AI Vulnerability Database
CVEs added in
August 2026
Every CVE that went into the database in August 2026, newest first. Each one opens its full write-up.
CVE-2026-82882
Broken Access Control (CWE-862) in Devtron Webhook
CVE-2026-82393
Path Traversal (CWE-22) in pnpm Dependency Manager
CVE-2026-77348
SSRF (CWE-918) in Wallos Unauthenticated Payment Search
CVE-2026-82392
Path Traversal (CWE-22) in pnpm Package Installation
CVE-2026-81892
Authorization Bypass (CWE-862) in EasyAdmin Backend
CVE-2026-81891
Unrestricted Upload (CWE-434) in elFinder File Manager
CVE-2026-81889
Server-Side Request Forgery (CWE-918) in elFinder Uploads
CVE-2026-79408
OS Command Injection (CWE-78) in MetaGPT RepoParser
CVE-2026-79407
Path Traversal (CWE-22) in MetaGPT SPO Extension Module
CVE-2026-75458
Vertical Privilege Escalation (CWE-639) in XueZhiSi
CVE-2026-61641
Improper Authentication (CWE-287) in Wallos OIDC Login
CVE-2026-54598
Missing Authentication (CWE-306) in Wallos Migrations
CVE-2026-38577
Hardcoded Credentials (CWE-798) in Tenda HG21 Admin
CVE-2026-51740
Broken Access Control (CWE-284) in TOTOLINK T6 killProcess
CVE-2026-51738
Access Control (CWE-284) in TOTOLINK T6 cgi-bin
CVE-2026-51736
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51735
Missing Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51734
Broken Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51733
Broken Access Control (CWE-284) in TOTOLINK T6 CGI
CVE-2026-51731
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-72001
Authorization Bypass (CWE-639) in Pangolin Share Links
CVE-2026-53553
Path Traversal (CWE-22) in Goploy File Compare Endpoint
CVE-2026-53552
IDOR (CWE-639) in Goploy Project Management Handlers
CVE-2026-82815
Improper Privilege Management (CWE-266) in EaseProbe
CVE-2026-79750
Broken Access Control (CWE-639) in MCPHub Tool API
CVE-2026-79748
Missing Authorization (CWE-862) in MCPHub Server API
CVE-2026-79747
Server-Side Request Forgery (CWE-918) in MCPHub API Gateway
CVE-2026-79746
Authorization Bypass (CWE-863) in MCPHub Group Routes
CVE-2026-79745
Missing Authorization (CWE-862) in MCPHub Controllers
CVE-2026-79744
Missing Authorization (CWE-862) in MCPHub Config API
CVE-2026-51730
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51729
Broken Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51728
Improper Access Control (CWE-284) in TOTOLINK T6 Firmware
CVE-2026-51726
Missing Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51725
Broken Access Control (CWE-284) in TOTOLINK T6 NTP
CVE-2026-82808
Hard-Coded Credentials (CWE-798) in Chrome ActiveInbox
CVE-2026-51724
Improper Access Control (CWE-284) in TOTOLINK T6 QoS
CVE-2026-51723
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51722
Broken Access Control (CWE-284) in TOTOLINK T6 Repeater
CVE-2026-51721
Improper Access Control (CWE-284) in TOTOLINK T6 setPairCfg
CVE-2026-51720
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-77966
Missing Authorization (CWE-862) in Ebyte Management
CVE-2026-76133
Broken Crypto (CWE-327) in Ebyte Authentication Flow
CVE-2026-51719
Broken Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51718
Access Control (CWE-284) in TOTOLINK T6 DHCP Rules
CVE-2026-51717
Broken Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51716
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51715
Improper Access Control (CWE-284) in TOTOLINK T6 CGI
CVE-2026-51713
Broken Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51711
Broken Access Control (CWE-284) in TOTOLINK T6 WPS
CVE-2026-51710
Broken Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51709
Broken Access Control (CWE-284) in TOTOLINK T6 Wi-Fi
CVE-2026-51708
Broken Access Control (CWE-284) in TOTOLINK T6 WPS
CVE-2026-51705
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51701
Broken Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51700
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51699
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51698
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51152
SSRF (CWE-918) in QD Unauthenticated HAR Test API Service
CVE-2026-82801
Server-Side Request Forgery (CWE-918) in NASA Earthdata Scale
CVE-2026-82701
SQL Injection (CWE-89) in Online Shopping Search Function
CVE-2026-51697
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51696
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51695
Improper Access Control (CWE-284) in TOTOLINK T6 setDdnsCfg
CVE-2026-51694
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51693
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51692
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51691
Access Control (CWE-284) in TOTOLINK T6 setUploadSetting
CVE-2026-51690
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51689
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51688
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51687
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51686
Broken Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51684
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-82217
Path Traversal (CWE-22) in Eclipse Theia Agent Mode
CVE-2026-51681
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51680
Improper Access Control (CWE-284) in TOTOLINK T6 setLedCfg
CVE-2026-51679
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51677
Improper Access Control (CWE-284) in TOTOLINK T6 UPnP
CVE-2026-51676
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51675
Improper Access Control (CWE-284) in TOTOLINK T6 setWanIeCfg
CVE-2026-51674
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51673
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51672
Broken Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51671
Broken Access Control (CWE-284) in TOTOLINK T6 API
CVE-2026-51670
Broken Access Control (CWE-284) in TOTOLINK T6 API
CVE-2026-51669
Broken Access Control (CWE-284) in TOTOLINK T6 getPairCfg
CVE-2026-51668
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-82695
Missing Authentication (CWE-306) in Tenda AC18 Telnet
CVE-2026-82694
Missing Authentication (CWE-287) in Tenda AC1206 Web UI
CVE-2026-82693
Missing Authentication (CWE-306) in Tenda AC1206 UI
CVE-2026-82692
OS Command Injection (CWE-78) in D-Link iSCSI Manager
CVE-2026-82691
OS Command Injection (CWE-78) in D-Link DNS-320L CGI
CVE-2026-82690
OS Command Injection (CWE-78) in D-Link DNS-327L CGI
CVE-2026-82689
OS Command Injection (CWE-78) in D-Link NAS Devices
CVE-2026-82880
XML External Entity (CWE-611) in YaCy Search Parsers
CVE-2026-82688
OS Command Injection (CWE-78) in D-Link DNS-340L CGI
CVE-2026-82874
IDOR (CWE-639) in ToolJet tooljet-db Schema Endpoints
CVE-2026-82872
IDOR (CWE-639) in ToolJet Workspace Table API Access
CVE-2026-82871
Missing Authorization (CWE-862) in ToolJet DB Routes
CVE-2026-82870
Authorization Bypass (CWE-639) in ToolJet Database
CVE-2026-82869
Broken Access Control (CWE-639) in ToolJet Database
CVE-2026-82861
Authorization Bypass (CWE-284) in Hulumi Policy Engine
CVE-2026-82860
Improper Privilege Management (CWE-269) in Hulumi Policies
CVE-2026-82859
Authorization Bypass (CWE-284) in Hulumi SCP Template
CVE-2026-82857
Privilege Escalation (CWE-269) in Hulumi IAM Policy
CVE-2026-82856
AWS IAM Policy Bypass (CWE-284) in Hulumi Policies
CVE-2026-82668
OS Command Injection (CWE-78) in GitList Git Command
CVE-2026-82659
External File/URL Access (CWE-73) in Nodemailer Library
CVE-2026-82630
Server-Side Request Forgery (CWE-918) in PowerJob Transport
CVE-2026-82621
Authorization Bypass (CWE-285) in Soarkey Admin Servlet
CVE-2026-82615
SQL Injection (CWE-89) in Medicine Password Recovery
CVE-2026-82614
SQL Injection (CWE-89) in Medicine Delivery System
CVE-2026-82613
SQL Injection (CWE-89) in Online Medicine Delivery System
CVE-2026-82612
SQL Injection (CWE-89) in Online Medicine Product Page
CVE-2026-82611
SQL Injection (CWE-89) in Medicine Delivery Login Interface
CVE-2026-82610
SQL Injection (CWE-89) in itsourcecode Medicine System
CVE-2026-82600
SQL Injection (CWE-89) in SeaCMS Video API Endpoint
CVE-2026-82598
Code Injection (CWE-94) in SeaCMS Template Engine Parser
CVE-2026-82597
OS Command Injection (CWE-77) in TOTOLINK NR1800X Router
CVE-2026-82595
OS Command Injection (CWE-77) in D-Link DIR-825M System
CVE-2026-82657
Information Disclosure (CWE-200) in Admidio RSS Feeds
CVE-2026-82655
Blind SQL Injection (CWE-89) in Admidio lists_show.php
CVE-2026-82654
Stored XSS (CWE-79) in SiYuan Block Reference Rendering
CVE-2026-82653
Stored XSS (CWE-79) in SiYuan confirmDialog Component
CVE-2026-82648
SSRF Filter Bypass (CWE-20) in WWBN AVideo Servers
CVE-2026-82644
Brute-Force Bypass (CWE-307) in WWBN AVideo Login Endpoint
CVE-2026-82642
Stored XSS (CWE-79) in Readest EPUB Content Sanitizer
CVE-2026-82641
Missing Authentication (CWE-306) in Keploy Agent API
CVE-2026-82639
Improper URL Validation (CWE-20) in NextChat Proxy Endpoint
CVE-2026-82638
SSRF (CWE-918) in Jina AI Reader Private-Address Guard
CVE-2026-82635
Path Traversal (CWE-22) in Pake Desktop Application
CVE-2026-82475
Authorization Bypass (CWE-862) in iFlytek Astron Agent
CVE-2026-82473
Missing Authentication (CWE-306) in KubeEdge CloudCore
CVE-2026-82472
Missing Authentication (CWE-306) in Documenso Upload
CVE-2026-82466
Authentication Bypass (CWE-287) in Rodauth WebAuthn
CVE-2026-82463
Authorization Bypass (CWE-863) in pac4j-core Java Library
CVE-2026-82460
Path Traversal (CWE-22) in Cloud Commander REST API
CVE-2026-82452
Missing Authentication (CWE-306) in Rust IoT Platform
CVE-2026-82450
Unrestricted File Upload (CWE-434) in BookStack ZIP
CVE-2026-55848
XML External Entity (CWE-611) in MapFish Print GML
CVE-2026-51663
Broken Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51662
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51661
Broken Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-82289
Server-Side Request Forgery (CWE-918) in Gitingest Host Validation
CVE-2026-82288
Credential Disclosure (CWE-522) in Stable Diffusion UI
CVE-2026-82286
Path Traversal (CWE-22) in gpt-crawler POST Endpoint
CVE-2026-82285
SSRF (CWE-918) in Bisheng Workflow Callback Endpoint
CVE-2026-82284
Broken Access Control (CWE-639) in Quivr Chat APIs
CVE-2026-82283
Broken Access Control (CWE-639) in VoltAgent Memory API
CVE-2026-82282
Missing Authentication (CWE-306) in Atlantis GitHub Setup
CVE-2026-82281
IDOR (CWE-639) in Kotaemon Conversation Controls API
CVE-2026-82280
Broken Access Control (CWE-639) in Quivr Prompt Endpoints
CVE-2026-82279
Missing Authorization (CWE-862) in HyperDX Team APIs
CVE-2026-82278
Code Injection (CWE-94) in BISHENG Workflow Endpoint
CVE-2026-82277
Missing Authentication (CWE-306) in Argo Rollouts
CVE-2026-82275
Path Traversal (CWE-22) in Qwen-Agent Document Parser
CVE-2026-82270
SSRF (CWE-918) in Portkey AI Gateway Proxy Endpoint
CVE-2026-82268
Server-Side Request Forgery (CWE-918) in Qwen-Agent Parser
CVE-2026-82266
Missing Authentication (CWE-306) in Redpanda Admin API
CVE-2026-81849
Path Traversal (CWE-23) in AWS SSM DownloadContent Plugin
CVE-2026-75486
OS Command Injection (CWE-78) in Synk Sweater Comb
CVE-2026-56100
Missing Authorization (CWE-862) in SpringBlade Feign API
CVE-2026-55634
Code Injection (CWE-94) in Pimcore Class Import APIs
CVE-2026-55565
Code Injection (CWE-94) in Yamcs Archive LIKE Queries
CVE-2026-55559
Code Injection (CWE-94) in Yamcs Templating Engine
CVE-2026-55552
Path Traversal (CWE-22) in Yamcs Static File Handler
CVE-2026-55521
Missing Authorization (CWE-862) in Yamcs Control APIs
CVE-2026-55511
Code Injection (CWE-94) in Yamcs StreamSQL Compiler
CVE-2026-55485
Broken Access Control (CWE-863) in Piccolo Admin Panel
CVE-2026-55215
TLS Certificate Validation (CWE-295) in MariaDB Node.js
CVE-2026-55066
IDOR (CWE-639) in Vikunja Task Bucket API Authorization
CVE-2026-55065
Broken Object Authorization (CWE-639) in Vikunja Views
CVE-2026-54745
Unauthenticated SSRF (CWE-918) in Kubeflow Pipelines
CVE-2026-51660
Broken Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51659
Broken Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51658
Broken Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51657
Broken Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51650
Improper Access Control (CWE-284) in TOTOLINK T6 API
CVE-2026-51649
Broken Access Control (CWE-284) in TOTOLINK T6 CGI
CVE-2026-51648
Broken Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51647
Broken Access Control (CWE-284) in TOTOLINK T6 getCrpcCfg
CVE-2026-51646
Broken Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51645
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51644
Broken Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51643
Broken Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51642
Broken Access Control (CWE-284) in TOTOLINK T6 Mesh
CVE-2026-51641
Broken Access Control (CWE-284) in TOTOLINK T6 WiFi
CVE-2026-51636
Broken Access Control (CWE-284) in TOTOLINK T6 Wi-Fi ACL
CVE-2026-51628
Broken Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51627
Broken Access Control (CWE-284) in TOTOLINK T6 IPTV
CVE-2026-51626
Broken Access Control (CWE-284) in TOTOLINK T6 WPS
CVE-2026-51625
Broken Access Control (CWE-284) in TOTOLINK T6 getWiFi
CVE-2026-51624
Broken Access Control (CWE-284) in TOTOLINK T6 API
CVE-2026-51623
Broken Access Control (CWE-284) in TOTOLINK T6 DDNS
CVE-2026-51622
Broken Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51621
Broken Access Control (CWE-284) in TOTOLINK T6 getInitCfg
CVE-2026-51620
Broken Access Control (CWE-284) in TOTOLINK T6 getNetInfoCfg
CVE-2026-51619
Improper Access Control (CWE-284) in TOTOLINK T6 API
CVE-2026-51618
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51617
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51616
Improper Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51615
Broken Access Control (CWE-284) in TOTOLINK T6 Router
CVE-2026-51611
Access Control (CWE-284) in TOTOLINK T6 startSlaveReboot
CVE-2026-5934
Stored XSS (CWE-79) in WP Rocket WordPress Plugin AJAX
CVE-2026-50979
Command Injection (CWE-77) in oPanel advanced/curl
CVE-2026-37751
OS Command Injection (CWE-78) in ai-maestro Runtime
CVE-2026-37236
Incorrect Access Control (CWE-639) in grpc-gateway
CVE-2026-82259
Unsafe Deserialization (CWE-502) in SvelteKit Forms
CVE-2026-82253
Path Traversal (CWE-22) in gitoxide Submodule Parser
CVE-2026-82251
Path Traversal (CWE-22) in gitoxide Submodule Paths
CVE-2026-82247
Credential Exposure (CWE-522) in gitoxide URL Parser
CVE-2026-82246
SSRF (CWE-918) in Budibase Server Query Import Endpoint
CVE-2026-82245
Broken Access Control (CWE-862) in Budibase License
CVE-2026-82244
Code Injection (CWE-94) in Budibase Plugin Handling
CVE-2026-82243
SSRF (CWE-918) in Budibase Datasource Verify Endpoint
CVE-2026-82242
Missing Authorization (CWE-862) in Budibase Duplication
CVE-2026-82241
SSRF (CWE-918) in Budibase Backend REST Query Preview
CVE-2026-82240
Authorization Bypass (CWE-862) in Budibase User API
CVE-2026-82239
Broken Access Control (CWE-862) in Budibase Query API
CVE-2026-82234
Server-Side Request Forgery (CWE-918) in SiYuan Agents
CVE-2026-61800
Path Traversal (CWE-22) in Wazuh Cluster File Sync
CVE-2026-38822
OS Command Injection (CWE-78) in openNDS Status Page
CVE-2026-38820
OS Command Injection (CWE-78) in openNDS Preauth Endpoint
CVE-2026-78239
Missing Authentication (CWE-306) in Xiiaozet LK100W
CVE-2026-78037
OS Command Injection (CWE-78) in Xiiaozet LK100W Device
CVE-2026-77977
Missing Authentication (CWE-306) in Ebyte Gateway Utility
CVE-2026-76940
Missing Rate Limiting (CWE-307) in Ebyte Auth Devices
CVE-2026-76060
OS Command Injection (CWE-78) in ZoneMinder Export
CVE-2026-75814
CSRF (CWE-352) in Ebyte Device Web Management Interface
CVE-2026-75813
Missing Authorization (CWE-862) in Device Config APIs
CVE-2026-75419
Missing Authorization (CWE-113) in GoWind CMS Admin
CVE-2026-75418
Path Traversal (CWE-22) in Lektor Preview Web Server
CVE-2026-75417
SQL Injection (CWE-89) in YzmCMS Admin Category Controller
CVE-2026-75339
Missing Authorization (CWE-862) in cjbi admin3 Storage
CVE-2026-75337
Path Traversal (CWE-22) in Yu AI Code Mother Static API
CVE-2026-73809
Cleartext Transmission (CWE-319) in Ebyte Gateway Devices
CVE-2026-73125
Missing Authentication (CWE-306) in Ebyte Web Interface
CVE-2026-69658
Cleartext Transmission (CWE-319) in MQTT Control Traffic
CVE-2026-54083
Path Traversal (CWE-22) in Wazuh ip-customblock Script
CVE-2026-50152
Improper Authorization (CWE-285) in Ceph Monitor Handler
CVE-2026-39944
CBC Token Tampering (CWE-327) in Ceph RGW STS Endpoint
CVE-2026-18965
Missing Authorization (CWE-862) in PayRange Device API
CVE-2026-18717
Improper Certificate Validation (CWE-295) in ASE2000
CVE-2025-30156
Weak Cryptography (CWE-327) in CephX Authentication
CVE-2026-81838
Path Traversal (CWE-23) in AWS Diagram-as-Code ZIP Handler
CVE-2026-81730
Path Traversal (CWE-22) in Dolibarr EmailCollector
CVE-2026-81728
SQL Injection (CWE-89) in Dolibarr CSV/XLSX Wizard
CVE-2026-81522
Improper Encoding (CWE-116) in MongoDB C++ Driver API
CVE-2026-77438
Broken Access Control (CWE-863) in Trilium Share Search
CVE-2026-76640
Stack Buffer Overflow (CWE-787) in Unitree G1 BLE GATT
CVE-2026-76639
Path Traversal (CWE-22) in Unitree G1 bashrunner Service
CVE-2026-54721
Server-Side Code Injection (CWE-94) in Silverstripe UserForms
CVE-2026-54687
Path Traversal (CWE-22) in n8n SQLite Database Node
CVE-2026-53580
Arbitrary File Read (CWE-73) in Trilium Image Fetcher
CVE-2026-47727
Server-Side Template Injection (CWE-94) in Trilium
CVE-2026-37072
Improper Access Control (CWE-284) in Veno File Manager
CVE-2026-37071
Privilege Escalation (CWE-269) in Veno File Manager
CVE-2026-37068
Path Traversal (CWE-22) in Veno File Manager 4.4.9
CVE-2026-37012
Hardcoded Credentials (CWE-798) in PentestGPT Telemetry
CVE-2026-37007
Path Traversal (CWE-22) in CrewAI FileWriterTool RCE
CVE-2026-36102
Improper Privilege Management (CWE-269) in Checkmate
CVE-2026-35869
Command Injection (CWE-20) in LB-link Router libshare
CVE-2026-35868
Command Injection (CWE-20) in LB-link AC2100 Router
CVE-2026-10036
Unsafe YAML Deserialization (CWE-502) in SpeechBrain
CVE-2026-81735
Missing Authentication (CWE-306) in UI-TARS MCP Server
CVE-2026-81726
Path Traversal (CWE-73) in NLTK Model-Artifact APIs
CVE-2026-81719
Code Injection (CWE-94) in openssl_encrypt Plugin System
CVE-2026-81718
Weak KDF Parameters (CWE-326) in openssl_encrypt Files
CVE-2026-81707
Improper Input Validation (CWE-20) in openssl_encrypt
CVE-2026-81698
Command Injection (CWE-78) in openssl_encrypt CLI Tool
CVE-2026-81691
Cleartext Transmission (CWE-319) in openssl_encrypt
CVE-2026-81679
Cross-Realm Info Disclosure (CWE-200) in OpenRemote
CVE-2026-81678
SSRF (CWE-918) in AVideo LiveLinks Proxy Endpoint URL
CVE-2026-81335
Missing Authorization Check (CWE-862) in Baserow Builder
CVE-2026-81098
Missing Authentication (CWE-306) in Telnyx MCP Server
CVE-2026-81097
OS Command Injection (CWE-78) in Ruby Sandbox Tool
CVE-2026-81096
Python Sandbox Escape (CWE-94) in ToolUniverse Server
CVE-2026-81094
Missing Authentication (CWE-306) in mcp-router CLI
CVE-2026-81093
Server-Side Request Forgery (CWE-918) in get-html-skeleton
CVE-2026-81091
Server-Side Request Forgery (CWE-918) in mcp-use Proxy
CVE-2026-80208
Missing Authentication (CWE-306) in APITable Accounts
CVE-2026-75357
Code Injection (CWE-94) in Bilibili Desktop v1.17.9
CVE-2026-57499
OS Command Injection (CWE-78) in Liman Log Rotation
CVE-2026-30068
Improper Input Validation (CWE-20) in free5GC HandleUpdate API
CVE-2026-30064
Improper Input Validation (CWE-20) in free5gc buildFilter
CVE-2026-30058
Improper Input Validation (CWE-20) in free5gc HTTP Handler
CVE-2026-26899
OS Command Injection (CWE-78) in OpenWrt DNS Proxy
CVE-2026-26897
Information Exposure (CWE-200) in EcoOnline Android App
CVE-2026-26452
Improper Input Validation (CWE-20) in ccoap Parser
CVE-2026-81491
Path Traversal (CWE-22) in with-context-mcp Handlers
CVE-2026-81421
Server-Side Request Forgery (CWE-918) in Sentry MCP
CVE-2026-81203
SQL Injection (CWE-89) in Simple Online Food Ordering Admin
CVE-2026-75340
SSRF (CWE-918) in JetLinks Device Metadata Import API
CVE-2026-75338
Broken Access Control (CWE-284) in disconf Config APIs
CVE-2026-75336
SQL Injection (CWE-89) in Funiture Tool Interfaces
CVE-2026-75332
SSRF (CWE-918) in Zyplayer-Doc WikiPageWebService API
CVE-2026-75330
SQL Injection (CWE-89) in Super Diamond Frontend UI
CVE-2026-47666
Stored XSS (CWE-79) in Penpot Custom Font Handling Bug
CVE-2026-47665
Stored XSS (CWE-79) in Penpot Shared File Comments UI
CVE-2026-81202
Missing Authentication (CWE-306) in Payroll System CRUD
CVE-2026-77611
Incorrect Authorization (CWE-863) in SeaweedFS S3 API
CVE-2026-77368
Broken Access Control (CWE-639) in SeaweedFS TUS Handler
CVE-2026-77317
Path ACL Bypass (CWE-863) in SeaweedFS SFTP Service
CVE-2026-75333
Path Traversal (CWE-22) in yx-image-recognition v1.0
CVE-2026-75329
Missing Authentication (CWE-306) in Super Diamond Server
CVE-2026-75328
Path Traversal (CWE-22) in DocSys Java DocController
CVE-2026-43621
Authorization Bypass (CWE-863) in SMF Profile Loader
CVE-2026-75415
Broken Access Control (CWE-639) in AntFlow V2.0.0 API
CVE-2026-75414
JUEL Code Injection (CWE-94) in AntFlow ActivitiTest
CVE-2026-75411
Code Injection (CWE-94) in JeecgBoot AI Flow Module
CVE-2026-61792
Path Traversal (CWE-22) in Weblate App Store Metadata
CVE-2026-55228
Authorization Bypass (CWE-639) in Weblate REST API
CVE-2026-75334
SQL Injection (CWE-89) in smart-web2 Backend Reports
CVE-2026-75327
Arbitrary File Upload (CWE-434) in DocSys uploadMarkdownPic
CVE-2026-68000
SQL Injection (CWE-89) in MCMS Category List Interface
CVE-2026-60004
Remote Code Injection (CWE-94) in Gitea Diffpatch API
CVE-2026-75325
Authentication Bypass (CWE-287) in DWSurvey v6.14.0
CVE-2026-51106
Denial of Service (CWE-400) in qTox Persistence Layer
CVE-2026-36851
Path Traversal (CWE-22) in UnPoller Password Field
CVE-2025-61165
Arbitrary File Upload (CWE-434) in Cohere North AI
CVE-2025-61164
Information Disclosure (CWE-200) in Cohere North WebSocket
CVE-2025-61162
Broken Access Control (CWE-284) in Cohere North AI
CVE-2026-58474
Code Injection (CWE-94) in whichllm CLI Command Handler
CVE-2023-42179
Incorrect Access Control (CWE-284) in D1101V-F Doorbell
CVE-2026-32258
Stored Cross-Site Scripting (CWE-79) in Winter CMS
CVE-2026-32257
Stored XSS (CWE-79) in Winter CMS Brand Settings UI
CVE-2020-15878
SQL Injection (CWE-89) in LibreNMS ajax_table.php API
CVE-2020-15876
SQL Injection (CWE-89) in LibreNMS AJAX Table API
CVE-2020-15874
OS Command Injection (CWE-77) in LibreNMS graph.php
CVE-2026-81036
OAuth Open Redirect (CWE-601) in Stalwart Mail Server
CVE-2026-81035
Improper Authorization (CWE-862) in Midday Team Deletion
CVE-2026-81032
Missing Authentication (CWE-306) in NebulaGraph Web Service
CVE-2026-81031
Improper Authorization (CWE-639) in IDURAR ERP CRM
CVE-2026-81029
Open Redirect (CWE-601) in OpenMetadata SSO Handlers
CVE-2026-81027
Authorization Bypass (CWE-862) in one-api Channels
CVE-2026-80426
Stored XSS (CWE-79) in FiftyOne Field Descriptions
CVE-2026-54569
Code Injection (CWE-95) in SENAITE.CORE JSON API Endpoint
CVE-2026-54550
Path Traversal (CWE-22) in IzPack Java Installer
CVE-2026-54523
Improper Authorization (CWE-862) in Kyverno Policies
CVE-2026-54511
Log Injection (CWE-93) in LogTape Syslog Package API
CVE-2026-80203
Broken Access Control (CWE-863) in Grav API Plugin
CVE-2026-80350
Server-Side Request Forgery (CWE-918) in OneUptime Webhooks
CVE-2026-80348
Missing Authorization (CWE-862) in TarsWeb Patch API
CVE-2026-80347
SSRF (CWE-918) in mcp-fetch IPv6 URL Validation Bug
CVE-2026-80346
Missing Authorization (CWE-862) in StarRocks MV Drop
CVE-2026-80202
Authorization Bypass (CWE-863) in Kimai Timesheets
CVE-2026-80193
Broken Access Control (CWE-862) in Kimai QuickEntry
CVE-2026-80192
Improper Authentication (CWE-287) in Better Auth SSO
CVE-2026-80191
Missing Authorization (CWE-862) in GROWI Attachments
CVE-2026-76148
Code Injection (CWE-94) in CorvusSKK Software Product
CVE-2026-57171
Path Traversal (CWE-22) in Trestle Author Commands
CVE-2026-57170
Server-Side Template Injection (CWE-1336) in Trestle
CVE-2026-80138
OS Command Injection (CWE-78) in ClipBucket V5 Installer
CVE-2026-79912
OS Command Injection (CWE-77) in TOTOLINK N600R Router
CVE-2026-54757
Server-Side Template Injection (CWE-94) in Trestle
CVE-2026-79845
SQL Injection (CWE-89) in Simple Inventory System App
CVE-2026-79804
SQL Injection (CWE-89) in SililaWijesinghe Food System
CVE-2026-80104
Path Traversal (CWE-22) in DB-GPT Agent Skill Upload
CVE-2026-75465
Broken Access Control (CWE-284) in Maccms v10 API Endpoint
CVE-2026-65105
Missing Authentication (CWE-306) in NVIDIA NemoClaw
CVE-2026-65099
OS Command Injection (CWE-78) in NVIDIA NemoClaw CLI
CVE-2026-65096
OS Command Injection (CWE-78) in NemoClaw Telegram Bridge
CVE-2026-65092
Path Traversal (CWE-22) in NVIDIA OpenShell Sandbox
CVE-2026-65091
OS Command Injection (CWE-78) in NVIDIA OpenShell Gateway
CVE-2026-65090
OS Command Injection (CWE-78) in NVIDIA NemoClaw NIM
CVE-2026-65089
OS Command Injection (CWE-78) in NemoClaw Status Plugin
CVE-2026-65084
Improper Certificate Validation (CWE-295) in NemoClaw
CVE-2026-65082
Code Injection (CWE-94) in NVIDIA NemoClaw for Linux
CVE-2026-51368
Unsafe Deserialization (CWE-502) in TongWeb Console
CVE-2026-45019
Server-Side Request Forgery (CWE-918) in Chainlit MCP Endpoint
CVE-2026-45018
OS Command Injection (CWE-78) in Chainlit MCP Endpoint
CVE-2026-80049
Authorization Bypass (CWE-639) in Airbyte Platform
CVE-2026-79788
SSRF (CWE-918) in Dradis Community Edition Controllers
CVE-2026-79787
Authentication Bypass (CWE-287) in Alluxio S3 Proxy
CVE-2026-79786
Open Redirect (CWE-601) in Coroot MCP OAuth Endpoint
CVE-2026-55609
Path Traversal (CWE-73) in Sublinear Solver MCP Tools
CVE-2026-75498
SQL Injection (CWE-89) in Webkul QloApps Address.php
CVE-2026-75497
SQL Injection (CWE-89) in Webkul QloApps Back Office
CVE-2026-75496
Unrestricted Upload (CWE-434) in Webkul QloApps Platform
CVE-2026-55585
Code Injection (CWE-94) in QWED Math Verification API
CVE-2026-55571
Broken Access Control (CWE-285) in djust LiveView
CVE-2026-55553
Credential Leakage (CWE-200) in Node.js urllib Redirects
CVE-2026-24170
Improper Authentication (CWE-287) in NVIDIA UFM Web UI
CVE-2026-24169
Command Injection (CWE-77) in NVIDIA UFM Plugin API
CVE-2026-79674
Path Sandbox Bypass (CWE-73) in NLTK Corpus Readers
CVE-2026-55640
Missing Authentication (CWE-306) in Nextcloud MCP Webhook
CVE-2026-55582
OS Command Injection (CWE-78) in mcp-shell MCP Server
CVE-2026-55581
OS Command Injection (CWE-78) in mcp-shell MCP Server
CVE-2026-55546
Code Injection (CWE-94) in QWED-MCP Math Verification
CVE-2026-55539
Missing Authentication (CWE-306) in PraisonAI Jobs API
CVE-2026-55536
Improper Access Control (CWE-284) in PraisonAI Browser
CVE-2026-55533
Missing Authentication (CWE-306) in PraisonAI Recipe Server
CVE-2026-55532
Origin Validation Bypass (CWE-346) in PraisonAI MCP
CVE-2026-55540
Path Traversal (CWE-22) in PraisonAI Workspace Tools
CVE-2026-55538
Missing Authentication (CWE-306) in PraisonAI Serve
CVE-2026-55537
TOCTOU SSRF (CWE-367) in PraisonAI Webhook Validation
CVE-2026-55534
Missing Authentication (CWE-306) in PraisonAI Agents
CVE-2026-55528
Missing Authentication (CWE-306) in PraisonAI AgentServer
CVE-2026-55527
Path Traversal (CWE-22) in PraisonAI FileMemory Storage
CVE-2026-55526
Server-Side Request Forgery (CWE-918) in PraisonAI Spider
CVE-2026-79622
Path Traversal (CWE-22) in Adobe XD MCP File Access
CVE-2026-55525
Server-Side Request Forgery (CWE-918) in PraisonAI Crawler
CVE-2026-57863
Path Traversal (CWE-22) in Crater Invoice Updater API
CVE-2026-79667
Improper Authorization (CWE-285) in Ech0 Admin Routes
CVE-2026-79665
Authorization Bypass (CWE-862) in Ech0 Admin Endpoints
CVE-2026-79662
OAuth Redirect Validation (CWE-601) in Ech0 Auth API
CVE-2026-79659
SSRF (CWE-918) in Ech0 Peer Connection Health Checks
CVE-2026-79657
Unsafe Pickle Loading (CWE-502) in NLTK Model Artifacts
CVE-2026-55976
SSRF (CWE-918) in Apache Hive Avro SerDe Schema Fetch
CVE-2026-53561
Improper Authentication (CWE-287) in Apache Hive SAML
CVE-2026-49845
SQL Injection (CWE-94) in Hive Metastore Direct SQL
CVE-2026-16231
Cross-Site Scripting (CWE-79) in hbs Async Helpers
CVE-2026-78654
Prototype Pollution (CWE-1321) in Deep Framework Code
CVE-2026-78637
Argument Injection (CWE-88) in node-poppler PDF APIs
CVE-2026-78683
Unsafe Pickle Deserialization (CWE-502) in Python NLTK
CVE-2026-78682
Server-Side Request Forgery (CWE-918) in NLTK Proxy Handling
CVE-2026-78681
XML Entity Expansion (CWE-776) in NLTK XML Parsing
CVE-2026-78677
Path Traversal (CWE-22) in GitPython Repository Clone
CVE-2026-78675
Path Injection (CWE-73) in GitPython Config Handling
CVE-2026-76846
Twig Sandbox Secret Exposure (CWE-522) in Grav CMS
CVE-2026-72695
Path Traversal (CWE-22) in Grav Media Upload Handler
CVE-2026-56710
Improper Authorization (CWE-863) in Grav Login Plugin
CVE-2026-56707
Authorization Bypass (CWE-862) in Grav Flex Objects
CVE-2026-56705
File Name Control (CWE-73) in Adminer PDO Connector
CVE-2026-56703
Code Injection (CWE-94) in Adminer SQLite Query Handling
CVE-2026-56702
Unrestricted File Upload (CWE-434) in Adminer Plugin
CVE-2026-34968
Path Traversal (CWE-22) in Adminer SQLite Database
CVE-2026-77567
Authentication Bypass (CWE-287) in Filament App MFA
CVE-2026-52490
Code Injection (CWE-94) in libtiff tiffcrop Utility
CVE-2026-71506
Improper Authorization (CWE-863) in Dolibarr Payments
CVE-2026-71505
Broken Object Authorization (CWE-639) in Dolibarr API
CVE-2026-71504
Improper Authorization (CWE-862) in Dolibarr Members API
CVE-2026-40877
PHP Object Injection (CWE-502) in iTop Preferences
CVE-2026-30864
Reflected XSS (CWE-79) in Combodo iTop Dashboard Function
CVE-2025-26238
Code Injection (CWE-94) in D-Link DI-8100G msp_info
CVE-2025-26237
Command Injection (CWE-77) in D-Link DI-7001 msp_info
CVE-2026-76838
Server-Side Request Forgery (CWE-918) in Hi.Events Webhooks
CVE-2026-76836
Improper Code Generation (CWE-94) in AzuraCast Config
CVE-2026-76073
IDOR (CWE-639) in Label Studio Annotation API Endpoints
CVE-2026-77915
Authentication Bypass (CWE-306) in rConfig Core Admin
CVE-2026-78367
Code Injection (CWE-94) in RPM rpmbuild Tarball Mode
CVE-2026-78248
SQL Injection (CWE-89) in Simple Food Ordering System
CVE-2026-76847
Broken Access Control (CWE-862) in act Artifacts V4
CVE-2026-76844
Path Traversal (CWE-22) in webpack-dev-middleware
CVE-2026-76843
Unsafe Deserialization (CWE-502) in Flair Clustering
CVE-2026-76842
Path Traversal (CWE-22) in Mercado Pago Node.js SDK
CVE-2026-76841
Code Injection (CWE-94) in Xinference Model Loading
CVE-2026-76840
Buffer Overflow (CWE-787) in RustDesk Windows Clipboard
CVE-2026-78247
SQL Injection (CWE-89) in Simple Online Food Ordering
CVE-2026-78246
SQL Injection (CWE-89) in Online Clinic Admin Login
CVE-2026-78245
Unrestricted File Upload (CWE-434) in Online Pharmacy System
CVE-2026-78244
SQL Injection (CWE-89) in Real Estate search.php Handler
CVE-2026-10582
SSRF (CWE-918) in Hugo Remote Resource Fetching Pipeline
CVE-2026-75975
IPv6 Validation Bypass (CWE-20) in fast-uri URI Parser
CVE-2026-75899
Double-Decoding (CWE-174) in fast-uri Node.js Parser
CVE-2026-66897
Path Traversal (CWE-22) in LXD Instance Template Processing
CVE-2026-78202
Unrestricted Upload (CWE-434) in Payroll admin_class.php
CVE-2026-78201
SQL Injection (CWE-89) in itsourcecode Payroll Login
CVE-2026-78199
SQL Injection (CWE-89) in Simple Food Ordering System
CVE-2026-78198
SQL Injection (CWE-89) in Simple Food Ordering System
CVE-2026-78197
SQL Injection (CWE-89) in Simple Online Food Ordering
CVE-2026-59561
OS Command Injection (CWE-78) in Sakura Editor for Windows
CVE-2026-78181
Prototype Pollution (CWE-1321) in Ractive#set Method
CVE-2026-78180
Prototype Pollution (CWE-1321) in Alibaba Fusion Next Dialog
CVE-2026-19200
Improper Authorization (CWE-862) in Velociraptor VQL
CVE-2026-78178
Prototype Pollution (CWE-1321) in jQWidgets jqx-all.js
CVE-2026-78171
SQL Injection (CWE-89) in Sales & Inventory System
CVE-2026-78168
Improper Authentication (CWE-287) in ipTIME Handler
CVE-2026-78167
Improper Authentication (CWE-287) in ipTIME T16000M
CVE-2026-78208
Path Traversal (CWE-73) in ExcelJS Workbook.addImage()
CVE-2026-78203
Broken Access Control (CWE-639) in Ghostwriter Templates
CVE-2026-78147
Unsafe Deserialization (CWE-502) in llama.cpp RPC Server
CVE-2026-78143
SQL Injection (CWE-89) in Barangay Resident Search
CVE-2026-8445
Cross-Site Scripting (CWE-79) in justhtml Markdown
CVE-2026-7808
HTML Sanitization Bypass (CWE-20) in justhtml Library
CVE-2026-5388
HTML Injection (CWE-20) in justhtml Sanitization Helpers
CVE-2026-78062
Hard-Coded Credentials (CWE-259) in TaxHacker JWT Handler
CVE-2026-78136
Eval Injection (CWE-95) in CHIRP Kenwood ITM Driver
CVE-2026-63312
Path Traversal (CWE-22) in NLTK Corpus Reader Component
CVE-2026-62384
Path Traversal (CWE-22) in NLTK FramenetCorpusReader
CVE-2026-71513
Unsafe Deserialization (CWE-502) in NLTK Model Parser
CVE-2026-60084
Path Traversal (CWE-22) in SiYuan Template Endpoint
CVE-2026-59808
Authentication Bypass (CWE-306) in AVideo Uploads Portal
CVE-2026-59256
Authorization Bypass (CWE-200) in AVideo Gallery Endpoint
CVE-2026-58003
CSRF (CWE-352) in WWBN AVideo Video Release Endpoint
CVE-2026-57998
OS Command Injection (CWE-78) in better-npm-audit
CVE-2026-77945
Command Injection (CWE-77) in TRENDnet TEW-821DAP SSI
CVE-2026-19883
Improper Privilege Management (CWE-269) in WPeMatico
CVE-2026-34948
Information Disclosure (CWE-200) in Combodo iTop OQL
CVE-2026-53528
Path Traversal (CWE-23) in LeafWiki Asset Rename Function
CVE-2026-53527
Privilege Escalation (CWE-269) in LeafWiki User API
CVE-2026-49849
Unrestricted File Upload (CWE-434) in xShop Admin Portal
CVE-2026-34741
Authentication Bypass (CWE-306) in Combodo iTop Web
CVE-2026-33240
Reflected XSS (CWE-79) in Combodo iTop Search Endpoint
CVE-2026-31936
Missing Authorization (CWE-862) in Combodo iTop Search
CVE-2026-77811
Stored XSS (CWE-79) in OpenSearch Dashboards Plugin
CVE-2026-76904
SQL Injection (CWE-89) in GeoTools PostGIS DataStore
CVE-2026-68508
Arbitrary Code Execution (CWE-94) in Hydra Instantiate
CVE-2026-64679
Path Traversal (CWE-22) in Atlantis Workspace Paths
CVE-2026-63421
Improper Input Validation (CWE-20) in Keystone GraphQL
CVE-2026-63135
Stored XSS (CWE-79) in YOURLS Statistics Dashboard
CVE-2026-62316
DNS Rebinding (CWE-346) in Microsoft UFO MCP Server
CVE-2026-62283
IDOR (CWE-639) in Nezha WebSocket Terminal Sessions
CVE-2026-61824
Cross-Site Scripting (CWE-79) in Defuddle Extractors
CVE-2026-61539
Code Injection (CWE-95) in Xinference LLM Tool Parser
CVE-2026-54457
Path Traversal (CWE-552) in TensorZero Object Storage
CVE-2026-31880
Reflected XSS (CWE-79) in Combodo iTop Universal Search
CVE-2026-31803
Reflected XSS (CWE-79) in Combodo iTop tagadmin.php
CVE-2026-30890
Reflected XSS (CWE-79) in iTop Synchro Import Script
CVE-2026-30865
Reflected XSS (CWE-79) in iTop Dashboard Save Function
CVE-2026-30826
Reflected XSS (CWE-79) in Combodo iTop OQL Testing
CVE-2026-77810
Code Injection (CWE-95) in Neptune Athena Connector
CVE-2026-62960
UNC Path Disclosure (CWE-200) in Git for Windows Client
CVE-2026-30866
Information Disclosure (CWE-200) in iTop File Uploads
CVE-2026-30819
Reflected XSS (CWE-79) in Combodo iTop Dashboard Function
CVE-2026-27490
Weak Randomness (CWE-330) in iTop Image Access Links
CVE-2026-27462
User Enumeration (CWE-204) in Combodo iTop Password Reset
CVE-2026-54682
Stored XSS (CWE-79) in DiscordChatExporter Exporting
CVE-2026-54071
Unsafe Pickle Deserialization (CWE-502) in BabelDOC
CVE-2026-77234
Improper Authorization (CWE-863) in FreeRTOS-Kernel
CVE-2026-71862
Sensitive Data Exposure (CWE-200) in Checkmate Status API
CVE-2026-62677
Path Traversal (CWE-22) in Omnigent Agent Runner
CVE-2026-62675
Code Injection (CWE-94) in Omnigent Agent Framework
CVE-2026-62674
Code Injection (CWE-94) in Omnigent Shared Agent Bundles
CVE-2026-41451
Command Injection (CWE-78) in UAC Artifact Parsing
CVE-2026-41450
Command Injection (CWE-78) in UAC Artifact Collector
CVE-2026-41449
OS Command Injection (CWE-78) in UAC Forensics Tool
CVE-2026-75933
Stored XSS (CWE-79) in Jet Admin Sign-In Script Options
CVE-2026-75932
Authorization Bypass (CWE-862) in Jet Admin Domains
CVE-2026-49114
Symlink Race (CWE-59) in ONNX External Data Writer
CVE-2026-22681
Server-Side Request Forgery (CWE-918) in OpenViking
CVE-2026-77814
Path Traversal (CWE-22) in IIB File Access Control
CVE-2026-77087
Missing Authorization (CWE-862) in Paperclip Local Mode
CVE-2026-63343
Path Traversal (CWE-73) in Incus Instance Metadata API
CVE-2026-62941
Authorization Bypass (CWE-863) in Incus Project Copy
CVE-2026-62940
Missing Authorization (CWE-862) in Incus Migration
CVE-2026-55622
Improper Access Control (CWE-284) in Incus Copying
CVE-2026-55621
Broken Access Control (CWE-284) in Incus Custom Volumes
CVE-2026-48769
Improper Input Validation (CWE-20) in Incus Image Client
CVE-2026-48755
Argument Injection (CWE-20) in Incus Backup Commands
CVE-2026-48753
Path Traversal (CWE-73) in Incus S3 Upload Endpoint
CVE-2026-48752
Path Traversal (CWE-73) in Incus Image Import Handling
CVE-2026-48751
Missing Authorization (CWE-862) in Incus Snapshots
CVE-2026-48750
Symlink Following (CWE-73) in Incus Exec Endpoint API
CVE-2026-48749
Arbitrary File Write (CWE-73) in Incus Image Handling
CVE-2026-77806
Code Injection (CWE-94) in SPIP HTTP Filter Handling
CVE-2026-77776
Authorization Bypass (CWE-639) in Headroom LLM Proxy
CVE-2026-77775
Server-Side Request Forgery (CWE-918) in Headroom Proxy
CVE-2026-77767
Missing Authorization (CWE-862) in Reconmap Reports
CVE-2026-77683
OS Command Injection (CWE-77) in Comfast CF-N1-S Router
CVE-2026-77086
Path Traversal (CWE-22) in SiYuan Bazaar Endpoints
CVE-2026-65644
Stored XSS (CWE-79) in Rocket.Chat Livechat Queue UI
CVE-2026-72860
SSRF (CWE-918) in 9router Provider Node Validation API
CVE-2026-72848
SSRF (CWE-918) in LangChain Community SitemapLoader Component
CVE-2026-72843
Missing Authorization (CWE-862) in EverShop Customer API
CVE-2026-55765
Cleartext Passwords (CWE-256) in CloudNativePG Roles
CVE-2026-49436
Stored XSS (CWE-79) in LinkAce Bulk Link API Endpoint
CVE-2026-49217
Missing Authorization (CWE-306) in Mailu Admin API
CVE-2026-46682
SQL Injection (CWE-89) in BigBlueButton Breakout Rooms
CVE-2026-46355
Improper Authentication (CWE-287) in BigBlueButton
CVE-2025-52182
Missing Authentication (CWE-306) in LS2 Admin v5.8
CVE-2026-73040
Path Traversal (CWE-22) in Dockge Stack Manager Backend
CVE-2026-53804
OS Command Injection (CWE-78) in OTRS PGP Encryptor
CVE-2026-52021
Information Disclosure (CWE-200) in 100xdevs CMS App
CVE-2026-53587
Out-of-Bounds Read (CWE-125) in libgit2 Smart Protocol
CVE-2026-73257
HTTP Request Smuggling (CWE-444) in Mongoose Server
CVE-2026-73256
HTTP Request Smuggling (CWE-444) in Mongoose Server
CVE-2026-73253
TLS Hostname Verification Bypass (CWE-295) in Mongoose
CVE-2026-73251
TLS Certificate Validation Bypass (CWE-295) in Mongoose
CVE-2026-77176
Path Manipulation (CWE-73) in Kata Containers genpolicy
CVE-2026-77020
SQL Injection (CWE-89) in CodeAstro Password Recovery
CVE-2026-77019
SQL Injection (CWE-89) in Apartment Visitor System
CVE-2026-71428
SSRF (CWE-918) in Unstructured Document Ingestion
CVE-2026-69183
Rate-Limit Bypass (CWE-290) in Monkeytype API Service
CVE-2026-65842
Server-Side Request Forgery (CWE-918) in Plate DOCX
CVE-2026-61704
SSRF (CWE-918) in Link Preview JS DNS Validation Bug
CVE-2026-55642
Missing Authentication (CWE-306) in dbx-web Server
CVE-2026-54449
OS Command Injection (CWE-77) in LangBot MCP Server
CVE-2026-18287
Code Injection (CWE-94) in aeon Benchmark Loader
CVE-2026-18286
Code Injection (CWE-94) in Aeon Activity Data Loader
CVE-2026-18285
Unsafe Deserialization (CWE-502) in Aeon Dataset Loader
CVE-2026-77004
Command Injection (CWE-77) in Comfast CF-N1-S CGI
CVE-2026-76998
SQL Injection (CWE-89) in SourceCodester Food Ordering Admin
CVE-2026-76996
SQL Injection (CWE-89) in Simple FOS Admin view_order.php
CVE-2026-63490
Path Traversal (CWE-22) in Handlebars Spring MVC Loader
CVE-2026-49825
Cross-Site Scripting (CWE-79) in lxml HTML Sanitizer
CVE-2026-76990
SQL Injection (CWE-89) in Simple Inventory System 1.0
CVE-2026-76833
Code Injection (CWE-95) in @cgauge/yaml npm Package
CVE-2026-76635
SQL Injection (CWE-89) in baserCMS Database Service
CVE-2026-76633
Authorization Bypass (CWE-620) in WeGIA Password Flow
CVE-2026-18482
OS Command Injection (CWE-78) in Neo.mjs MCP Server
CVE-2026-77084
OS Command Injection (CWE-78) in n8n Git Node Integration
CVE-2026-77081
GraphQL Credential Bypass (CWE-639) in n8n Workflows
CVE-2026-77080
OS Command Injection (CWE-78) in n8n Snowflake Node
CVE-2026-77079
Authorization Bypass (CWE-639) in n8n Project Roles
CVE-2026-77077
JavaScript Sandbox Escape (CWE-94) in n8n Task Runner
CVE-2026-77075
Expression Injection (CWE-94) in n8n Link Preview UI
CVE-2026-77072
Stored XSS (CWE-79) in n8n Form Node Completion Page
CVE-2026-77071
PostgREST Filter Injection (CWE-89) in n8n Supabase
CVE-2026-77068
Path Traversal (CWE-22) in n8n MCP Schema Node Loader
CVE-2026-76795
SSRF (CWE-918) in AeternaLabsHQ PullMD REST API Endpoint
CVE-2026-76764
SQL Injection (CWE-89) in Employee Admin Login Endpoint
CVE-2026-76762
SQL Injection (CWE-89) in Assessment Management 1.0
CVE-2026-76761
OS Command Injection (CWE-78) in cc-connect Management API
CVE-2026-76760
Code Injection (CWE-94) in cc-connect Webhook Handler
CVE-2026-76850
Unsafe Deserialization (CWE-502) in LMDeploy Serving
CVE-2026-76832
Path Traversal (CWE-22) in Agno PythonTools Component
CVE-2026-76591
Command Injection (CWE-77) in TRENDnet TEW-755AP Web
CVE-2026-76583
Command Injection (CWE-74) in TRENDnet TV-IP751WIC CGI
CVE-2026-76582
Command Injection (CWE-77) in TRENDnet TEW-821DAP SSI
CVE-2026-54493
SSRF (CWE-918) in Koel Subsonic Radio Stream Proxy
CVE-2026-54491
SSRF (CWE-918) in Koel Podcast and Radio Fetch Paths
CVE-2026-53549
SSRF (CWE-918) in Termix Proxy Testing Endpoint API
CVE-2026-53548
Broken Access Control (CWE-639) in Termix Host API
CVE-2026-53547
Missing Authorization (CWE-862) in Termix Export Endpoint
CVE-2026-53546
Broken Access Control (CWE-639) in Termix SSH Terminal
CVE-2026-53545
OS Command Injection (CWE-78) in Termix SSH Tunnels
CVE-2026-53542
OS Command Injection (CWE-78) in Termix Archive Creation
CVE-2026-76574
SQL Injection (CWE-89) in Hospital Information System
CVE-2026-68900
Stored Cross-Site Scripting (CWE-79) in Wekan HTML Export
CVE-2026-68899
MIME Type Validation Bypass (CWE-434) in Wekan Attachments
CVE-2026-68561
Broken Access Control (CWE-863) in Wekan Board Updates
CVE-2026-68558
SSRF (CWE-918) in Wekan Outgoing Webhook URL Validator
CVE-2026-63722
Missing Authentication (CWE-306) in ICEcoder Terminal
CVE-2026-55089
Incorrect Authorization (CWE-863) in Etherpad OAuth2
CVE-2026-55085
Stored XSS (CWE-79) in Etherpad List Rendering Bug
CVE-2026-55643
Authorization Bypass (CWE-863) in Snipe-IT FMCS Mode
CVE-2026-55483
Authorization Bypass (CWE-862) in Snipe-IT Accounts
CVE-2026-75149
Code Injection (CWE-94) in marimo Notebook Config Handler
CVE-2026-62680
Path Traversal (CWE-22) in Orval External Ref Loader
CVE-2026-61518
SQL Injection (CWE-89) in ISPConfig Remote API Methods
CVE-2026-49441
Path Traversal (CWE-73) in Wazuh Cluster File Sync
CVE-2026-48162
Path Traversal (CWE-73) in Wazuh Distributed API Handler
CVE-2026-48024
Path Traversal (CWE-22) in Wazuh Cluster Synchronization
CVE-2026-44901
Unsafe Deserialization (CWE-502) in Wazuh Cluster
CVE-2026-41424
Authorization Bypass (CWE-863) in Wazuh User API Endpoint
CVE-2026-62669
Authentication Bypass (CWE-287) in Grav Login Plugin
CVE-2026-62667
Broken Access Control (CWE-862) in Grav API Plugin
CVE-2026-62666
Privilege Escalation (CWE-639) in Grav CMS API Plugin
CVE-2026-46343
Path Traversal (CWE-22) in Wazuh Cluster Manager Files
CVE-2026-44252
Broken Access Control (CWE-863) in Wazuh Manager API
CVE-2026-53451
Path Traversal (CWE-22) in Ground Station Snapshots
CVE-2026-49283
Improper Certificate Validation (CWE-295) in SimpleSAMLphp
CVE-2026-49255
OS Command Injection (CWE-78) in electerm File Ops
CVE-2026-49253
Path Traversal (CWE-22) in electerm Transfer Files
CVE-2026-45741
SSRF (CWE-918) in Gotenberg IPv6 Address Validation
CVE-2026-44829
Path Traversal (CWE-22) in Gotenberg ZIP Archives
CVE-2026-76225
Server-Side Request Forgery (CWE-918) in ArcadeDB LOAD CSV
CVE-2026-76224
Code Injection (CWE-94) in ArcadeDB Gremlin Query Engine
CVE-2026-76223
Missing Authorization (CWE-862) in ArcadeDB Functions
CVE-2026-76222
Path Traversal (CWE-22) in GitPython Submodule Clone
CVE-2026-76221
Git Config Injection (CWE-74) in GitPython Validator
CVE-2026-76216
Authorization Bypass (CWE-639) in Vikunja LinkSharing IDs
CVE-2026-76213
Brute-Force (CWE-307) in phpMyFAQ Two-Factor Login
CVE-2026-76205
SQL Injection (CWE-89) in phpMyFAQ Glossary Endpoints
CVE-2026-75918
Information Exposure (CWE-200) in phpMyFAQ Tracking
CVE-2026-75917
Stored XSS (CWE-79) in SiYuan File-Tree Picker Dialog
CVE-2026-75916
Stored XSS (CWE-79) in SiYuan Block Autocomplete Popup
CVE-2026-71694
CSRF (CWE-352) in BOOM Processor CSR Trap Handling
CVE-2026-43961
Code Injection (CWE-94) in Vim netrw File Name Plugin
CVE-2024-58376
OS Command Injection (CWE-78) in Renovate Helm Manager
CVE-2026-15780
Stored XSS (CWE-79) in WP Statistics WordPress Plugin
CVE-2026-76050
SQL Injection (CWE-89) in Simple Online Food Ordering
CVE-2026-76049
SQL Injection (CWE-89) in Simple Online Food Ordering System
CVE-2026-76048
SQL Injection (CWE-89) in Simple Food Ordering System
CVE-2026-75987
Unsafe Deserialization (CWE-502) in SPLWare esProc
CVE-2026-75986
SQL Injection (CWE-89) in Online Job Portal Recovery
CVE-2026-75985
Command Injection (CWE-77) in TRENDnet Router Firmware
CVE-2026-75984
Command Injection (CWE-77) in TRENDnet TEW-823DRU Router
CVE-2026-53958
Mass Assignment (CWE-915) in 4gaBoards SSO Accounts
CVE-2026-52877
Improper Input Validation (CWE-20) in Streambert IPC
CVE-2026-52876
Improper Input Validation (CWE-20) in Streambert IPC
CVE-2026-52872
Path Traversal (CWE-22) in Streambert Electron Desktop App
CVE-2026-52854
Stored XSS (CWE-79) in MediaWiki Maps Extension UI
CVE-2026-50191
Pre-Account Takeover (CWE-287) in 4gaBoards SSO Login
CVE-2026-50186
Path Traversal (CWE-22) in 4gaBoards Export Files
CVE-2026-62988
Sensitive Data Exposure (CWE-200) in Froxlor API Commands
CVE-2026-55426
OS Command Injection (CWE-78) in Linuxfabrik Plugins
CVE-2026-54348
SQL Injection (CWE-89) in Froxlor Admin API Endpoints
CVE-2026-54347
Stored XSS (CWE-79) in Froxlor DNS Admin Interface
CVE-2026-52793
Authentication Bypass (CWE-287) in Froxlor API Auth
CVE-2026-71417
Authorization Bypass (CWE-639) in Lemur TLS Manager
CVE-2026-71308
Broken Object Authorization (CWE-639) in Lemur TLS
CVE-2026-71307
Broken Access Control (CWE-862) in Lemur Destinations
CVE-2026-71303
SSRF (CWE-918) in Lemur TLS Certificate Authority Updates
CVE-2026-70666
SSRF (CWE-918) in Lemur ACME Certificate Management
CVE-2026-52481
Information Disclosure (CWE-200) in SJRC F11 Firmware
CVE-2026-47719
Server-Side Request Forgery (CWE-918) in FUXA Socket.IO
CVE-2026-55166
SSRF (CWE-918) in Lemur ACME Certificate Backend Component
CVE-2026-47629
Improper Input Validation (CWE-20) in NVIDIA Triton Server
CVE-2026-47627
Path Traversal (CWE-22) in NVIDIA Triton Inference Server
CVE-2026-74038
Path Traversal (CWE-22) in Wazuh Agent Enrollment Service
CVE-2026-71551
OS Command Injection (CWE-78) in Super Productivity
CVE-2026-67921
CSRF (CWE-352) in Halo CMS Cors/Csrf Configurer Components
CVE-2026-67920
Path Traversal (CWE-73) in Halo Migration Service
CVE-2026-52610
Path Traversal (CWE-22) in Reportico Web Endpoint Files
CVE-2026-52608
Improper Access Control (CWE-284) in Reportico-Web App
CVE-2026-50143
SSRF (CWE-918) in Apify MCP Server URL Origin Validation
CVE-2026-48508
Authorization Bypass (CWE-863) in Lemur TLS Manager
CVE-2026-44472
Improper Authentication (CWE-287) in Saleor Accounts
CVE-2021-43717
Hard-Coded Credentials (CWE-798) in Epson iProjection App
CVE-2026-61574
Access Control Bypass (CWE-639) in authentik RAC API
CVE-2026-52723
Improper Certificate Validation (CWE-295) in ePA 3.x
CVE-2026-50578
TLS Certificate Validation Bypass (CWE-295) in ePA
CVE-2026-49228
IDOR (CWE-639) in Vvveb CMS Product Access Control
CVE-2026-49225
IDOR (CWE-639) in Vvveb Product Revision Management
CVE-2026-49224
Authorization Bypass (CWE-639) in Vvveb CMS Revisions
CVE-2026-49223
Authorization Bypass (CWE-639) in Vvveb Product Reviews
CVE-2026-49222
Broken Object Level Authorization (CWE-639) in Vvveb Q&A
CVE-2026-75915
Environment Exposure (CWE-200) in CodeWhale js_execution
CVE-2026-75914
Path Traversal (CWE-22) in CodeWhale image_analyze Tool
CVE-2026-75913
Argument Injection (CWE-73) in CodeWhale Git Show Tool
CVE-2026-75911
Command Injection (CWE-94) in CodeWhale Project File
CVE-2026-75859
Path Traversal (CWE-22) in CodeWhale Config Files
CVE-2026-75858
Code Injection (CWE-94) in CodeWhale rlm_eval Engine
CVE-2026-75857
Improper Privilege Management (CWE-269) in CodeWhale Tool
CVE-2026-75856
SSRF DNS Pinning Bypass (CWE-918) in CodeWhale Server
CVE-2026-73073
Command Injection (CWE-94) in Vim C Omni-Completion
CVE-2026-55839
Stored XSS (CWE-79) in Kestra Flow Markdown Parser
CVE-2026-49227
Broken Access Control (CWE-639) in Vvveb Comments Module
CVE-2026-49226
Broken Access Control (CWE-639) in Vvveb CMS Posts
CVE-2026-49221
IDOR (CWE-639) in Vvveb Backend Digital Assets Operations
CVE-2026-45118
Reflected XSS (CWE-83) in MyBB Contact Module Redirect
CVE-2026-45117
PHP Code Injection (CWE-94) in MyBB Installer Module
CVE-2026-45116
Stored XSS (CWE-79) in MyBB User Profile Field Data
CVE-2026-45115
Stored XSS (CWE-79) in MyBB Buddy/Ignore Components
CVE-2026-75898
Server-Side Request Forgery (CWE-918) in RAGFlow Agent
CVE-2026-69189
Broken Access Control (CWE-639) in Hoppscotch APIs
CVE-2026-59940
Unsafe Deserialization (CWE-502) in Seroval Library
CVE-2026-59825
Improper Certificate Validation (CWE-295) in Mastodon
CVE-2026-50187
Arbitrary Code Execution (CWE-94) in Oh My Zsh dotenv
CVE-2026-50138
Authorization Bypass (CWE-284) in goshs WebDAV Port
CVE-2026-48798
Path Traversal (CWE-22) in SSH.NET ScpClient Download
CVE-2026-45733
Stored XSS (CWE-79) in Trilium Notes Search Interface
CVE-2026-75778
SQL Injection (CWE-89) in Task Management System 1.0
CVE-2026-75855
Path Traversal (CWE-22) in ArcadeDB Database API Endpoint
CVE-2026-75854
Missing Authentication (CWE-306) in ArcadeDB Redis
CVE-2026-75853
Missing Authorization (CWE-862) in ArcadeDB Gremlin
CVE-2026-75852
Missing Authentication (CWE-306) in ArcadeDB MongoDB
CVE-2026-75851
Broken Access Control (CWE-269) in ArcadeDB Server
CVE-2026-75846
Missing Authorization (CWE-862) in ArcadeDB SQL Statement
CVE-2026-75844
Server-Side Request Forgery (CWE-918) in ArcadeDB Server
CVE-2026-75843
Improper Privilege Management (CWE-269) in ArcadeDB
CVE-2026-75842
Path Traversal (CWE-22) in ArcadeDB OpenCypher Query
CVE-2026-75837
Privilege Escalation (CWE-269) in Grav Admin Groups
CVE-2026-75836
Missing Authorization (CWE-862) in Grav API Plugin
CVE-2026-75831
Stored XSS (CWE-79) in Grav Media Rendering Pipeline
CVE-2026-75830
Path Traversal (CWE-73) in Grav API Pages Controller
CVE-2026-75828
Stored XSS (CWE-79) in Grav detectXss() Validation
CVE-2026-75827
PHP Code Injection (CWE-94) in Grav Blueprint System
CVE-2026-74906
Incorrect Authorization (CWE-863) in SiYuan Readers
CVE-2026-74905
Server-Side Request Forgery (CWE-918) in SiYuan Proxy
CVE-2026-74904
Missing Authorization (CWE-862) in SiYuan Block API
CVE-2026-74902
Cross-Site Scripting (CWE-79) in SiYuan Upload Flow
CVE-2026-75626
Stored XSS (CWE-79) in SpiderFoot Correlation Results
CVE-2026-75094
OS Command Injection (CWE-78) in COMFAST CGI Interface
CVE-2026-75089
SQL Injection (CWE-89) in PHPGurukul Complaint System
CVE-2026-75080
SQL Injection (CWE-89) in Class and Exam Timetabling
CVE-2026-75079
SQL Injection (CWE-89) in Class Exam Timetabling System
CVE-2026-67961
Code Injection (CWE-94) in O2OA Invoke Script Sandbox
CVE-2026-67919
Code Injection (CWE-94) in Halo PluginEndpoint.java
CVE-2026-38165
Server-Side Template Injection (CWE-94) in XDocReport
CVE-2026-71424
Broken Access Control (CWE-863) in Onyx MCP API Endpoints
CVE-2026-69148
Missing Authorization (CWE-862) in MLflow Model Versions
CVE-2026-67960
Code Injection (CWE-94) in PbootCMS Web Components
CVE-2026-67918
Directory Traversal (CWE-22) in Hermes Download API
CVE-2026-67854
Critical SQL Injection (CWE-89) in Qcms CMS v6.0.6
CVE-2026-64849
Server-Side Request Forgery (CWE-918) in MLflow Webhooks
CVE-2026-56677
SSRF (CWE-918) in 9Router OIDC Discovery Test Endpoint
CVE-2026-45790
Improper Privilege Management (CWE-269) in Dokploy PaaS
CVE-2026-75482
Path Traversal (CWE-22) in SWE-agent Trajectory Inspector
CVE-2026-75481
Privilege Escalation (CWE-269) in SkyPilot Service Accounts
CVE-2026-75479
Authentication Bypass (CWE-306) in JimuReport Reports
CVE-2026-75111
Path Traversal (CWE-22) in Evidently UI Materializer
CVE-2026-75109
Missing Authorization (CWE-862) in Determined Task API
CVE-2026-75105
Authorization Bypass (CWE-639) in phpIPAM Temporary Shares
CVE-2026-75103
Broken Access Control (CWE-639) in Crawlab Password API
CVE-2026-73410
DNS-Rebinding SSRF (CWE-918) in Budibase REST APIs
CVE-2026-71518
Authorization Bypass (CWE-863) in Typemill Media Files
CVE-2026-67966
Missing Authentication (CWE-306) in Tenda W20E Telnet
CVE-2026-67965
OS Command Injection (CWE-78) in Tneda W20E Router
CVE-2026-67926
Code Injection (CWE-94) in JeecgBoot AI Chat Module
CVE-2026-67917
SQL Injection (CWE-89) in AzuraCast Backup Restore
CVE-2026-65822
SQL Injection (CWE-89) in ERPNext Inactive Customers Report
CVE-2026-64657
SQL Injection (CWE-89) in Budibase PostgreSQL Connector
CVE-2026-54356
Broken Access Control (CWE-862) in Budibase Attachments
CVE-2026-34789
Code Injection (CWE-94) in FreeCAD Document Restore
CVE-2026-34399
Code Injection (CWE-95) in FreeCAD SVG BIM Workbench
CVE-2026-34398
Code Injection (CWE-95) in FreeCAD BIM Project Templates
CVE-2026-75014
SQL Injection (CWE-89) in Pet Grooming Barcode API
CVE-2026-68004
Improper Access Control (CWE-284) in OSSRS SRS RTMP
CVE-2026-67678
Unrestricted File Upload (CWE-434) in RainyGao DocSys v2.02.80
CVE-2026-57485
API Key Exposure (CWE-200) in Stirling-PDF Pipeline
CVE-2026-57233
Path Traversal (CWE-22) in Notepad++ WinGup DLL Loading
CVE-2026-50776
Directory Traversal (CWE-22) in Pronis Billetterie
CVE-2026-50775
Blind SSRF (CWE-918) in DataHub Image Retrieval Path
CVE-2026-50774
Improper Privilege Management (CWE-269) in GAPTEQ Designer
CVE-2026-62982
OS Command Injection (CWE-78) in Glances Action Templates
CVE-2026-50772
Code Injection (CWE-94) in Squirro Cognitive Search
CVE-2026-50770
Improper Privilege Management (CWE-269) in Squirro Search
CVE-2026-50769
SQL Injection (CWE-89) in Brainformatik CRM+ Endpoint
CVE-2026-50768
Unrestricted File Upload (CWE-434) in ImageMaster App
CVE-2026-46345
Path Traversal (CWE-22) in compliance-trestle Output
CVE-2026-33437
Stored XSS (CWE-79) in Stirling-PDF Get Info Workflow
CVE-2026-9771
Improper Pointer Validation (CWE-822) in Zephyr flash_copy
CVE-2026-73646
Path Traversal (CWE-22) in PostCSS Source Map Loader
CVE-2026-64859
Sensitive Data Exposure (CWE-200) in New API User APIs
CVE-2026-55674
Reflected XSS (CWE-79) in Discourse Color Scheme
CVE-2026-71567
OS Command Injection (CWE-78) in FakeFish Shell Scripts
CVE-2026-71566
Missing Authentication (CWE-306) in FakeFish KubeVirt
CVE-2026-19693
Path Traversal (CWE-22) in extract-zip Archive Extraction
CVE-2026-75002
IMAP Command Injection (CWE-77) in Roundcube Webmail
CVE-2026-74998
Cross-Site Scripting (CWE-79) in Roundcube CSS Proxy
CVE-2026-74997
OS Command Injection (CWE-78) in Roundcube markasjunk
CVE-2026-74899
Sandbox Escape (CWE-95) in openssl_encrypt Executor
CVE-2026-74894
Authentication Bypass (CWE-287) in openssl_encrypt API
CVE-2026-74893
Hardcoded Secrets (CWE-798) in openssl_encrypt JWT
CVE-2026-74892
Hardcoded Key (CWE-798) in openssl_encrypt Telemetry
CVE-2026-74891
Hardcoded Credentials (CWE-798) in openssl_encrypt Server
CVE-2026-74889
Weak Key Derivation (CWE-326) in openssl_encrypt API
CVE-2026-74888
Weak PBKDF2 Construction (CWE-327) in openssl_encrypt
CVE-2026-74884
Path Traversal (CWE-73) in openssl_encrypt Plugin Config
CVE-2026-74877
Authorization Bypass (CWE-639) in openssl_encrypt Library
CVE-2026-74869
Missing Authorization (CWE-862) in StoatChat Subscribe
CVE-2026-74868
Unthrottled Brute Force (CWE-307) in SiYuan Publish
CVE-2026-74801
OS Command Injection (CWE-78) in SiYuan Workspace Path
CVE-2026-74800
Stored XSS (CWE-79) in SiYuan Static Asset Serving
CVE-2026-74798
Path Traversal (CWE-22) in SiYuan database_clean MCP Tool
CVE-2026-19983
OS Command Injection (CWE-78) in GL.iNet NAS Service
CVE-2026-19982
OS Command Injection (CWE-78) in GL.iNet Firewall RPC
CVE-2026-19981
OS Command Injection (CWE-78) in GL.iNet Wi-Fi Timer
CVE-2026-19980
Code Injection (CWE-74) in GL.iNet Language Update UI
CVE-2026-19979
Authorization Bypass (CWE-285) in GL.iNet WebDAV Service
CVE-2026-19977
Improper Authentication (CWE-287) in ipTIME A3004T
CVE-2026-73061
Access Control Bypass (CWE-284) in Scriban Templates
CVE-2026-73056
Improper Authentication Rate Limiting (CWE-307) in SiYuan
CVE-2026-19924
Improper Authentication (CWE-287) in Tenda AC10 httpd
CVE-2026-19919
SQL Injection (CWE-89) in Online Shopping System Login
CVE-2026-73054
WebSocket Auth Bypass (CWE-287) in SiYuan Endpoint
CVE-2026-73053
Cross-Site Scripting (CWE-79) in SiYuan Emoji Renderer
CVE-2026-73052
Stored XSS (CWE-79) in SiYuan Attribute View Menus
CVE-2026-73050
Stored XSS (CWE-79) in SiYuan Attribute-View Fields
CVE-2026-73046
Authentication Brute-Force (CWE-307) in SiYuan Kernel
CVE-2026-73045
Brute-Force (CWE-307) in SiYuan authFilePublish
CVE-2026-73044
Stored XSS (CWE-79) in SiYuan Table Width Attributes
CVE-2026-73043
Stored XSS (CWE-79) in SiYuan Template Calculator Engine
CVE-2026-73042
Stored XSS (CWE-79) in SiYuan Database Menu Interfaces
CVE-2026-73041
Stored XSS (CWE-79) in SiYuan PDF Annotation Renderer
CVE-2026-19905
SQL Injection (CWE-89) in Jinher OA Attendance Approval
CVE-2026-19901
Hard-Coded Credentials (CWE-259) in LB-LINK X-PRO Router
CVE-2026-19900
Hard-Coded Credentials (CWE-259) in LB-LINK X-PRO Router
CVE-2026-19899
SQL Injection (CWE-89) in Class Exam Timetabling System
CVE-2026-69414
Improper Access Control (CWE-284) in Microsoft Defender
CVE-2026-73680
OS Command Injection (CWE-78) in Cockpit CMS FFmpeg
CVE-2026-73679
Code Injection (CWE-94) in ImpressCMS Custom Tags Module
CVE-2026-73678
Code Injection (CWE-94) in MindsDB Minds Platform
CVE-2026-50027
Missing Authentication (CWE-306) in MCP Memory API
CVE-2026-49457
TLS Server Authentication Failure (CWE-295) in erlang_quic
CVE-2026-19188
OS Command Injection (CWE-78) in Haiwell HMI Gateway
CVE-2025-7639
Unsafe Deserialization (CWE-502) in DNA Apps SCADA
CVE-2026-73849
Unauthenticated Reinstallation (CWE-306) in Emlog CMS
CVE-2026-48528
SQL Injection (CWE-89) in Metacat REST API Endpoints
CVE-2026-46439
Server-Side Template Injection (CWE-94) in Trestle
CVE-2026-69101
XXE Injection (CWE-611) in Datavane TIS Workflow XML
CVE-2026-73673
Missing Authentication (CWE-306) in Netis NC63 Router
CVE-2026-19826
Unsafe Deserialization (CWE-502) in xxl-rpc Listener
CVE-2026-19825
SQL Injection (CWE-89) in Simple Client Management System
CVE-2026-72859
Broken Access Control (CWE-863) in Budibase S3 Upload
CVE-2026-72837
Authorization Bypass (CWE-284) in File Browser Auth
CVE-2026-72833
Privilege Escalation (CWE-269) in Grav API Plugin Component
CVE-2026-72831
Broken Access Control (CWE-863) in Flex Objects API
CVE-2026-72830
Improper Privilege Management (CWE-269) in Grav API
CVE-2026-72829
API Scope Bypass (CWE-269) in Grav API Users Controller
CVE-2026-72828
Improper Privilege Management (CWE-269) in Grav API
CVE-2026-72825
Authorization Bypass (CWE-862) in Grav API Plugin Endpoint
CVE-2026-72824
Improper Authorization (CWE-862) in Grav API Plugin Flaw
CVE-2026-72822
Missing API Scope Checks (CWE-306) in Grav API Plugin
CVE-2026-72819
Code Injection (CWE-94) in Grav Flex Objects Plugin
CVE-2026-72811
SQL Injection (CWE-89) in SiYuan Backlink Search Query
CVE-2026-72810
Authorization Bypass (CWE-862) in SiYuan WebSocket
CVE-2026-19771
OS Command Injection (CWE-78) in Baicells LuCI Web Interface
CVE-2026-19762
Path Traversal (CWE-22) in Taier Chunk-Check Endpoint
CVE-2026-19758
Path Traversal (CWE-22) in Lamp-Cloud Chunk Endpoint
CVE-2026-19757
Path Traversal (CWE-22) in Lamp-Cloud File Upload Controller
CVE-2026-19753
Server-Side Request Forgery (CWE-918) in MCP RDF Explorer
CVE-2026-73843
Unauthenticated APIs (CWE-306) in OpenChoreo Gateway
CVE-2026-73842
Missing Authentication (CWE-306) in OpenChoreo Gateway
CVE-2026-73841
Broken Access Control (CWE-639) in OpenChoreo API Handlers
CVE-2026-73667
OS Command Injection (CWE-78) in OpenChoreo Workflows
CVE-2026-73666
Missing Authentication (CWE-306) in OpenChoreo Backstage
CVE-2026-73665
Missing Authorization (CWE-862) in FreePBX UCP Server
CVE-2026-73663
SQL Injection (CWE-89) in FreePBX Missed Call Module
CVE-2026-73662
OS Command Injection (CWE-78) in FreePBX Music Hold
CVE-2026-73659
Path Traversal (CWE-22) in Trigger.dev Object Store
CVE-2026-73658
Path Traversal (CWE-22) in Trigger.dev Object Store
CVE-2026-73408
SQL Injection (CWE-89) in Budibase MySQL Integration
CVE-2026-73305
Broken Access Control (CWE-862) in Budibase Roles API
CVE-2026-72857
Cleartext Credential Exposure (CWE-522) in Budibase
CVE-2026-72855
SSRF (CWE-918) in Budibase OpenAPI and REST Queries
CVE-2026-72853
SQL Injection (CWE-89) in Budibase Oracle Data Connector
CVE-2026-72851
SQL Injection (CWE-89) in Budibase Webhook Automations
CVE-2026-72850
Path Traversal (CWE-22) in Budibase S3 Export Handler
CVE-2026-72849
CSRF (CWE-352) in Budibase Chat-Link Handoff Endpoint
CVE-2026-72842
Path Traversal (CWE-73) in luci-app-lxc OpenWrt
CVE-2026-72841
Path Traversal (CWE-73) in luci-app-openvpn Upload
CVE-2026-72776
Unauthenticated RCE (CWE-306) in AgenticSeek API Endpoint
CVE-2026-19750
Hard-Coded Password (CWE-259) in Tenda Routers SSH
CVE-2026-73669
Missing Authentication (CWE-306) in Hue MQTT Broker
CVE-2026-73656
IDOR (CWE-639) in Trigger.dev Deployment API Access
CVE-2026-73655
Improper Authentication (CWE-287) in Trigger.dev Auth
CVE-2026-73530
SSRF Guard Bypass (CWE-918) in Flyto2 Core HTTP Modules
CVE-2026-59714
Authorization Bypass (CWE-862) in Open WebUI Channels
CVE-2026-48099
Path Traversal (CWE-22) in WsgiDAV WebDAV File Server
CVE-2026-19747
OS Command Injection (CWE-74) in Tenda ATE Module
CVE-2026-18164
Hard-Coded Credential (CWE-798) in Device Controls
CVE-2026-73653
Path Traversal (CWE-22) in Vitest Browser Mode API
CVE-2026-73650
Stored XSS (CWE-79) in SVGO SVG Sanitization Plugin
CVE-2026-73482
CSRF (CWE-352) in phpList Administrator Deletion Action
CVE-2026-72777
Server-Side Request Forgery (CWE-918) in Next AI Draw.io
CVE-2026-73649
Server-Side Template Injection (CWE-94) in Velocity.js
CVE-2026-73644
LDAP Authorization Bypass (CWE-285) in OpenDJ SASL Handler
CVE-2026-72741
Broken Access Control (CWE-639) in Rainbond Enterprise
CVE-2026-67614
Hard-Coded JWT Secret (CWE-798) in CyberPanel WebTerminal
CVE-2019-25765
SQL Injection (CWE-89) in ASP-CMS commentList.asp Endpoint
CVE-2026-59765
SSRF (CWE-918) in Migration Asset Download Handler
CVE-2026-58508
SSRF (CWE-284) in Gitea Migration and Mirror Features
CVE-2026-58443
Authorization Bypass (CWE-863) in Pull Request Branches
CVE-2026-58439
Branch Protection Bypass (CWE-284) in Pull Requests
CVE-2026-58438
Cross-Repository IDOR (CWE-862) in Issue Dependency Removal
CVE-2026-58437
Repository Visibility Control (CWE-284) in Git Push
CVE-2026-58434
Private Repository Metadata Leak (CWE-200) in ACLs
CVE-2026-58433
Missing Authorization (CWE-862) in Team-Repository Link
CVE-2026-58427
Information Exposure (CWE-200) in Private /members API
CVE-2026-58417
Broken Access Control (CWE-284) in Organization API
CVE-2026-58416
Authorization Bypass (CWE-863) in Fork-PR Actions Task
CVE-2026-58314
Server-Side Request Forgery (CWE-918) in Gitea Integrations
CVE-2026-57894
SSRF (CWE-918) in Git Repository Migration Service Layer
CVE-2026-56750
Improper Access Control (CWE-284) in Gitea Remember-Me
CVE-2026-56654
Privilege Escalation (CWE-284) in API Access Tokens
CVE-2026-56443
Token Scope Bypass (CWE-863) in Repository and Package API
CVE-2026-55987
OAuth2 Authorization Bypass (CWE-863) in Auth Sources
CVE-2026-55982
Information Disclosure (CWE-200) in OIDC UserInfo Endpoint
CVE-2026-54481
TLS Certificate Validation Bypass (CWE-295) in API Client
CVE-2026-24791
Authorization Bypass (CWE-863) in /api/v1/user Routes
CVE-2026-13048
Perl Code Injection (CWE-95) in Data::MuForm::Localizer
CVE-2026-73670
SQL Injection (CWE-89) in CMS Admin Database Handler
CVE-2026-19710
SQL Injection (CWE-89) in Simple Student Info System
CVE-2026-73509
Path Traversal (CWE-22) in OpenList Batch Rename
CVE-2026-73505
Template Injection (CWE-94) in Oh My Posh Path Renderer
CVE-2026-70463
Authorization Bypass (CWE-863) in rsync auth users parser
CVE-2026-70460
Path Traversal (CWE-22) in rsync Symlink Handling Bug
CVE-2026-70454
TLS Certificate Validation (CWE-295) in rsync TLS Mode
CVE-2026-70452
Access Control Bypass (CWE-863) in rsync DNS Rules
CVE-2026-53790
Command Injection (CWE-78) in rsync Command Utilities
CVE-2026-49857
SSRF (CWE-918) in auth-fetch-mcp URL Validation Logic
CVE-2026-67986
Ruby Code Injection (CWE-94) in amazing_print#grep
CVE-2026-49827
Unrestricted File Upload (CWE-434) in WebErpMesv2 App
CVE-2026-49478
SSRF (CWE-918) in Fulcio OIDC Cert Discovery Endpoint
CVE-2026-73629
Server-Side Request Forgery (CWE-918) in Serendipity
CVE-2026-73626
Authorization Bypass (CWE-284) in JupyterLab Install
CVE-2026-73625
OS Command Injection (CWE-78) in GitPython Method Calls
CVE-2026-73623
OS Command Injection (CWE-78) in GitPython Cloning
CVE-2026-73622
Environment Variable Exposure (CWE-200) in GitPython
CVE-2026-73620
Path Traversal (CWE-22) in GitPython Git Operations
CVE-2026-73612
Path Access Bypass (CWE-639) in File Browser Operations
CVE-2026-73608
Missing Authorization (CWE-862) in SiYuan Search API
CVE-2026-73602
Code Injection (CWE-95) in Flowise vm2 JavaScript Sandbox
CVE-2026-73601
Command Injection (CWE-95) in Flowise Custom MCP Node
CVE-2026-73487
Code Injection (CWE-94) in Flowise Agent Nodes APIs
CVE-2026-73486
Code Injection (CWE-94) in Flowise CSV Agent Parser
CVE-2026-73485
Code Injection (CWE-94) in Flowise Airtable Agent Node
CVE-2026-73483
Command Injection (CWE-78) in Flowise Node Sandbox
CVE-2026-49819
Missing Authentication (CWE-306) in UpSnap Web App API
CVE-2026-49473
Authorization Bypass (CWE-863) in Express.js Middleware
CVE-2026-49481
OS Command Injection (CWE-78) in UpSnap Device Management
CVE-2026-73519
Hard-Coded Secret (CWE-798) in WolfStack Management
CVE-2026-73501
Authentication Bypass (CWE-287) in kin-openapi Handler
CVE-2026-73498
Path Traversal (CWE-22) in MCP Atlassian Attachments
CVE-2026-73495
HTTP Trailer Injection (CWE-444) in Blaze Server Stack
CVE-2026-18749
Broken Access Control (CWE-639) in VinceTrack Attachments
CVE-2026-73418
Improper Input Validation (CWE-20) in NextAuth.js JWT
CVE-2026-66898
Path Traversal (CWE-22) in LXD Backup Restore Import
CVE-2026-65370
HTTP Request Smuggling (CWE-444) in ServiceTalk HTTP/1.x
CVE-2026-16033
Path Traversal (CWE-22) in LXD QEMU VM Guest Templates
CVE-2026-73406
Information Disclosure (CWE-200) in Budibase User API
CVE-2026-73332
Stored XSS (CWE-89) in CamaleonCMS Contact Form Plugin
CVE-2026-73331
SQL Injection (CWE-89) in CamaleonCMS Slug Handler
CVE-2026-73329
Stored XSS (CWE-79) in CamaleonCMS Draft Management
CVE-2026-73326
Missing Authorization (CWE-862) in CamaleonCMS Plugins
CVE-2026-73303
IDOR (CWE-639) in Budibase Account Email Change API
CVE-2026-72807
SQL Injection (CWE-89) in SiYuan Template View Columns
CVE-2026-72804
Information Disclosure (CWE-200) in SiYuan Graph APIs
CVE-2026-72801
Credential Exposure (CWE-522) in SiYuan Publish Mode
CVE-2026-72798
Missing Authorization (CWE-862) in SiYuan Database Views
CVE-2026-72795
Missing Authorization (CWE-862) in SiYuan Embed APIs
CVE-2026-72794
Session Key Exposure (CWE-522) in Siyuan Publish Mode
CVE-2026-72793
Sensitive Data Exposure (CWE-522) in SiYuan System Endpoint
CVE-2026-72789
Missing Authorization (CWE-862) in SiYuan Publish API
CVE-2026-67579
SQL Injection (CWE-89) in Ash Framework Pagination
CVE-2026-63300
Authorization Bypass (CWE-862) in LXD Instance Migration
CVE-2026-63298
Command Injection (CWE-78) in LXD NVIDIA Config Handling
CVE-2026-63297
TOCTOU Authorization Bypass (CWE-367) in LXD Projects
CVE-2026-63296
Authorization Bypass (CWE-863) in LXD Instance Migration
CVE-2026-62420
Authorization Bypass (CWE-863) in LXD Instance Move
CVE-2026-18952
SSRF (CWE-918) in OpenSearch Security Analytics Plugin
CVE-2026-73327
Path Traversal (CWE-22) in Joomla Update Extension
CVE-2026-73300
SQL Injection (CWE-89) in Budibase MySQL Integration
CVE-2026-73299
Code Injection (CWE-94) in Prompty Nunjucks Renderer
CVE-2026-44741
SQL Injection (CWE-89) in Pimcore Admin Classic Bundle
CVE-2026-73296
Missing Authentication (CWE-306) in UFO Mobile MCP
CVE-2026-48554
OS Command Injection (CWE-78) in Nagios Notifications
CVE-2026-48553
OS Command Injection (CWE-78) in Nagios NRDP Interface
CVE-2026-48551
CSRF Bypass (CWE-352) in Nagios Core/XI Web Interface
CVE-2026-73325
Unsafe Deserialization (CWE-502) in OneCompression
CVE-2026-73294
OS Command Injection (CWE-78) in Semaphore UI Git Handler
CVE-2026-73293
Improper Privilege Management (CWE-269) in Semaphore UI
CVE-2026-73292
CSRF (CWE-352) in Semaphore UI Password Change Endpoint API
CVE-2026-67587
Unsafe Deserialization (CWE-502) in Airflow Task SDK
CVE-2026-67260
Unsafe Deserialization (CWE-502) in Airflow Scheduler
CVE-2026-58076
Unsafe Deserialization (CWE-502) in Apache Airflow
CVE-2026-73291
Path Traversal (CWE-22) in Seerr ImageProxy Cache
CVE-2026-73289
Authorization Bypass (CWE-863) in RustFS Policy Rules
CVE-2026-73286
Authorization Bypass (CWE-863) in RustFS Request Headers
CVE-2026-73285
Improper Authorization (CWE-863) in RustFS OPA Plugin
CVE-2026-73284
Improper Privilege Management (CWE-269) in RustFS API
CVE-2026-73264
SSRF (CWE-918) in Prowler Lighthouse OpenAI Provider
CVE-2026-73263
OS Command Injection (CWE-78) in Prowler K8s Provider
CVE-2026-50561
Improper Authentication (CWE-287) in Yuxi Backend APIs
CVE-2026-47231
Broken Access Control (CWE-639) in Admidio File Module
CVE-2026-57858
Stored XSS (CWE-79) in Cal.com Cal.diy Booking Pages
CVE-2026-53996
Missing Access Control (CWE-862) in NetBSD hdaudio(4)
CVE-2026-11325
OS Command Injection (CWE-78) in Cloudflare Pages Action
CVE-2026-64954
Authorization Bypass (CWE-862) in Velociraptor VQL Queries
CVE-2026-73249
Missing Authorization (CWE-862) in calibre Content Server
CVE-2026-73247
Server-Side Request Forgery (CWE-918) in Kestra HTTP Function
CVE-2026-73246
Sensitive Data Exposure (CWE-200) in Kestra Worker
CVE-2026-67568
Hard-Coded Credentials (CWE-798) in Mira Android APK
CVE-2026-66875
Missing Authentication (CWE-306) in Mira Hormone Monitor
CVE-2026-5917
Shell Command Injection (CWE-78) in libgit2 SSH Backend
CVE-2026-63177
Authorization Bypass (CWE-863) in Malcolm OpenResty
CVE-2026-55676
Unrestricted Upload (CWE-434) in Malcolm File Upload
CVE-2026-48765
Broken Access Control (CWE-639) in TypeBot OAuth Credentials
CVE-2026-48763
Broken Access Control (CWE-862) in TypeBot Upload API
CVE-2026-73241
Authentication Bypass (CWE-287) in FreeRDP Server RDSTLS
CVE-2026-73234
Path Traversal (CWE-22) in FreeCAD FCStd Archive Restore
CVE-2026-73231
Code Injection (CWE-95) in Faker fake Template Helper
CVE-2026-73034
Path Traversal (CWE-22) in DB-GPT File Upload Endpoint
CVE-2026-73032
Code Injection (CWE-94) in PapersGPT Zotero Extension
CVE-2026-73031
Stored XSS (CWE-79) in telegram-search MessageList
CVE-2026-45618
Code Injection (CWE-94) in LiquidJS Template Engine
CVE-2026-19091
Arbitrary File Deletion (CWE-22) in GeoDirectory Plugin
CVE-2026-73227
Path Traversal (CWE-22) in electerm RDP File Transfer
CVE-2026-73225
Path Traversal (CWE-22) in electerm File Transfer
CVE-2026-73224
OS Command Injection (CWE-78) in electerm SFTP Client
CVE-2026-73223
Path Traversal (CWE-22) in electerm SFTP Component
CVE-2026-73222
OS Command Injection (CWE-78) in Claude Code Studio
CVE-2026-72742
Arbitrary File Read (CWE-73) in DSPy Media Adapters
CVE-2026-69119
Broken Object Level Authorization (CWE-639) in Tau Auth
CVE-2026-73211
SQL Injection (CWE-89) in PeerTube ActorFollowModel
CVE-2026-73090
Incorrect Authorization (CWE-863) in PeerTube Federation
CVE-2026-72713
Path Traversal (CWE-22) in XAgent Workspace Files
CVE-2026-69102
Hard-Coded JWT Secret (CWE-798) in MaxKey SSO Server
CVE-2026-48771
Sensitive Data Exposure (CWE-200) in ishankportfolio
CVE-2026-48767
OAuth Token Exposure (CWE-200) in TypeBot Workspace
CVE-2026-73080
Server-Side Request Forgery (CWE-918) in SeaweedFS
CVE-2026-73079
Path Traversal (CWE-22) in Sub2API Response Endpoints
CVE-2026-73078
Command Injection (CWE-77) in Vim netrw Plugin Menus
CVE-2026-73077
OS Command Injection (CWE-78) in Vim Filetype Plugins
CVE-2026-73076
Code Injection (CWE-94) in Vim Vimball Runtime Script
CVE-2026-73069
SQL Injection (CWE-89) in Twenty CRM Search Fields
CVE-2026-67180
OS Command Injection (CWE-78) in Google Turbinia Tasks
CVE-2026-56721
IDOR (CWE-639) in CamaleonCMS User Management Panel
CVE-2026-48766
API Key Exposure (CWE-200) in TypeBot OpenAI Helper
CVE-2026-48495
Missing Authorization (CWE-862) in TypeBot Google Sheets
CVE-2026-42142
Missing Authorization (CWE-862) in TypeBot Sheets API
CVE-2026-72922
Authentication Bypass (CWE-287) in AutoGPT Webhooks
CVE-2026-72921
Improper Authorization (CWE-863) in SeaweedFS Filer
CVE-2026-72920
Missing Authentication (CWE-306) in SeaweedFS Filer
CVE-2026-51584
Improper Authentication (CWE-287) in usememos SSO Login
CVE-2026-51583
SSRF (CWE-918) in usememos Webhook Validation Handler
CVE-2026-48056
Improper Input Validation (CWE-20) in Streambert IPC
CVE-2026-46670
SQL Injection (CWE-89) in YesWiki Bazar Form Import
CVE-2026-72775
SQL Injection (CWE-89) in n8n PostgresTrigger Node
CVE-2026-72773
Path Traversal (CWE-22) in n8n File Search Component
CVE-2026-72768
SSRF Protection Bypass (CWE-918) in n8n MCP Client
CVE-2026-72767
OS Command Injection (CWE-78) in n8n Git Workflows
CVE-2026-72765
Code Injection (CWE-94) in n8n Expression Sandbox Eval
CVE-2026-72762
Arbitrary File Write (CWE-434) in n8n Edit Image Node
CVE-2026-72750
SQL Injection (CWE-89) in n8n Snowflake Execute Query
CVE-2026-72748
Unauthenticated File Write (CWE-306) in AVideo Encoder
CVE-2026-72747
Stored XSS (CWE-79) in AVideo User Management Page
CVE-2026-72746
Authentication Bypass (CWE-287) in FreeRDP RDSTLS Server
CVE-2026-72606
SSRF (CWE-918) in Pinry Pin-from-URL Server Feature
CVE-2026-72605
Missing Authentication (CWE-306) in Swing Music Auth
CVE-2026-72603
OS Command Injection (CWE-78) in wg-easy Client Creation
CVE-2026-72602
Path Traversal (CWE-22) in DeepWiki Repository API
CVE-2026-72601
Broken Access Control (CWE-284) in CSZ CMS Admin Viewer
CVE-2026-72600
Broken Access Control (CWE-284) in Idurar ERP /download
CVE-2026-72599
SQL Injection (CWE-89) in e107 News Item Page Parameter
CVE-2026-72596
Broken Access Control (CWE-284) in Ghost 5.x Posts
CVE-2026-72595
Broken Access Control (CWE-284) in Handesk Tickets
CVE-2026-72563
Broken Access Control (CWE-284) in Handesk Lead Records
CVE-2026-72562
SQL Injection (CWE-89) in Pimcore Classic Admin Grid
CVE-2026-72561
Broken Access Control (CWE-284) in Peppermint OIDC
CVE-2026-72558
SQL Injection (CWE-89) in CiviCRM Contact Search Module
CVE-2026-72557
Unrestricted File Upload (CWE-434) in Cockpit CMS Assets
CVE-2026-72556
OS Command Injection (CWE-78) in ZoneMinder Filters
CVE-2026-72555
Broken Access Control (CWE-284) in Peppermint Handlers
CVE-2026-72552
Server-Side Request Forgery (CWE-918): Dub Metatags Endpoint
CVE-2026-72551
OS Command Injection (CWE-78) in Apioo Fusio Server
CVE-2026-72550
SQL Injection (CWE-89) in Friendica Photo View Order
CVE-2026-72548
Information Disclosure (CWE-200) in OpenSign Tenants
CVE-2026-72547
IDOR (CWE-639) in Attendize Cross-Account Import Endpoint
CVE-2026-72546
IDOR (CWE-639) in Attendize Event Invitation Endpoint
CVE-2026-72545
IDOR (CWE-639) in OpenSign Contact Record Update API
CVE-2026-72543
IDOR (CWE-639) in OpenSign Contact Records Endpoint
CVE-2026-72537
Privilege Escalation (CWE-269) in authentik SCIM API
CVE-2026-72536
Missing Authentication (CWE-306) in Chaskiq Stripe API
CVE-2026-72535
Missing Authentication (CWE-306) in Chaskiq GraphQL
CVE-2026-72534
Improper Privilege Management (CWE-269) in Authentik SCIM
CVE-2026-72533
Authentication Bypass (CWE-287) in Portainer CE Proxy
CVE-2026-71217
Improper Input Validation (CWE-20) in iperf3 Server
CVE-2026-72915
Information Disclosure (CWE-200) in Mastodon Admin
CVE-2026-73030
Path Traversal (CWE-22) in Unearth Archive Extraction
CVE-2026-72910
Missing Authorization (CWE-862) in ERPNext Account APIs
CVE-2026-72903
Path Traversal (CWE-22) in Tabby SFTP Windows Client
CVE-2026-72902
OS Command Injection (CWE-78) in Dokploy Registry API
CVE-2026-72901
OS Command Injection (CWE-78) in Dokploy Volume Backups
CVE-2026-72886
Authorization Bypass (CWE-863) in Dokploy Schedules
CVE-2026-72883
Missing Authorization (CWE-862) in Dokploy WebSockets
CVE-2026-72882
OS Command Injection (CWE-78) in Dokploy File Mounts
CVE-2026-72880
Path Traversal (CWE-78) in Dokploy Certificate API
CVE-2026-72878
OS Command Injection (CWE-78) in Dokploy Backup Pipeline
CVE-2026-72877
OS Command Injection (CWE-78) in Dokploy Docker Builds
CVE-2026-72876
OS Command Injection (CWE-78) in Dokploy Swarm API
CVE-2026-72875
OS Command Injection (CWE-78) in Dokploy Platform
CVE-2026-71966
OS Command Injection (CWE-78) in CyberPanel Remote Backup
CVE-2026-69118
Server-Side Template Injection (CWE-1336) in Cachet
CVE-2026-69112
Path Traversal (CWE-22) in Hugging Face Accelerate
CVE-2026-72872
Command Injection (CWE-78) in Dokploy Bitbucket Provider
CVE-2026-72871
Missing Authentication (CWE-306) in Dokploy GitHub Setup
CVE-2026-72869
OS Command Injection (CWE-78) in Dokploy Restore Flow
CVE-2026-72868
OS Command Injection (CWE-78) in Dokploy Platform
CVE-2026-72867
OS Command Injection (CWE-78) in Dokploy Git Deploy
CVE-2026-72866
Missing Authorization (CWE-862) in Dokploy Terminal
CVE-2026-72865
OS Command Injection (CWE-78) in Dokploy Deployment
CVE-2026-72864
Missing Authorization (CWE-862) in Dokploy Terminal
CVE-2026-72863
Broken Access Control (CWE-862) in Dokploy WebSockets
CVE-2026-71962
Missing Authorization (CWE-862) in Flowise File API
CVE-2026-72899
SQL Injection (CWE-89) in Metabase Public Dashboards
CVE-2026-72898
SQL Injection (CWE-89) in Metabase Password Reset API
CVE-2026-72862
OS Command Injection (CWE-78) in Dokploy Database Services
CVE-2026-72740
OS Command Injection (CWE-78) in Dokploy Git Provider
CVE-2026-72738
OS Command Injection (CWE-78) in Dokploy Backup Endpoint
CVE-2026-72737
Broken Access Control (CWE-639) in Dokploy Backups
CVE-2026-72736
OS Command Injection (CWE-77) in Dokploy PaaS Remote
CVE-2026-72735
OS Command Injection (CWE-77) in Dokploy Traefik Config
CVE-2026-72734
Broken Access Control (CWE-639) in Dokploy Server API
CVE-2026-72733
OS Command Injection (CWE-78) in Dokploy Backup Restore
CVE-2026-72731
SQL Injection (CWE-89) in Discourse Data Explorer Plugin
CVE-2026-72730
Stored XSS (CWE-79) in Discourse Rich Text Editor UI
CVE-2026-47754
Unauthenticated Path Traversal (CWE-22) in Metacat API
CVE-2026-72692
Broken Access Control (CWE-862) in OpenSign Server
CVE-2026-72690
Broken Access Control (CWE-639) in Attendize Events
CVE-2026-72689
Broken Object Authorization (CWE-639) in OpenSign Server
CVE-2026-72688
Missing Authentication (CWE-306) in OpenSign Server
CVE-2026-72594
Stored Cross-Site Scripting (CWE-79) in Lobe Chat Avatars
CVE-2026-72593
Missing Authentication (CWE-306) in dulldusk/phpfm
CVE-2026-72592
Unrestricted Upload (CWE-434) in PHPFM File Manager
CVE-2026-72591
Server-Side Request Forgery (CWE-918) in Koito Web API
CVE-2026-72589
OS Command Injection (CWE-78) in Crontab-UI Import
CVE-2026-72586
Missing Authentication (CWE-306) in FUXA DAQ Query Event
CVE-2026-72581
SSRF (CWE-918) in XiaoAI Patch Authentication API Endpoint
CVE-2026-72580
OS Command Injection (CWE-78) in XiaoAI Patch API
CVE-2026-72579
OS Command Injection (CWE-78) in NASA HyperCP Main Branch
CVE-2026-72578
Cross-Site Request Forgery (CWE-352) in FreePBX Framework 17
CVE-2026-72577
Missing Authentication (CWE-306) in NASA fprime-gds
CVE-2026-72575
Improper Authorization (CWE-284) in Daptin Usergroups
CVE-2026-72573
OS Command Injection (CWE-78) in pm2panel Handler
CVE-2026-72572
Path Traversal (CWE-22) in o1lab/xmysql Download API
CVE-2026-72571
Path Traversal (CWE-22) in Cast LocalVideo Endpoint
CVE-2026-72569
Path Traversal (CWE-22) in directory-serve Delete Mode
CVE-2026-72567
Path Traversal (CWE-22) in DeepWiki wiki-cache API Endpoint
CVE-2026-72566
SSRF (CWE-918) in automatisch HTTP Request Custom Request
CVE-2026-72565
SQL Injection (CWE-89) in Tencent APIJSON @having Operator
CVE-2026-72564
Improper Authorization (CWE-639) in Pangolin Resources
CVE-2026-19384
SQL Injection (CWE-89) in Simple Doctors ajax.php App
CVE-2026-19379
OS Command Injection (CWE-78) in ipTIME AX8004M CGI
CVE-2026-19374
Server-Side Request Forgery (CWE-918) in api-mcp Proxy
CVE-2026-19351
SQL Injection (CWE-89) in node-sql-query Request Handler
CVE-2026-19348
OS Command Injection (CWE-77) in Aitemi M300 Repeater
CVE-2026-19344
SQL Injection (CWE-89) in Code-Projects Task System
CVE-2026-19343
SQL Injection (CWE-89) in Task Management Admin Login
CVE-2026-19342
Improper Authentication (CWE-287) in Task Management Login
CVE-2026-10595
Path Traversal (CWE-23) in ParisNeo lollms SPA Route
CVE-2026-67620
SSRF (CWE-918) in Flowise Cloud Metadata Protection
CVE-2026-19263
Command Injection (CWE-74) in mcp-bridge API Server
CVE-2026-48120
Command Injection (CWE-74) in Kakoune Autorestore Script
CVE-2026-48026
Stored XSS (CWE-79) in lakeFS Web UI Markdown Rendering
CVE-2026-46409
CORS Bypass (CWE-942) in OpenYak Desktop Local HTTP API
CVE-2026-48169
Broken Access Control (CWE-639) in PraisonAI Platform API
CVE-2026-66061
Missing Authorization (CWE-862) in Home Assistant iOS
CVE-2026-66060
Missing Authorization (CWE-862) in Home Assistant App
CVE-2026-50540
Path Traversal (CWE-22) in Kata Containers VM Runtime
CVE-2026-62296
Uncontrolled Recursion (CWE-674) in HAPI FHIR XhtmlParser
CVE-2026-62295
Uncontrolled Recursion (CWE-674) in HAPI FHIR JSON Parser
CVE-2026-61808
Missing Authentication (CWE-306) in LightRAG API Server
CVE-2026-48039
Authentication Bypass (CWE-287) in Meta Ads MCP Server
CVE-2026-48098
OS Command Injection (CWE-78) in NexTor IP Changer
CVE-2026-48097
OS Command Injection (CWE-78) in NexTor IP Changer
CVE-2026-19231
SQL Injection (CWE-89) in Simple Doctors Appointment System
CVE-2026-68772
Unsafe Deserialization (CWE-502) in ZenML Materializer
CVE-2026-19211
SQL Injection (CWE-89) in Photo Share Website Signup
CVE-2026-19264
Path Traversal (CWE-22) in Postiz Media File Route
CVE-2022-4995
Unrestricted File Upload (CWE-434) in Weaver E-cology
CVE-2026-66838
SQL Injection (CWE-89) in Postgrex Stream Comments
CVE-2026-15816
OS Command Injection (CWE-78) in dracut Emergency Hook
CVE-2026-19196
SQL Injection (CWE-89) in Photo Share Website Login
CVE-2026-19195
Improper Privilege Management (CWE-266) in Jingyun Driver
CVE-2026-19193
Improper Privileges (CWE-266) in Jiangmin Minifilter
CVE-2026-7867
Improper Authorization (CWE-863) in udisks2 D-Bus Mount
CVE-2026-70636
Authentication Bypass (CWE-862) in Flowise OAuth2 Endpoint
CVE-2026-70559
Missing Authentication (CWE-306) in Dinky SysConfig
CVE-2026-70558
Unrestricted File Upload (CWE-434) in Dinky Download
CVE-2026-67689
SQL Injection (CWE-89) in FineAdmin Pagination Endpoints
CVE-2026-67688
Unrestricted File Upload (CWE-434) in ICS-Park Management
CVE-2026-67687
Improper Access Control (CWE-284) in ics-park Roles
CVE-2026-67622
IDOR (CWE-639) in Flowise OpenAI Assistants Integration
CVE-2026-67621
Missing Authorization (CWE-862) in Flowise Document Store
CVE-2026-64665
Authentication Bypass (CWE-287) in Statamic OAuth Login
CVE-2026-63725
OS Command Injection (CWE-78) in sysPass Backup Service
CVE-2026-53984
Missing Authentication (CWE-306) in Ground Station SQLite
CVE-2026-53983
Server-Side Request Forgery (CWE-918) in Ground Station
CVE-2026-48088
Missing Authorization (CWE-862) in OpenReception Crypto
CVE-2026-48087
Authentication Bypass (CWE-287) in OpenReception Platform
CVE-2026-48086
Improper Privilege Management (CWE-269) in OpenReception
CVE-2026-48085
Missing Authorization (CWE-862) in OpenReception Setup
CVE-2026-48084
Missing Login Throttling (CWE-307) in OpenReception
CVE-2026-48081
Stored XSS (CWE-79) in OpenReception Appointment App
CVE-2026-48080
Sensitive Data Exposure (CWE-200) in OpenReception
CVE-2026-48054
Code Injection (CWE-94) in OpenZeppelin Contracts Wizard
CVE-2026-45414
Cross-Tenant JWT Authorization (CWE-639) in Decidim API
CVE-2026-45378
Sensitive Data Exposure (CWE-200) in Decidim Admin UI
CVE-2026-19111
IDOR (CWE-639) in Amazon Strands Agent Memory Tools
CVE-2026-15733
OS Command Injection (CWE-78) in WGDashboard VPN Server
CVE-2026-15732
Server-Side Request Forgery (CWE-918) in WGDashboard
CVE-2024-39024
Cross-Site Scripting (CWE-79) in PacketFence WebGUI
CVE-2026-53985
Missing Authentication (CWE-306) in Ground Station
CVE-2026-53977
Authentication Bypass (CWE-306) in OpenChamber API
CVE-2026-18427
Path Traversal (CWE-22) in @fastify/static Route Handler
CVE-2026-53976
Path Traversal (CWE-22) in OpenChamber File API Endpoints
CVE-2026-53975
OS Command Injection (CWE-78) in OpenChamber API Endpoint
CVE-2026-19021
SQL Injection (CWE-89) in SourceCodester Repair System
CVE-2026-19010
Missing Authorization (CWE-862) in TinyAGI Message API
CVE-2026-19009
File Inclusion (CWE-73) in TinyAGI Message API Endpoint
CVE-2026-19000
SSRF (CWE-918) in JeecgBoot Anonymous Chat API Parser
CVE-2026-18991
Path Traversal (CWE-22) in NanoClaw send_file Endpoint
CVE-2026-18990
Missing Authentication (CWE-287) in LettaBot API Status
CVE-2026-18973
Server-Side Request Forgery (CWE-918) in Super Agent Party
CVE-2026-71320
Template Injection (CWE-94) in Nuxt Vue.js Framework
CVE-2026-71319
Code Injection (CWE-94) in Nuxt DevTools RPC Channel
CVE-2026-71316
Nuxt Cache Disclosure (CWE-524) in SSR Page Payloads
CVE-2025-63823
Hardcoded Credentials (CWE-798) in Safetipin Android App
CVE-2025-63822
Incorrect Access Control (CWE-284) in SirenGPS Android
CVE-2026-71315
Authorization Bypass (CWE-863) in Nuxt Route Rules
CVE-2026-71312
Command Injection (CWE-78) in rclone SFTP Backend Path
CVE-2026-34966
Server-Side Request Forgery (CWE-918) in Gitea Fetch
CVE-2026-70617
Missing Authorization (CWE-862) in Spacebar Group DMs
CVE-2026-69111
Unauthenticated DoS (CWE-306) in Milvus Management API
CVE-2026-66881
Relative Path Traversal (CWE-23) in Livebook Notebooks
CVE-2026-66297
OS Command Injection (CWE-78) in Livebook Deployments
CVE-2026-55524
SSRF (CWE-918) in PraisonAI Web Crawl Tool Component
CVE-2026-55522
Code Injection (CWE-94) in PraisonAI Workflow Include
CVE-2026-18958
SQL Injection (CWE-89) in Student-Management LoginCheck
CVE-2026-18953
Path Traversal (CWE-22) in AWS Transform MCP get_resource
CVE-2026-17556
Path Traversal (CWE-22) in GitHub Enterprise Server
CVE-2026-48168
Command Injection (CWE-862) in PraisonAI GitHub Workflow
CVE-2026-17613
Missing Authorization (CWE-862) in Penpot RPC Command
CVE-2025-70962
Incorrect Access Control (CWE-284) in Zosi C519M Camera
CVE-2026-71294
PHP Object Injection (CWE-502) in Cotonti Comments
CVE-2026-71292
SQL Injection (CWE-89) in Subrion CMS Admin Grid Sorting
CVE-2026-71289
Missing Authentication (CWE-306) in NASA-AMMOS ANMS
CVE-2026-71288
SQL Injection (CWE-89) in Koha Guided Report Builder
CVE-2026-71287
SQL Injection (CWE-89) in Cacti ORDER BY Parameters
CVE-2026-71285
Stored XSS (CWE-79) in Uptime Kuma Matomo Analytics
CVE-2026-71284
OS Command Injection (CWE-78) in Fledge Backup Uploads
CVE-2026-71281
Unsafe PyTorch Deserialization (CWE-502) in PEFT
CVE-2026-71280
Server-Side Request Forgery (CWE-918) in go-shiori API
CVE-2026-71279
Path Traversal (CWE-22) in Zigbee2MQTT Extensions
CVE-2026-71278
Code Injection (CWE-94) in rust-iot-platform Calc Rules
CVE-2026-71277
Improper Authentication (CWE-287) in rust-iot-platform
CVE-2026-71276
SQL Injection (CWE-89) in Magistrala Message Readers
CVE-2026-71274
Stored XSS (CWE-79) in OpenBK7231T MQTT Channel Labels
CVE-2026-71271
Server-Side Request Forgery (CWE-918) in Memos Webhooks
CVE-2026-71270
SSRF (CWE-918) in Stirling-PDF URL Conversion Endpoint
CVE-2026-71269
Path Traversal (CWE-22) in Node-RED Library Storage
CVE-2026-71268
Path Traversal (CWE-22) in OpenPLC Runtime v3 Webserver
CVE-2026-71264
Broken Access Control (CWE-862) in WLED Config API
CVE-2026-71262
Missing Authentication (CWE-306) in IoTSharp Blob Storage
CVE-2026-16022
OS Command Injection (CWE-78) in @oblique/cli 15.4.0
CVE-2026-61891
Path Traversal (CWE-22) in Theia Filesystem Backend
CVE-2026-71252
Missing Authorization (CWE-862) in Toner Management
CVE-2026-71248
SQL Injection (CWE-89) in Inventory Management PHP App
CVE-2026-71245
SQL Injection (CWE-89) in Mautic LeadBundle Controller
CVE-2026-71243
OS Command Injection (CWE-78) in backmeup Backup Package
CVE-2026-71242
Broken Access Control (CWE-639) in Crater Notes Module
CVE-2026-71241
Missing Authentication (CWE-306) in Flask Book API
CVE-2026-71238
Hardcoded Credentials (CWE-798) in DjangoCRM Settings
CVE-2026-71237
SQL Injection (CWE-89) in IoT-PHP Web Login Endpoint
CVE-2026-71236
Stored XSS (CWE-79) in Grocy API Request Controller
CVE-2026-71235
Improper Code Generation (CWE-94) in Magistrala Rules
CVE-2026-71234
Broken Authorization (CWE-863) in Documize Attachments
CVE-2026-71233
Stored XSS (CWE-79) in InvoiceNinja Portal Terms Field
CVE-2026-71232
PHP Code Injection (CWE-94) in MacCMS10 Templates Editor
CVE-2026-71231
SQL Injection (CWE-89) in IOTSmartHome gui/login.php
CVE-2026-60009
Path Traversal (CWE-22) in Eclipse Theia File Upload
CVE-2026-12609
Path Traversal (CWE-22) in Eclipse Theia Plugin Backend
CVE-2026-25703
Missing Authentication (CWE-306) in NeuVector API Endpoint
CVE-2026-71215
Path Traversal (CWE-22) in art-template Directives
CVE-2026-71214
Broken Authentication (CWE-306) in Aerie Sequencing
CVE-2026-71213
Missing Brute-Force Protection (CWE-307) in Typemill Login
CVE-2026-71211
Server-Side Request Forgery (CWE-918) in MLflow Proxy
CVE-2026-71209
Path Traversal (CWE-22) in Audiobookshelf Cover Cache
CVE-2026-71207
SQL Injection (CWE-89) in Stock Inventory Login Script
CVE-2026-70376
CSRF (CWE-352) in Pluck CMS Administrator Interface
CVE-2026-55739
Broken Access Control (CWE-639) in Crater Customers
CVE-2026-54418
Broken Access Control (CWE-862) in Leantime 2FA RPC
CVE-2026-54416
Unrestricted File Upload (CWE-434) in Pluck CMS Admin
CVE-2026-70375
OS Command Injection (CWE-78) in HashBrown Git Deployer
CVE-2026-70374
OS Command Injection (CWE-78) in HashBrown CMS Media
CVE-2026-18902
OS Command Injection (CWE-77) in H3C NX15 Repeater
CVE-2026-18900
OS Command Injection (CWE-78) in H3C NX15 Backend API
CVE-2026-70619
Missing Authorization (CWE-862) in Odysseus Embedding
CVE-2026-18814
Command Injection (CWE-74) in H3C NX15 API Endpoint
CVE-2026-70554
PHP Object Injection (CWE-502) in MaxSite CMS Cookie
CVE-2026-70494
Broken Access Control (CWE-862) in Open WebUI Folders
CVE-2026-70492
Stored XSS (CWE-79) in Open WebUI KaTeX Rendering
CVE-2026-67979
Access Control (CWE-284) in NASA cFS Exec Services
CVE-2026-66902
OS Command Injection (CWE-78) in Google::Auth Perl Library
CVE-2026-66901
SSRF (CWE-918) in Google::Auth Perl Library
CVE-2026-51401
Code Injection (CWE-94) in Vim VMS Filename Fixer Function
CVE-2026-18813
OS Command Injection (CWE-77) in H3C NX15 /api/esps
CVE-2026-18812
Command Injection (CWE-77) in H3C NX15 WAN API Endpoint
CVE-2026-18811
OS Command Injection (CWE-77) in H3C NX15 /api/esps
CVE-2026-70553
PHP Code Injection (CWE-94) in MaxSite CMS Installer
CVE-2026-70552
Authentication Bypass (CWE-306) in MaxSite CMS AJAX
CVE-2026-70486
Stored XSS (CWE-79) in Open WebUI Terminal Preview
CVE-2026-70485
SSRF (CWE-918) in Open WebUI URL Content Retrieval
CVE-2026-70482
OAuth Token Confusion (CWE-287) in Open WebUI Platform
CVE-2026-70479
Server-Side Request Forgery (CWE-918) in Open WebUI
CVE-2026-70478
Unauthenticated Token Exposure (CWE-200) in Flowise
CVE-2026-70477
Python Code Injection (CWE-94) in Flowise CSV Agent
CVE-2026-70476
Broken Object Authorization (CWE-639) in Flowise Billing
CVE-2026-18810
Missing Authentication (CWE-306) in H3C NX15 V100R017
CVE-2026-70474
Authorization Bypass (CWE-863) in Flowise OAuth2 Endpoints
CVE-2026-70473
Excessive Data Exposure (CWE-200) in Flowise API Endpoint
CVE-2026-70472
Broken Access Control (CWE-285) in Flowise Vector Store
CVE-2026-69703
Missing Authentication (CWE-306) in Atlas-Livre Admin
CVE-2026-69264
Code Injection (CWE-94) in Flowise CSVAgent Component
CVE-2026-47623
Unsafe Deserialization (CWE-502) in NVIDIA Dynamo Linux
CVE-2026-47618
Server-Side Request Forgery (CWE-918) in NVIDIA Dynamo Fetcher
CVE-2026-47617
SSRF via DNS Rebinding (CWE-918) in NVIDIA Dynamo Fetcher
CVE-2026-47616
SSRF (CWE-918) in NVIDIA Dynamo Multimodal Fetcher
CVE-2026-47615
SSRF (CWE-918) in NVIDIA Dynamo Multimodal Requests
CVE-2026-47614
Server-Side Request Forgery (CWE-918) in NVIDIA Dynamo Linux
CVE-2026-47613
SSRF (CWE-918) in NVIDIA Dynamo Linux Path Handling
CVE-2026-47612
Path Traversal (CWE-22) in NVIDIA Dynamo Image Loader
CVE-2026-18788
Unrestricted Upload (CWE-434) in ResponsiveFilemanager
CVE-2026-69262
Authorization Bypass (CWE-863) in Flowise Chatflows
CVE-2026-69259
Code Injection (CWE-94) in Flowise SQLite Record Manager
CVE-2026-69258
Improper Access Control (CWE-639) in Flowise Prediction API
CVE-2026-69257
SSRF (CWE-918) in Flowise HTTP Security Module IPv6
CVE-2026-69256
Code Injection (CWE-94) in Flowise CSVAgent Component
CVE-2026-69255
Code Injection (CWE-94) in Flowise CSVAgent Component
CVE-2026-18787
OS Command Injection (CWE-77) in GL.iNet AX1800 RPC
CVE-2026-15307
Arbitrary File Write (CWE-73) in Django GeoDjango GIS
CVE-2026-69254
Code Injection (CWE-94) in Flowise JavaScript Runner
CVE-2026-69253
Code Injection (CWE-95) in Flowise Custom Tool Components
CVE-2026-69252
Authorization Bypass (CWE-862) in Flowise Files API
CVE-2026-69110
Missing Authentication (CWE-22) in OpenCode Studio
CVE-2026-69100
Remote Code Execution (CWE-94) in LAMP GlueFactory
CVE-2026-69098
Unsafe Deserialization (CWE-502) in Kotaemon API Endpoint
CVE-2026-69250
Server-Side Request Forgery (CWE-639) in Flowise OAuth2
CVE-2026-62927
Authorization Bypass (CWE-863) in Eclipse Milo Call
CVE-2026-60007
Padding Oracle (CWE-204) in Eclipse Milo Authentication
CVE-2026-58080
Missing Authorization (CWE-862) in Eclipse Milo OPC UA
CVE-2026-67243
Unrestricted Upload (CWE-434) in freo2 Admin Portal
CVE-2026-18686
Command Injection (CWE-77) in GL.iNet GL-MT3000 Router
CVE-2026-18685
Command Injection (CWE-77) in GL.iNet GL-MT3000 Router
CVE-2026-67978
Improper Input Validation (CWE-20) in NASA cFS SBN
CVE-2026-18684
Command Injection (CWE-77) in GL.iNet GL-MT3000 Router
CVE-2026-67975
Improper Access Control (CWE-284) in NASA cFS TO_LAB
CVE-2026-67974
Improper Input Validation (CWE-20) in NASA cFS SBN App
CVE-2026-67970
Path Traversal (CWE-284) in NASA cFS DS_SetDestPathCmd()
CVE-2026-67969
Improper Input Validation (CWE-20) in NASA cFS HS Monitor
CVE-2026-69246
Host Validation Bypass (CWE-918) in Guzzle HTTP Client
CVE-2026-69240
SQL Injection (CWE-89) in Sequelize Oracle Dialect
CVE-2026-67972
Information Disclosure (CWE-200) in NASA cFS CFDP Component
CVE-2026-52521
SQL Injection (CWE-89) in Z-BlogPHP CommentBat Feature
CVE-2026-52102
OS Command Injection (CWE-78) in openmediavault-md Plugin
CVE-2026-51190
OS Command Injection (CWE-78) in Serverless-Devs CLI
CVE-2026-18647
Server-Side Request Forgery (CWE-918) in Jina Reader
CVE-2026-69185
Resource Exhaustion via Binary Packets in Socket.IO
CVE-2026-67598
Disabled TLS Cert Validation (CWE-295) in Emlog Pro AI
CVE-2026-48031
Hardcoded JWT Secret (CWE-798) in Go REST API Boilerplate
CVE-2026-18641
OS Command Injection (CWE-78) in Sangfor Login Endpoint
CVE-2026-18616
Command Injection (CWE-77) in GL-iNet GL-MT3000 Router
CVE-2026-18615
Command Injection (CWE-77) in GL-iNet GL-MT3000
CVE-2026-18614
Command Injection (CWE-77) in GL-iNet GL-MT3000 Router
CVE-2026-18613
Injection Flaw (CWE-74) in GL-iNet GL-MT3000 Plugin API
CVE-2026-18612
OS Command Injection (CWE-77) in GL-MT3000 Plugins
CVE-2026-41453
Blind SQL Injection (CWE-89) in Krayin CRM Leads Grid
CVE-2026-18602
Command Injection (CWE-77) in GL.iNet GL-MT3000 Router
CVE-2026-69097
Config Injection (CWE-74) in GitPython Submodule Handling
CVE-2026-69096
OS Command Injection (CWE-78) in luci-app-dockerman RPC
CVE-2026-69095
Path Traversal (CWE-22) in OpenWrt luci-app-bmx7 CGI
CVE-2026-69091
Auth Bypass (CWE-306) in Admidio Forum Login Mode
CVE-2026-69089
Path Traversal (CWE-22) in Grav CMS Image Watermarking
CVE-2026-69088
Static Method Call Injection (CWE-94) in Grav CMS Blueprints
CVE-2026-69086
Path Traversal (CWE-22) in SiYuan Attribute-View API
CVE-2026-69085
SQL Injection (CWE-89) in SiYuan searchDocs endpoint
CVE-2026-69084
SQL Injection (CWE-89) in SiYuan searchEmbedBlock API
CVE-2026-69083
SQL Injection (CWE-89) in SiYuan Asset Search API
CVE-2026-68587
Missing Authorization (CWE-862) in SiYuan Heading API
CVE-2026-68586
Missing Publish Access Control (CWE-862) in SiYuan API
CVE-2026-18601
Command Injection (CWE-77) in GL.iNet GL-MT3000 Router
CVE-2026-18600
Command Injection (CWE-77) in GL.iNet Network RPC
CVE-2026-18599
Command Injection (CWE-77) in GL.iNet Logread Plugin
CVE-2026-18598
Command Injection (CWE-77) in GL.iNet Logread RPC
CVE-2026-18587
OS Command Injection (CWE-78) in Wavlink Config Import
CVE-2026-9856
Path Traversal (CWE-22) in Transformers save_pretrained
CVE-2026-65321
SQL Injection (CWE-89) in PyAthena Query Formatting
CVE-2026-68581
Privilege Confusion (CWE-863) in Vikunja API Tokens
CVE-2026-68578
Missing Authentication Binding (CWE-306) in ArcadeDB MCP
CVE-2026-67357
Cleartext Cluster Token Leak (CWE-200) in ArcadeDB MCP
CVE-2026-67356
Privilege Escalation (CWE-269) via JS Triggers in ArcadeDB
CVE-2025-71400
IDOR (CWE-639) in better-auth Passkey Deletion API
CVE-2025-71399
Input Validation Flaw (CWE-20) in Better Auth Paths
CVE-2026-67352
Stored XSS (CWE-79) in luci-app-https-dns-proxy UI
CVE-2026-67343
Token Exposure (CWE-200) in ArcadeDB Server API
CVE-2026-67342
Authorization Bypass (CWE-639) in ArcadeDB HTTP APIs
CVE-2026-67341
Broken Script Authorization (CWE-863) in ArcadeDB JS
CVE-2026-67340
Code Injection (CWE-94) in ArcadeDB Trigger Scripts
CVE-2026-67336
Insecure Crypto Defaults (CWE-327) in better-auth OIDC
CVE-2026-67333
Open Redirect XSS (CWE-79) in better-auth OIDC Plugins
CVE-2026-67331
Authorization Bypass (CWE-639) in better-auth SCIM
CVE-2026-67330
Authorization Bypass (CWE-20) in better-auth SCIM Plugin
CVE-2026-67329
Horizontal Privilege Escalation (CWE-639) in Stripe Auth
CVE-2026-67328
SSO Authentication Bypass via XSS (CWE-79) in better-auth
CVE-2026-67327
Account Takeover via Pre-Account Hijacking in better-auth
CVE-2026-67326
Input Validation Flaw (CWE-20) in GitPython Config Writer
CVE-2026-67325
Command Injection (CWE-78) via Git Option Abbreviation
CVE-2026-67324
Command Injection (CWE-78) via Git clone helper in GitPython
CVE-2026-67323
Command Injection (CWE-77) in GitPython Git Helpers
CVE-2026-67322
Env Variable Exposure (CWE-200) in GitPython clone URLs
CVE-2026-67309
Path Traversal (CWE-22) in Traefik RewriteTarget Middleware
CVE-2026-67308
Shell Injection (CWE-78) in Wazuh GitHub Workflows
CVE-2026-67296
Input Validation Failure (CWE-20) in FreeRDP RDPEI
CVE-2026-67289
HTTP Request Smuggling (CWE-113) in FreeRDP Proxy
CVE-2026-66402
TLS Identity Validation Flaws (CWE-295) in FreeRDP
CVE-2025-71403
Open Redirect (CWE-601) in better-auth trustedOrigins
CVE-2026-18536
Insecure HTTP Entropy Source (CWE-319) in Perl
exploitable in your codebase.