highCVE-2026-107211 updated by NVD
• CVE-2026-107213highCVE-2026-107213 updated by NVD
• CVE-2026-106104highCVE-2026-106104 updated by NVD
• CVE-2026-101918mediumCVE-2026-101918 updated by NVD
• CVE-2026-97688mediumCVE-2026-97688 updated by NVD
• CVE-2026-102265mediumCVE-2026-102265 updated by NVD
• CVE-2026-86075highCVE-2026-86075 updated by NVD
• CVE-2026-77078highCVE-2026-77078 updated by NVD
• CVE-2026-85062mediumCVE-2026-85062 updated by NVD
• CVE-2026-73843criticalCVE-2026-73843 updated by NVD
• CVE-2026-69127mediumCVE-2026-69127 updated by NVD
• CVE-2026-55536criticalCVE-2026-55536 updated by NVD
• CVE-2026-55525highCVE-2026-55525 updated by NVD
• CVE-2026-10740mediumCVE-2026-10740 updated by NVD
• CVE-2026-71848mediumCVE-2026-71848 updated by NVD
• CVE-2026-66062mediumCVE-2026-66062 updated by NVD
• CVE-2026-69251criticalCVE-2026-69251 updated by NVD
• CVE-2026-67426criticalCVE-2026-67426 updated by NVD
• CVE-2026-67430mediumCVE-2026-67430 updated by NVD
• CVE-2026-73429mediumCVE-2026-73429 updated by NVD
• CVE-2026-13426mediumCVE-2026-13426 updated by NVD
• CVE-2026-54421mediumCVE-2026-54421 updated by NVD
• CVE-2026-53476criticalAssisted Migration Agent: Path traversal in gzipped tarball handling enables arbitrary file write and remote c
• CVE-2026-114620mediumCVE-2026-114620 updated by NVD
• CVE-2026-96627highCVE-2026-96627 updated by NVD
• CVE-2026-57232lowCVE-2026-57232 updated by NVD
• CVE-2026-59965highCVE-2026-59965 updated by NVD
• CVE-2026-18654mediumCVE-2026-18654 updated by NVD
• CVE-2026-71437mediumCVE-2026-71437 updated by NVD
• CVE-2026-70593mediumCVE-2026-70593 updated by NVD
• CVE-2026-23603lowCVE-2026-23603 updated by NVD
• CVE-2026-59890mediumCVE-2026-59890 updated by NVD
• CVE-2026-119198mediumCVE-2026-119198 updated by NVD
• CVE-2026-114131mediumCVE-2026-114131 updated by NVD
• CVE-2026-105800lowCVE-2026-105800 updated by NVD
• CVE-2026-92941criticalCVE-2026-92941 updated by NVD
• CVE-2026-101905highCVE-2026-101905 updated by NVD
• CVE-2026-58270mediumCVE-2026-58270 updated by NVD
• CVE-2026-88004highCVE-2026-88004 updated by NVD
• CVE-2026-73495highCVE-2026-73495 updated by NVD
• CVE-2026-48501highCVE-2026-48501 updated by NVD
• CVE-2026-94543mediumCVE-2026-94543 updated by NVD
• CVE-2026-106103highCVE-2026-106103 updated by NVD
• CVE-2026-70474highCVE-2026-70474 updated by NVD
• CVE-2026-15925criticalCVE-2026-15925 updated by NVD
• CVE-2026-41855highCVE-2026-41855 updated by NVD
• CVE-2026-116674mediumCVE-2026-116674 updated by NVD
• CVE-2026-106489mediumCVE-2026-106489 updated by NVD
• CVE-2026-5139mediumMattermost doesn't enforce administrator authorization on the {{setDefaultInstance}} call within the {{/gitlab
• CVE-2026-50887criticalshlink has a Server-Side Request Forgery issue
• CVE-2026-49138mediumCVE-2026-49138 updated by NVD
• CVE-2026-106494mediumCVE-2026-106494 updated by NVD
• CVE-2026-75523mediumCVE-2026-75523 updated by NVD
• CVE-2026-70476highCVE-2026-70476 updated by NVD
• CVE-2026-67435mediumCVE-2026-67435 updated by NVD
• CVE-2026-54666highCVE-2026-54666 updated by NVD
• CVE-2026-59224highOpen WebUI: Terminal proxy forwards a spoofable, integrity-unbound user identity to the upstream (X-User-Id he
• CVE-2026-59214highOpen WebUI: Stored web worker XSS via Pyodide
• CVE-2026-20909mediumCVE-2026-20909 updated by NVD
• CVE-2026-10601mediumCVE-2026-10601 updated by NVD
• CVE-2026-50884highstatping-ng allows attackers to escalate privileges to Administrator and access sensitive components
• CVE-2026-53471criticalOpenshift Migration Advisor agent-API fails to validate JWT source_id claim, allowing cross-tenant data manipu
• CVE-2026-85056highCVE-2026-85056 updated by NVD
• CVE-2026-58272mediumCVE-2026-58272 updated by NVD
• CVE-2026-56666mediumZITADEL: Auto-linking by email: IdP-side email verification is not checked
• CVE-2026-8404lowCVE-2026-8404 updated by NVD
• CVE-2026-111059mediumCVE-2026-111059 updated by NVD
• CVE-2026-106502mediumCVE-2026-106502 updated by NVD
• CVE-2026-102414mediumCVE-2026-102414 updated by NVD
• CVE-2026-55785lowCVE-2026-55785 updated by NVD
• CVE-2026-61807mediumCVE-2026-61807 updated by NVD
• CVE-2026-55223mediumCVE-2026-55223 updated by NVD
• CVE-2026-52796lowGogs has DoS in rendering issue index pattern
• CVE-2026-63738mediumCVE-2026-63738 updated by NVD
• CVE-2026-55409highCVE-2026-55409 updated by NVD
• CVE-2026-119281mediumCVE-2026-119281 updated by NVD
• CVE-2026-106508mediumCVE-2026-106508 updated by NVD
• CVE-2026-72808mediumCVE-2026-72808 updated by NVD
• CVE-2026-55571highCVE-2026-55571 updated by NVD
• CVE-2026-54719highCVE-2026-54719 updated by NVD
• CVE-2026-96234mediumCVE-2026-96234 updated by NVD
• CVE-2026-104891highCVE-2026-104891 updated by NVD
• CVE-2026-102825lowCVE-2026-102825 updated by NVD
• CVE-2026-54338mediumCVE-2026-54338 updated by NVD
• CVE-2026-53436mediumCVE-2026-53436 updated by NVD
• CVE-2026-61682criticalCVE-2026-61682 updated by NVD
• CVE-2026-53877mediumCVE-2026-53877 updated by NVD
• CVE-2026-57302mediumCVE-2026-57302 updated by NVD
• CVE-2026-57300mediumCVE-2026-57300 updated by NVD
• CVE-2026-57285mediumCVE-2026-57285 updated by NVD
• CVE-2026-57286mediumCVE-2026-57286 updated by NVD
• CVE-2026-57495highCVE-2026-57495 updated by NVD
• CVE-2026-11500lowCVE-2026-11500 updated by NVD
• CVE-2026-42523criticalCVE-2026-42523 updated by NVD
• CVE-2025-55449highCVE-2025-55449 updated by NVD
• CVE-2026-118258lowCVE-2026-118258 updated by NVD
• CVE-2026-96641mediumCVE-2026-96641 updated by NVD
• CVE-2026-96638mediumCVE-2026-96638 updated by NVD
• CVE-2026-96636mediumCVE-2026-96636 updated by NVD
• CVE-2026-84319highCVE-2026-84319 updated by NVD
• CVE-2026-106488highCVE-2026-106488 updated by NVD
• CVE-2026-61834mediumCVE-2026-61834 updated by NVD
• CVE-2026-87015mediumCVE-2026-87015 updated by NVD
• CVE-2026-86995mediumCVE-2026-86995 updated by NVD
• CVE-2026-86078mediumCVE-2026-86078 updated by NVD
• CVE-2026-19693highCVE-2026-19693 updated by NVD
• CVE-2026-53668mediumCVE-2026-53668 updated by NVD
• CVE-2026-53470criticalOpenshift Migration Advisor: Broken access control in migration-planner image-url endpoint exposes other users
• CVE-2026-41711mediumCVE-2026-41711 updated by NVD
• CVE-2026-41710mediumCVE-2026-41710 updated by NVD
• CVE-2026-109855highCVE-2026-109855 updated by NVD
• CVE-2026-102941highCVE-2026-102941 updated by NVD
• CVE-2026-107717mediumCVE-2026-107717 updated by NVD
• CVE-2026-106106highCVE-2026-106106 updated by NVD
• CVE-2026-84369mediumCVE-2026-84369 updated by NVD
• CVE-2026-63641lowCVE-2026-63641 updated by NVD
• CVE-2026-59893highCVE-2026-59893 updated by NVD
• CVE-2026-70471highCVE-2026-70471 updated by NVD
• CVE-2026-67316mediumCVE-2026-67316 updated by NVD
• CVE-2026-107718mediumCVE-2026-107718 updated by NVD
• CVE-2026-105799lowCVE-2026-105799 updated by NVD
• CVE-2026-87014mediumCVE-2026-87014 updated by NVD
• CVE-2026-86083highCVE-2026-86083 updated by NVD
• CVE-2026-82333highCVE-2026-82333 updated by NVD
• CVE-2026-76098highCVE-2026-76098 updated by NVD
• CVE-2026-55854mediumCVE-2026-55854 updated by NVD
• CVE-2026-59992mediumCVE-2026-59992 updated by NVD
• CVE-2026-54768mediumCVE-2026-54768 updated by NVD
• CVE-2026-45820mediumCVE-2026-45820 updated by NVD
• CVE-2026-63761mediumCVE-2026-63761 updated by NVD
• CVE-2026-41708highCVE-2026-41708 updated by NVD
• CVE-2026-50634mediumCVE-2026-50634 updated by NVD
• CVE-2024-27928mediumCVE-2024-27928 updated by NVD
• CVE-2024-24769lowCVE-2024-24769 updated by NVD
• CVE-2026-79770highCVE-2026-79770 updated by NVD
• CVE-2026-9769highCVE-2026-9769 updated by NVD
• CVE-2026-107287mediumCVE-2026-107287 updated by NVD
• CVE-2026-106457mediumCVE-2026-106457 updated by NVD
• CVE-2026-92945lowCVE-2026-92945 updated by NVD
• CVE-2026-113665lowCVE-2026-113665 updated by NVD
• CVE-2026-107296lowCVE-2026-107296 updated by NVD
• CVE-2026-105852mediumCVE-2026-105852 updated by NVD
• CVE-2026-105805mediumCVE-2026-105805 updated by NVD
• CVE-2026-104855lowCVE-2026-104855 updated by NVD
• CVE-2026-55541highCVE-2026-55541 updated by NVD
• CVE-2026-54765mediumTraefik: Gateway HTTPRoute backendRef filters can leak backend context across routes sharing a Service:port
• CVE-2026-71312highCVE-2026-71312 updated by NVD
• CVE-2026-69198mediumCVE-2026-69198 updated by NVD
• CVE-2026-67431highCVE-2026-67431 updated by NVD
• CVE-2026-55415highCVE-2026-55415 updated by NVD
• CVE-2026-55590mediumCVE-2026-55590 updated by NVD
• CVE-2026-41006highCVE-2026-41006 updated by NVD
• CVE-2026-46356mediumCVE-2026-46356 updated by NVD
• CVE-2026-102829criticalCVE-2026-102829 updated by NVD
• CVE-2026-102828criticalCVE-2026-102828 updated by NVD
• CVE-2026-88974mediumCVE-2026-88974 updated by NVD
• CVE-2026-72812mediumCVE-2026-72812 updated by NVD
• CVE-2026-63004mediumCVE-2026-63004 updated by NVD
• CVE-2026-69243mediumCVE-2026-69243 updated by NVD
• CVE-2024-4029mediumCVE-2024-4029 updated by NVD
• CVE-2026-116672highCVE-2026-116672 updated by NVD
• CVE-2026-106440highCVE-2026-106440 updated by NVD
• CVE-2026-106505highCVE-2026-106505 updated by NVD
• CVE-2026-73229mediumCVE-2026-73229 updated by NVD
• CVE-2026-52855criticalCVE-2026-52855 updated by NVD
• CVE-2026-50570highFission: Incomplete capability denylist in Environment/Function PodSpec validation allows tenant-added CAP_SYS
• CVE-2026-12986highCVE-2026-12986 updated by NVD
• CVE-2026-112952mediumCVE-2026-112952 updated by NVD
• CVE-2026-105680mediumCVE-2026-105680 updated by NVD
• CVE-2026-105754mediumCVE-2026-105754 updated by NVD
• CVE-2026-62998mediumCVE-2026-62998 updated by NVD
• CVE-2026-81525highCVE-2026-81525 updated by NVD
• CVE-2026-48599highCVE-2026-48599 updated by NVD
• CVE-2026-54756mediumCVE-2026-54756 updated by NVD
• CVE-2026-54546mediumCVE-2026-54546 updated by NVD
• CVE-2026-56763mediumCVE-2026-56763 updated by NVD
• CVE-2026-118257highCVE-2026-118257 updated by NVD
• CVE-2026-118661mediumCVE-2026-118661 updated by NVD
• CVE-2026-107845criticalCVE-2026-107845 updated by NVD
• CVE-2026-107722criticalCVE-2026-107722 updated by NVD
• CVE-2026-92161criticalCVE-2026-92161 updated by NVD
• CVE-2026-76839highCVE-2026-76839 updated by NVD
• CVE-2026-55540highCVE-2026-55540 updated by NVD
• CVE-2026-55528highCVE-2026-55528 updated by NVD
• CVE-2026-55772highCVE-2026-55772 updated by NVD
• CVE-2026-46448mediumCVE-2026-46448 updated by NVD
• CVE-2026-42864criticalCVE-2026-42864 updated by NVD
• CVE-2026-35596mediumCVE-2026-35596 updated by NVD
• CVE-2026-107214highCVE-2026-107214 updated by NVD
• CVE-2026-105643highCVE-2026-105643 updated by NVD
• CVE-2026-61559criticalCVE-2026-61559 updated by NVD
• CVE-2026-56677highCVE-2026-56677 updated by NVD
• CVE-2026-114110highCVE-2026-114110 updated by NVD
• CVE-2026-62314mediumCVE-2026-62314 updated by NVD
• CVE-2026-85724criticalCVE-2026-85724 updated by NVD
• CVE-2026-85058highCVE-2026-85058 updated by NVD
• CVE-2026-84367lowCVE-2026-84367 updated by NVD
• CVE-2026-55066highCVE-2026-55066 updated by NVD
• CVE-2026-54664highCVE-2026-54664 updated by NVD
• CVE-2026-54661highCVE-2026-54661 updated by NVD
• CVE-2026-54662highCVE-2026-54662 updated by NVD
• CVE-2026-57293mediumCVE-2026-57293 updated by NVD
• CVE-2026-105856highCVE-2026-105856 updated by NVD
• CVE-2026-106499mediumCVE-2026-106499 updated by NVD
• CVE-2026-88001mediumCVE-2026-88001 updated by NVD
• CVE-2026-55834mediumCVE-2026-55834 updated by NVD
• CVE-2026-54746mediumCVE-2026-54746 updated by NVD
• CVE-2026-52888mediumNocoBase: Sensitive Data Exposure via SQL Blacklist Bypass
• CVE-2026-59728mediumCVE-2026-59728 updated by NVD
• CVE-2026-119209highCVE-2026-119209 updated by NVD
• CVE-2026-116583mediumCVE-2026-116583 updated by NVD
• CVE-2026-106458mediumCVE-2026-106458 updated by NVD
• CVE-2026-106491mediumCVE-2026-106491 updated by NVD
• CVE-2026-103921highCVE-2026-103921 updated by NVD
• CVE-2026-82409highCVE-2026-82409 updated by NVD
• CVE-2026-87012mediumCVE-2026-87012 updated by NVD
• CVE-2026-87013mediumCVE-2026-87013 updated by NVD
• CVE-2026-55064mediumCVE-2026-55064 updated by NVD
• CVE-2026-54167highCVE-2026-54167 updated by NVD
• CVE-2026-69263highCVE-2026-69263 updated by NVD
• CVE-2026-54603highCVE-2026-54603 updated by NVD
• CVE-2026-69097highCVE-2026-69097 updated by NVD
• CVE-2026-65599mediumCVE-2026-65599 updated by NVD
• CVE-2026-50146highCVE-2026-50146 updated by NVD
• CVE-2026-65914mediumCVE-2026-65914 updated by NVD
• CVE-2026-68582criticalCVE-2026-68582 updated by NVD
• CVE-2026-63493highCVE-2026-63493 updated by NVD
• CVE-2026-92164mediumCVE-2026-92164 updated by NVD
• CVE-2026-63199highCVE-2026-63199 updated by NVD
• CVE-2026-87998highCVE-2026-87998 updated by NVD
• CVE-2026-73087lowCVE-2026-73087 updated by NVD
• CVE-2026-75858highCVE-2026-75858 updated by NVD
• CVE-2026-81724mediumCVE-2026-81724 updated by NVD
• CVE-2026-71315highCVE-2026-71315 updated by NVD
• CVE-2026-70484mediumCVE-2026-70484 updated by NVD
• CVE-2026-65598highCVE-2026-65598 updated by NVD
• CVE-2026-116689mediumCVE-2026-116689 updated by NVD
• CVE-2026-105749mediumCVE-2026-105749 updated by NVD
• CVE-2026-106107highCVE-2026-106107 updated by NVD
• CVE-2026-102674highCVE-2026-102674 updated by NVD
• CVE-2026-61604criticalCVE-2026-61604 updated by NVD
• CVE-2026-56665mediumZITADEL: Missing Token Expiration (`exp`) Validation in JWT IdP Provider
• CVE-2026-65834mediumCVE-2026-65834 updated by NVD
• CVE-2026-10222lowCVE-2026-10222 updated by NVD
• CVE-2026-44569highOpen WebUI's Insecure Message Access Breaks Authorization
• CVE-2026-57458highCVE-2026-57458 updated by NVD
• CVE-2026-88029mediumCVE-2026-88029 updated by NVD
• CVE-2026-59254mediumCVE-2026-59254 updated by NVD
• CVE-2026-53782mediumCVE-2026-53782 updated by NVD
• CVE-2026-45709mediumCVE-2026-45709 updated by NVD
• CVE-2026-116585mediumCVE-2026-116585 updated by NVD
• CVE-2026-112395mediumCVE-2026-112395 updated by NVD
• CVE-2026-91984mediumCVE-2026-91984 updated by NVD
• CVE-2026-102830mediumCVE-2026-102830 updated by NVD
• CVE-2026-86993mediumCVE-2026-86993 updated by NVD
• CVE-2026-80206highCVE-2026-80206 updated by NVD
• CVE-2026-114145highCVE-2026-114145 updated by NVD
• CVE-2026-114128mediumCVE-2026-114128 updated by NVD
• CVE-2026-113661mediumCVE-2026-113661 updated by NVD
• CVE-2026-107283lowCVE-2026-107283 updated by NVD
• CVE-2026-54720mediumCVE-2026-54720 updated by NVD
• CVE-2026-54284highCVE-2026-54284 updated by NVD
• CVE-2026-71491highCVE-2026-71491 updated by NVD
• CVE-2026-54712mediumCVE-2026-54712 updated by NVD
• CVE-2026-54609highCVE-2026-54609 updated by NVD
• CVE-2026-59207highCVE-2026-59207 updated by NVD
• CVE-2026-41849highCVE-2026-41849 updated by NVD
• CVE-2026-113652mediumCVE-2026-113652 updated by NVD
• CVE-2026-107842mediumCVE-2026-107842 updated by NVD
• CVE-2026-59148high@Mockoon/commons-server: Unauthenticated admin API + wildcard CORS allows mock-state hijack and secret theft
• CVE-2026-68927lowCVE-2026-68927 updated by NVD
• CVE-2026-54737highCVE-2026-54737 updated by NVD
• CVE-2026-41696mediumCVE-2026-41696 updated by NVD
• CVE-2026-107303highCVE-2026-107303 updated by NVD
• CVE-2026-106509highCVE-2026-106509 updated by NVD
• CVE-2026-102823highCVE-2026-102823 updated by NVD
• CVE-2026-56738highCVE-2026-56738 updated by NVD
• CVE-2026-32599mediumCVE-2026-32599 updated by NVD
• CVE-2026-86084mediumCVE-2026-86084 updated by NVD
• CVE-2026-84379mediumCVE-2026-84379 updated by NVD
• CVE-2026-73558mediumCVE-2026-73558 updated by NVD
• CVE-2026-82417mediumCVE-2026-82417 updated by NVD
• CVE-2026-55558mediumCVE-2026-55558 updated by NVD
• CVE-2026-70492highCVE-2026-70492 updated by NVD
• CVE-2026-87029mediumCVE-2026-87029 updated by NVD
• CVE-2026-107280mediumCVE-2026-107280 updated by NVD
• CVE-2026-105681mediumCVE-2026-105681 updated by NVD
• CVE-2026-105853highCVE-2026-105853 updated by NVD
• CVE-2026-100722highCVE-2026-100722 updated by NVD
• CVE-2026-82405highCVE-2026-82405 updated by NVD
• CVE-2026-56676highCVE-2026-56676 updated by NVD
• CVE-2026-70491mediumCVE-2026-70491 updated by NVD
• CVE-2026-70479highCVE-2026-70479 updated by NVD
• CVE-2026-69252highCVE-2026-69252 updated by NVD
• CVE-2026-48169highCVE-2026-48169 updated by NVD
• CVE-2025-71401criticalCVE-2025-71401 updated by NVD
• CVE-2026-116774mediumCVE-2026-116774 updated by NVD
• CVE-2026-105868highCVE-2026-105868 updated by NVD
• CVE-2026-106101lowCVE-2026-106101 updated by NVD
• CVE-2026-106493lowCVE-2026-106493 updated by NVD
• CVE-2026-69214mediumCVE-2026-69214 updated by NVD
• CVE-2026-55643highCVE-2026-55643 updated by NVD
• CVE-2026-70608highCVE-2026-70608 updated by NVD
• CVE-2026-59227mediumOpen WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation p
• CVE-2026-116773mediumCVE-2026-116773 updated by NVD
• CVE-2026-105652lowCVE-2026-105652 updated by NVD
• CVE-2026-55538highCVE-2026-55538 updated by NVD
• CVE-2026-70588mediumCVE-2026-70588 updated by NVD
• CVE-2026-59819lowCVE-2026-59819 updated by NVD
• CVE-2026-107832lowCVE-2026-107832 updated by NVD
• CVE-2026-96748highCVE-2026-96748 updated by NVD
• CVE-2026-72796mediumCVE-2026-72796 updated by NVD
• CVE-2026-60093mediumCVE-2026-60093 updated by NVD
• CVE-2026-59817mediumCVE-2026-59817 updated by NVD
• CVE-2026-6739mediumMattermost doesn't require system-level permission when patching protected default system roles
• CVE-2026-41720highCVE-2026-41720 updated by NVD
• CVE-2026-107720highCVE-2026-107720 updated by NVD
• CVE-2026-72798criticalCVE-2026-72798 updated by NVD
• CVE-2026-68517mediumCVE-2026-68517 updated by NVD
• CVE-2026-55786highCVE-2026-55786 updated by NVD
• CVE-2026-118777mediumCVE-2026-118777 updated by NVD
• CVE-2026-107843mediumCVE-2026-107843 updated by NVD
• CVE-2026-60085highCVE-2026-60085 updated by NVD
• CVE-2026-57440highCVE-2026-57440 updated by NVD
• CVE-2026-86085mediumCVE-2026-86085 updated by NVD
• CVE-2026-84368lowCVE-2026-84368 updated by NVD
• CVE-2026-73555mediumCVE-2026-73555 updated by NVD
• CVE-2026-72804criticalCVE-2026-72804 updated by NVD
• CVE-2026-55236mediumCVE-2026-55236 updated by NVD
• CVE-2026-59215lowOpen WebUI: Private channel messages can be disclosed through cross-channel thread parent_id binding
• CVE-2026-7184mediumMattermost doesn't sanitize the Remote Cluster API response on PATCH operations
• CVE-2026-110725lowCVE-2026-110725 updated by NVD
• CVE-2026-110871highCVE-2026-110871 updated by NVD
• CVE-2026-107825mediumCVE-2026-107825 updated by NVD
• CVE-2026-85720mediumCVE-2026-85720 updated by NVD
• CVE-2026-15305mediumCVE-2026-15305 updated by NVD
• CVE-2026-71211highCVE-2026-71211 updated by NVD
• CVE-2026-54272mediumCVE-2026-54272 updated by NVD
• CVE-2026-63397highCVE-2026-63397 updated by NVD
• CVE-2026-57304mediumCVE-2026-57304 updated by NVD
• CVE-2026-57290mediumCVE-2026-57290 updated by NVD
• CVE-2026-57294mediumCVE-2026-57294 updated by NVD
• CVE-2026-82659highCVE-2026-82659 updated by NVD
• CVE-2026-111997mediumCVE-2026-111997 updated by NVD
• CVE-2026-105864mediumCVE-2026-105864 updated by NVD
• CVE-2026-105867highCVE-2026-105867 updated by NVD