[ Vulnerability Database ]
A comprehensive hub for tracking high-impact vulnerabilities across application code and third-party libraries, for security teams and developers.
Trusted by Startups to Fortune 100
CVE-2026-7867
(7.8)
Improper Authorization (CWE-863) in udisks2 D-Bus Mount
Local Privilege Escalation
CVE-2026-70636
(7.5)
Authentication Bypass (CWE-862) in Flowise OAuth2 Endpoint
Unauthorized OAuth credential operations and integration disruption
CVE-2026-70559
(7.5)
Missing Authentication (CWE-306) in Dinky SysConfig
Unauthenticated Sensitive Information Disclosure and Credential Exposure
CVE-2026-70558
(9.8)
Unrestricted File Upload (CWE-434) in Dinky Download
Arbitrary File Write and Potential Code Execution
CVE-2026-67622
(9.9)
IDOR (CWE-639) in Flowise OpenAI Assistants Integration
Cross-Workspace Data Access and Unauthorized Resource Modification
CVE-2026-67621
(7.6)
Missing Authorization (CWE-862) in Flowise Document Store
Unauthorized document store modification, resource consumption, and knowledge-base integrity loss
CVE-2026-64665
(8.1)
Authentication Bypass (CWE-287) in Statamic OAuth Login
Account Takeover and Privilege Escalation
CVE-2026-63725
(7.2)
OS Command Injection (CWE-78) in sysPass Backup Service
Remote Code Execution
CVE-2026-53984
(9.1)
Missing Authentication (CWE-306) in Ground Station SQLite
Database Destruction and Data Integrity Compromise
CVE-2026-53983
(8.6)
Server-Side Request Forgery (CWE-918) in Ground Station
Unauthorized outbound requests to internal services, with potential information disclosure and cloud-environment compromise
Let AI Fix Your Code, You Build the Future
Get Pentest Report
