On this page

Atomicorp WAF Rule 344360

Rule Summary

Description

This rule detects behavior identified by its current alert as “Unauthorized Operating System File Access Attempt” in the request cookies, request argument names, request arguments, JSON request data, SOAP request data, XML request data. It evaluates during the request body phase and denies matching traffic with HTTP status 403.

This is a selected list of documented research observations, not an exhaustive coverage matrix. Absence of a CVE does not imply absence of protection.

CVEVulnerabilityProductCVSSSeverity
CVE-2009-0545ZeroShell Remote Code Executionzeroshell10.0 (v2.0)High
CVE-2010-5286Joomla! Component Jstore - 'Controller' Local File Inclusioncom jstore10.0 (v2.0)High
CVE-2011-2653Novell ZENworks Asset Management Remote Executionzenworks asset management10.0 (v2.0)High
CVE-2011-3167HP OpenView Network Node Manager ov.dll _OVBuildPath Buffer Overflowopenview network node manager10.0 (v2.0)High
CVE-2012-0297Symantec Web Gateway 5.0.2.8 relfile File Inclusion Vulnerabilityweb gateway10.0 (v2.0)High
CVE-2013-4822HP Intelligent Management Center BIMS UploadServlet Directory Traversalimc branch intelligent management system software module10.0 (v2.0)High
CVE-2013-4837HP LoadRunner EmulationAdmin Web Service Directory Traversalloadrunner10.0 (v2.0)High
CVE-2013-5486Cisco Prime Data Center Network Manager Arbitrary File Uploadprime data center network manager10.0 (v2.0)High
CVE-2014-3914Rocket Servergraph Admin Center fileRequestor Remote Code Executionrocket servergraph10.0 (v2.0)High
CVE-2015-0779Novell ZENworks Configuration Management Arbitrary File Uploadzenworks configuration management10.0 (v2.0)High
CVE-2020-24186WordPress wpDiscuz Unauthenticated File Upload Vulnerabilitywpdiscuz10.0 (v3.1)Critical
CVE-2022-24816GeoServer Remote Code Injection caused by JAI-EXT (CVE-2022-24816/CVE-2023-35042)jai-ext10.0 (v3.1)Critical
CVE-2024-13984Qi'anxin TianQing Management Center rptsvr Arbitrary File UploadTianQing Management Center10.0 (v4.0)Critical
CVE-2024-1709ConnectWise ScreenConnect Unauthenticated Remote Code Executionscreenconnect10.0 (v3.1)Critical
CVE-2024-4040CrushFTP Unauthenticated Arbitrary File Readcrushftp10.0 (v3.1)Critical
CVE-2025-34037Linksys E-Series TheMoon Remote Command InjectionE420010.0 (v4.0)Critical
CVE-2025-49132Pterodactyl Panel CVE-2025-49132 Remote Code Executionpanel10.0 (v3.1)Critical
CVE-2025-52691SmarterTools SmarterMail GUID File Upload Vulnerabilitysmartermail10.0 (v3.1)Critical
CVE-2025-55169WeGIA - Directory Traversalwegia10.0 (v4.0)Critical
CVE-2026-100382Unauthenticated remote code execution through wikitext in ExternalDataMediawiki - ExternalData Extension10.0 (v4.0)Critical
CVE-2026-10134Unauthenticated Server-Side RCE via PythonCodeStructuredTool in Public Flowslangflow10.0 (v3.1)Critical
CVE-2026-105134Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injectioncloud backup suite10.0 (v4.0)Critical
CVE-2026-108576TOZED X300 IPPingDiagnostics process_ping os command injectionX30010.0 (v4.0)Critical
CVE-2026-11414Unauthenticated File Exfiltration in Altium Enterprise Server Vault Service via Hard-coded Cryptographic Key and Path Tron-prem enterprise server10.0 (v4.0)Critical
CVE-2026-19188Haiwell IoT Cloud HMI Gateway OS Command InjectionHaiwell IoT Cloud HMI Gateway10.0 (v4.0)Critical
CVE-2026-21858n8n Content-Type Confusion Arbitrary File Read to RCE (CVE-2026-21858)n8n10.0 (v3.1)Critical
CVE-2026-26015Unauthenticated RCE in DocsGPT MCP STDIO Configurationdocsgpt10.0 (v4.0)Critical
CVE-2026-33712TypeBot: Unauthenticated SSRF via isolated-vm fetch in preview chat endpoint bypasses SSRF controlstypebot.io10.0 (v3.1)Critical
CVE-2026-34234CtrlPanel <= 1.1.1 - Remote Code Executionctrlpanel10.0 (v3.1)Critical
CVE-2026-40114PraisonAI has Server-Side Request Forgery via Unvalidated webhook_url in Jobs APIpraisonai10.0 (v3.1)Critical
CVE-2026-41900OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environmentopenlearnx10.0 (v3.1)Critical
CVE-2026-44181Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection results in Remote Code Executionenterprise gateway10.0 (v4.0)Critical
CVE-2026-45087Dalfox: Unauthenticated Remote Code Execution via found-action in Dalfox Server Modedalfox10.0 (v3.1)Critical
CVE-2026-47668DbGate - Remote Code Execution via Anonymous JWTdbgate10.0 (v3.1)Critical
CVE-2026-49869Kestra: Unauthenticated Remote Code Execution via Authentication Bypass in AuthenticationFilterkestra10.0 (v3.1)Critical
CVE-2026-54745Kubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /_proxy/ route, bypasses ENABpipelines10.0 (v3.1)Critical
CVE-2026-57572Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_argscrawl4ai10.0 (v3.1)Critical
CVE-2026-58192Appium: Unauthenticated arbitrary file/directory deletion in @appium/storage-pluginappium/storage-plugin10.0 (v3.1)Critical
CVE-2026-7411Eclipse BaSyx Arbitrary Code Execution VulnerabilityEclipse BaSyx10.0 (v3.1)Critical
CVE-2026-81735UI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command ExecutiUI-TARS-desktop10.0 (v4.0)Critical
CVE-2026-85706GitLab Unauthenticated Arbitrary File Readgitlab10.0 (v3.1)Critical
CVE-2026-8984Unauthenticated RCEmaxicharger single charger firmware10.0 (v4.0)Critical
CVE-2026-8985Unauthenticated Command Injectionmaxicharger single charger firmware10.0 (v4.0)Critical
CVE-2026-94169The Grid <= 2.8.1 - Unauthenticated Code InjectionThe Grid10.0 (v3.1)Critical
CVE-2024-2044pgAdmin Session Deserialization RCEpgadmin 49.9 (v3.1)Critical
CVE-2025-11539Arbitrary Code Execution in Grafana Image Renderer Plugingrafana-image-renderer9.9 (v3.1)Critical
CVE-2025-24016Wazuh server remote code execution caused by an unsafe deserialization vulnerability.wazuh9.9 (v3.1)Critical
CVE-2025-61913Flowise is vulnerable to arbitrary file read, arbitrary file writeflowise9.9 (v3.1)Critical
CVE-2025-64709Typebot May Expose AWS EKS Credentials via Server Side Request Forgery in Webhook Blocktypebot9.9 (v3.1)Critical
CVE-2026-105691Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-colorpenpot9.9 (v3.1)Critical
CVE-2026-105697Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configurationlangflow9.9 (v3.1)Critical
CVE-2026-105740Langflow: Authenticated RCE via MCP Stdio transport allows any user to execute arbitrary OS commands on the serverlangflow9.9 (v3.1)Critical
CVE-2026-108390HestiaCP Low-Privileged User to Root via Config-Field Injection and PATH Hijackinghestiacp9.9 (v3.1)Critical
CVE-2026-113708Argo CD: A Kustomize remote ref can run commands in the repo-serverargo-cd9.9 (v3.1)Critical
CVE-2026-31818Budibase: Server-Side Request Forgery via REST Connector with Empty Default Blacklistbudibase9.9 (v3.1)Critical
CVE-2026-34038Coolify authenticated remote command injection leading to RCE and secret exfiltrationcoolify9.9 (v3.1)Critical
CVE-2026-40089Sonicverse has Server-Side Request Forgery via user-controlled URLs in dashboard API clientradio audio streaming stack9.9 (v3.1)Critical
CVE-2026-40933Flowise: Authenticated RCE Via MCP Adaptersflowise9.9 (v3.1)Critical
CVE-2026-42454Termix: OS Command Injection in Docker Container Management EndpointsTermix9.9 (v3.1)Critical
CVE-2026-42864FireFighter: Unauthenticated SSRF in Raid jira_bot endpoint allows IAM credential theftfirefighter-incident9.9 (v3.1)Critical
CVE-2026-43986Tautulli vulnerable to unauthenticated SSRF in /image/<hash> via attacker-seeded image hash replayTautulli9.9 (v3.1)Critical
CVE-2026-44450Lumiverse: RCE via MCP stdio argument injectionLumiverse9.9 (v3.1)Critical
CVE-2026-45629Dokploy: Authenticated Remote Code Execution via Command Injection in /listen-deployment WebSocket Endpointdokploy9.9 (v3.1)Critical
CVE-2026-45632Dokploy: Schedule Authorization Bypass Enables Host/Server Command Executiondokploy9.9 (v3.1)Critical
CVE-2026-46512Frogman: Dialplan template parameters interpolated into extensions_custom.conf without escapingfrogman9.9 (v3.1)Critical
CVE-2026-48030Pheditor 2.0.1-2.0.3 - OS Command Injectionpheditor9.9 (v3.1)Critical
CVE-2026-51027FileThingie v.2.5.7 Information Disclosure Vulnerability-9.9 (v3.1)Critical
CVE-2026-55166Lemur: any SSO-authenticated user achieves AWS IAM compromise and permanent PKI key access via ACME acme_url SSRF and crlemur9.9 (v3.1)Critical
CVE-2026-55565Yamcs: Authenticated remote code execution via unescaped StreamSQL LIKE pattern compiled by Janino (LikeExpression)yamcs9.9 (v3.1)Critical
CVE-2026-55634Pimcore: Remote Code Execution via DataObject Class-Definition Field Namepimcore9.9 (v3.1)Critical
CVE-2026-57155OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importercore9.9 (v3.1)Critical
CVE-2026-63298LXD arbitrary lxc.conf directive injection via NVIDIA instance configurationlxd9.9 (v3.1)Critical
CVE-2026-72738Dokploy: Authenticated RCE via Command Injection in backup.listBackupFiles search Parameterdokploy9.9 (v3.1)Critical
CVE-2026-72740Dokploy: OS Command Injection via SSH-form customGitUrl domain in ssh-keyscandokploy9.9 (v3.1)Critical
CVE-2026-72865Dokploy: OS Command Injection via compose composePathdokploy9.9 (v3.1)Critical
CVE-2026-72868Dokploy: Member-role RCE as host root via destination.testConnection rclone shell injectiondokploy9.9 (v3.1)Critical
CVE-2026-72869Dokploy: Authenticated OS command injection in backup.restoreBackupWithLogs (databaseName) leading to host RCEdokploy9.9 (v3.1)Critical
CVE-2026-72872Dokploy: OS Command Injection via Bitbucket owner/repository in git clonedokploy9.9 (v3.1)Critical
CVE-2026-72876Dokploy: Cross-organization IDOR leads to root RCE on another tenant's server via swarm.*dokploy9.9 (v3.1)Critical
CVE-2026-72882Dokploy: Authenticated blind command injection via file mounts leads to direct remote host RCE on managed serversdokploy9.9 (v3.1)Critical
CVE-2026-72902Dokploy: Authenticated RCE via Command Injection in registry.testRegistry / registry.testRegistryByIddokploy9.9 (v3.1)Critical
CVE-2026-73294Semaphore U: OS Command Injectionsemaphore9.9 (v3.1)Critical
CVE-2026-79920Ajenti: Privilege escalation to root via unauthenticated/unauthorized plugin install taskajenti9.9 (v3.1)Critical
CVE-2026-8481Remote Code Execution via Code Validation Endpointlangflow9.9 (v3.1)Critical
CVE-2026-85526Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXDLXD9.9 (v3.1)Critical
CVE-2026-93698cPanel OS Command Injection VulnerabilitycPanel9.9 (v3.0)Critical
CVE-2009-1151PhpMyAdmin Scripts - Remote Code Executionphpmyadmin9.8 (v3.1)Critical
CVE-2010-2861ColdFusion Server Checkcoldfusion9.8 (v3.1)Critical
CVE-2013-4864MiCasaVerde VeraLite 1.5.408 - Multiple Vulnerabilitiesveralite firmware9.8 (v3.1)Critical
CVE-2014-1203Eyou E-Mail <3.6 - Remote Code Executioneyou9.8 (v3.1)Critical
CVE-2014-6271CUPS Filter Bash Environment Variable Code Injection (Shellshock)bash9.8 (v3.1)Critical
CVE-2014-9148Fiyo CMS 2.0.1.8 - Multiple Vulnerabilitiesfiyo cms9.8 (v3.0)Critical
CVE-2015-1427ElasticSearch Groovy Sandbox Bypass and Remote Code Execution (CVE-2015-1427)elasticsearch9.8 (v3.1)Critical
CVE-2015-4664Xceedium Xsuite - Multiple Vulnerabilitiesprivileged access manager9.8 (v3.0)Critical
CVE-2015-4667Xceedium Xsuite - Multiple Vulnerabilitiesxsuite9.8 (v3.0)Critical
CVE-2016-2555ATutor 2.2.1 SQL Injection / Remote Code Executionatutor9.8 (v3.0)Critical
CVE-2016-6600WebNMS Framework Server Arbitrary File Uploadwebnms framework9.8 (v3.0)Critical
CVE-2017-1000002ATutor 2.2.1 Directory Traversal / Remote Code Executionatutor9.8 (v3.0)Critical
CVE-2017-12611Apache Struts2 S2-053 - Remote Code Executionstruts9.8 (v3.0)Critical
CVE-2017-12629Apache Solr XML External Entity Injection (CVE-2017-12629)solr9.8 (v3.1)Critical
CVE-2017-7462Intellinet NFC-30IR Camera - Multiple Vulnerabilitiesnfc-30ir firmware9.8 (v3.0)Critical
CVE-2018-12031Eaton Intelligent Power Manager 1.6 - Directory Traversalintelligent power manager9.8 (v3.0)Critical
CVE-2018-1273Spring Data Commons - Remote Code Executionspring data commons9.8 (v3.1)Critical
CVE-2018-16283WordPress Plugin Wechat Broadcast 1.2.0 - Local File Inclusionwechat brodcast9.8 (v3.0)Critical
CVE-2018-16763FUEL CMS 1.4.1 - Remote Code Executionfuel cms9.8 (v3.1)Critical
CVE-2018-17246Kibana - Local File Inclusionkibana9.8 (v3.0)Critical
CVE-2018-17552Navigate CMS Unauthenticated Remote Code Executionnavigate cms9.8 (v3.0)Critical
CVE-2018-18925Gogs (Go Git Service) 0.11.66 - Remote Code Executiongogs9.8 (v3.0)Critical
CVE-2018-6220Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilitiesemail encryption gateway9.8 (v3.0)Critical
CVE-2018-6223Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilitiesemail encryption gateway9.8 (v3.0)Critical
CVE-2018-6228Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilitiesemail encryption gateway9.8 (v3.0)Critical
CVE-2018-6229Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilitiesemail encryption gateway9.8 (v3.0)Critical
CVE-2019-12725Zeroshell 3.9.0 - Remote Command Executionzeroshell9.8 (v3.0)Critical
CVE-2019-15107Webmin <= 1.920 - Unauthenticated Remote Command Executionwebmin9.8 (v3.1)Critical
CVE-2019-1619Cisco Data Center Network Manager Unauthenticated Remote Code Executiondata center network manager9.8 (v3.1)Critical
CVE-2019-16278Nostromo Directory Traversal Remote Command Executionnostromo nhttpd9.8 (v3.1)Critical
CVE-2019-16662rConfig 3.9.2 - Remote Code Executionrconfig9.8 (v3.1)Critical
CVE-2019-16920D-Link Routers - Remote Code Executiondir-655 firmware9.8 (v3.1)Critical
CVE-2019-17270Yachtcontrol Webapplication 1.0 - Remote Command Injectionyachtcontrol9.8 (v3.1)Critical
CVE-2019-19781Citrix ADC (NetScaler) Directory Traversal RCEapplication delivery controller firmware9.8 (v3.1)Critical
CVE-2019-7192QNAP QTS and Photo Station Local File Inclusionphoto station9.8 (v3.1)Critical
CVE-2019-7194QNAP QTS and Photo Station Local File Inclusionphoto station9.8 (v3.1)Critical
CVE-2019-7195QNAP QTS and Photo Station Local File Inclusionphoto station9.8 (v3.1)Critical
CVE-2019-7238Nexus Repository Manager 3 Unauthenticated Remote Code Execution (CVE-2019-7238)nexus repository manager9.8 (v3.1)Critical
CVE-2019-7256Linear eMerge E3-Series Access Controller Command Injectionlinear emerge essential firmware9.8 (v3.1)Critical
CVE-2019-9194elFinder PHP Connector exiftran Command Injectionelfinder9.8 (v3.0)Critical
CVE-2019-9618WordPress GraceMedia Media Player 1.0 - Local File Inclusiongracemedia media player9.8 (v3.0)Critical
CVE-2019-9670Zimbra Collaboration Autodiscover Servlet XXE and ProxyServlet SSRFzimbra collaboration suite9.8 (v3.1)Critical
CVE-2019-9960LimeSurvey Zip Path Traversalslimesurvey9.8 (v3.0)Critical
CVE-2020-11455LimeSurvey Zip Path Traversalslimesurvey9.8 (v3.1)Critical
CVE-2020-14750Oracle WebLogic Server Administration Console Handle RCEweblogic server9.8 (v3.1)Critical
CVE-2020-14882Oracle WebLogic Server Administration Console Handle RCEweblogic server9.8 (v3.1)Critical
CVE-2020-15568TerraMaster TOS <.1.29 - Remote Code Executiontos9.8 (v3.1)Critical
CVE-2020-15920Mida Solutions eFramework ajaxreq.php Command Injectioneframework9.8 (v3.1)Critical
CVE-2020-16152Aerohive NetConfig 10.0r8a LFI and log poisoning to RCEaerohive netconfig9.8 (v3.1)Critical
CVE-2020-17496vBulletin 5.x /ajax/render/widget_tabbedcontainer_tab_panel PHP remote code execution.vbulletin9.8 (v3.1)Critical
CVE-2020-17530Struts2 S2-061 Remote Code Execution Vulnerablity (CVE-2020-17530)struts9.8 (v3.1)Critical
CVE-2020-21224Inspur ClusterEngine 4.0 - Remote Code Executionclusterengine9.8 (v3.1)Critical
CVE-2020-29227Car Rental Management System 1.0 - Local File Inclusioncar rental management system9.8 (v3.1)Critical
CVE-2020-29390Zeroshell 3.9.3 - Command Injectionzeroshell9.8 (v3.1)Critical
CVE-2020-3243Cisco UCS Director Cloupia Script RCEucs director9.8 (v3.1)Critical
CVE-2020-3250Cisco UCS Director Cloupia Script RCEucs director9.8 (v3.1)Critical
CVE-2020-4427IBM Data Risk Manager Unauthenticated Remote Code Executiondata risk manager9.8 (v3.1)Critical
CVE-2020-4429IBM Data Risk Manager Unauthenticated Remote Code Executiondata risk manager9.8 (v3.1)Critical
CVE-2020-5902F5 BIG-IP TMUI Directory Traversal and File Upload RCEbig-ip access policy manager9.8 (v3.1)Critical
CVE-2020-7209LinuxKI Toolset <= 6.01 - Remote Command Executionlinuxki9.8 (v3.1)Critical
CVE-2020-7980Satellian Intellian Aptus Web <= 1.24 - Remote Command Executionaptus web9.8 (v3.1)Critical
CVE-2020-9054Zyxel NAS Firmware 5.21- Remote Code Executionnas326 firmware9.8 (v3.1)Critical
CVE-2021-21307Lucee Administrator imgProcess.cfm Arbitrary File Writelucee server9.8 (v3.1)Critical
CVE-2021-22005VMware vCenter Server Analytics (CEIP) Service File Uploadcloud foundation9.8 (v3.1)Critical
CVE-2021-25281SaltStack Salt API Unauthenticated RCE through wheel_async clientsalt9.8 (v3.1)Critical
CVE-2021-28799QNAP HBS 3 - Broken Access Controlhybrid backup sync9.8 (v3.1)Critical
CVE-2021-32682elFinder ZIP Arguments Injection Leads to Commands Injection (CVE-2021-32682)elfinder9.8 (v3.1)Critical
CVE-2021-40539ManageEngine ADSelfService Plus CVE-2021-40539manageengine adselfservice plus9.8 (v3.1)Critical
CVE-2021-45837TerraMaster TOS 4.2.15 or lower - RCE chain from unauthenticated to root via session crafting.tos9.8 (v3.1)Critical
CVE-2022-0679WordPress Narnoo Distributor <=2.5.1 - Local File Inclusionnarnoo distributor9.8 (v3.1)Critical
CVE-2022-1390WordPress Admin Word Count Column 2.2 - Local File Inclusionadmin word count column9.8 (v3.1)Critical
CVE-2022-1391WordPress Cab fare calculator < 1.0.4 - Local File Inclusioncab fare calculator9.8 (v3.1)Critical
CVE-2022-20705Cisco RV Series Authentication Bypass and Command Injectionrv340 firmware9.8 (v3.1)Critical
CVE-2022-2143Advantech iView NetworkServlet Command Injectioniview9.8 (v3.1)Critical
CVE-2022-22954VMware Workspace ONE Access CVE-2022-22954identity manager9.8 (v3.1)Critical
CVE-2022-24086Adobe Commerce (Magento) - Remote Code Executioncommerce9.8 (v3.1)Critical
CVE-2022-24989TerraMaster TOS 4.2.29 or lower - Unauthenticated RCE chaining CVE-2022-24990 and CVE-2022-24989terramaster operating system9.8 (v3.1)Critical
CVE-2022-28219ManageEngine ADAudit Plus CVE-2022-28219manageengine adaudit plus9.8 (v3.1)Critical
CVE-2022-29303SolarView Compact 6.0 - OS Command Injectionsv-cpt-mc310 firmware9.8 (v3.1)Critical
CVE-2022-29806ZoneMinder Language Settings Remote Code Executionzoneminder9.8 (v3.1)Critical
CVE-2022-31137Roxy-WI < 6.1.1.0 - Remote Code Executionroxy-wi9.8 (v3.1)Critical
CVE-2022-32409Portal do Software Publico Brasileiro i3geo 7.0.5 - Local File Inclusioni3geo9.8 (v3.1)Critical
CVE-2022-35914GLPI htmLawed php command injectionglpi9.8 (v3.1)Critical
CVE-2022-36553Hytec Inter HWL-2511-SS - Remote Command Executionhwl-2511-ss firmware9.8 (v3.1)Critical
CVE-2022-36642Omnia MPX 1.5.0+r1 - Local File Inclusionomnia mpx node firmware9.8 (v3.1)Critical
CVE-2022-37042Zip Path Traversal in Zimbra (mboximport) (CVE-2022-27925)zimbra collaboration suite9.8 (v3.1)Critical
CVE-2022-4060WordPress User Post Gallery <=2.19 - Remote Code Executionuser post gallery9.8 (v3.1)Critical
CVE-2022-40881SolarView 6.00 - Remote Command Executionsolarview compact9.8 (v3.1)Critical
CVE-2022-41840Welcart eCommerce <=2.7.7 - Local File Inclusionwelcart e-commerce9.8 (v3.1)Critical
CVE-2022-44276responsive filemanager Unrestricted Upload of File with Dangerous Type Vulnerabilityresponsive filemanager9.8 (v3.1)Critical
CVE-2022-47615LearnPress Plugin < 4.2.0 - Local File Inclusionlearnpress9.8 (v3.1)Critical
CVE-2023-26469Jorani unauthenticated Remote Code Executionjorani9.8 (v3.1)Critical
CVE-2023-30145Camaleon CMS v2.7.0 - Server-Side Template Injection (SSTI)camaleon cms9.8 (v3.1)Critical
CVE-2023-34960Chamilo unauthenticated command injection in PowerPoint uploadchamilo9.8 (v3.1)Critical
CVE-2023-3643CAREL Boss Mini <= 1.4.0 - Local File Inclusionboss-mini9.8 (v3.1)Critical
CVE-2023-36845Juniper J-Web - Remote Code Executionjunos9.8 (v3.1)Critical
CVE-2023-45852Viessmann Vitogate 300 - Remote Code Executionvitogate 300 firmware9.8 (v3.1)Critical
CVE-2023-5991Hotel Booking Lite < 4.8.5 - Arbitrary File Download & Deletionhotel booking lite9.8 (v3.1)Critical
CVE-2023-6623Essential Blocks < 4.4.3 - Local File Inclusionessential blocks9.8 (v3.1)Critical
CVE-2024-12209WP Umbrella Update Backup Restore & Monitoring <= 2.17.0 - Local File Inclusionwp-umbrella9.8 (v3.1)Critical
CVE-2024-31823ecommerce-codeigniter-bootstrap Arbitrary Code Execution Vulnerabilityecommerce-codeigniter-bootstrap9.8 (v3.1)Critical
CVE-2024-32641Masa CMS Vulnerable to Pre-Auth RCE via JSON APImasacms9.8 (v3.1)Critical
CVE-2024-45256BYOB Unauthenticated RCE via Arbitrary File Write and Command Injection (CVE-2024-45256, CVE-2024-45257)-9.8 (v3.1)Critical
CVE-2024-50603Aviatrix Controller - Remote Code Executioncontroller9.8 (v3.1)Critical
CVE-2024-53584OpenPanel 0.3.4 - OS Command Injectionopenpanel9.8 (v3.1)Critical
CVE-2024-5827Vanna - SQL injectionvanna-ai/vanna9.8 (v3.0)Critical
CVE-2024-6460WordPress Grow by Tradedoubler Plugin < 2.0.22 - Unauthenticated Local File Inclusiontradedoubler-affiliate-tracker9.8 (v3.1)Critical
CVE-2024-7399Samsung MagicINFO 9 Server Remote Code Execution (CVE-2024-7399)magicinfo 9 server9.8 (v3.1)Critical
CVE-2024-9047WordPress File Upload <= 4.24.11 - Arbitrary File Readwordpress file upload9.8 (v3.1)Critical
CVE-2025-14344Multi Uploader for Gravity Forms <= 1.1.7 - Unauthenticated Arbitrary File DeletionMulti Uploader for Gravity Forms9.8 (v3.1)Critical
CVE-2025-2294Kubio AI Page Builder <= 2.5.1 - Local File InclusionKubio AI Page Builder9.8 (v3.1)Critical
CVE-2025-29306FoxCMS v.1.2.5 - Remote Code Executionfoxcms9.8 (v3.1)Critical
CVE-2025-3248Langflow validate/code API Pre-Auth Remote Code Execution (CVE-2025-3248)langflow9.8 (v3.1)Critical
CVE-2025-4524WordPress Madara - Local File InclusionMadara – Responsive and modern WordPress theme for manga sites9.8 (v3.1)Critical
CVE-2025-47445WordPress Eventin (Themewinter) ≤ 4.0.26 - Arbitrary File Downloadeventin9.8 (v3.1)Critical
CVE-2025-54123Hoverfly <= 1.11.3 - Remote Code Executionhoverfly9.8 (v3.1)Critical
CVE-2025-56563Server-Side Request Forgery-9.8 (v3.1)Critical
CVE-2025-61882Oracle E-Business Suite CVE-2025-61882 RCEconcurrent processing9.8 (v3.1)Critical
CVE-2025-6439WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File DeletionWooCommerce Designer Pro9.8 (v3.1)Critical
CVE-2025-64446Fortinet FortiWeb unauthenticated RCEfortiweb9.8 (v3.1)Critical
CVE-2025-65719Open Source Kubectl MCP Server v1.1.1 Arbitrary Code Execution Vulnerability-9.8 (v3.1)Critical
CVE-2025-66401MCP Watch has a Critical Command Injection in cloneRepo allows Remote Code Execution (RCE) via malicious URLmcp watch9.8 (v3.1)Critical
CVE-2025-66516Elasticsearch ingest-attachment Apache Tika XFA XXE Local File Readtika9.8 (v3.1)Critical
CVE-2025-67506PipesHub Vulnerable to Path Traversal through Unauthenticated Arbitrary File Uploadpipeshub9.8 (v3.1)Critical
CVE-2026-0770Langflow < 1.3.0 - Remote Code Execution via validate_code() exec()langflow9.8 (v3.0)Critical
CVE-2026-0926Prodigy Commerce <= 3.3.0 - Local File InclusionProdigy Commerce9.8 (v3.1)Critical
CVE-2026-1038893D Product configurator for WooCommerce <= 2.16.2 - Unauthenticated Remote Code Execution via 'xpv_image' Parameter3D Product configurator for WooCommerce9.8 (v3.1)Critical
CVE-2026-104586AUTOM8N (WHM/cPanel plugin) through commit 82821f7 Command Injection Vulnerability-9.8 (v3.1)Critical
CVE-2026-104798My Calendar <= 3.8.7 - Unauthenticated Privilege Escalation to 'mcs' Parameter via Reflected Shortcode Injection into 'aMy Calendar – Accessible Event Manager9.8 (v3.1)Critical
CVE-2026-110392Samsung QA-Board — Unauthenticated OS command injection via output redo/tuningQA-Board9.8 (v3.1)Critical
CVE-2026-12227Visual Composer <= 45.16.0 - Unauthenticated LFIvisualcomposer9.8 (v3.1)Critical
CVE-2026-12940Langflow is affected by remote code execution due to multiple unauthenticated and insufficiently authorized API endpointlangflow9.8 (v3.1)Critical
CVE-2026-15732WGDashboard Server-Side Request Forgery VulnerabilityWGDashboard9.8 (v3.1)Critical
CVE-2026-15733WGDashboard <= 4.3.2 - Authenticated OS Command Injection /etc/passwd ReadWGDashboard9.8 (v3.1)Critical
CVE-2026-18482neo-mjs Command Injection Vulnerabilityneo-mjs9.8 (v3.1)Critical
CVE-2026-30118scalar/astro v0.1.13 was discovered to Server-Side Request Forgery Vulnerability-9.8 (v3.1)Critical
CVE-2026-30993Slah CMS v1.5.0 and below Arbitrary Code Execution VulnerabilitySlah CMS v1.5.0 and below9.8 (v3.1)Critical
CVE-2026-31040stata-mcp Code Injection Vulnerabilitystata-mcp9.8 (v3.1)Critical
CVE-2026-3296Everest Forms <= 3.4.3 - Unauthenticated PHP Object Injection via Form Entry MetadataEverest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder9.8 (v3.1)Critical
CVE-2026-35048Piwigo RCE via PHP Code Injection into Config File in InstallerPiwigo9.8 (v3.1)Critical
CVE-2026-35471Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshsgoshs9.8 (v3.0)Critical
CVE-2026-35847the CheckUils.php file Arbitrary Code Execution Vulnerabilitythe CheckUils.php file9.8 (v3.1)Critical
CVE-2026-37107HTMLy v.3.1.1 Improper Privilege Management Vulnerability-9.8 (v3.1)Critical
CVE-2026-37281the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 Command Injection Vulnerabilitythe /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.09.8 (v3.1)Critical
CVE-2026-38428kestra SQL Injection Vulnerabilitykestra9.8 (v3.1)Critical
CVE-2026-38431erpnext Code Injection Vulnerabilityerpnext9.8 (v3.1)Critical
CVE-2026-39117AltumCode 66Uptime before v.54.0.0 and 66Uptime ping-servers plugin before v.2.0.0 Arbitrary Code Execution Vulnerability-9.8 (v3.1)Critical
CVE-2026-39394CI4MS has an .env CRLF Injection via Unvalidated host Parameter in Install Controllerci4ms9.8 (v3.1)Critical
CVE-2026-3960Remote Code Execution in h2oai/h2o-3h2o9.8 (v3.1)Critical
CVE-2026-42846ClipBucket: Remote Play URL Command Injectionclipbucket-v59.8 (v3.1)Critical
CVE-2026-45018Chainlit: Command injection via MCP stdio transport allows unauthenticated remote code executionchainlit9.8 (v3.1)Critical
CVE-2026-45748Termix Vulnerable to Remote Code Execution via SSH Tunnel Forward Command Injectiontermix9.8 (v3.1)Critical
CVE-2026-46562Yamcs: Remote Code Execution via Mission Database algorithm overrideyamcs9.8 (v3.1)Critical
CVE-2026-47391PraisonAI's unauthenticated A2A official example can reach real LLM-driven eval() tool executionPraisonAI9.8 (v3.1)Critical
CVE-2026-48687fastnetmon Command Injection Vulnerabilityfastnetmon9.8 (v3.1)Critical
CVE-2026-49819UpSnap - Unauthenticated Initial-Superuser Takeover Chains to Root RCE via wake_cmdUpSnap9.8 (v3.1)Critical
CVE-2026-51861bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 Code Injection Vulnerability-9.8 (v3.1)Critical
CVE-2026-51866Code Injection-9.8 (v3.1)Critical
CVE-2026-51884The /knowledge_base/upload_temp_docs temporary document upload endpoint in Langchain Chatchat 0.3.1 Path Traversal Vulnerability-9.8 (v3.1)Critical
CVE-2026-51886Arbitrary Code Execution-9.8 (v3.1)Critical
CVE-2026-51911vanna v2.0.2 Code Injection Vulnerabilityvanna v2.0.29.8 (v3.1)Critical
CVE-2026-53545Termix: Remote Code Execution via Tunnel Disconnect pkill Command InjectionTermix9.8 (v3.1)Critical
CVE-2026-55559Yamcs: Remote Code Execution via instance-template argument YAML injection (createInstance)yamcs9.8 (v3.1)Critical
CVE-2026-55573e107: Unsafe deserialization in install.php allows unauthenticated RCE via POP chaine1079.8 (v3.1)Critical
CVE-2026-57124PraisonAI UI MCP connect endpoint allows unauthenticated local command executionPraisonAI9.8 (v3.1)Critical
CVE-2026-57131praisonai: Jobs API exposes agent-execution endpoints with no authenticationPraisonAI9.8 (v3.1)Critical
CVE-2026-61560@zereight/mcp-gitlab's unauthenticated arbitrary file read via upload_markdown enables PAT exfiltration and full accougitlab-mcp9.8 (v3.1)Critical
CVE-2026-62379OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallbackOpenAM9.8 (v3.1)Critical
CVE-2026-67827Incorrect Access Control in the HTTP API module in ZLMediaKit commit 9fd5152 Arbitrary Code Execution Vulnerability-9.8 (v3.1)Critical
CVE-2026-67919Halo 2.25.4 Arbitrary Code Execution Vulnerability-9.8 (v3.1)Critical
CVE-2026-67926JeecgBoot v.3.9.2 Arbitrary Code Execution Vulnerability-9.8 (v3.1)Critical
CVE-2026-72592dulldusk phpfm - Unauthenticated Remote Code Execution via Unrestricted PHP File Uploadphpfm9.8 (v3.1)Critical
CVE-2026-75031Interchange Arbitrary Code Execution VulnerabilityInterchange9.8 (v3.1)Critical
CVE-2026-75337Yu AI Code Mother v4.3 is vulnerable to path traversal VulnerabilityYu AI Code Mother v4.3 is vulnerable to path traversal9.8 (v3.1)Critical
CVE-2026-75411JeecgBoot v3.9.2 Code Injection Vulnerability-9.8 (v3.1)Critical
CVE-2026-75414In AntFlow V2.0.0, ActivitiTest.java Code Injection Vulnerability-9.8 (v3.1)Critical
CVE-2026-79408MetaGPT 0.8.1 Command Injection VulnerabilityMetaGPT 0.8.19.8 (v3.1)Critical
CVE-2026-79538metatool-ai MetaMCP up to and including 2.4.22 Code Injection Vulnerability-9.8 (v3.1)Critical
CVE-2026-8037Progress ADC LoadMaster - Command Injectionconnection manager for objectscale9.8 (v3.1)Critical
CVE-2026-83627Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN <= 3.21.0 - Unauthenticated Remote Code Execution viaHummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN9.8 (v3.1)Critical
CVE-2026-84372Predis: Redis command injection and denial of service via CRLF smuggling in pipelined commands on aggregate connectionspredis9.8 (v3.1)Critical
CVE-2026-86793SGLang Unsafe Deserialization VulnerabilitySGLang9.8 (v3.1)Critical
CVE-2026-88393WookTeam 1.6.6 and Earlier Code Injection Vulnerability-9.8 (v3.1)Critical
CVE-2019-8982Wavemaker Studio 6.6 - Local File Inclusion/Server-Side Request Forgerywavemarker studio9.6 (v3.0)Critical
CVE-2024-31214Traccar v5 Remote Code Execution (CVE-2024-31214 and CVE-2024-24809)traccar9.6 (v3.1)Critical
CVE-2026-107188Eptura Archibus Workflow Rule Enables Unauthenticated Arbitrary File Upload Leading to Remote Code ExecutionArchibus9.6 (v3.1)Critical
CVE-2026-12564Automation-controller: automation-controller: kubernetes service account token exfiltration via hashicorp vault credentiRed Hat Ansible Automation Platform 2.4 for RHEL 89.6 (v3.1)Critical
CVE-2026-12605glassfish Server-Side Request Forgery Vulnerabilityglassfish9.6 (v3.1)Critical
CVE-2026-13751Snowflake CLI Server-Side Request Forgery via Arbitrary URL Fetch in !source/!loadsnowflake cli9.6 (v3.1)Critical
CVE-2026-34449SiYuan: Cross-Origin RCE via Permissive CORS Policy and JavaScript Snippet Injectionsiyuan9.6 (v3.1)Critical
CVE-2026-35906An undocumented debug CGI endpoint in T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03 OS Command Injection Vulnerability-9.6 (v3.1)Critical
CVE-2026-48519Langflow: Unauthenticated RCE in Shareable Playgroundslangflow9.6 (v3.1)Critical
CVE-2026-53513Better Auth: Server-side request forgery via unvalidated OIDC endpoints on @better-auth/sso provider registrationbetter-auth/sso9.6 (v3.1)Critical
CVE-2026-53649Joro: Unauthenticated Cross-Origin Plugin Upload Leads to RCEjoro9.6 (v3.1)Critical
CVE-2026-57496NetLicensing MCP Server: REST Path Traversal Bypasses Token RedactionNetLicensing-MCP9.6 (v3.1)Critical
CVE-2026-61559@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgerygitlab-mcp9.6 (v3.1)Critical
CVE-2026-72878Dokploy: OS Command Injection in backup/restore pipeline via unescaped user-controlled shell argumentsdokploy9.6 (v3.1)Critical
CVE-2026-70477Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerabilityflowise9.5 (v4.0)Critical
CVE-2026-88062OmniRoute < 3.8.49 - Unauthenticated RCEOmniRoute9.5 (v4.0)Critical
CVE-2026-8986Command Injection via Malicious OCPP Servermaxicharger single charger firmware9.5 (v4.0)Critical
CVE-2020-36856Nagios XI < 5.6.14 Authenticated RCE command_test.php via addressnagios xi9.4 (v4.0)Critical
CVE-2024-9264Grafana SQL Expressions Remote Code Execution (CVE-2024-9264)grafana9.4 (v4.0)Critical
CVE-2025-62593Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attackray9.4 (v4.0)Critical
CVE-2025-66210Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Database Importcoolify9.4 (v4.0)Critical
CVE-2025-6793Marvell QConvergeConsole Path Traversal (CVE-2025-6793)qconvergeconsole9.4 (v3.0)Critical
CVE-2026-100714Froxlor before 2.3.12 Command Injection via letsencryptchallengepathfroxlor9.4 (v4.0)Critical
CVE-2026-103056AiSOC 7.2.0 before 12.0.0 Command Injection via CrowdStrike RTRAiSOC9.4 (v4.0)Critical
CVE-2026-11419Path Traversal in Altium Enterprise Server Vault UploadController Allows Arbitrary File Writeon-prem enterprise server9.4 (v4.0)Critical
CVE-2026-11423Path Traversal in Altium Enterprise Server Collaboration Service Allows Privilege EscalationAltium Enterprise Server9.4 (v4.0)Critical
CVE-2026-33324SQLBot prompt injection allows arbitrary SQL execution and remote code executionsqlbot9.4 (v4.0)Critical
CVE-2026-39932OpenEMR 8.2.0 Remote Code Execution via CategoryTree eval() Injectionopenemr9.4 (v4.0)Critical
CVE-2026-40076OpenMRS Core arbitrary file write and code execution via Zip Slip in module uploadopenmrs9.4 (v4.0)Critical
CVE-2026-40576Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in excel-mcp-serverexcel-mcp-server9.4 (v3.1)Critical
CVE-2026-41203ci4ms Theme::upload is vulnerable to Zip Slip leading to RCEci4ms9.4 (v4.0)Critical
CVE-2026-45272MyBooks: Remote Code Execution via SOCIAL_AUTH Key Name Injection in Python Config Filetalebook9.4 (v4.0)Critical
CVE-2026-47670DbGate - Remote Code Execution via Dynamic Import Bypassdbgate9.4 (v4.0)Critical
CVE-2026-55413ToolJet - Marketplace Plugin Poisoning Enables Instance-Wide Remote Code ExecutionToolJet9.4 (v4.0)Critical
CVE-2026-58146Unauthorized remote code execution in T-Mobile 5G Box IDU routersT-Mobile 5G Box IDU9.4 (v4.0)Critical
CVE-2026-62668Grav API Plugin: Webhook SSRF via Unrestricted cURL Protocolsgrav9.4 (v4.0)Critical
CVE-2026-637329router before 0.4.60 Remote Code Execution via default password9router9.4 (v4.0)Critical
CVE-2026-66398phpMyFAQ before 4.1.6 Remote Code Execution via Configuration APIphpMyFAQ9.4 (v4.0)Critical
CVE-2026-6644A command injection vulnerability was found in the PPTP VPN Clients on the ADMdata master9.4 (v4.0)Critical
CVE-2026-69256Flowise: Remote Code Execution Vulnerability in CSVAgentflowise9.4 (v4.0)Critical
CVE-2026-72850Budibase before 3.40.0 Arbitrary File Write via Path Traversalserver9.4 (v4.0)Critical
CVE-2026-72879Dokploy: Command Injection via Registry Credentials in Swarm Uploaddokploy9.4 (v4.0)Critical
CVE-2026-73041SiYuan before v3.7.4 Remote Code Execution via PDF Annotationssiyuan9.4 (v4.0)Critical
CVE-2026-73042SiYuan before v3.7.4 Remote Code Execution via Menu Metadatasiyuan9.4 (v4.0)Critical
CVE-2026-73483Flowise before 3.1.3 Sandbox Escape via Puppeteerflowise9.4 (v4.0)Critical
CVE-2026-77086SiYuan before v3.7.4 Path Traversal via packageNamesiyuan9.4 (v4.0)Critical
CVE-2026-82244Budibase before 3.41.3 Remote Code Execution via Plugin eval()server9.4 (v4.0)Critical
CVE-2026-86123SQL Chat Unauthenticated Database-Connection Proxy in the /api/connection Endpointssqlchat9.4 (v4.0)Critical
CVE-2026-93985OpenPanel js-runtime JavaScript Template Sandbox Escape RCEopenpanel9.4 (v4.0)Critical
CVE-2009-20006osCommerce 2.2 Arbitrary PHP Code ExecutionosCommerce9.3 (v4.0)Critical
CVE-2012-10054Umbraco CMS Remote Command Executionumbraco cms9.3 (v4.0)Critical
CVE-2013-10049Raidsonic NAS Devices Unauthenticated Remote Command ExecutionIB-NAS52209.3 (v4.0)Critical
CVE-2013-1965Apache Struts2 S2-012 RCEstruts9.3 (v2.0)High
CVE-2018-25114osCommerce 2.3.4.1 - Remote Code ExecutionOnline Merchant9.3 (v4.0)Critical
CVE-2018-25357Dolibarr ERP CRM 7.0.3 Remote Code Execution via install/step1.phpdolibarr erp/crm9.3 (v4.0)Critical
CVE-2019-25687Pegasus CMS 1.0 Remote Code Execution via extra_fields.phppegasus cms9.3 (v4.0)Critical
CVE-2019-25727WordPress Plugin ad manager wd 1.0.11 Arbitrary File DownloadAd Manager WD9.3 (v4.0)Critical
CVE-2021-48014FineReport 9.0 Unauthenticated Path Traversal File Write via ReportServerFineReport9.3 (v4.0)Critical
CVE-2024-27954WordPress Automatic Plugin <3.92.1 - Arbitrary File Download and SSRFAutomatic9.3 (v3.1)Critical
CVE-2024-58348WordPress Background Image Cropper 1.2 Remote Code ExecutionBackground Image Cropper9.3 (v4.0)Critical
CVE-2025-10364Unauthenticated Arbitrary Command Injection in Evertz SDVN3080ipx-10G9.3 (v4.0)Critical
CVE-2025-31114Fooocus webui vulnerable to Remote Code ExecutionFooocus9.3 (v4.0)Critical
CVE-2025-34100BuilderEngine Arbitrary File Upload Vulnerability and executionCMS9.3 (v4.0)Critical
CVE-2025-59735Multiple vulnerabilities in AndSoft's e-TMSe-tms9.3 (v4.0)Critical
CVE-2025-59736Multiple vulnerabilities in AndSoft's e-TMSe-tms9.3 (v4.0)Critical
CVE-2025-59737Multiple vulnerabilities in AndSoft's e-TMSe-tms9.3 (v4.0)Critical
CVE-2025-59738Multiple vulnerabilities in AndSoft's e-TMSe-tms9.3 (v4.0)Critical
CVE-2025-59739Multiple vulnerabilities in AndSoft's e-TMSe-tms9.3 (v4.0)Critical
CVE-2025-59740Multiple vulnerabilities in AndSoft's e-TMSe-tms9.3 (v4.0)Critical
CVE-2025-59741Multiple vulnerabilities in AndSoft's e-TMSe-tms9.3 (v4.0)Critical
CVE-2025-66039FreePBX firmware file uploadfreepbx9.3 (v4.0)Critical
CVE-2025-71284Synway SMG Gateway Management Software OS Command Injection via radius_addresssmg gateway management software9.3 (v4.0)Critical
CVE-2025-71336Flowise - Unsandboxed Remote Code Execution via Custom MCPflowise9.3 (v4.0)Critical
CVE-2025-71429GPT-SoVITS through 20250606v2pro OS Command Injection via UVR5 vr.pyGPT-SoVITS9.3 (v4.0)Critical
CVE-2026-101001Netcore NBR200V2 Web Management network_tools eval os command injectionNBR200V29.3 (v4.0)Critical
CVE-2026-101072Netcore NR289-GE CGI ap_ip.cgi system os command injectionNR289-GE9.3 (v4.0)Critical
CVE-2026-101075Netcore NR289-GE Location Time location_time.cgi system os command injectionNR289-GE9.3 (v4.0)Critical
CVE-2026-101076Netcore NR289-GE CGI set_ntp_server_ip.cgi system os command injectionNR289-GE9.3 (v4.0)Critical
CVE-2026-102240Netcore NAP930 Network Tools CGI network_tools eval os command injectionNAP9309.3 (v4.0)Critical
CVE-2026-105110Iskratel Innbox Unauthenticated Remote Code Execution via login.xgi CLI ParameterInnbox9.3 (v4.0)Critical
CVE-2026-107780Dromara Skyeye Unauthenticated OS Command Injection via textToSpeech format Parameterskyeye9.3 (v4.0)Critical
CVE-2026-108598Floci 1.1.0 before 2.2.0 RCE via API Gateway VTL Mapping Templatesfloci9.3 (v4.0)Critical
CVE-2026-108804TRENDnet TEW-751DR/TEW-752DRU/TEW733GR Web Management Backend pigwidgeon.cgi fwrite os command injectionTEW-751DR9.3 (v4.0)Critical
CVE-2026-113802Wavlink WL-WN530BE1-A Unauthenticated OS Command Injection in ioos protocol.csp ovpn_file HandlerWL-WN530BE1-A9.3 (v4.0)Critical
CVE-2026-12257Remote code execution in Mura Software’s CMSCMS9.3 (v4.0)Critical
CVE-2026-19586Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gatewayser7212pc firmware9.3 (v4.0)Critical
CVE-2026-23734XWiki Platform: Path traversal via resources parameter in ssx and jsx endpoints when using leading slashxwiki-commons9.3 (v4.0)Critical
CVE-2026-24479HUSTOJ Admin users can zip-slip problem_import_qduoj.php, planting PHP files in webroot for RCEhustoj9.3 (v4.0)Critical
CVE-2026-27174MajorDoMo Console Eval Unauthenticated RCEmajordomo9.3 (v4.0)Critical
CVE-2026-34106Guardian Language-System Unauthenticated OS Command Injection via id Parameter in subtitles.phplanguage-system9.3 (v4.0)Critical
CVE-2026-34108Guardian Language-System Unauthenticated OS Command Injection via id Parameter in text.phplanguage-system9.3 (v4.0)Critical
CVE-2026-34109Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speech.phplanguage-system9.3 (v4.0)Critical
CVE-2026-34110Guardian Language-System Unauthenticated OS Command Injection via id Parameter in complex_start.phplanguage-system9.3 (v4.0)Critical
CVE-2026-34111Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speechmac_text.phplanguage-system9.3 (v4.0)Critical
CVE-2026-34112Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speechmac.phplanguage-system9.3 (v4.0)Critical
CVE-2026-34115Guardian Language-System Unauthenticated OS Command Injection via id Parameter in transcribe_amazon.phplanguage-system9.3 (v4.0)Critical
CVE-2026-34361HAPI FHIR: Unauthenticated SSRF via /loadIG Chains with startsWith() Credential Leak for Authentication Token Thefthl7 fhir core9.3 (v3.1)Critical
CVE-2026-34415Xerte Online Toolkits Arbitrary File Upload - Unauthenticated Media Uploadxerteonlinetoolkits9.3 (v4.0)Critical
CVE-2026-35047Brave CMS has Unrestricted File Upload in BraveCMS via CKEditor Endpointbravecms9.3 (v4.0)Critical
CVE-2026-41064AVideo has an incomplete fix for CVE-2026-33502 (Command Injection)avideo9.3 (v3.1)Critical
CVE-2026-41315mdserver-web: Missing Authorization and Improper Neutralization of Special Elements used in an OS Command ('OS Command Imdserver-web9.3 (v4.0)Critical
CVE-2026-41923WDR201A WiFi Extender OS Command Injection via internet.cgiWDR201A WiFi Extender9.3 (v4.0)Critical
CVE-2026-41925WDR201A WiFi Extender OS Command Injection via adm.cgi (reboot_time)WDR201A WiFi Extender9.3 (v4.0)Critical
CVE-2026-41939Care Everywhere Gateway 14.3.10 Hard-coded Credentials RCE via WildFlyCare Everywhere Gateway9.3 (v4.0)Critical
CVE-2026-44257efw4.X: RCE via zipslipefw4.X9.3 (v4.0)Critical
CVE-2026-44343WGDashboard < 4.3.2 - Unauthenticated File Readwgdashboard9.3 (v4.0)Critical
CVE-2026-44402Voltronic Power SNMP Web Pro 1.1 Unauthenticated RCE via upload.cgiSNMP Web Pro9.3 (v4.0)Critical
CVE-2026-45668Trilium Notes : Note Import to RCE via #docName Path Traversal (Safe Import Enabled)Trilium9.3 (v4.0)Critical
CVE-2026-47669DbGate: Zip Slip in archive/unzip allows arbitrary file write leading to RCEdbgate9.3 (v4.0)Critical
CVE-2026-47754unauthenticated path traversal in Metacat 2.xmetacat9.3 (v3.1)Critical
CVE-2026-48768TypeBot: Unauthenticated arbitrary s3 object write in generate-upload-url via unsanitized fileNametypebot.io9.3 (v3.1)Critical
CVE-2026-48777FileBrowser Quantum: Path Traversal in public share PATCH allows file ops outside shared directoryfilebrowser9.3 (v4.0)Critical
CVE-2026-53975OpenChamber 1.11.7 Unauthenticated RCE via /api/fs/execOpenChamber9.3 (v4.0)Critical
CVE-2026-53976OpenChamber <1.13.0 - Unauthenticated Arbitrary File ReadOpenChamber9.3 (v4.0)Critical
CVE-2026-58147Authorized remote code execution via password change functionality in T-Mobile 5G Box IDU routersT-Mobile 5G Box IDU9.3 (v4.0)Critical
CVE-2026-58457Shenzhen Aitemi M300 MT02 Unauthenticated OS Command Injection via protocol.cspM300 Wi-Fi Repeater9.3 (v4.0)Critical
CVE-2026-60121Vitec Flamingo 4.12.2 Unauthenticated OS Command Injection via ping.phpflamingo9.3 (v4.0)Critical
CVE-2026-6074Path traversal: '…/…//' in Intrado 911 Emergency Gateway (EGW)911 Emergency Gateway9.3 (v4.0)Critical
CVE-2026-61498Vitec Flamingo 4.12.2 Unauthenticated OS Command Injection via gen_graphs.phpflamingo9.3 (v4.0)Critical
CVE-2026-61511vBulletin 6.x - Remote Code ExecutionvBulletin9.3 (v4.0)Critical
CVE-2026-63766GPT-SoVITS 20250606v2pro OS Command Injection via webui.pyGPT-SoVITS9.3 (v4.0)Critical
CVE-2026-64625AVideo before 29.0 OS Command Injection via execAsyncAVideo9.3 (v4.0)Critical
CVE-2026-64824Home Assistant Core < 2026.7.0 Symlink Path Traversal RCE via backup-restoreHome Assistant Core9.3 (v4.0)Critical
CVE-2026-64849MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirectmlflow9.3 (v3.1)Critical
CVE-2026-65008Grav before 2.0.7 Remote Code Execution via Blueprint dynamicDatagrav9.3 (v4.0)Critical
CVE-2026-65700h2oGPT 0.2.1 Path Traversal via OpenAI-compatible Files APIh2ogpt9.3 (v4.0)Critical
CVE-2026-65701SoftVC VITS Singing Voice Conversion Path Traversal via /wav2wav Flask Routeso-vits-svc9.3 (v4.0)Critical
CVE-2026-66794Cluster-proxy-addon: cluster-proxy-addon: unauthenticated ssrf to arbitrary managed-cluster services via public routemulticluster engine for Kubernetes 2.109.3 (v3.1)Critical
CVE-2026-67308Wazuh GitHub Actions Shell Injection via Fork Pull Requestwazuh9.3 (v4.0)Critical
CVE-2026-67426Flyto2 Core: Unauthenticated flyto-verification /run: callback_url SSRF and internal runner-secret exfiltrationflyto-core9.3 (v3.1)Critical
CVE-2026-69110OpenCode Studio < 2.4.4 Unauthenticated File Read via /api/tmp and /api/musicopencode-studio9.3 (v4.0)Critical
CVE-2026-70553MaxSite CMS Unauthenticated RCE via Install EndpointMaxSite CMS9.3 (v4.0)Critical
CVE-2026-71921DrayTek VigorSwitch Multiple Models Pre-Authentication OS Command Injection via setget.cgiVigorSwitch G2540xs9.3 (v4.0)Critical
CVE-2026-71944D-Link DWR-M961 Command Injection via /boafrm/formLtefotaUpgradeQuectelDWR-M9619.3 (v4.0)Critical
CVE-2026-71945D-Link DWR-M961 Command Injection via /boafrm/formLtefotaUpgradeFibocomDWR-M9619.3 (v4.0)Critical
CVE-2026-71946D-Link DWR-M961 Command Injection via /boafrm/formPingDiagnosticRunDWR-M9619.3 (v4.0)Critical
CVE-2026-71947D-Link DWR-M961 Command Injection via /boafrm/formTracerouteDiagnosticRunDWR-M9619.3 (v4.0)Critical
CVE-2026-71948D-Link DWR-M961 Command Injection via /boafrm/formDebugDiagnosticRunDWR-M9619.3 (v4.0)Critical
CVE-2026-71949D-Link DWR-M961 Command Injection via /boafrm/formUSSDSetupDWR-M9619.3 (v4.0)Critical
CVE-2026-71950D-Link DWR-M961 Command Injection via /boafrm/formSmsManageDWR-M9619.3 (v4.0)Critical
CVE-2026-71951D-Link DWR-M961 Command Injection via /boafrm/formIMEISetupDWR-M9619.3 (v4.0)Critical
CVE-2026-71952D-Link DWR-M961 Command Injection via /boafrm/formPinManageSetupDWR-M9619.3 (v4.0)Critical
CVE-2026-71953D-Link DWR-M961 Command Injection via /boafrm/formNtpDWR-M9619.3 (v4.0)Critical
CVE-2026-71954D-Link DWR-M961 Command Injection via /boafrm/formL2tpv3ConfigSetupDWR-M9619.3 (v4.0)Critical
CVE-2026-71955D-Link DWR-M961 Command Injection via /boafrm/formWscDWR-M9619.3 (v4.0)Critical
CVE-2026-71956D-Link DWR-M961 Command Injection via app.cgiDWR-M9619.3 (v4.0)Critical
CVE-2026-71984MSI Radix AXE6600 v781521 Command Injection via urlfilterRadix AXE66009.3 (v4.0)Critical
CVE-2026-71992MSI Radix AXE6600 v781521 Command Injection via macfilterRadix AXE66009.3 (v4.0)Critical
CVE-2026-72710SPIP < 4.4.18 Remote Code Execution via editer_objet.php Job Queue InjectionSPIP9.3 (v4.0)Critical
CVE-2026-74798SiYuan kernel Path Traversal via database_clean MCP toolsiyuan9.3 (v4.0)Critical
CVE-2026-75885Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpointRed Hat OpenShift Container Platform 4.129.3 (v3.1)Critical
CVE-2026-76070Netis NC63 V3.0.0.3327 Stack Buffer Overflow via Login Password ParameterNC639.3 (v4.0)Critical
CVE-2026-76071Netis NC63 V3.0.0.3327 Stack Buffer Overflow via destHost ParameterNC639.3 (v4.0)Critical
CVE-2026-80104DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload FilenameDB-GPT9.3 (v4.0)Critical
CVE-2026-85520Unauthenticated arbitrary file write leading to RCE in gmfeed PrestaShop moduleGoogle Merchant Center Feed9.3 (v4.0)Critical
CVE-2026-85688TEN Framework - Arbitrary File Read & Writeten-framework9.3 (v4.0)Critical
CVE-2026-86189WWBN AVideo Unauthenticated Path Traversal via notify.ffmpeg.json.phpAVideo9.3 (v4.0)Critical
CVE-2026-89026Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originateIssabel Framework9.3 (v4.0)Critical
CVE-2026-89308Arbitrary command execution in TrxTimeATTENDANCETrxTimeATTENDANCE9.3 (v4.0)Critical
CVE-2026-9209mJobTime 15.7.3.32 Unauthenticated SQL Execution RCE via Login.aspxmJobTime9.3 (v4.0)Critical
CVE-2026-96754orval @orval/hono before 8.29.0 Code Injection via OpenAPI Pathorval9.3 (v4.0)Critical
CVE-2016-20101Issuu Panel WordPress Plugin < 1.6.6 File Inclusion via ajax-docs.phpIssuu Panel9.2 (v4.0)Critical
CVE-2023-7305SmartBI RMIServlet Unrestricted File Upload RCESmartBI9.2 (v4.0)Critical
CVE-2026-109238Crawl4AI 0.7.0 before 0.9.4 SSRF via link_preview_config URL Seedercrawl4ai9.2 (v4.0)Critical
CVE-2026-110628Kan 0.5.5 through 0.6.0 Unauthenticated SSRF via /api/download/attatchmentkan9.2 (v4.0)Critical
CVE-2026-111663Chaskiq through 2.0.3 SSRF via createUrlUpload GraphQL Mutationchaskiq9.2 (v4.0)Critical
CVE-2026-114053vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_revisionvllm9.2 (v4.0)Critical
CVE-2026-114493LocalAI v4.6.0 through v4.11.0 SSRF Guard Bypass via HTTP RedirectsLocalAI9.2 (v4.0)Critical
CVE-2026-26217Crawl4AI < 0.8.0 - Local File Inclusioncrawl4ai9.2 (v4.0)Critical
CVE-2026-56266Crawl4AI - Server-Side Request Forgery via Direct Crawl Endpointscrawl4ai9.2 (v4.0)Critical
CVE-2026-59707LocalAI - Server-Side Request Forgery via POST /models/applyLocalAI9.2 (v4.0)Critical
CVE-2026-598009Router < 0.4.44 - OS Command Injection via sudoPassword Parameter in Tailscale Install Endpoint9router9.2 (v4.0)Critical
CVE-2026-63304AVideo through 29.0 OS Command Injection via listFFmpegProcessesAVideo9.2 (v4.0)Critical
CVE-2026-63305AVideo through 29.0 OS Command Injection via ffmpeg.json.phpAVideo9.2 (v4.0)Critical
CVE-2026-63306stoatchat before 0.13.5 Unauthenticated SSRF via proxy and embed endpointsstoatchat9.2 (v4.0)Critical
CVE-2026-65057Keep Unauthenticated Server-Side Request Forgery via POST /providers/healthcheckkeep9.2 (v4.0)Critical
CVE-2026-65317Verba (goldenverba) Server-Side Request Forgery via /api/connect and Same-Origin Middleware BypassVerba9.2 (v4.0)Critical
CVE-2026-65318Verba (goldenverba) Unauthenticated Server-Side Request Forgery via WebSocket Import Endpoint HTMLReaderVerba9.2 (v4.0)Critical
CVE-2026-65760Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0Easy Store extension for Joomla9.2 (v4.0)Critical
CVE-2026-66914SEBLOD for Joomla < 3.30.0/< 4.7.0/< 6.0.1 - Path Traversalseblod9.2 (v4.0)Critical
CVE-2026-80138ClipBucket V5 5.5.1 through 5.5.3-#153 OS Command Injection via Installer php_cli_filepath Parameterclipbucket-v59.2 (v4.0)Critical
CVE-2026-82531Smarty before 4.5.8 and 5.x before 5.8.5 PHP Code Injection via extends: Inheritance Cachesmarty9.2 (v4.0)Critical
CVE-2026-85614OpenPanel API before 2.3.0 Unauthenticated SSRF via site-checkeropenpanel9.2 (v4.0)Critical
CVE-2026-86119Webstudio through 0.296.0 SSRF via /cgi proxy routeswebstudio9.2 (v4.0)Critical
CVE-2026-92576HKUDS nanobot before 0.3.0 Server-Side Request Forgery via WebFetchToolnanobot9.2 (v4.0)Critical
CVE-2012-3152Oracle Forms and Reports Remote Code Executionfusion middleware9.1 (v3.1)Critical
CVE-2018-14916Loytec LGATE-902 <6.4.2 - Local File Inclusionlgate-9029.1 (v3.0)Critical
CVE-2018-16716NCBI ToolBox - Directory Traversalncbi toolbox9.1 (v3.0)Critical
CVE-2018-19365Wowza Streaming Engine Manager 4.7.4.01 - Directory Traversalstreaming engine9.1 (v3.1)Critical
CVE-2021-25282SaltStack Salt API Unauthenticated RCE through wheel_async clientsalt9.1 (v3.1)Critical
CVE-2021-28918Netmask NPM Package - Server-Side Request Forgerynetmask9.1 (v3.1)Critical
CVE-2022-26960elFinder <=2.1.60 - Local File Inclusionelfinder9.1 (v3.1)Critical
CVE-2024-3673Web Directory Free < 1.7.3 - Local File Inclusionweb directory free9.1 (v3.1)Critical
CVE-2024-40422Devika v1 - Path Traversaldevika9.1 (v3.1)Critical
CVE-2025-12977fluent bit Path Traversal Vulnerabilityfluent bit9.1 (v3.1)Critical
CVE-2025-12999Eclipse Open VSX Insufficient Verification of Data Authenticity VulnerabilityEclipse Open VSX9.1 (v4.0)Critical
CVE-2025-55526n8n workflow collection Path Traversal Vulnerabilityn8n workflow collection9.1 (v3.1)Critical
CVE-2025-61318emlog Path Traversal Vulnerabilityemlog9.1 (v3.1)Critical
CVE-2025-65473easyimages2.0 Arbitrary Code Execution Vulnerabilityeasyimages2.09.1 (v3.1)Critical
CVE-2025-66203StreamVault is Vulnerable to Authenticated Remote Code Execution (RCE) via ytdlpargs Configuration Injectionstreamvault9.1 (v3.1)Critical
CVE-2026-10131Totolink Arbitrary Code Execution VulnerabilityTotolink9.1 (v3.1)Critical
CVE-2026-10135Totolink Arbitrary Code Execution VulnerabilityTotolink9.1 (v3.1)Critical
CVE-2026-107781Dromara Skyeye Unauthenticated SSRF and File Overwrite via editUploadOfficeFileByIdskyeye9.1 (v4.0)Critical
CVE-2026-12486GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection vulnerabilityGV-I/O Box 4E9.1 (v3.1)Critical
CVE-2026-12849GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection vulnerabilityGV-I/O Box 4E9.1 (v3.1)Critical
CVE-2026-12850GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection vulnerabilityGV-I/O Box 4E9.1 (v3.1)Critical
CVE-2026-12851GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection vulnerabilityGV-I/O Box 4E9.1 (v3.1)Critical
CVE-2026-13147WordPress Kirki < 6.0.12 - Server-Side Request Forgerykirki9.1 (v3.1)Critical
CVE-2026-15896Super Forms <= 6.3.316 - Unauthenticated Path Traversal to Arbitrary File Read via 'sfgtfi' URL Path ParameterSuper Forms – Drag & Drop Form Builder9.1 (v3.1)Critical
CVE-2026-17552Plack::App::Prerender versions before 0.3.0 for Perl can proxy to an arbitrary host via unvalidated REQUEST_URI concatenPlack::App::Prerender9.1 (v3.1)Critical
CVE-2026-3141FormGent <= 1.9.2- Missing Authorization to Unauthenticated Arbitrary File Deletion via 'file_token' ParameterFormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More9.1 (v3.1)Critical
CVE-2026-33568Totolink Arbitrary Code Execution VulnerabilityTotolink9.1 (v3.1)Critical
CVE-2026-34745Unauthenticated Path Traversal Arbitrary File Write in /api/uploadChunked/publicfireshare9.1 (v3.1)Critical
CVE-2026-35499Totolink Arbitrary Code Execution VulnerabilityTotolink9.1 (v3.1)Critical
CVE-2026-35573ChurchCRM has a Path traversal leads to RCEchurchcrm9.1 (v3.1)Critical
CVE-2026-37637Alexantr filemanager v.1.0 Arbitrary Code Execution Vulnerability-9.1 (v3.1)Critical
CVE-2026-39353InvoicePlane: Remote Code Execution via Writable Templates DirectoryInvoicePlane9.1 (v3.1)Critical
CVE-2026-40484ChurchCRM: Authenticated Remote Code Execution via Unrestricted PHP File Write in Database Restore FunctionCRM9.1 (v3.1)Critical
CVE-2026-40627Totolink Arbitrary Code Execution VulnerabilityTotolink9.1 (v3.1)Critical
CVE-2026-42555Valtimo: SpEL injection via StandardEvaluationContext allows Remote Code Execution by admin usersvaltimo9.1 (v3.1)Critical
CVE-2026-44313LinkWarden: Server-Side Request Forgery (SSRF) in Link Creation via fetchTitleAndHeaders Functionlinkwarden9.1 (v3.1)Critical
CVE-2026-44542FileBrowser Quantum: Unauthenticated Path Traversal in Public Share Delete Allows Arbitrary File Deletionfilebrowser quantum9.1 (v3.1)Critical
CVE-2026-46621Yamcs: Authenticated Remote Code Execution (RCE) via Jython Algorithm Code Injectionyamcs9.1 (v3.1)Critical
CVE-2026-47731NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by uAIT-Core9.1 (v3.1)Critical
CVE-2026-48024Wazuh: merged-file header path traversal in cluster sync allows arbitrary file write under WAZUH_PATH in Wazuh managerwazuh9.1 (v3.1)Critical
CVE-2026-48162Wazuh: cluster peer can read arbitrary master files and forge offline REST API administrator tokens via DAPI tmp_file pawazuh9.1 (v3.1)Critical
CVE-2026-50006Anyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE inanyquery9.1 (v3.1)Critical
CVE-2026-51152Server-Side Request Forgery-9.1 (v3.1)Critical
CVE-2026-51859bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 Path Traversal Vulnerability-9.1 (v3.1)Critical
CVE-2026-51862DB-GPT 0.8.0 Path Traversal Vulnerability-9.1 (v3.1)Critical
CVE-2026-51864DB-GPT v0.7.5 and v0.8.0 Path Traversal Vulnerability-9.1 (v3.1)Critical
CVE-2026-51882The OpenAI-compatible file upload endpoint /v1/files in Langchain-Chatchat 0.3.0 Path Traversal Vulnerability-9.1 (v3.1)Critical
CVE-2026-51883The knowledge base creation and document upload interfaces in Langchain-Chatchat 0.3.0;0.3.1 Path Traversal Vulnerability-9.1 (v3.1)Critical
CVE-2026-52610reportico-web <= 8.1.0 Path Traversal Vulnerabilityreportico-web <= 8.1.09.1 (v3.1)Critical
CVE-2026-54670WeGIA: Unauthenticated Auth Bypass + Local File InclusionWeGIA9.1 (v3.1)Critical
CVE-2026-55511Yamcs: Authenticated RCE via StreamSQL aggregate-compiler column-name injection in Yamcs executeSqlyamcs9.1 (v3.1)Critical
CVE-2026-57499Liman: OS Command Injection in LogRotationController allows authenticated admin to execute arbitrary commands (RCE)core9.1 (v3.1)Critical
CVE-2026-58400GeoNetwork vulnerable to Remote Code Execution via unsafe Saxon XSLT processor configuration in formattercore-geonetwork9.1 (v3.1)Critical
CVE-2026-58409ChurchCRM: Authenticated Remote Code Execution (RCE) via Malicious Plugin UploadCRM9.1 (v3.1)Critical
CVE-2026-62308Tugtainer: Authenticated SSRF via arbitrary notification URLs in test_notification endpointtugtainer9.1 (v3.1)Critical
CVE-2026-75332Zyplayer-Doc <=1.0.0 Server-Side Request Forgery Vulnerability-9.1 (v3.1)Critical
CVE-2026-79766Termix: OS command injection in ACME/Let's Encrypt certificate-request handler via admin-controlled domain/emailTermix9.1 (v3.1)Critical
CVE-2026-79916MaxKB AWS Bedrock model credential injection leads to remote code executionMaxKB9.1 (v3.1)Critical
CVE-2026-8713Avada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletionfusion-builder9.1 (v3.1)Critical
CVE-2026-9814Totolink Arbitrary Code Execution VulnerabilityTotolink9.1 (v3.1)Critical
CVE-2026-9827Totolink Arbitrary Code Execution VulnerabilityTotolink9.1 (v3.1)Critical
CVE-2008-4668Joomla! Image Browser 0.1.5 rc2 - Local File Inclusioncom imagebrowser9.0 (v2.0)High
CVE-2013-5758Yealink VoIP Phone SIP-T38G - Privilege Escalationsip-t38g9.0 (v2.0)High
CVE-2025-9501W3 Total Cache < 2.8.13 - Unauthenticated Command InjectionW3 Total Cache9.0 (v3.1)Critical
CVE-2026-102608ZoneMinder: Authenticated OS Command Injection via unsanitized Monitor Name in event export (download_functions.php)zoneminder9.0 (v3.1)Critical
CVE-2026-13603SSRF with API key leak in pretix-oppwapretix-oppwa9.0 (v4.0)Critical
CVE-2026-34612Kestra: Remote Code Execution via SQL Injectionkestra9.0 (v3.1)Critical
CVE-2026-42238Unauthenticated Remote Code Execution via Backup Restore in nginx-uinginx ui9.0 (v4.0)Critical
CVE-2026-45630Dokploy: Authenticated Remote Code Execution via Command Injection in updateTraefikConfig Echo Statementdokploy9.0 (v3.1)Critical
CVE-2026-45750Termix Vulnerable to Arbitrary Command Execution in File Managertermix9.0 (v3.1)Critical
CVE-2026-47252Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS plugins (Brave, Chrome, Edge, Reminders, Safari)anyquery9.0 (v3.1)Critical
CVE-2026-53581ntp: write path traversalcore9.0 (v3.1)Critical
CVE-2026-62674Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCEomnigent9.0 (v3.1)Critical
CVE-2026-69251Flowise RCE via TypeORM DataSourceflowise9.0 (v4.0)Critical
CVE-2026-73485Flowise before 3.1.3 Remote Code Execution via Airtable Agentflowise9.0 (v4.0)Critical
CVE-2026-73486Flowise before 3.1.3 Code Injection via CSV Agent customReadCSVflowise9.0 (v4.0)Critical
CVE-2026-73487Flowise before 3.1.3 Prompt Injection RCE via CSV Agentflowise9.0 (v4.0)Critical
CVE-2026-86259OpenMAIC before 1.0.1 SSRF via Environment-Gated URL ValidationOpenMAIC9.0 (v4.0)Critical
CVE-2026-91931Flowise before 3.1.4 Remote Code Execution via Custom MCP npxFlowise9.0 (v4.0)Critical
CVE-2026-93697cPanel Arbitrary Code Execution VulnerabilitycPanel9.0 (v3.0)Critical
CVE-2025-12060Keras keras.utils.get_file Utility Path Traversal VulnerabilityKeras8.9 (v4.0)High
CVE-2026-115729@pdfme/common 5.5.10 before 6.2.6 SSRF via isUrlSafeToFetch Bypasscommon8.9 (v4.0)High
CVE-2026-33765Pi-hole Web Interface has a Command Injection Vulnerabilityweb interface8.9 (v4.0)High
CVE-2026-41304WWBN AVideo vulnerable to RCE caused by clonesite pluginavideo8.9 (v4.0)High
CVE-2026-43945FUXA Vulnerable to Pre-auth RCE via Path Manipulation & Configuration InjectionFUXA8.9 (v4.0)High
CVE-2026-5850Totolink A7100RU CGI cstecgi.cgi setVpnPassCfg os command injectionA7100RU8.9 (v4.0)High
CVE-2026-5851Totolink A7100RU CGI cstecgi.cgi setUPnPCfg os command injectionA7100RU8.9 (v4.0)High
CVE-2026-5852Totolink A7100RU CGI cstecgi.cgi setIptvCfg os command injectionA7100RU8.9 (v4.0)High
CVE-2026-5853Totolink A7100RU CGI cstecgi.cgi setIpv6LanCfg os command injectionA7100RU8.9 (v4.0)High
CVE-2026-5854Totolink A7100RU CGI cstecgi.cgi setWiFiEasyCfg os command injectionA7100RU8.9 (v4.0)High
CVE-2026-5975Totolink A7100RU CGI cstecgi.cgi setDmzCfg os command injectionA7100RU8.9 (v4.0)High
CVE-2026-5976Totolink A7100RU CGI cstecgi.cgi setStorageCfg os command injectionA7100RU8.9 (v4.0)High
CVE-2026-5977Totolink A7100RU CGI cstecgi.cgi setWiFiBasicCfg os command injectionA7100RU8.9 (v4.0)High
CVE-2026-5978Totolink A7100RU CGI cstecgi.cgi setWiFiAclRules os command injectionA7100RU8.9 (v4.0)High
CVE-2026-5993Totolink A7100RU CGI cstecgi.cgi setWiFiGuestCfg os command injectionA7100RU8.9 (v4.0)High
CVE-2026-5994Totolink A7100RU CGI cstecgi.cgi setTelnetCfg os command injectionA7100RU8.9 (v4.0)High
CVE-2026-5996Totolink A7100RU CGI cstecgi.cgi setAdvancedInfoShow os command injectionA7100RU8.9 (v4.0)High
CVE-2026-5997Totolink A7100RU CGI cstecgi.cgi setLoginPasswordCfg os command injectionA7100RU8.9 (v4.0)High
CVE-2026-6025Totolink A7100RU CGI cstecgi.cgi setSyslogCfg os command injectionA7100RU8.9 (v4.0)High
CVE-2026-6026Totolink A7100RU CGI cstecgi.cgi setPortalConfWeChat os command injectionA7100RU8.9 (v4.0)High
CVE-2026-6028Totolink A7100RU CGI cstecgi.cgi setPptpServerCfg os command injectionA7100RU8.9 (v4.0)High
CVE-2026-6029Totolink A7100RU CGI cstecgi.cgi setVpnAccountCfg os command injectionA7100RU8.9 (v4.0)High
CVE-2026-6112Totolink A7100RU CGI cstecgi.cgi setRadvdCfg os command injectionA7100RU8.9 (v4.0)High
CVE-2026-6113Totolink A7100RU CGI cstecgi.cgi setTtyServiceCfg os command injectionA7100RU8.9 (v4.0)High
CVE-2026-6114Totolink A7100RU CGI cstecgi.cgi setNetworkCfg os command injectionA7100RU8.9 (v4.0)High
CVE-2026-6115Totolink A7100RU CGI cstecgi.cgi setAppCfg os command injectionA7100RU8.9 (v4.0)High
CVE-2026-6116Totolink A7100RU CGI cstecgi.cgi setDiagnosisCfg os command injectionA7100RU8.9 (v4.0)High
CVE-2026-6131Totolink A7100RU CGI cstecgi.cgi setTracerouteCfg os command injectionA7100RU8.9 (v4.0)High
CVE-2026-6132Totolink A7100RU CGI cstecgi.cgi setLedCfg os command injectionA7100RU8.9 (v4.0)High
CVE-2026-6138Totolink A7100RU CGI cstecgi.cgi setAccessDeviceCfg os command injectionA7100RU8.9 (v4.0)High
CVE-2026-6139Totolink A7100RU CGI cstecgi.cgi UploadOpenVpnCert os command injectionA7100RU8.9 (v4.0)High
CVE-2026-6140Totolink A7100RU CGI cstecgi.cgi UploadFirmwareFile os command injectionA7100RU8.9 (v4.0)High
CVE-2026-6154Totolink A7100RU CGI cstecgi.cgi setWizardCfg os command injectionA7100RU8.9 (v4.0)High
CVE-2026-6155Totolink A7100RU CGI cstecgi.cgi setWanCfg os command injectionA7100RU8.9 (v4.0)High
CVE-2026-6156Totolink A7100RU CGI cstecgi.cgi setIpQosRules os command injectionA7100RU8.9 (v4.0)High
CVE-2026-6195Totolink A7100RU CGI cstecgi.cgi setPasswordCfg os command injectionA7100RU8.9 (v4.0)High
CVE-2026-62679Lychee: Path traversal in SecurePathController allows authenticated arbitrary file readLychee8.9 (v4.0)High
CVE-2026-7121Totolink A8000RU CGI cstecgi.cgi setWizardCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-7122Totolink A8000RU CGI cstecgi.cgi setUPnPCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-7123Totolink A8000RU CGI cstecgi.cgi setIptvCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-7124Totolink A8000RU CGI cstecgi.cgi setIpv6LanCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-7125Totolink A8000RU CGI cstecgi.cgi setWiFiEasyCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-7136Totolink A8000RU CGI cstecgi.cgi setDmzCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-7137Totolink A8000RU CGI cstecgi.cgi setStorageCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-7138Totolink A8000RU CGI cstecgi.cgi setNtpCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-7139Totolink A8000RU CGI cstecgi.cgi setWiFiAclRules os command injectionA8000RU8.9 (v4.0)High
CVE-2026-7140Totolink A8000RU CGI cstecgi.cgi CsteSystem os command injectionA8000RU8.9 (v4.0)High
CVE-2026-7152Totolink A8000RU CGI cstecgi.cgi setTelnetCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-7153Totolink A8000RU CGI cstecgi.cgi setMiniuiHomeInfoShow os command injectionA8000RU8.9 (v4.0)High
CVE-2026-7154Totolink A8000RU CGI cstecgi.cgi setAdvancedInfoShow os command injectionA8000RU8.9 (v4.0)High
CVE-2026-7155Totolink A8000RU CGI cstecgi.cgi setLoginPasswordCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-7156Totolink A8000RU CGI cstecgi.cgi CsteSystem os command injectionA8000RU8.9 (v4.0)High
CVE-2026-7202Totolink A8000RU CGI cstecgi.cgi setWiFiWpsStart os command injectionA8000RU8.9 (v4.0)High
CVE-2026-7203Totolink A8000RU CGI cstecgi.cgi setUrlFilterRules os command injectionA8000RU8.9 (v4.0)High
CVE-2026-7204Totolink A8000RU CGI cstecgi.cgi setPptpServerCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-7240Totolink A8000RU CGI cstecgi.cgi setVpnAccountCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-7241Totolink A8000RU CGI cstecgi.cgi setWiFiBasicCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-7242Totolink A8000RU CGI cstecgi.cgi setOpenVpnClientCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-7243Totolink A8000RU CGI cstecgi.cgi setRadvdCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-7244Totolink A8000RU CGI cstecgi.cgi setWiFiEasyGuestCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-73570zimbra collaboration suite Arbitrary Code Execution Vulnerabilityzimbra collaboration suite8.9 (v3.1)High
CVE-2026-7538Totolink A8000RU CGI cstecgi.cgi vulnerability os command injectionA8000RU8.9 (v4.0)High
CVE-2026-7823Totolink A8000RU cstecgi.cgi setAppFilterCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-82866@pdfme/common before 5.5.10 SSRF via Unvalidated URL Fetchcommon8.9 (v4.0)High
CVE-2026-9384Totolink A8000RU Web Management cstecgi.cgi setDiagnosisCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9385Totolink A8000RU Web Management cstecgi.cgi setTracerouteCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9386Totolink A8000RU Web Management cstecgi.cgi setLanguageCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9387Totolink A8000RU Web Management cstecgi.cgi setUpgradeFW os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9388Totolink A8000RU Web Management cstecgi.cgi setScheduleCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9404Totolink A8000RU Web Management cstecgi.cgi setDdnsCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9405Totolink A8000RU Web Management cstecgi.cgi setGameSpeedCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9406Totolink A8000RU Web Management cstecgi.cgi setRemoteCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9407Totolink A8000RU Web Management cstecgi.cgi setFirewallType os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9408Totolink A8000RU Web Management cstecgi.cgi setStaticDhcpRules os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9432Totolink A8000RU Web Management cstecgi.cgi setWiFiAdvancedCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9433Totolink A8000RU Web Management cstecgi.cgi setMacFilterRules os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9434Totolink A8000RU Web Management cstecgi.cgi setWiFiWpsCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9435Totolink A8000RU Web Management cstecgi.cgi setQosCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9436Totolink A8000RU Web Management cstecgi.cgi setL2tpServerCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9454Totolink A8000RU Web Management cstecgi.cgi setOpenVpnCertGenerationCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9455Totolink A8000RU Web Management cstecgi.cgi UploadOpenVpnCert os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9456Totolink A8000RU Web Management cstecgi.cgi setOpenVpnCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9457Totolink A8000RU Web Management cstecgi.cgi UploadFirmwareFile os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9458Totolink A8000RU Web Management cstecgi.cgi setWanCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9476Totolink A8000RU Web Management cstecgi.cgi setPasswordCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9477Totolink A8000RU Web Management cstecgi.cgi setAccessDeviceCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9478Totolink A8000RU Web Management cstecgi.cgi setParentalRules os command injectionA8000RU8.9 (v4.0)High
CVE-2013-4863MiCasaVerde VeraLite 1.5.408 - Multiple Vulnerabilitiesveralite firmware8.8 (v3.1)High
CVE-2014-125125A10 Networks AX Loadbalancer Directory TraversalAX Series Loadbalancer8.8 (v4.0)High
CVE-2014-5468Railo Remote File Includerailo8.8 (v3.1)High
CVE-2016-0710Apache Jetspeed Arbitrary File Uploadjetspeed8.8 (v3.0)High
CVE-2016-4808Web2py 2.14.5 - Multiple Vulnerabilitiesweb2py8.8 (v3.0)High
CVE-2017-14535Trixbox - 2.8.0.4 OS Command Injectiontrixbox8.8 (v3.1)High
CVE-2017-5259Cambium cnPilot r200/r201 Command Execution as 'root'cnpilot r190v firmware8.8 (v3.0)High
CVE-2017-5261Cambium cnPilot r200/r201 File Path Traversalcnpilot r190v firmware8.8 (v3.0)High
CVE-2017-6884Zyxel_ EMG2926 < V1.00(AAQT.4)b8 - OS Command Injectionemg2926 firmware8.8 (v3.1)High
CVE-2018-10093AudioCodes 420HD - Remote Code Execution420hd ip phone firmware8.8 (v3.0)High
CVE-2018-12613phpMyAdmin Authenticated Remote Code Executionphpmyadmin8.8 (v3.1)High
CVE-2018-12895Wordpress Arbitrary File DeletionWordPress8.8 (v3.1)High
CVE-2018-15142OpenEMR 5.0.1.3 - (Authenticated) Arbitrary File Actionsopenemr8.8 (v3.0)High
CVE-2018-17553Navigate CMS Unauthenticated Remote Code Executionnavigate cms8.8 (v3.0)High
CVE-2018-6224Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilitiesemail encryption gateway8.8 (v3.0)High
CVE-2019-12169ATutor 2.2.4 - Directory Traversal / Remote Code Execution,atutor8.8 (v3.1)High
CVE-2019-12799Shopware createInstanceFromNamedArguments PHP Object Instantiation RCEshopware8.8 (v3.1)High
CVE-2019-14530OpenEMR <5.0.2 - Local File Inclusionopenemr8.8 (v3.1)High
CVE-2019-16113Bludit Directory Traversal Image File Upload Vulnerabilitybludit8.8 (v3.1)High
CVE-2019-8942WordPress Crop-image Shell UploadWordPress8.8 (v3.0)High
CVE-2019-9189Prima Access Control 2.3.35 - Arbitrary File Uploadflexair8.8 (v3.0)High
CVE-2019-9858Horde Form File Upload Vulnerabilitygroupware8.8 (v3.1)High
CVE-2020-13851Artica Pandora FMS 7.44 - Remote Code Executionpandora fms8.8 (v3.1)High
CVE-2020-24579D-Link DSL 2888a - Authentication Bypass/Remote Command Executiondsl2888a firmware8.8 (v3.1)High
CVE-2020-8163Ruby on Rails <5.0.1 - Remote Code Executionrails8.8 (v3.1)High
CVE-2020-8641Lotus Core CMS 1.0.1 - Local File Inclusionlotus core cms8.8 (v3.1)High
CVE-2021-25646Apache Druid Embedded Javascript Remote Code Execution (CVE-2021-25646)druid8.8 (v3.1)High
CVE-2021-37343Nagios XI Autodiscovery Webshell Uploadnagios xi8.8 (v3.1)High
CVE-2022-34876VICIdial Multiple Authenticated SQLivicidial8.8 (v3.1)High
CVE-2022-34877VICIdial Multiple Authenticated SQLivicidial8.8 (v3.1)High
CVE-2022-34878VICIdial Multiple Authenticated SQLivicidial8.8 (v3.1)High
CVE-2022-51022YiShaAdmin 3.1 Unauthenticated Path Traversal via DownloadFile endpointYiShaAdmin8.8 (v4.0)High
CVE-2023-39108rConfig 3.9.4 - Server-Side Request Forgeryrconfig8.8 (v3.1)High
CVE-2023-39109rConfig 3.9.4 - Server-Side Request Forgeryrconfig8.8 (v3.1)High
CVE-2023-39110rConfig 3.9.4 - Server-Side Request Forgeryrconfig8.8 (v3.1)High
CVE-2023-43661Cachet vulnerable to Authenticated Remote Code Executioncachet8.8 (v3.1)High
CVE-2023-49084Cacti RCE via SQLi in pollers.phpcacti8.8 (v3.1)High
CVE-2023-49085Cacti RCE via SQLi in pollers.phpcacti8.8 (v3.1)High
CVE-2024-37032Ollama Model Registry Path Traversal RCEollama8.8 (v3.1)High
CVE-2024-39024In Packetfence 13.2.0, the WebGui interface setting Arbitrary Code Execution Vulnerability-8.8 (v3.1)High
CVE-2024-41667OpenAM<=15.0.3 FreeMarker - Template InjectionOpenAM8.8 (v3.1)High
CVE-2024-8252WordPress Clean Login <= 1.14.5 Authenticated (Contributor+) - Local File Inclusionclean login8.8 (v3.1)High
CVE-2025-10706Classified Pro <= 1.0.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin InstallationClassifiedPro - reCommerce WordPress Theme8.8 (v3.1)High
CVE-2025-32614EventON Lite <= 2.4 - Authenticated Local File Inclusionflavor8.8 (v3.1)High
CVE-2025-34510Sitecore XP CVE-2025-34510 Post-Authentication Remote Code Executionexperience commerce8.8 (v3.1)High
CVE-2025-51457D-Link DAP-2610 up to 2.06B08r099 Command Injection VulnerabilityD-Link DAP-2610 up to 2.06B08r0998.8 (v3.1)High
CVE-2025-59710biztalk360 Arbitrary Code Execution Vulnerabilitybiztalk3608.8 (v3.1)High
CVE-2025-65471easyimages2.0 Arbitrary Code Execution Vulnerabilityeasyimages2.08.8 (v3.1)High
CVE-2025-66209Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Database Backupcoolify8.8 (v3.1)High
CVE-2025-66295Grav vulnerable to Path traversal / arbitrary YAML write via user creation leading to Account Takeover / System Corruptigrav8.8 (v3.1)High
CVE-2025-66438erpnext Information Disclosure Vulnerabilityerpnext8.8 (v3.1)High
CVE-2025-66449ConvertX has Path Traversal that leads to Arbitrary File Write and Arbitrary Code Executionconvertx8.8 (v3.1)High
CVE-2025-68705RustFS Path Traversal Vulnerabilityrustfs8.8 (v4.0)High
CVE-2026-100391MediaFlow Proxy through 2.4.9 Server-Side Request Forgery via Incomplete Validationmediaflow-proxy8.8 (v4.0)High
CVE-2026-104464YesWiki before 4.6.7 SSRF via Bazar abonnements sync actor parameteryeswiki8.8 (v4.0)High
CVE-2026-104851fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Executionfilesystem spec8.8 (v3.1)High
CVE-2026-105106Koha authenticated OS command injection in tools/scheduler.pl via the jobid parameter when deleting a scheduled taskKoha8.8 (v3.1)High
CVE-2026-105797SimpleChat: Command injection via authorization-gate ordering flaw (arbitrary process spawn through MCP stdio transport)simplechat8.8 (v3.1)High
CVE-2026-108963databasement Arbitrary Code Execution Vulnerabilitydatabasement8.8 (v3.1)High
CVE-2026-110116Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager storeFileDigital-Infrastructure8.8 (v4.0)High
CVE-2026-110908pfSense-pkg-frr Command Injection VulnerabilitypfSense-pkg-frr8.8 (v3.1)High
CVE-2026-116067Paisa < 0.7.8 - Unauthenticated Path Traversalpaisa8.8 (v4.0)High
CVE-2026-14357DevKit Pro <= 2.3.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Theme Installation / Remote Code ExDevKit Pro8.8 (v3.1)High
CVE-2026-14498Query Wrangler <= 1.5.57 - Authenticated (Subscriber+) Remote Code Execution via 'options' ParameterQuery Wrangler8.8 (v3.1)High
CVE-2026-17196Super Forms <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File Upload via 'extensions' Form Element AttributeSuper Forms – Drag & Drop Form Builder8.8 (v3.1)High
CVE-2026-17623Langflow is affected OS Command Injection in Model Context Protocol featureslangflow8.8 (v3.1)High
CVE-2026-17625Langflow is affected by OS Command Injection in Model Context Protocol featureslangflow8.8 (v3.1)High
CVE-2026-24893openITCOCKPIT has Authenticated Command Injection Leading to Remote Code Execution via Host Address Macro Expansionopenitcockpit8.8 (v3.1)High
CVE-2026-26899OS Command Injection-8.8 (v3.1)High
CVE-2026-30971ZoneMinder: Authenticated RCE via command injection in monitor Device Pathzoneminder8.8 (v3.1)High
CVE-2026-33704Chamilo LMS Affected by Authenticated Arbitrary File Write via BigUpload endpointchamilo lms8.8 (v3.1)High
CVE-2026-34057Coolify: Authenticated Remote Code Execution via Command Injection in Database Import Container Namecoolify8.8 (v3.1)High
CVE-2026-34153Coolify LocalFileVolume fs_path command injection enables RCEcoolify8.8 (v3.1)High
CVE-2026-34158Coolify: Command injection via single-quote breakout in Docker Compose custom commandscoolify8.8 (v3.1)High
CVE-2026-34197Apache ActiveMQ Jolokia Remote Code Execution (CVE-2026-34197)activemq8.8 (v3.1)High
CVE-2026-34413Xerte Online Toolkits Arbitrary File Upload - Unauthenticated Media Uploadxerteonlinetoolkits8.8 (v4.0)High
CVE-2026-34524SillyTavern: Path traversal in /api/chats/export and /api/chats/delete allows arbitrary file read/delete within usersillytavern8.8 (v3.1)High
CVE-2026-34594Coolify: Authenticated Remote Code Execution via Command Injection in Destination Network Managementcoolify8.8 (v3.1)High
CVE-2026-34599Coolify: Authenticated Remote Code Execution in GetLogs Livewire Componentcoolify8.8 (v3.1)High
CVE-2026-35031Jellyfin: Potential RCE via subtitle upload path traversal + .strm chainjellyfin8.8 (v3.1)High
CVE-2026-35050text-generation-webui affected by Remote Code Execution (RCE) through Path Traversal at "Session -> Save extention settitextgen8.8 (v3.1)High
CVE-2026-35196Chamilo LMS has OS Command Injection via export_all_certificates actionchamilo lms8.8 (v3.1)High
CVE-2026-35519Pi-hole FTL affected by Remote Code Execution (RCE) via dns.hostRecord Newline Injectionftldns8.8 (v3.1)High
CVE-2026-35520Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.leaseTime Newline Injectionftldns8.8 (v3.1)High
CVE-2026-36723bookcars v8.3 Arbitrary Code Execution Vulnerabilitybookcars v8.38.8 (v3.1)High
CVE-2026-39981AGiXT has a Path Traversal in safe_join()agixt8.8 (v3.1)High
CVE-2026-40611Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Providerlego8.8 (v3.1)High
CVE-2026-41208Paperclip: Privilege Escalation via Agent-Controlled workspaceStrategy.provisionCommand Leading to OS Command Executionpaperclipai8.8 (v3.1)High
CVE-2026-42200Coolify: PostgreSQL Init Script Path Traversal Leads to Arbitrary File Write and Root RCEcoolify8.8 (v3.1)High
CVE-2026-42605AzuraCast: Path Traversal in currentDirectory Parameter Enables Remote Code Execution via Media Uploadazuracast8.8 (v3.1)High
CVE-2026-42608Grav: Unauthenticated Path Traversal & Arbitrary File Write in FormFlash component.grav8.8 (v4.0)High
CVE-2026-4327The Welcomizer <= 2.8.1 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution via 'twiz_custom_loThe Welcomizer8.8 (v3.1)High
CVE-2026-43624F5-TTS 1.1.20 Path Traversal via finetune_gradio.py create_data_project()F5-TTS8.8 (v4.0)High
CVE-2026-44829Gotenberg: Path traversal in zip entry name via Windows-style separators in upload filenamegotenberg8.8 (v3.1)High
CVE-2026-45230DumbAssets 1.0.11 Path Traversal File Deletion via /api/delete-fileDumbAssets8.8 (v4.0)High
CVE-2026-45505Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Jolokia addNetworkConnector Discovery Wrapper Bypassactivemq8.8 (v3.1)High
CVE-2026-45578WWBN AVideo Live: OS command injection in on_publish.php execAsync via unescaped m3u8 URLavideo8.8 (v3.1)High
CVE-2026-45662Dokploy: Command Injection via incomplete shell escaping in docker logout (registry deletion)dokploy8.8 (v3.1)High
CVE-2026-48017DbGate: Remote Code Execution via functionName injection in loadReader endpointdbgate8.8 (v3.1)High
CVE-2026-501864gaBoards: Path Traversal leading to Arbitrary File Read and Deletion in Board Export4gaBoards8.8 (v3.1)High
CVE-2026-52356D-Link DAP1160L A1_FW101WWb04 Command Injection VulnerabilityD-Link DAP1160L A1 FW101WWb048.8 (v3.1)High
CVE-2026-52483OS Command Injection-8.8 (v3.1)High
CVE-2026-52484MitraStar GPT-2742GX4X5v6-SV GL_g2.5_100XNT0b23_3 Arbitrary Code Execution Vulnerability-8.8 (v3.1)High
CVE-2026-53995MLflow 3.17.1 Path Traversal via Trace ID APImlflow8.8 (v4.0)High
CVE-2026-54149MaxKB MCP tool import validation bypass allows post-authentication remote code executionMaxKB8.8 (v3.1)High
CVE-2026-55585QWED: Authenticated Remote Code Execution via Unsafe SymPy parse_expr()qwed-verification8.8 (v3.1)High
CVE-2026-55888XDG Desktop Portal: Arbitrary file access via SaveFiles "files" option path traversalxdg-desktop-portal8.8 (v4.0)High
CVE-2026-57143PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parametepraisonaiagents8.8 (v3.1)High
CVE-2026-57296Jenkins External Workspace Manager Plugin Arbitrary Code Execution VulnerabilityJenkins External Workspace Manager Plugin8.8 (v3.1)High
CVE-2026-58166OpenBMB ChatDev - Unauthenticated Path Traversal in Upload Handler Allows Arbitrary File Write and DeleteChatDev8.8 (v4.0)High
CVE-2026-58195Agentic-Flow: OS Command Injection in agentic-flow MCP server tools via unsanitized tool-parameter interpolation into exagentic-flow8.8 (v3.1)High
CVE-2026-59734Coolify: OS Command Injection in Health Check Configuration Allows Remote Code Executioncoolify8.8 (v3.1)High
CVE-2026-61525Zammad: Arbitrary File Deletion via Unvalidated Session Identifier in Long Polling Controllerzammad8.8 (v4.0)High
CVE-2026-623129Router: Authenticated RCE via Unvalidated MCP Plugin Arguments9router8.8 (v3.1)High
CVE-2026-62675Omnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable Toolsomnigent8.8 (v3.1)High
CVE-2026-62677Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNomnigent8.8 (v3.1)High
CVE-2026-62857Fedify: Server-Side Request Forgery in getNodeInfo() Allows Access to Internal Network Resourcesfedify8.8 (v4.0)High
CVE-2026-6543Authenticated Remote Code Execution Vulnerability in Langflow Code Validation Endpointlangflow desktop8.8 (v3.1)High
CVE-2026-65660Microsoft SharePoint Server Remote Code Execution Vulnerabilitysharepoint server8.8 (v3.1)High
CVE-2026-65702Vanna 2.0.2 Path Traversal via FileSystemConversationStorevanna8.8 (v4.0)High
CVE-2026-72875Dokploy: Remote Code Execution (RCE) via Command Injection in settings.readTraefikFiledokploy8.8 (v3.1)High
CVE-2026-73222Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (–studio)claude-code-templates8.8 (v3.1)High
CVE-2026-76801FireBox <= 3.1.10 - Authenticated (Author+) Remote Code Execution to Privilege EscalationFireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment8.8 (v3.1)High
CVE-2026-76842Mercado Pago Node.js SDK through 3.4.0 Path Injection via Unencoded Identifiers in Payment Clientsmercadopago8.8 (v4.0)High
CVE-2026-77601OpenC3 COSMOS: Authenticated OS command injection via the pypi_url settingcosmos8.8 (v3.1)High
CVE-2026-78834Code Injection-8.8 (v3.1)High
CVE-2026-79423seacms v13.6 Arbitrary Code Execution Vulnerabilityseacms v13.68.8 (v3.1)High
CVE-2026-81730Dolibarr 9.0.0 through 23.0.4 Path Traversal via EmailCollector Attachment Filenamedolibarr erp/crm8.8 (v4.0)High
CVE-2026-82217Eclipse Theia Path Traversal VulnerabilityEclipse Theia8.8 (v3.1)High
CVE-2026-82286gpt-crawler Arbitrary File Write via outputFileName Parametergpt-crawler8.8 (v4.0)High
CVE-2026-82804Apache DolphinScheduler: Command Injection in the Alert Script PluginApache DolphinScheduler8.8 (v3.1)High
CVE-2026-84317Nginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the onginx-ui8.8 (v3.1)High
CVE-2026-84318Nginx UI: MCP nginx_config_add Bypasses Directive Validation — Authenticated RCEnginx-ui8.8 (v3.1)High
CVE-2026-84889A path traversal vulnerability in file handling components could allow an authenticated attacker to write files to arbitlangflow8.8 (v3.1)High
CVE-2026-85199Eclipse aeriOS Path Traversal VulnerabilityEclipse aeriOS8.8 (v4.0)High
CVE-2026-86542knowns before 0.30.0 Path Traversal via Import Nameknowns8.8 (v4.0)High
CVE-2026-86775knowns before 0.30.0 Path Traversal via Document APIknowns8.8 (v4.0)High
CVE-2026-87927MaxSite CMS through 109.6 Local File Inclusion via ajax dispatcherMaxSite CMS8.8 (v4.0)High
CVE-2026-88622NUUO Network Video Recorder 2.0.0 Command Injection Vulnerability-8.8 (v3.1)High
CVE-2026-92566DataGear through 6.0.0 Unauthenticated SSRF via HTTP Dataset Previewdatagear8.8 (v4.0)High
CVE-2026-96795Horilla: Authenticated RCE in Horilla List-View Exporthorilla-hr8.8 (v3.1)High
CVE-2005-10004Cacti graph_view.php Remote Command Executioncacti8.7 (v4.0)High
CVE-2009-10005ContentKeeper Web Appliance mimencode File AccessWeb Appliance8.7 (v4.0)High
CVE-2011-10009S40 0.4.2 CMS Directory Traversal VulnerabilityS40 CMS8.7 (v4.0)High
CVE-2012-10034ClanSphere 2011.3 Local File Inclusion Vulnerabilityclansphere8.7 (v4.0)High
CVE-2014-125130CodeArt Google MP3 Audio Player 1.0.11 Arbitrary File Read via direct_download.phpCodeArt Google MP3 Audio Player8.7 (v4.0)High
CVE-2014-125133NativeChurch WordPress Theme < 1.6.2 Arbitrary File Download via download.phpNativeChurch8.7 (v4.0)High
CVE-2014-125134ChurcHope WordPress Theme < 2.2 Path Traversal via downloadlink.phpChurcHope8.7 (v4.0)High
CVE-2015-10145Gargoyle 1.5.x Authenticated OS Command Execution via run_commands.shgargoyle8.7 (v4.0)High
CVE-2015-20124Aspose Importer & Exporter WordPress Plugin < 3.0 Path Traversal via aspose_import_export_download.phpAspose Importer & Exporter8.7 (v4.0)High
CVE-2015-20125Aspose PDF Exporter WordPress Plugin < 2.0 Path Traversal via aspose_pdf_exporter_download.phpAspose PDF Exporter8.7 (v4.0)High
CVE-2016-20103Cherry Plugin for WordPress < 1.2.7 Path Traversal via download-content.phpCherry Plugin8.7 (v4.0)High
CVE-2016-20104EyeLock nano NXT 3.05.1193 Path Traversal via logdownload.phpnano NXT8.7 (v4.0)High
CVE-2017-20248WordPress Plugin Apptha Slider Gallery 1.0 Path Traversal File DownloadApptha Slider Gallery8.7 (v4.0)High
CVE-2017-20250WordPress Plugin Mac Photo Gallery 3.0 Arbitrary File DownloadMac Photo Gallery8.7 (v4.0)High
CVE-2017-20284Caucho Resin resin-doc Unauthenticated Path Traversal via jndi-appconfig ServletResin8.7 (v4.0)High
CVE-2017-20287Javo Spot WordPress Theme < 3.0.0 Path Traversal via admin-ajax.php fn ParameterJavo Spot8.7 (v4.0)High
CVE-2018-25113Dicoogle PACS Web Server Directory TraversalPACS Web Server8.7 (v4.0)High
CVE-2018-25374Softneta MedDream PACS Server Premium 6.7.1.1 Directory TraversalMedDream PACS Server Premium8.7 (v4.0)High
CVE-2018-25438Intermesh Group-Office < 3.5.5 Path Traversal via compress.phpGroup-Office8.7 (v4.0)High
CVE-2019-25671VA MAX 8.3.4 Remote Code Execution via changeip.phpVA MAX8.7 (v4.0)High
CVE-2019-25779WooThemes Diarise 1.5.9 Local File Disclosure via download.phpDiarise8.7 (v4.0)High
CVE-2020-37214Voyager 1.3.0 - Directory TraversalVoyager8.7 (v4.0)High
CVE-2020-37278Weaver e-Bridge Unauthenticated Arbitrary File Read via saveYZJFilee-Bridge8.7 (v4.0)High
CVE-2021-4463Longjing Technology BEMS API 1.21 - Unauthenticated Arbitrary File DownloadBEMS API8.7 (v4.0)High
CVE-2021-47938ImpressCMS 1.4.2 Remote Code Execution via AutotasksImpressCMS8.7 (v4.0)High
CVE-2021-47943TextPattern CMS 4.8.7 Remote Code Execution via File UploadTextPattern CMS8.7 (v4.0)High
CVE-2021-48013Weaver E-cology 8.0 Unauthenticated Path Traversal via ln.FileDownloadE-cology8.7 (v4.0)High
CVE-2021-48015JeeWMS Path Traversal via showOrDownByurl.doJeeWMS8.7 (v4.0)High
CVE-2021-48017OrbiTeam BSCW Server < 5.2.5 / 7.4.4 Path Traversal via bscw.cgiBSCW Server8.7 (v4.0)High
CVE-2022-50944Aero CMS 0.0.1 PHP Code Injection via posts.phpAero CMS8.7 (v4.0)High
CVE-2022-51024Kavita < 0.5.4.1 Unauthenticated Path Traversal via cover-upload EndpointKavita8.7 (v4.0)High
CVE-2023-54350WordPress Augmented-Reality Plugin Remote Code Execution UnauthenticatedAugmented Reality8.7 (v4.0)High
CVE-2023-54402iDocView SSRF via /doc/upload Endpoint Hardcoded TokeniDocView8.7 (v4.0)High
CVE-2023-54403Yonyou U8 CRM Arbitrary File Read via getemaildata.phpU8 CRM8.7 (v4.0)High
CVE-2024-13991Huijietong Cloud Video Platform fileDownload Arbitrary File ReadCloud Video Platform8.7 (v4.0)High
CVE-2024-26291Avid NEXIS Agent - Arbitrary File Readnexis8.7 (v4.0)High
CVE-2024-58387Inspur HCM Cloud Arbitrary File Read via file/download EndpointHaiyue HCM Cloud8.7 (v4.0)High
CVE-2024-58388Sharp Multifunction Printers Local File Inclusion via installed_emanual_down.htmlMultiple Multifunction Printers8.7 (v4.0)High
CVE-2024-58396YouDataSum CPAS Audit Management System V4 Path Traversal via downPlugs fileIdCPAS Audit Management System8.7 (v4.0)High
CVE-2025-30007HestiaCP < 1.9.5 Authenticated OS Command Injection via DNS Record Managementcontrol panel8.7 (v4.0)High
CVE-2025-34031Moodle Jmol Filter 6.1 - Local File Inclusionjmol8.7 (v4.0)High
CVE-2025-34045WeiPHP 5.0 - Path Traversalweiphp8.7 (v4.0)High
CVE-2025-34115OP5 Monitor <= 7.1.9 Authenticated Command Execution via command_test.phpOP5 Monitor8.7 (v4.0)High
CVE-2025-34126RIPS Scanner Directory TraversalRIPS Scanner8.7 (v4.0)High
CVE-2025-34181NetSupport Manager < 14.12.0001 Authenticated Path Traversal Arbitrary File Write RCEManager8.7 (v4.0)High
CVE-2025-34311IPFire < v2.29 Command Injection via Proxy Report Creationipfire8.7 (v4.0)High
CVE-2025-34312IPFire < v2.29 Command Injection via URL Filter Blacklistipfire8.7 (v4.0)High
CVE-2025-34331AudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated File Read via download.phpfax server8.7 (v4.0)High
CVE-2025-34334AudioCodes Fax/IVR Appliance <= 2.6.23 Authenticated Command Injection via TestFax.php & LPEfax server8.7 (v4.0)High
CVE-2025-34350UnForm Server < 10.1.15 Doc Flow Unauthenticated File ReadUnForm Server8.7 (v4.0)High
CVE-2026-100520Laranode before 1.2.1 Path Traversal in File Manager Upload EndpointLaranode8.7 (v4.0)High
CVE-2026-100682Budibase Server before 3.45.0 Arbitrary File Write via ZIP Symlinkserver8.7 (v4.0)High
CVE-2026-100852AzuraCast through 0.23.x Command Injection via Streamer UsernameAzuraCast8.7 (v4.0)High
CVE-2026-100856AzuraCast before 0.23.6 Code Injection via Remote Relay PasswordAzuraCast8.7 (v4.0)High
CVE-2026-100864heym before 0.0.91 Remote Code Execution via Expression Engineheym8.7 (v4.0)High
CVE-2026-10108xiaomusic 0.5.7 Path Traversal via GET /music endpointxiaomusic8.7 (v4.0)High
CVE-2026-105123W (wcms) through 3.18.0 RCE and Arbitrary File Write via Media Upload APIwcms8.7 (v4.0)High
CVE-2026-105985Authenticated RCE via render-components Entry Type overridescms8.7 (v4.0)High
CVE-2026-107639ILIAS before 9.24, 10.12, and 11.5 Argument Injection via Image Map Question Upload FilenameILIAS8.7 (v4.0)High
CVE-2026-109308Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 RCE via actionCacheUpdates Behavior Injectioncms8.7 (v4.0)High
CVE-2026-110115Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager retrieveFileStreamDigital-Infrastructure8.7 (v4.0)High
CVE-2026-112904Vvveb: Path Traversal in nextRestore() and nextBackup()Vvveb8.7 (v3.1)High
CVE-2026-116009Camaleon CMS before 2.9.3 Path Traversal RCE via Media crop_url Actioncamaleon-cms8.7 (v4.0)High
CVE-2026-116171SiYuan 3.5.4 before 3.8.7 Sensitive Path Bypass via Windows Extended-Length Prefixsiyuan8.7 (v4.0)High
CVE-2026-116811OpenPanel before 3.0.0 Sandbox Escape RCE via Webhook JavaScript Templateopenpanel8.7 (v4.0)High
CVE-2026-17524zip-lib Path Traversal Vulnerabilityzip-lib8.7 (v4.0)High
CVE-2026-22200osTicket Arbitrary File Read via PHP Filter Chains in mPDFosticket8.7 (v4.0)High
CVE-2026-25559OpenBullet2 0.3.2 Path Traversal via Wordlist Endpointopenbullet28.7 (v4.0)High
CVE-2026-25855OpenBullet2 0.3.2 Authenticated RCE via FileProxySource Script Uploadopenbullet28.7 (v4.0)High
CVE-2026-25856OpenBullet2 0.3.2 Authenticated RCE via Job Configuration Interfaceopenbullet28.7 (v4.0)High
CVE-2026-28797RAGFlow: Server-Side Template Injection (SSTI) leading to Remote Code Execution (RCE) in Agent "Text Processing" Componeragflow8.7 (v4.0)High
CVE-2026-33226Budibase Unrestricted Server-Side Request Forgery (SSRF) via REST Datasource Query Previewbudibase8.7 (v3.1)High
CVE-2026-34228Emlog: CSRF in Backend Upgrade Interface Leading to Arbitrary Remote SQL Execution and Arbitrary File Writeemlog8.7 (v4.0)High
CVE-2026-34367InvoiceShelf: SSRF in Invoice PDF Rendering via Unsanitised HTML in Notes Fieldinvoiceshelf8.7 (v3.1)High
CVE-2026-34735Hytale Modding Vulnerable to Remote Code Execution via File Upload Bypass in FileControllerwiki8.7 (v4.0)High
CVE-2026-34791Endian Firewall /cgi-bin/logs_proxy.cgi DATE Perl Command Injectionfirewall community8.7 (v4.0)High
CVE-2026-34792Endian Firewall /cgi-bin/logs_clamav.cgi DATE Perl Command Injectionfirewall community8.7 (v4.0)High
CVE-2026-34793Endian Firewall /cgi-bin/logs_firewall.cgi DATE Perl Command Injectionfirewall community8.7 (v4.0)High
CVE-2026-34794Endian Firewall /cgi-bin/logs_ids.cgi DATE Perl Command Injectionfirewall community8.7 (v4.0)High
CVE-2026-34795Endian Firewall /cgi-bin/logs_log.cgi DATE Perl Command Injectionfirewall community8.7 (v4.0)High
CVE-2026-34796Endian Firewall /cgi-bin/logs_openvpn.cgi DATE Perl Command Injectionfirewall community8.7 (v4.0)High
CVE-2026-34797Endian Firewall /cgi-bin/logs_smtp.cgi DATE Perl Command Injectionfirewall community8.7 (v4.0)High
CVE-2026-34965Cockpit CMS Authenticated Remote Code Execution via CollectionsCockpit CMS8.7 (v4.0)High
CVE-2026-35029LiteLLM - Arbitrary File Readlitellm8.7 (v4.0)High
CVE-2026-35214Budibase: Path traversal in plugin file upload enables arbitrary directory deletion and file writebudibase8.7 (v3.1)High
CVE-2026-39352Frappe Framework < 16.15.0 - Arbitrary File Read via render_include Path Traversalfrappe8.7 (v4.0)High
CVE-2026-40488OpenMage LTS has Customer File Upload Extension Blocklist Bypass that Leads to Remote Code Executionmagento8.7 (v4.0)High
CVE-2026-40521FrontAccounting < 2.4.20 Path Traversal RCE via attachment uploadFrontAccounting8.7 (v4.0)High
CVE-2026-41934Vvveb < 1.0.8.2 Authenticated RCE via Code EditorVvveb8.7 (v4.0)High
CVE-2026-43982Algernon: Path traversal file write via savein()algernon8.7 (v4.0)High
CVE-2026-46746sinec ins OS Command Injection Vulnerabilitysinec ins8.7 (v4.0)High
CVE-2026-47394PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validatePraisonAI8.7 (v4.0)High
CVE-2026-47659Pathling has path traversal in $import-pnp manifest that enables read-capable SSRF via /jobs/{jobId}/{filename}pathling8.7 (v4.0)High
CVE-2026-47661Pathling has path traversal in $result endpoint that allows arbitrary warehouse file readpathling8.7 (v4.0)High
CVE-2026-49119Gradio < 6.16.0 Path Traversal via FileExplorer.preprocess()gradio8.7 (v4.0)High
CVE-2026-49143BrowserStack Runner 0.9.5 Unauthenticated RCE via /_log HTTP Handlerbrowserstack-runner8.7 (v4.0)High
CVE-2026-50053Zimbra Collaboration Suite RestFilter Request Attribute Override via Unauthenticated URL ParametersZimbra Collaboration Suite8.7 (v3.1)High
CVE-2026-55094Taskcluster: Unauthenticated remote code execution in web-server via GraphQL filter argument (sift $where)taskcluster8.7 (v4.0)High
CVE-2026-55245Bifrost: SSRF deny-list incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURLbifrost8.7 (v4.0)High
CVE-2026-55629Whistle: Path traversalwhistle8.7 (v4.0)High
CVE-2026-57855Cockpit CMS Missing Authorization in Bucket File Storage APICockpit CMS8.7 (v4.0)High
CVE-2026-57863Crater Invoice 6.0.6 Path Traversal RCE via update/unzip endpointcrater8.7 (v4.0)High
CVE-2026-58000luci-proto-openvpn - Command Injection via cl_meta Parameter in generateKeyluci-proto-openvpn8.7 (v4.0)High
CVE-2026-58452JAIOTlink C492A-W6 4.8.30.57701411 OS Command Injection via SetMAC EndpointC492A-W6 Wi-Fi IP Camera8.7 (v4.0)High
CVE-2026-62865TypeBot: Arbitrary server file read via Send Email block attachment pathtypebot.io8.7 (v4.0)High
CVE-2026-63722ICEcoder 8.1 Unauthenticated RCE via terminal-xhr.phpICEcoder8.7 (v4.0)High
CVE-2026-64837ICEcoder through 8.1 OS Command Injection via lib/properties.phpICEcoder8.7 (v4.0)High
CVE-2026-64838ICEcoder through 8.1 Path Traversal via oldFileName ParameterICEcoder8.7 (v4.0)High
CVE-2026-64850Grav: Remote code execution via unrestricted callable in Blueprint::dynamicData()grav8.7 (v4.0)High
CVE-2026-65694Microweber CMS <= 2.0.20 - Unauthenticated Arbitrary File Readmicroweber8.7 (v4.0)High
CVE-2026-65759Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1Easy Store extension for Joomla8.7 (v4.0)High
CVE-2026-65919Meshery < 1.0.57 Unauthenticated Arbitrary File Read via fileView and fileDownloadmeshery8.7 (v4.0)High
CVE-2026-67200Perspective 5.0.0 Path Traversal via cwd_static_file_handlerperspective8.7 (v4.0)High
CVE-2026-67206Wolf CMS 0.8.3.1 Authenticated RCE via FileManagerController File Uploadwolfcms8.7 (v4.0)High
CVE-2026-67281Unauthenticated file read in Mikrotik RouterOSrouteros8.7 (v4.0)High
CVE-2026-69089Grav CMS before 2.0.11 Path Traversal via watermarkgrav8.7 (v4.0)High
CVE-2026-69095OpenWrt luci-app-bmx7 Path Traversal via bmx7-infoluci8.7 (v4.0)High
CVE-2026-69096OpenWrt luci-app-dockerman Read ACL Remote Code Executionluci8.7 (v4.0)High
CVE-2026-69100LAMP 5.6.2 GlueFactory Unsandboxed Groovy Script Remote Code Executionlamp-cloud8.7 (v4.0)High
CVE-2026-71966CyberPanel 2.4.3 Authenticated Command Injection via starRemoteTransfercyberpanel8.7 (v4.0)High
CVE-2026-72713XAgent Path Traversal Arbitrary File Read via /workspace/fileXAgent8.7 (v4.0)High
CVE-2026-72819Grav CMS before 2.0.13 Remote Code Execution via ZIP Uploadgrav8.7 (v4.0)High
CVE-2026-72830Grav API Plugin before 1.0.13 RCE via ConfigController scope bypassgrav8.7 (v4.0)High
CVE-2026-72870Dokploy: Command Injection via Docker Credentials in buildRemoteDockerdokploy8.7 (v4.0)High
CVE-2026-72874Dokploy: Command Injection via Unescaped Git URL in Clone Commandsdokploy8.7 (v4.0)High
CVE-2026-73680Cockpit CMS 2.14.0 Authenticated Command Injection via FFmpeg FilenameCockpit CMS8.7 (v4.0)High
CVE-2026-75111Evidently UI Path Traversal via Dataset Materialization Filenameevidently8.7 (v4.0)High
CVE-2026-75482SWE-agent Trajectory Inspector Path Traversal File DisclosureSWE-agent8.7 (v4.0)High
CVE-2026-75914CodeWhale before 0.8.64 Path Traversal via image_analyze symlinkCodeWhale8.7 (v4.0)High
CVE-2026-76060OS Command Injection in PayRange APIZoneminder8.7 (v4.0)High
CVE-2026-76836AzuraCast through 0.23.8 Liquidsoap Configuration Write via Profile Edit Serialization Group BypassAzuraCast8.7 (v4.0)High
CVE-2026-7807SmarterTools SmarterMail < Build 9560 Server Local File Inclusion via the /api/v1/report/summary/{type} APIsmartermail8.7 (v4.0)High
CVE-2026-78416Authenticated RCE via condition.config JSON cleanse bypasscms8.7 (v4.0)High
CVE-2026-79756Nuclio: Unauthenticated OS command injection via namespace header in list-all resource path on local platformnuclio8.7 (v4.0)High
CVE-2026-79987Low-privilege RCE through element-search eager loadingcms8.7 (v4.0)High
CVE-2026-82270Portkey AI Gateway Server-Side Request Forgery via /v1/proxy/*gateway8.7 (v4.0)High
CVE-2026-82278BISHENG Authenticated Arbitrary Python Code Execution via Workflow run_oncebisheng8.7 (v4.0)High
CVE-2026-82638jina-ai reader Server-Side Request Forgery via disabled private-address guardreader8.7 (v4.0)High
CVE-2026-85608Douyin_TikTok_Download_API 4.1.2 SSRF via url parameterDouyin TikTok Download API8.7 (v4.0)High
CVE-2026-85610OpenPanel before 2.3.0 Remote Code Execution via chart formulasopenpanel8.7 (v4.0)High
CVE-2026-85612OpenPanel before 2.3.0 SSRF via favicon and og endpointsopenpanel8.7 (v4.0)High
CVE-2026-85666ogx 1.3.1 Server-Side Request Forgery via MCP tool server_urlogx8.7 (v4.0)High
CVE-2026-85673LLaMA-Factory SSRF Guard Bypass via Redirect and DNS RebindingLlamaFactory8.7 (v4.0)High
CVE-2026-85685AgentScope through 2.0.7.post1 Arbitrary Directory Copy via add_skillagentscope8.7 (v4.0)High
CVE-2026-85691MegaParse 0.0.55 Server-Side Request Forgery via POST /v1/urlmegaparse8.7 (v4.0)High
CVE-2026-86538knowns before 0.30.0 Path Traversal via templateFile parameterknowns8.7 (v4.0)High
CVE-2026-86732Craft CMS before 5.10.12 Remote Code Execution via element-indexcms8.7 (v4.0)High
CVE-2026-89250WWBN AVideo Unauthenticated File Read via getRecordedFile.phpAVideo8.7 (v4.0)High
CVE-2026-90770Spug through 3.4.0 Remote Code Execution via ping_checkspug8.7 (v4.0)High
CVE-2026-91771Weights & Biases wandb before 0.29.0 Path Traversal via File Downloadwandb8.7 (v4.0)High
CVE-2026-91935Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model NodesFlowise8.7 (v4.0)High
CVE-2026-91940crawl4ai before 0.9.3 Arbitrary File Write via PDFContentScrapingStrategycrawl4ai8.7 (v4.0)High
CVE-2026-91989atomic-agents-stack before 1.1.0 Path Traversal via dashboard serve.pyatomic-agents-stack8.7 (v4.0)High
CVE-2026-92580AVideo through 29.0 CloneSite Stored Shell Injection via SSH Password CSRFAVideo8.7 (v4.0)High
CVE-2026-92719Quickwit through 0.9.0 SSRF via SQS queue_url Parameterquickwit8.7 (v4.0)High
CVE-2026-92791Uber Kraken through 0.1.29 Path Traversal via tag parameterkraken8.7 (v4.0)High
CVE-2026-92815changedetection.io through 0.60.6 SSRF via browser-step Goto URLchangedetection.io8.7 (v4.0)High
CVE-2026-92970HUBzero CMS through 2.2.32 Path Traversal via File Uploadhubzero-cms8.7 (v4.0)High
CVE-2026-9506Path Traversal Vulnerability in BagistoBagisto8.7 (v4.0)High
CVE-2015-4694WordPress Zip Attachments <= 1.1.4 - Arbitrary File Retrievalzip attachments8.6 (v3.0)High
CVE-2021-32820Express-handlebars - Local File Inclusionexpress handlebars8.6 (v3.1)High
CVE-2022-24900Piano LED Visualizer 1.3 - Local File Inclusionpiano led visualizer8.6 (v3.1)High
CVE-2023-26360Adobe ColdFusion Local File Inclusion Leads to RCE (CVE-2023-26360)coldfusion8.6 (v3.1)High
CVE-2024-20353adaptive security appliance software Denial of Service Vulnerabilityadaptive security appliance software8.6 (v3.1)High
CVE-2024-24919Check Point Security Gateway Arbitrary File Readquantum spark firmware8.6 (v3.1)High
CVE-2024-34470HSC Mailinspector 5.2.17-3 through 5.2.18 - Local File Inclusionmailinspector8.6 (v3.1)High
CVE-2024-48248NAKIVO Backup and Replication Solution - Unauthenticated Arbitrary File Readbackup &amp; replication director8.6 (v3.1)High
CVE-2024-48766NetAlertX File Read Vulnerabilitynetalertx8.6 (v3.1)High
CVE-2025-10162WordPress OrderConvo < 14 - Path TraversalAdmin and Customer Messages After Order for WooCommerce: OrderConvo8.6 (v3.1)High
CVE-2025-10897WooCommerce Designer Pro <= 1.9.28 - Arbitrary File ReadWooCommerce Designer Pro8.6 (v3.1)High
CVE-2025-12061Tax Service Electronic HDM < 1.2.1 - Unauthenticated Arbitrary SQL ExecutionTAX SERVICE Electronic HDM8.6 (v3.1)High
CVE-2025-2558WordPress The Wound Theme <= 0.0.1 - Local File Inclusionthe wound8.6 (v3.1)High
CVE-2025-27222TRUfusion Enterprise <= 7.10.4.0 - Path Traversaltrufusion enterprise8.6 (v3.1)High
CVE-2025-59835LangBot has a cross-directory file upload vulnerability, which could lead to system takeoverLangBot8.6 (v4.0)High
CVE-2025-61678FreePBX firmware file uploadendpointman8.6 (v4.0)High
CVE-2025-68455Craft CMS vulnerable to potential authenticated Remote Code Execution via malicious attached Behaviorcraft cms8.6 (v4.0)High
CVE-2025-68700RAGFlow Remote Code Execution Vulnerabilityragflow8.6 (v4.0)High
CVE-2026-100372ClipBucket v5 before 5.5.3-#197 Path Traversal via template_editor.phpclipbucket-v58.6 (v4.0)High
CVE-2026-100896TOTOLINK N150RT Web Management formWlSiteSurvey system os command injectionN150RT8.6 (v4.0)High
CVE-2026-102911zosmaai pi-llm-wiki wiki_capture_source MCP tool index.ts os command injectionpi-llm-wiki8.6 (v4.0)High
CVE-2026-108540OpenSpug File Transfer transfer os command injectionSpug8.6 (v4.0)High
CVE-2026-108894Linksys E1700 Static Route addStaticRoute os command injectionE17008.6 (v4.0)High
CVE-2026-109108Wavlink WL-WN530BE1-A uploadVpn.cgi popen os command injectionWL-WN530BE1-A8.6 (v4.0)High
CVE-2026-109286Open WebUI 0.7.0 before 0.11.4 Session Token Theft via SyncStatsModalopen-webui8.6 (v4.0)High
CVE-2026-109397Thelia before 3.1.2 and 3.2.x before 3.2.1 File Upload RCE via Filename Trailing SpaceThelia8.6 (v4.0)High
CVE-2026-111214Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces_qinq_edit.phppfsense8.6 (v4.0)High
CVE-2026-111217Netgate pfSense CE through 2.9.0 OS Command Injection via CARP VHIDpfsense8.6 (v4.0)High
CVE-2026-111218Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shaper Limiterspfsense8.6 (v4.0)High
CVE-2026-113390DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injectionVigor29608.6 (v4.0)High
CVE-2026-113506aaPanel File Manager common.py ExecShell os command injectionaaPanel8.6 (v4.0)High
CVE-2026-115924Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphsrembg8.6 (v3.1)High
CVE-2026-11974Media folder Addon < 4.1.7 - Unauthenticated Arbitrary File Downloadwp-media-folder-addon8.6 (v3.1)High
CVE-2026-22100Comnand injection in OCPP ReserveLogin messageDC-808.6 (v4.0)High
CVE-2026-23698Vtiger CRM 8.4.0 Authenticated RCE via Module Import File UploadVtiger CRM8.6 (v4.0)High
CVE-2026-34160Chamilo LMS: Unauthenticated SSRF via PENS Plugin allows attacker to probe internal network and reach cloud metadata serchamilo lms8.6 (v3.1)High
CVE-2026-34577Postiz: Unauthenticated Full-Read SSRF via /public/stream Endpoint with Trivially Bypassable Extension Checkpostiz8.6 (v3.1)High
CVE-2026-35032Jellyfin: Potential SSRF + Arbitrary file read via LiveTV M3U tunerjellyfin8.6 (v4.0)High
CVE-2026-40187Authenticated RCE via Malicious eTemplate Upload in EGroupwareegroupware8.6 (v4.0)High
CVE-2026-41587CI4MS: Unrestricted PHP File Upload via Theme Installation Leads to Authenticated Remote Code Executionci4ms8.6 (v4.0)High
CVE-2026-41690Prototype pollution and path traversal in i18next-http-middleware via user-controlled language and namespace parametersi18next-http-middleware8.6 (v3.1)High
CVE-2026-41936Vvveb < 1.0.8.2 XML External Entity Injection via ImportVvveb8.6 (v4.0)High
CVE-2026-42785OpenKM 6.3.12 Remote Code Execution via Administrative ScriptingOpenKM Community Edition8.6 (v4.0)High
CVE-2026-44011Craft CMS: Potential authenticated Remote Code Execution via malicious attached Behaviorcms8.6 (v4.0)High
CVE-2026-45298Dozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy)dozzle8.6 (v3.1)High
CVE-2026-46491SimpleSAMLphp casserver FileSystemTicketStore path traversal allows out-of-ticket-directory read/unserialize and conditisimplesamlphp-module-casserver8.6 (v3.1)High
CVE-2026-49954Discuz! X5.0 Local File Inclusion via enable_disable.php Plugin DirectoryDiscuz! X5.08.6 (v4.0)High
CVE-2026-50553Note Mark: Path traversal via unsanitized book/note slug in migrate export (sibling of GHSA-g49p)note-mark8.6 (v4.0)High
CVE-2026-53777Perry < 0.5.1159 Path Traversal via ArtifactReady WebSocketperry8.6 (v4.0)High
CVE-2026-53804OTRS Community Edition OS Command Injection via PGP ConfigurationOTRS Community Edition8.6 (v4.0)High
CVE-2026-54710FreePBX: Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion)freepbx8.6 (v4.0)High
CVE-2026-55182LibreNMS: Remote Code Execution by Signal Alert Transportation Modulelibrenms8.6 (v4.0)High
CVE-2026-56382Craft CMS - Remote Code Execution via Missing Config Sanitization in FieldsControllercms8.6 (v4.0)High
CVE-2026-566779Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpoint9router8.6 (v3.1)High
CVE-2026-56703Adminer before 5.4.3 Remote Code Execution via SQLite VACUUM INTOadminer8.6 (v4.0)High
CVE-2026-57573Crawl4AI unauthenticated SSRF in Docker streaming crawl endpointcrawl4ai8.6 (v3.1)High
CVE-2026-61517Netis NX10 OS Command Injection via Ping Diagnostic HandlerNX108.6 (v4.0)High
CVE-2026-61523WebsiteBaker CMS < 2.13.10 Code Injection via Droplets EditorWebsiteBaker CMS8.6 (v4.0)High
CVE-2026-63725sysPass FileBackupService Authenticated OS Command Injection via Backup PathsysPass8.6 (v4.0)High
CVE-2026-65693Microweber CMS 2.0.20 Server-Side Template Injection via Mail Templatesmicroweber8.6 (v4.0)High
CVE-2026-65711sysPass 3.2.11 Authenticated OS Command Injection via Backup PathsysPass8.6 (v4.0)High
CVE-2026-66397phpMyFAQ before 4.1.6 Path Traversal via category image deletionphpMyFAQ8.6 (v4.0)High
CVE-2026-67599ClearOS 7.9 OS Command Injection via Log Viewer filter parameterClearOS8.6 (v4.0)High
CVE-2026-67608Telenia TVox 26.5.3 OS Command Injection via action_audio.phpTVox8.6 (v4.0)High
CVE-2026-69088Grav CMS 2.0.7 through 2.0.10 Arbitrary Method Invocation via Blueprintgrav8.6 (v4.0)High
CVE-2026-71906DrayTek VigorAP Multiple Models OS Command Injection via setLanVigorAP 918R8.6 (v4.0)High
CVE-2026-71907DrayTek VigorAP Multiple Models OS Command Injection via setcamsetVigorAP 918R8.6 (v4.0)High
CVE-2026-71908DrayTek VigorAP Multiple Models OS Command Injection via mesh_start_speed_testVigorAP 918R8.6 (v4.0)High
CVE-2026-71913DrayTek VigorAP Multiple Models OS Command Injection via upload_settings.cgiVigorAP 918R8.6 (v4.0)High
CVE-2026-71915DrayTek VigorSwitch Multiple Models OS Command Injection via jsonstatusVigorSwitch G2540xs8.6 (v4.0)High
CVE-2026-71918DrayTek VigorSwitch Multiple Models OS Command Injection via webBackupActionVigorSwitch G2540xs8.6 (v4.0)High
CVE-2026-71919DrayTek VigorSwitch Multiple Models OS Command Injection via sysrebootVigorSwitch G2540xs8.6 (v4.0)High
CVE-2026-71923DrayTek VigorSwitch Multiple Models OS Command Injection via auth_setVigorSwitch G2540xs8.6 (v4.0)High
CVE-2026-71924DrayTek VigorSwitch Multiple Models OS Command Injection via getVidVigorSwitch G2540xs8.6 (v4.0)High
CVE-2026-71925DrayTek VigorSwitch Multiple Models OS Command Injection via getDetailVigorSwitch G2540xs8.6 (v4.0)High
CVE-2026-71926DrayTek VigorSwitch Multiple Models OS Command Injection via setDeviceVigorSwitch G2540xs8.6 (v4.0)High
CVE-2026-71927DrayTek VigorSwitch Multiple Models OS Command Injection via rebDeviceVigorSwitch G2540xs8.6 (v4.0)High
CVE-2026-71928DrayTek VigorSwitch Multiple Models OS Command Injection via fdftDeviceVigorSwitch G2540xs8.6 (v4.0)High
CVE-2026-71929DrayTek VigorSwitch Multiple Models OS Command Injection via setDevProtoVigorSwitch G2540xs8.6 (v4.0)High
CVE-2026-71930DrayTek VigorSwitch Multiple Models OS Command Injection via setTimeVigorSwitch G2540xs8.6 (v4.0)High
CVE-2026-71931DrayTek VigorSwitch Multiple Models OS Command Injection via tftp_upgradeVigorSwitch G2540xs8.6 (v4.0)High
CVE-2026-71943DrayTek VigorSwitch Multiple Models OS Command Injection via setDevNetVigorSwitch G2540xs8.6 (v4.0)High
CVE-2026-73664FreePBX: Authenticated Arbitrary SSH Key Injection via Backup Modulebackup8.6 (v4.0)High
CVE-2026-7412Eclipse BaSyx SSRF VulnerabilityEclipse BaSyx8.6 (v3.1)High
CVE-2026-75121PLANET GS-4210-16P2S Command Injection via dispatcher.cgi web_vlan_membership_edit_dialog_postPLANET GS-4210-16P2S V38.6 (v4.0)High
CVE-2026-75122PLANET GS-4210-16P2S Command Injection via httpuploadcert.cgiPLANET GS-4210-16P2S V38.6 (v4.0)High
CVE-2026-75123PLANET GS-4210-16P2S Command Injection via dispatcher.cgi web_smtp_test_postPLANET GS-4210-16P2S V38.6 (v4.0)High
CVE-2026-77581BentoPDF: SSRF in cors-proxy-worker.js via DNS-based hostname allowlist bypassbentopdf8.6 (v3.1)High
CVE-2026-80214LibreNMS Virtualisation Discovery Module RCElibrenms8.6 (v4.0)High
CVE-2026-81213Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetcheslangflow8.6 (v3.1)High
CVE-2026-81889elFinder: SSRF protection bypass via DNS rebinding in the fsock_get_contents() fallbackelFinder8.6 (v3.1)High
CVE-2026-82692D-Link DNS-340L/DNS-345 iscsi_mgr.cgi os command injectionDNS-340L8.6 (v4.0)High
CVE-2026-84194LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostnamelibrenms8.6 (v4.0)High
CVE-2026-85223D-Link DNS-340L CGI dropbox.cgi os command injectionDNS-340L8.6 (v4.0)High
CVE-2026-86299Linksys RE7000 PingTest json.cgi platform_event_pingTest os command injectionRE70008.6 (v4.0)High
CVE-2026-86437Lara Dashboard before 1.3.2 Incorrect Authorization in Core-Upgrade Archive Uploadlaradashboard8.6 (v4.0)High
CVE-2026-86438Lara Dashboard before 1.3.2 Missing Authorization in Marketplace Module Install Actionlaradashboard8.6 (v4.0)High
CVE-2026-86733Snipe-IT before 8.7.0 Remote Code Execution via Backup Restoresnipe-it8.6 (v4.0)High
CVE-2026-88937knowns through 0.33.0 Path Traversal via Template Engineknowns8.6 (v4.0)High
CVE-2026-90699D-Link DWR-M920 formPinManageSetup sub_41E60C os command injectionDWR-M9208.6 (v4.0)High
CVE-2013-0136Mutiny 5 Arbitrary File Uploadmutiny8.5 (v2.0)High
CVE-2015-1489Symantec Endpoint Protection Manager Authentication Bypass and Code Executionendpoint protection manager8.5 (v2.0)High
CVE-2015-2996SysAid Help Desk Arbitrary File Downloadsysaid8.5 (v2.0)High
CVE-2024-24809Traccar v5 Remote Code Execution (CVE-2024-31214 and CVE-2024-24809)traccar8.5 (v3.1)High
CVE-2025-34023Karel IP Phone IP1211 Web Management Panel - Local File InclusionKarel IP Phone IP12118.5 (v4.0)High
CVE-2025-34332AudioCodes Fax/IVR Appliance <= 2.6.23 Insecure Service Control Scripts LPEfax server8.5 (v4.0)High
CVE-2025-34333AudioCodes Fax/IVR Appliance <= 2.6.23 World-Writable Webroot LPEfax server8.5 (v4.0)High
CVE-2025-66300Grav is vulnerable to Arbitrary File Readgrav8.5 (v3.1)High
CVE-2026-10055Eclipse Theia Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityEclipse Theia8.5 (v3.1)High
CVE-2026-101009aaPanel BaoTa Unzip panelTask.py panelTask.bt_task._unzip os command injectionBaoTa8.5 (v4.0)High
CVE-2026-12195vesta Arbitrary Code Execution Vulnerabilityvesta8.5 (v4.0)High
CVE-2026-16033Arbitrary file read+write on host via templates/ symlink in malicious imagelxd8.5 (v3.1)High
CVE-2026-22244OpenMetadata Server-Side Template Injection (SSTI) in FreeMarker email templates that leads to RCEopenmetadata8.5 (v4.0)High
CVE-2026-31943LibreChat has SSRF protection bypass via IPv4-mapped IPv6 normalization in isPrivateIPlibrechat8.5 (v3.1)High
CVE-2026-42860Open edx Enterprise Service: SSRF via SAML metadata URL in sync_provider_data endpointedx-enterprise8.5 (v3.1)High
CVE-2026-44881Portainer: Arbitrary File Read via Git Symlink Injection in Stack Auto-Updateportainer8.5 (v4.0)High
CVE-2026-46372SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrlSillyTavern8.5 (v3.1)High
CVE-2026-51583usememos through v0.30.0 Server-Side Request Forgery Vulnerability-8.5 (v3.1)High
CVE-2026-56663AutoGPT: SSRF-to-RCE Chain in SendWebRequestBlock via IP validation bypass and internal pg-meta accessAutoGPT8.5 (v3.1)High
CVE-2026-56739Logto: SSRF via Webhooks and Custom OAuth2 Connector UserInfo Endpointlogto8.5 (v4.0)High
CVE-2026-57126praisonaiagents: SSRF guard validates literal IPs only and never resolves DNSPraisonAI8.5 (v3.1)High
CVE-2026-57894Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository ExfilGitea Open Source Git Server8.5 (v3.1)High
CVE-2026-61640Wallos: SSRF via OIDC Token/UserInfo URL ConfigurationWallos8.5 (v4.0)High
CVE-2026-67424Flyto2 Core: Guarded HTTP modules follow redirects into internal space without per-hop SSRF revalidationflyto-core8.5 (v3.1)High
CVE-2026-67428Flyto2 Core: Multiple HTTP-family modules fetch client-controlled URLs without the SSRF guard their siblings apply (SSRFflyto-core8.5 (v3.1)High
CVE-2026-68558Wekan: SSRF filter bypass via DNS-resolving hostname in outgoing webhooks (incomplete fix of CVE-2026-53446)wekan8.5 (v3.1)High
CVE-2026-69250Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltrationflowise8.5 (v4.0)High
CVE-2026-73079Sub2API: Path traversal in the Responses subpath routes lets an authenticated tenant relay requests to arbitrary upstreasub2api8.5 (v3.1)High
CVE-2026-76086Formie: Integration form-settings action allows SSRF and exfiltration of stored integration credentialsformie8.5 (v3.1)High
CVE-2026-82690D-Link DNS-327L/DNS-340L ve_mgr.cgi os command injectionDNS-327L8.5 (v4.0)High
CVE-2026-82691D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 CGI usb_device.cgi os command injectionDNS-320L8.5 (v4.0)High
CVE-2026-85222D-Link DNS-340L Add-On Center addon_center.cgi os command injectionDNS-340L8.5 (v4.0)High
CVE-2026-85224D-Link DNS-320 ShareCenter File Sharing file_sharing.cgi os command injectionDNS-320 ShareCenter8.5 (v4.0)High
CVE-2026-90702D-Link DWR-M921 formDiskFormat system os command injectionDWR-M9218.5 (v4.0)High
CVE-2026-90703D-Link DWR-M921 formDiskCreateShare system os command injectionDWR-M9218.5 (v4.0)High
CVE-2026-92397Ruijie RG-EW3000GX configChange unifyframe-sgi.elf cc_set os command injectionRG-EW3000GX8.5 (v4.0)High
CVE-2026-92398Ruijie RG-EW3000GX user_list_note admin os command injectionRG-EW3000GX8.5 (v4.0)High
CVE-2024-1708ConnectWise ScreenConnect Unauthenticated Remote Code Executionscreenconnect8.4 (v3.1)High
CVE-2025-54988Elasticsearch ingest-attachment Apache Tika XFA XXE Local File Readtika8.4 (v3.1)High
CVE-2026-104078Obsidian Desktop < 1.14.0 RCE via MathJax Safe Filter BypassObsidian Desktop8.4 (v4.0)High
CVE-2026-110255Dockhand before 1.0.43 SSRF via /api/templates/compose Endpointdockhand8.4 (v4.0)High
CVE-2026-25705Rancher Extensions have arbitrary file access via path traversalrancher8.4 (v3.1)High
CVE-2026-54507Vvveb oEmbedProxy vulnerable to server-side request forgeryVvveb8.4 (v4.0)High
CVE-2026-55786Flyto2 Core: Unauthenticated Command Execution via HTTP MCP execute_moduleflyto-core8.4 (v3.1)High
CVE-2026-57862Kanboard 1.2.52 and prior SSRF Filter Bypass via Hexadecimal IP NotationKanboard8.4 (v4.0)High
CVE-2026-61429PraisonAI before 1.6.78 SSRF via Crawl4AI Chromium backendPraisonAI8.4 (v4.0)High
CVE-2026-61430PraisonAI before 1.6.78 DNS Rebinding SSRF via web_crawlPraisonAI8.4 (v4.0)High
CVE-2026-62234Grav < 2.0.4 SSRF via Unrestricted cURL Protocolsgrav8.4 (v4.0)High
CVE-2026-72855Budibase before 3.40.0 DNS Rebinding SSRF via OpenAPI and RESTserver8.4 (v4.0)High
CVE-2026-73629Serendipity before 2.6.0 SSRF via hex IPv4 and IPv6 addressesSerendipity8.4 (v4.0)High
CVE-2026-75855ArcadeDB before 26.8.1 Path Traversal via create/drop databasearcadedb8.4 (v4.0)High
CVE-2026-75898RAGFlow < 0.26.3 - Server-Side Request Forgery via Agent Invoke Componentragflow8.4 (v4.0)High
CVE-2024-58274CSMP iSecure Center OS Command Injection VulnerabilityCSMP iSecure Center8.3 (v3.1)High
CVE-2025-30005Xorcom CompletePBX Arbitrary File Read and Deletion via systemDataFileNamecompletepbx8.3 (v3.1)High
CVE-2025-59711biztalk360 Path Traversal Vulnerabilitybiztalk3608.3 (v3.1)High
CVE-2026-103757Budibase before 3.41.0 SSRF via uploadUrl in AI Table Generationbudibase8.3 (v4.0)High
CVE-2026-104458YesWiki before 4.6.7 SSRF Guard Bypass via IPv6 Transition Addressesyeswiki8.3 (v4.0)High
CVE-2026-104463YesWiki before 4.6.7 Unauthenticated SSRF via ActivityPub Inboxyeswiki8.3 (v4.0)High
CVE-2026-105762Dify: Unauthenticated Server-Side Request Forgery in /console/api/remote-files/upload endpointdify8.3 (v3.1)High
CVE-2026-112051Xinference through 4.0.1 Path Traversal via model_name in Custom Model Registrationinference8.3 (v4.0)High
CVE-2026-22219Chainlit < 2.9.4 SQLAlchemy Data Layer SSRF via /project/elementchainlit8.3 (v4.0)High
CVE-2026-22681OpenViking < 0.3.4 SSRF via /api/v1/resourcesOpenViking8.3 (v4.0)High
CVE-2026-31939Path Traversal (Arbitrary File Delete) in Chamilo LMSchamilo lms8.3 (v3.1)High
CVE-2026-34428Vvveb < 1.0.8.1 SSRF via oEmbedProxyVvveb8.3 (v4.0)High
CVE-2026-34576Postiz: SSRF in upload-from-url endpoint allows fetching internal resources and cloud metadatapostiz8.3 (v4.0)High
CVE-2026-34966Gitea prior to 1.27.0 SSRF via Migration URI Fetch BypassGitea8.3 (v4.0)High
CVE-2026-41271Flowise: APIChain Prompt Injection SSRF in GET/POST API Chainsflowise8.3 (v3.1)High
CVE-2026-46711Soft Machine: Unauthenticated workspace API exposes arbitrary file read & directory exfiltration to any peer on the Flysecurity8.3 (v3.1)High
CVE-2026-48105Arc Enterprise cluster FSM applyRegisterFile accepts arbitrary file paths without validation, enabling cluster-wide patharc8.3 (v4.0)High
CVE-2026-49471Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCEserena8.3 (v3.1)High
CVE-2026-52769YesWiki: Unauthenticated Server-Side Request Forgery via ActivityPub Signature.keyIdyeswiki8.3 (v3.1)High
CVE-2026-59095LobeChat < 2.2.10-canary.18 - SSRF via importFromUrl and fetchImageFromUrllobehub8.3 (v4.0)High
CVE-2026-633139Router before 0.4.72 Server-Side Request Forgery via /v1/web/fetch9router8.3 (v4.0)High
CVE-2026-65056mcp-webresearch Server-Side Request Forgery in visit_page Due to Missing Internal-IP Filteringmcp-webresearch8.3 (v4.0)High
CVE-2026-69086SiYuan before v3.7.3 Path Traversal via unvalidated avIDsiyuan8.3 (v4.0)High
CVE-2026-69101Datavane TIS v5.0.0 XXE Injection via doEditWorkflow Endpointtis8.3 (v4.0)High
CVE-2026-75842ArcadeDB before 26.8.1 Arbitrary File Read via LOAD CSVarcadedb8.3 (v4.0)High
CVE-2026-76225ArcadeDB before 26.8.1 Server-Side Request Forgery via LOAD CSVarcadedb8.3 (v4.0)High
CVE-2026-79659Ech0 before 4.7.3 Server-Side Request Forgery via fetchPeerConnectInfoEch08.3 (v4.0)High
CVE-2026-82243Budibase Server before 3.41.3 SSRF with Credential Leakageserver8.3 (v4.0)High
CVE-2026-82673Path traversal in AshAdmin file uploads via unsanitized client filenameash admin8.3 (v4.0)High
CVE-2026-84196Kyverno before 1.18.0 Server-Side Request Forgery via apiCallkyverno8.3 (v4.0)High
CVE-2026-86771Snipe-IT before 8.7.0 Server-Side Request Forgery via employee_numsnipe-it8.3 (v4.0)High
CVE-2026-90769Open Notebook before 1.11.0 Server-Side Request Forgery via link-sourceopen-notebook8.3 (v4.0)High
CVE-2026-9133Amazon rabbitmq-aws 0.1.0 through 0.2.0 - Arbitrary File ReadRabbitMQ AWS8.3 (v4.0)High
CVE-2026-91943Crawl4AI before 0.9.3 SSRF via PDFContentScrapingStrategycrawl4ai8.3 (v4.0)High
CVE-2025-44137MapTiler Tileserver-php v2.0 - Unauthenticated File Readtileserver php8.2 (v3.1)High
CVE-2025-69755Neterbit NW-431F Router vNW-431F-20241014-IR03 Arbitrary Code Execution Vulnerability-8.2 (v3.1)High
CVE-2026-111234SimplePie through 1.9.0 Local File Read via file:// Redirectsimplepie8.2 (v4.0)High
CVE-2026-111915Yank Note before 3.93.1 Path Traversal via /api/help EndpointYank Note8.2 (v4.0)High
CVE-2026-116192rclone from 1.37 before 1.74.2 SSRF via –rc-serve scheme-relative remote rootsrclone8.2 (v4.0)High
CVE-2026-116826YesWiki before 4.7.0 Authenticated SSRF via Page Duplication API downloadFileyeswiki8.2 (v4.0)High
CVE-2026-116827YesWiki before 4.7.0 SSRF via copyUrlToLocalFile in Bazar CSV Importyeswiki8.2 (v4.0)High
CVE-2026-16268Newsletters < 4.16 - Unauthenticated Server-Side Request Forgery via SNS Bounce HandlerNewsletters8.2 (v3.1)High
CVE-2026-34151XWiki Platform: Resource path traversal via /skin/ action endpoint in Jetty 12+xwiki-platform8.2 (v4.0)High
CVE-2026-39363Vite Affected by Arbitrary File Read via Vite Dev Server WebSocketvite8.2 (v4.0)High
CVE-2026-39364Vite Dev Server - Directory Traversalvite8.2 (v4.0)High
CVE-2026-40075OpenMRS Core arbitrary file read via path traversal in ModuleResourcesServletopenmrs8.2 (v4.0)High
CVE-2026-43910Appium java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutorjava-client8.2 (v3.1)High
CVE-2026-45711Mailpit: Path traversal & arbitrary file write in mailpit dump –http via attacker-controlled message IDsmailpit8.2 (v3.1)High
CVE-2026-48126Algernon: Host header path traversal in –domain mode reads files and runs Lua from parent diralgernon8.2 (v3.1)High
CVE-2026-53571Vite: server.fs.deny bypass on Windows alternate pathsvite8.2 (v4.0)High
CVE-2026-54691datamodel-code-generator vulnerable to SSRF via –url: no host/IP validation, follows redirectsdatamodel-code-generator8.2 (v3.1)High
CVE-2026-58499Path traversal in EverOS /api/v1/memory/add via unvalidated sender_idEverOS8.2 (v3.1)High
CVE-2026-61638Wallos: SSRF via Test Email Notification - unvalidated SMTP host/portWallos8.2 (v4.0)High
CVE-2026-74907Grav before 2.0.15 Path Traversal via plugin-asset-map.phpgrav8.2 (v4.0)High
CVE-2026-77348Wallos incomplete fix for CVE-2026-33407: unauthenticated httpoxy SSRF still reachable via `endpoints/payments/search.phWallos8.2 (v3.1)High
CVE-2026-82262Logto Server-Side Request Forgery via webhook test endpointlogto8.2 (v4.0)High
CVE-2013-4862MiCasaVerde VeraLite 1.5.408 - Multiple Vulnerabilitiesveralite firmware8.1 (v3.1)High
CVE-2014-3120ElasticSearch Remote Code Execution (CVE-2014-3120)elasticsearch8.1 (v3.1)High
CVE-2016-3081Apache Struts Dynamic Method Invocation Remote Code Executionagile controller-campus firmware8.1 (v3.1)High
CVE-2017-12615Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution (1)tomcat8.1 (v3.1)High
CVE-2017-17562GoAhead Web Server Environment Variables Injection and LD_PRELOAD Remote Code Execution (CVE-2017-17562)goahead8.1 (v3.1)High
CVE-2017-9805Apache Struts 2 REST Plugin XStream RCEstruts8.1 (v3.1)High
CVE-2018-6221Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilitiesemail encryption gateway8.1 (v3.0)High
CVE-2021-45841TerraMaster TOS 4.2.15 or lower - RCE chain from unauthenticated to root via session crafting.tos8.1 (v3.1)High
CVE-2024-30188Apache DolphinScheduler >= 3.1.0, < 3.2.2 Resource File Read And Writedolphinscheduler8.1 (v3.1)High
CVE-2025-13322WP AUDIO GALLERY <= 2.0 - Authenticated (Subscriber+) Arbitrary File Deletion via 'audio_upload' ParameterWP AUDIO GALLERY8.1 (v3.1)High
CVE-2025-48157WordPress Formality Plugin <= 1.5.9 - Local File InclusionFormality8.1 (v3.1)High
CVE-2025-61784LLaMA Factory's Chat API has Critical SSRF and LFI Vulnerabilitiesllama-factory8.1 (v3.1)High
CVE-2025-65879warehouse management system Path Traversal Vulnerabilitywarehouse management system8.1 (v3.1)High
CVE-2025-69222LibreChat is vulnerable to Server-Side Request Forgery due to missing restrictionslibrechat8.1 (v3.1)High
CVE-2025-9990WordPress Helpdesk Integration <= 5.8.10 - Unauthenticated Local File InclusionWordPress Helpdesk Integration8.1 (v3.1)High
CVE-2026-104995BP Profile Search <= 5.9 - Unauthenticated Local File Inclusion to Remote Code Execution via 'bps_directory' Cookie 'ajaBP Profile Search8.1 (v3.1)High
CVE-2026-15983Super Forms <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File/Directory Deletion via 'subdir' / 'path' ParameterSuper Forms – Drag & Drop Form Builder8.1 (v3.1)High
CVE-2026-19303Langflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing clangflow8.1 (v3.1)High
CVE-2026-19942Atarim <= 5.1.1 - Authenticated (Author+) Arbitrary File Deletion via '_wp_attached_file' MetaAtarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback8.1 (v3.1)High
CVE-2026-33236NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwritenltk8.1 (v3.1)High
CVE-2026-34365InvoiceShelf: SSRF in Estimate PDF Rendering via Unsanitised HTML in Notes Fieldinvoiceshelf8.1 (v3.1)High
CVE-2026-34366InvoiceShelf: SSRF in Payment Receipt PDF Rendering via Unsanitised HTML in Notes Fieldinvoiceshelf8.1 (v3.1)High
CVE-2026-34522SillyTavern: Path traversal in /api/chats/import allows arbitrary file write outside intended chat directorysillytavern8.1 (v3.1)High
CVE-2026-42269countly-server: Path Traversal in delete_import Endpoint Allows Arbitrary File and Directory Deletioncountly-server8.1 (v3.1)High
CVE-2026-42588Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Remote Code Execution via Jolokia addNetworkConnectoractivemq8.1 (v3.1)High
CVE-2026-45344LinkAce: Setup database password newline injection enables pre-auth RCE on uninitialized instancesLinkAce8.1 (v3.1)High
CVE-2026-46402Microsoft UFO uses untrusted task_name in log paths, allowing authenticated path traversal and log file creation outsideUFO8.1 (v3.1)High
CVE-2026-46484Headplane: Path Traversal + RBAC Bypass in renameNode allows authenticated OIDC users to expire or rename any node/userheadplane8.1 (v3.1)High
CVE-2026-47398PraisonAI: Arbitrary code execution via unguarded spec.loader.exec_module in agents_generator.py - sibling of CVE-20PraisonAI8.1 (v3.1)High
CVE-2026-48695fastnetmon Command Injection Vulnerabilityfastnetmon8.1 (v3.1)High
CVE-2026-49213TypeBot: SSRF protection bypass via IPv6 unspecified address in Typebot HTTP request executiontypebot.io8.1 (v3.1)High
CVE-2026-49340gonic has arbitrary file write in createPlaylist: any authenticated user can write playlist M3U content to attacker-contgonic8.1 (v3.1)High
CVE-2026-50143Actor MCP path authority injection leaks Apify tokenapify-mcp-server8.1 (v3.1)High
CVE-2026-51773SSRF-8.1 (v3.1)High
CVE-2026-51907Path Traversal-8.1 (v3.1)High
CVE-2026-54083Wazuh: Path traversal in ip-customblock active response allows arbitrary file creation and deletionwazuh8.1 (v3.1)High
CVE-2026-54591AsyncSSH: SCP Path Traversal to Arbitrary File Writeasyncssh8.1 (v3.1)High
CVE-2026-55173AVideo incomplete fix for CVE-2026-33482: sanitizeFFmpegCommand still allows a single '&' (background operator), givingAVideo8.1 (v3.1)High
CVE-2026-62278LubeLogger: Path Traversal in HandleTranslationFileUpload Allows Authenticated Users to Write Files Outside Data Directolubelog8.1 (v3.1)High
CVE-2026-64679Atlantis: Path Traversal in Atlantis Workspace Handling Allows Out-of-Bounds Directory Deletion/Creationatlantis8.1 (v3.1)High
CVE-2026-71320Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Propsnuxt8.1 (v3.1)High
CVE-2026-73659Trigger.dev: Cross-tenant object read/write via path traversal in packet presign APItrigger.dev8.1 (v3.1)High
CVE-2026-77294TREK: Server-Side Request Forgery via User-Configurable LLM Base URLTREK8.1 (v3.1)High
CVE-2026-79425CRMEB v6.0.0 Server-Side Request Forgery VulnerabilityCRMEB v6.0.08.1 (v3.1)High
CVE-2026-90959Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulRed Hat Ansible Automation Platform 2.6 for RHEL 98.1 (v3.1)High
CVE-2026-97875DNS rebinding vulnerability in rojo serve HTTP APIrojo8.1 (v3.1)High
CVE-2026-79755Nuclio: Unauthenticated OS command injection via function namespace in docker ps –filter label (local Docker platform)nuclio8.0 (v3.1)High
CVE-2009-1558Cisco Linksys WVC54GCA 1.00R22/1.00R24 - Local File Inclusionwvc54gca7.8 (v2.0)High
CVE-2011-3305Cisco Network Access Manager Directory Traversal Vulnerabilitynac manager7.8 (v2.0)High
CVE-2011-3315Cisco CUCM, UCCX, and Unified IP-IVR- Directory Traversalunified ip interactive voice response7.8 (v2.0)High
CVE-2012-4933Novell ZENworks Asset Management 7.5 Remote File Accesszenworks asset management7.8 (v2.0)High
CVE-2014-0644EMC CTA v10.0 Unauthenticated XXE Arbitrary File Readcloud tiering appliance software7.8 (v2.0)High
CVE-2014-2962Belkin N150 Router 1.00.08/1.00.09 - Path Traversaln150 f9k1009 firmware7.8 (v2.0)High
CVE-2015-4669Xceedium Xsuite - Multiple Vulnerabilitiesxsuite7.8 (v3.0)High
CVE-2017-16651Roundcube TimeZone Authenticated File Disclosurewebmail7.8 (v3.1)High
CVE-2018-6222Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilitiesemail encryption gateway7.8 (v3.0)High
CVE-2021-21315Node.JS System Information Library <5.3.1 - Remote Command Injectionsysteminformation7.8 (v3.1)High
CVE-2022-25485Cuppa CMS v1.0 - Local File Inclusioncuppacms7.8 (v3.1)High
CVE-2022-25486Cuppa CMS v1.0 - Local File Inclusioncuppacms7.8 (v3.1)High
CVE-2025-68696httparty Has Potential SSRF Vulnerability That Leads to API Key Leakagehttparty7.8 (v4.0)High
CVE-2026-40280Gotenberg <= 8.30.1 - Server Side Request Forgerygotenberg7.8 (v4.0)High
CVE-2026-55864GeoNetwork: Unauthenticaded Server-Side Request Forgery in SLD Toolcore-geonetwork7.8 (v4.0)High
CVE-2026-65600Traefik before v2.11.52 Authentication Bypass via ReplacePathRegextraefik7.8 (v4.0)High
CVE-2026-67179Genkit improper host header validationgenkit7.8 (v3.1)High
CVE-2026-67309Traefik v3.7.0 Path Traversal via RewriteTarget Authentication Bypasstraefik7.8 (v4.0)High
CVE-2020-35749WordPress Simple Job Board <2.9.4 - Local File Inclusionsimple board job7.7 (v3.1)High
CVE-2021-21234Spring Boot Actuator Logview Directory Traversalspring-boot-actuator-logview7.7 (v3.1)High
CVE-2024-46987Camaleon CMS Directory Traversal CVE-2024-46987camaleon cms7.7 (v3.1)High
CVE-2025-14804Frontend File Manager < 23.5 - Subscriber+ Arbitrary File DeletionFrontend File Manager Plugin7.7 (v3.1)High
CVE-2025-27621UpTrain has a Constant Default API Keyuptrain7.7 (v4.0)High
CVE-2026-104977Plane: Incomplete fix of CVE-2026-27706 — SSRF still reachable on: missing is_blocked_ip (CGNAT/multicast) + DNS-rebindiplane7.7 (v3.1)High
CVE-2026-105764Immich: Authenticated SVG upload reaches ImageMagick coders and enables RCEimmich7.7 (v4.0)High
CVE-2026-108161FusionPBX through 5.6.5 OS Command Injection via Caller ID in Recording ZIP Downloadfusionpbx7.7 (v4.0)High
CVE-2026-32271Craft Commerce: SQL Injection can lead to Remote Code Execution via TotalRevenue Widgetcommerce7.7 (v4.0)High
CVE-2026-33655New API: SSRF Protection Bypass via Unresolved Hostname in Notification URLsnew api7.7 (v3.1)High
CVE-2026-34163Server-Side Request Forgery via MCP Tools Endpoint in FastGPTfastgpt7.7 (v3.1)High
CVE-2026-34936PraisonAI: SSRF via Unvalidated api_base in passthrough() Fallbackpraisonai7.7 (v3.1)High
CVE-2026-39361OpenObserve has a SSRF Protection Bypass via IPv6 Bracket Notation in validate_enrichment_urlopenobserve7.7 (v3.1)High
CVE-2026-39843Plane has a Server-Side Request Forgery (SSRF) in Favicon Fetchingplane7.7 (v3.1)High
CVE-2026-39965TypeBot: SSRF via Open Redirect Bypass in HTTP Request and Code Blockstypebot.io7.7 (v3.1)High
CVE-2026-40348Movary has Authenticated SSRF via Jellyfin Server URL Verification that Allows Internal Network Probingmovary7.7 (v3.1)High
CVE-2026-40519Nginx Proxy Manager Authenticated RCE via setupCertbotPlugins()nginx-proxy-manager7.7 (v4.0)High
CVE-2026-42099Race Condition in Sparx Pro Cloud Serverpro cloud server7.7 (v4.0)High
CVE-2026-42345FastGPT: Cloud metadata endpoint SSRF protection bypass via port specification, IPv6 mapping, hex/decimal IP encoding, aFastGPT7.7 (v3.1)High
CVE-2026-43884WWBN AVideo: SSRF Protection Bypass via HTTP Redirect and DNS Rebinding in isSSRFSafeURL()AVideo7.7 (v3.1)High
CVE-2026-44285FastGPT: SSRF Protection Bypass via externalFile in Dataset Preview APIFastGPT7.7 (v3.1)High
CVE-2026-45806Penpot: Authenticated SSRF in remote image import via create-file-media-object-from-urlpenpot7.7 (v3.1)High
CVE-2026-46717Nezha Monitoring: RoleMember-reachable SSRF with full response-body reflection via POST /api/v1/notificationnezha7.7 (v3.1)High
CVE-2026-47170Garlic-Hub: SSRF vulnerability in uploadFromUrl endpointgarlic-hub7.7 (v3.1)High
CVE-2026-47179Arcane: Authenticated Arbitrary Host File Read via Docker Compose Include Directives in Arcanearcane7.7 (v3.1)High
CVE-2026-53549Termix: Server-Side Request Forgery via Proxy Connectivity TestTermix7.7 (v3.1)High
CVE-2026-53553Goploy: Arbitrary File Read via Path Traversal in /deploy/fileDiff allows Remote Server Compromisegoploy7.7 (v3.1)High
CVE-2026-54339Glean: Server-Side Request Forgery (SSRF) with Full Response Disclosure via Malicious RSS Feed in /api/feeds/discoverglean7.7 (v3.1)High
CVE-2026-54607FastGPT: SSRF in HTTP-tool OpenAPI schema importer via SwaggerParser $ref (bypasses the isInternalAddress guard)FastGPT7.7 (v3.1)High
CVE-2026-54910FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary filesfilebrowser7.7 (v3.1)High
CVE-2026-56285Nitter - Server-Side Request Forgery in /video Media Proxy Endpointnitter7.7 (v4.0)High
CVE-2026-58314Two SSRF findings in Gitea 1.26.2Gitea Open Source Git Server7.7 (v3.1)High
CVE-2026-61835Directus: SSRF Protection Bypass via 0.0.0.0 in File Importdirectus7.7 (v3.1)High
CVE-2026-62242Spring Boot Admin Server < 4.1.2 SSRF via Unauthenticated Instance Registrationspring-boot-admin7.7 (v4.0)High
CVE-2026-63088stoatchat < 0.14.0 SSRF via DNS-based IP Blocklist Bypassstoatchat7.7 (v4.0)High
CVE-2026-63464Nebula-mesh allows non-admin operators to disable webhook SSRF protection via allow_privatenebula-mesh7.7 (v3.1)High
CVE-2026-63764LMDeploy Server-Side Request Forgery via HTTP Redirect Bypasslmdeploy7.7 (v4.0)High
CVE-2026-66738SPIP < 4.4.18 Code Injection via Navigation Endpoint on SQLiteSPIP7.7 (v4.0)High
CVE-2026-67346Swarms 6.8.1 Server-Side Request Forgery via DNS Rebinding Bypassswarms7.7 (v4.0)High
CVE-2026-69192ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trusip-address7.7 (v4.0)High
CVE-2026-71303Lemur: Incomplete fix for CVE-2026-55166 – ACME authority update endpoint allows non-admin to replace acme_url with ilemur7.7 (v3.1)High
CVE-2026-71365Awx: webhook status callback ssrf leaks the git patRed Hat Ansible Automation Platform 2.5 for RHEL 87.7 (v3.1)High
CVE-2026-73498MCP Atlassian is a Model Context Protocol (MCP): Arbitrary file read via missing path validation in confluence_upload_atmcp-atlassian7.7 (v3.1)High
CVE-2026-75888Openshift/console: openshift/console: authenticated ssrf via helm chart url fetchRed Hat OpenShift Container Platform 4.147.7 (v3.1)High
CVE-2026-76820OpenCTI: Synchronizer SSRF: stream fetch has no URL validationopencti7.7 (v3.1)High
CVE-2026-76898draw.io: Unauthenticated SSRF via IPv6 ULA blocklist bypass in /embed2.jsdrawio7.7 (v4.0)High
CVE-2026-77775Headroom Proxy Sends Upstream Requests to a Client-Supplied Base URL Without Address ValidationHeadroom7.7 (v4.0)High
CVE-2026-79764Termix: Authenticated SSRF via /homepage/proxy — No Destination AllowlistTermix7.7 (v3.1)High
CVE-2026-8183Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcementlangflow7.7 (v3.1)High
CVE-2025-67442eve-ng Path Traversal Vulnerabilityeve-ng7.6 (v3.1)High
CVE-2026-100858heym before 0.0.109 Server-Side Request Forgery via Workflow Nodesheym7.6 (v4.0)High
CVE-2026-104973Plane: DNS Rebinding Bypass of CVE-2026-30242 SSRF Fix in Webhook Deliveryplane7.6 (v3.1)High
CVE-2026-105628Plane: OAuth Avatar Redirect SSRF Leads to Internal Data Exfiltration via Static Asset Endpointplane7.6 (v3.1)High
CVE-2026-39369WWBN AVideo's GIF poster fetch bypasses traversal scrubbing and exposes local files through public media URLsavideo7.6 (v3.1)High
CVE-2026-414194ga Boards: Import Path Traversal Leads to Arbitrary File Read4gaBoards7.6 (v3.1)High
CVE-2026-44239FreePBX: Authenticated Local File Inclusion in Dashboard Modulefreepbx7.6 (v4.0)High
CVE-2026-45082Karakeep has a SSRF Protection Bypass via Redirect Handlingkarakeep7.6 (v3.1)High
CVE-2026-54640OpenRemote: XXE in KNXProtocol.startAssetImport() allows arbitrary file read via unprotected XMLInputFactoryopenremote7.6 (v3.1)High
CVE-2026-55160Authenticated Server-Side Request Forgery (SSRF) via feed URL in Stringerstringer7.6 (v3.1)High
CVE-2026-55177CloudTAK: Authenticated full-read SSRF in /api/esri* routes — user-controlled URL fetched with no IP-classification guarCloudTAK7.6 (v4.0)High
CVE-2026-55232Vvveb: Server-side request forgery in Vvveb via IPv6 bypass of validateUrl() in editor oEmbed proxyVvveb7.6 (v3.1)High
CVE-2026-65695Office-Word-MCP-Server 1.1.11 Path Traversal via document toolsOffice-Word-MCP-Server7.6 (v4.0)High
CVE-2026-79749MCPHub: SSRF Guard Bypass via IPv6 Transition Addresses in URL Validationmcphub7.6 (v4.0)High
CVE-2005-2847Barracuda IMG.PL Remote Command Executionbarracuda spam firewall7.5 (v2.0)High
CVE-2006-2842Squirrelmail <=1.4.6 - Local File Inclusionsquirrelmail7.5 (v2.0)High
CVE-2008-1059WordPress Sniplets 1.1.2 - Local File Inclusionsniplets plugin7.5 (v2.0)High
CVE-2009-0255TYPO3 sa-2009-001 Weak Encryption Key File Disclosuretypo37.5 (v3.1)High
CVE-2009-1479boxalino 09.05.25-0421 - Directory Traversalboxalino7.5 (v2.0)High
CVE-2009-2015Joomla! MooFAQ 1.0 - Local File InclusionJoomla!7.5 (v2.0)High
CVE-2009-3318Joomla! Roland Breedveld Album 1.14 - Local File InclusionJoomla!7.5 (v2.0)High
CVE-2009-4202Joomla! Omilen Photo Gallery 0.5b - Local File Inclusionjoomla!7.5 (v2.0)High
CVE-2009-4679Joomla! Portfolio Nexus - Remote File Inclusioncom if nexus7.5 (v2.0)High
CVE-2010-0157Joomla! Component com_biblestudy - Local File Inclusionjoomla!7.5 (v2.0)High
CVE-2010-0759Joomla! Plugin Core Design Scriptegrator - Local File Inclusionscriptegrator plugin7.5 (v2.0)High
CVE-2010-0972Joomla! Component com_gcalendar Suite 2.1.5 - Local File Inclusioncom gcalendar7.5 (v2.0)High
CVE-2010-0985Joomla! Component com_abbrev - Local File Inclusioncom abbrev7.5 (v2.0)High
CVE-2010-1306Joomla! Component Picasa 2.0 - Local File Inclusioncom joomlapicasa27.5 (v2.0)High
CVE-2010-1470Joomla! Component Web TV 1.0 - Local File Inclusioncom webtv7.5 (v2.0)High
CVE-2010-1471Joomla! Component Address Book 1.5.0 - Local File Inclusioncom addressbook7.5 (v2.0)High
CVE-2010-1472Joomla! Component Horoscope 1.5.0 - Local File Inclusioncom horoscope7.5 (v2.0)High
CVE-2010-1495Joomla! Component Matamko 1.01 - Local File Inclusioncom matamko7.5 (v2.0)High
CVE-2010-1531Joomla! Component redSHOP 1.0 - Local File Inclusioncom redshop7.5 (v2.0)High
CVE-2010-1533Joomla! Component TweetLA 1.0.1 - Local File Inclusioncom tweetla7.5 (v2.0)High
CVE-2010-1535Joomla! Component TRAVELbook 1.0.1 - Local File Inclusioncom travelbook7.5 (v2.0)High
CVE-2010-1602Joomla! Component ZiMB Comment 0.8.1 - Local File Inclusioncom zimbcomment7.5 (v2.0)High
CVE-2010-1603Joomla! Component ZiMBCore 0.1 - Local File Inclusioncom zimbcore7.5 (v2.0)High
CVE-2010-1653Joomla! Component Graphics 1.0.6 - Local File Inclusioncom graphics7.5 (v2.0)High
CVE-2010-1717Joomla! Component iF surfALERT 1.2 - Local File Inclusionif surfalert7.5 (v2.0)High
CVE-2010-1875Joomla! Component Property - Local File Inclusioncom properties7.5 (v2.0)High
CVE-2010-1878Joomla! Component OrgChart 1.0.0 - Local File Inclusioncom orgchart7.5 (v2.0)High
CVE-2010-1952Joomla! Component BeeHeard 1.0 - Local File Inclusioncom beeheard7.5 (v2.0)High
CVE-2010-1953Joomla! Component iNetLanka Multiple Map 1.0 - Local File Inclusioncom multimap7.5 (v2.0)High
CVE-2010-1954Joomla! Component iNetLanka Multiple root 1.0 - Local File Inclusioncom multiroot7.5 (v2.0)High
CVE-2010-1955Joomla! Component Deluxe Blog Factory 1.1.2 - Local File Inclusioncom blogfactory7.5 (v2.0)High
CVE-2010-1956Joomla! Component Gadget Factory 1.0.0 - Local File Inclusioncom gadgetfactory7.5 (v2.0)High
CVE-2010-1957Joomla! Component Love Factory 1.3.4 - Local File Inclusioncom lovefactory7.5 (v2.0)High
CVE-2010-1977Joomla! Component J!WHMCS Integrator 1.5.0 - Local File Inclusioncom jwhmcs7.5 (v2.0)High
CVE-2010-1980Joomla! Component Joomla! Flickr 1.0 - Local File Inclusioncom joomlaflickr7.5 (v2.0)High
CVE-2010-1983Joomla! Component redTWITTER 1.0 - Local File Inclusioncom redtwitter7.5 (v2.0)High
CVE-2010-2033Joomla! Percha Categories Tree 0.6 - Local File Inclusioncom perchacategoriestree7.5 (v2.0)High
CVE-2010-2034Joomla! Component Percha Image Attach 1.1 - Directory Traversalcom perchaimageattach7.5 (v2.0)High
CVE-2010-2035Joomla! Component Percha Gallery 1.6 Beta - Directory Traversalcom perchagallery7.5 (v2.0)High
CVE-2010-2036Joomla! Component Percha Fields Attach 1.0 - Directory Traversalcom perchafieldsattach7.5 (v2.0)High
CVE-2010-2037Joomla! Component Percha Downloads Attach 1.1 - Directory Traversalcom perchadownloadsattach7.5 (v2.0)High
CVE-2010-2045Joomla! Component FDione Form Wizard 1.0.2 - Local File Inclusioncom dioneformwizard7.5 (v2.0)High
CVE-2010-2050Joomla! Component MS Comment 0.8.0b - Local File Inclusioncom mscomment7.5 (v2.0)High
CVE-2010-2128Joomla! Component JE Quotation Form 1.0b1 - Local File Inclusioncom jequoteform7.5 (v2.0)High
CVE-2010-2259Joomla! Component com_bfsurvey - Local File Inclusioncom bfsurvey profree7.5 (v2.0)High
CVE-2010-2682Joomla! Component Realtyna Translator 1.0.15 - Local File Inclusioncom realtyna7.5 (v2.0)High
CVE-2010-2918Joomla! Component Visites 1.1 - MosConfig_absolute_path Remote File Inclusioncom joomla visites7.5 (v2.0)High
CVE-2010-3426Joomla! Component Jphone 1.0 Alpha 3 - Local File Inclusioncom jphone7.5 (v2.0)High
CVE-2010-3600Oracle Database Client System Analyzer Arbitrary File Uploaddatabase server7.5 (v2.0)High
CVE-2010-3964MS10-104 Microsoft Office SharePoint Server 2007 Remote Code Executionsharepoint server7.5 (v2.0)High
CVE-2010-4282Pandora Fms < 3.1.1 - Directory Traversalpandora fms7.5 (v2.0)High
CVE-2010-4719Joomla! Component JRadio - Local File Inclusioncom jradio7.5 (v2.0)High
CVE-2010-4769Joomla! Component Jimtawl 1.0.2 - Local File Inclusioncom jimtawl7.5 (v2.0)High
CVE-2010-4977Joomla! Component Canteen 1.0 - Local File Inclusioncom canteen7.5 (v2.0)High
CVE-2010-5028Joomla! Component JE Job 1.0 - Local File Inclusioncom jejob7.5 (v2.0)High
CVE-2011-4166HP Managed Printing Administration jobAcct Remote Command Executionmanaged printing administration7.5 (v2.0)High
CVE-2011-4448WikkaWiki 1.3.2 - Multiple Vulnerabilitieswikkawiki7.5 (v2.0)High
CVE-2012-1226Dolibarr ERP/CRM 3.2 Alpha - Multiple Directory Traversal Vulnerabilitiesdolibarr erp/crm7.5 (v2.0)High
CVE-2012-5202HP Intelligent Management FaultDownloadServlet Directory Traversalintelligent management center7.5 (v2.0)High
CVE-2012-5203HP Intelligent Management ReportImgServlt Directory Traversalintelligent management center for automated network manager7.5 (v2.0)High
CVE-2012-5204HP Intelligent Management IctDownloadServlet Directory Traversalintelligent management center7.5 (v2.0)High
CVE-2013-1081Novell Zenworks Mobile Managment MDM.php Local File Inclusion Vulnerabilityzenworks mobile management7.5 (v2.0)High
CVE-2013-5639Gnew 2013.1 - Multiple Vulnerabilities (2)gnew7.5 (v2.0)High
CVE-2013-5640Gnew 2013.1 - Multiple Vulnerabilities (2)gnew7.5 (v2.0)High
CVE-2013-6041Webuzo 2.1.3 - Multiple Vulnerabilitieswebuzo7.5 (v2.0)High
CVE-2014-10037DomPHP 0.83 - Directory Traversaldomphp7.5 (v2.0)High
CVE-2014-2846WD Arkeia Virtual Appliance 10.2.9 - Local File Inclusionarkeia virtual appliance firmware7.5 (v2.0)High
CVE-2014-7863ManageEngine Multiple Products Arbitrary File Downloadmanageengine applications manager7.5 (v3.1)High
CVE-2014-9145Fiyo CMS 2.0.1.8 - Multiple Vulnerabilitiesfiyo cms7.5 (v2.0)High
CVE-2014-9147Fiyo CMS 2.0.1.8 - Multiple Vulnerabilitiesfiyo cms7.5 (v3.0)High
CVE-2015-1000005WordPress Candidate Application Form <= 1.3 - Local File Inclusioncandidate-application-form7.5 (v3.0)High
CVE-2015-1000010WordPress Simple Image Manipulator < 1.0 - Local File Inclusionsimple-image-manipulator7.5 (v3.0)High
CVE-2015-1000012WordPress MyPixs <=0.3 - Local File Inclusionmypixs7.5 (v3.0)High
CVE-2015-10134WordPress Simple Backup File Read Vulnerabilitysimple backup7.5 (v3.1)High
CVE-2015-10136WordPress GI-Media Library Plugin Directory Traversal Vulnerabilitygi-media-library7.5 (v3.1)High
CVE-2015-1486Symantec Endpoint Protection Manager Authentication Bypass and Code Executionendpoint protection manager7.5 (v2.0)High
CVE-2015-1503IceWarp Mail Server < 11.1.1 - Directory Traversalmail server7.5 (v3.0)High
CVE-2015-1592SixApart MovableType Storable Perl Code Executiondebian linux7.5 (v2.0)High
CVE-2015-3648ResourceSpace - Local File inclusionresourcespace7.5 (v2.0)High
CVE-2015-4074Joomla! Helpdesk Pro plugin <1.4.0 - Local File Inclusionhelpdesk pro7.5 (v3.0)High
CVE-2015-4632Koha 3.20.1 - Directory Traversalkoha7.5 (v3.0)High
CVE-2015-5469WordPress MDC YouTube Downloader 2.1.0 - Local File Inclusionmdc youtube downloader7.5 (v3.0)High
CVE-2015-9406WordPress Mobile Edition File Read Vulnerabilitymtheme-unus7.5 (v3.1)High
CVE-2016-10924Wordpress Zedna eBook download <1.2 - Local File Inclusionzedna ebook download7.5 (v3.0)High
CVE-2016-10956WordPress Mail Masta 1.0 - Local File Inclusionmail-masta7.5 (v3.1)High
CVE-2016-2389SAP xMII 15.0 for SAP NetWeaver 7.4 - Local File Inclusionnetweaver7.5 (v3.0)High
CVE-2016-4806Web2py 2.14.5 - Multiple Vulnerabilitiesweb2py7.5 (v3.0)High
CVE-2016-6601WebNMS Framework Server Arbitrary Text File Downloadwebnms framework7.5 (v3.0)High
CVE-2017-15647FiberHome Routers - Local File Inclusionrouterfiberhome firmware7.5 (v3.0)High
CVE-2017-6527DnaLIMS Directory Traversaldnalims7.5 (v3.0)High
CVE-2017-9833BOA Web Server 0.94.14 - Arbitrary File Accessboa7.5 (v3.1)High
CVE-2018-12054Schools Alert Management Script - Arbitrary File Readschools alert management script7.5 (v3.0)High
CVE-2018-12909Webgrind <= 1.5 - Local File Inclusionwebgrind7.5 (v3.0)High
CVE-2018-14912cgit Directory Traversalcgit7.5 (v3.0)High
CVE-2018-14918LOYTEC LGATE-902 6.3.2 - Local File Inclusionlgate-902 firmware7.5 (v3.0)High
CVE-2018-15138LG-Ericsson iPECS NMS 30M - Local File Inclusionipecs nms7.5 (v3.0)High
CVE-2018-15535Responsive FileManager < 9.13.4 - Directory Traversalresponsive filemanager7.5 (v3.0)High
CVE-2018-15745Argus Surveillance DVR 4.0.0.0 - Directory Traversaldvr7.5 (v3.0)High
CVE-2018-16299WordPress Localize My Post 1.0 - Local File Inclusionlocalize my post7.5 (v3.0)High
CVE-2018-18323Centos Web Panel 0.9.8.480 - Local File Inclusionwebpanel7.5 (v3.0)High
CVE-2018-19458PHP Proxy 3.0.3 - Local File Inclusionphp-proxy7.5 (v3.0)High
CVE-2018-19753Tarantella Enterprise <3.11 - Local File Inclusiontarantella enterprise7.5 (v3.0)High
CVE-2018-20463WordPress JSmol2WP <=1.07 - Local File Inclusionjsmol2wp7.5 (v3.0)High
CVE-2018-6008Joomla! Jtag Members Directory 5.3.7 - Local File Inclusionjtag members directory7.5 (v3.0)High
CVE-2018-7422WordPress Site Editor <=1.1.1 - Local File Inclusionsite editor7.5 (v3.0)High
CVE-2018-9118WordPress 99 Robots WP Background Takeover Advertisements <=4.1.4 - Local File Inclusionwp background takeover advertisements7.5 (v3.0)High
CVE-2018-9205Drupal avatar_uploader v7.x-1.0-beta8 - Local File Inclusionavatar uploader7.5 (v3.0)High
CVE-2019-12276GrandNode 4.40 - Local File Inclusiongrandnode7.5 (v3.0)High
CVE-2019-12593IceWarp Mail Server <=10.4.4 - Local File Inclusionmail server7.5 (v3.0)High
CVE-2019-14205WordPress Nevma Adaptive Images <0.6.67 - Local File Inclusionadaptive images7.5 (v3.1)High
CVE-2019-14251T24 Web Server - Local File Inclusiont247.5 (v3.1)High
CVE-2019-16123PilusCart <=1.4.1 - Local File Inclusionpiluscart7.5 (v3.1)High
CVE-2019-1621Cisco Data Center Network Manager Unauthenticated File Downloaddata center network manager7.5 (v3.1)High
CVE-2019-17199WebPageTest Directory Traversalwebpagetest7.5 (v3.1)High
CVE-2019-17538Jiangnan Online Judge 0.8.0 - Local File Inclusionjiangnan online judge7.5 (v3.1)High
CVE-2019-18665DOMOS 5.5 - Local File Inclusiondomos7.5 (v3.1)High
CVE-2019-25213WordPress Advanced Access Manager - Path Traversaladvanced access manager7.5 (v3.1)High
CVE-2019-7254eMerge E3 1.00-06 - Local File Inclusionlinear emerge essential firmware7.5 (v3.1)High
CVE-2019-9621Zimbra Collaboration Autodiscover Servlet XXE and ProxyServlet SSRFzimbra collaboration suite7.5 (v3.1)High
CVE-2019-9757LabKey Server 19.1.0 - XML External Entity (XXE)labkey server7.5 (v3.1)High
CVE-2019-9922Joomla! Harmis Messenger 1.2.2 - Local File Inclusionje messenger7.5 (v3.1)High
CVE-2020-11738WordPress Duplicator File Read Vulnerabilityduplicator7.5 (v3.1)High
CVE-2020-13158Artica Proxy Community Edition <4.30.000000 - Local File Inclusionartica proxy7.5 (v3.1)High
CVE-2020-14864Oracle Fusion - Directory Traversal/Local File Inclusionbusiness intelligence7.5 (v3.1)High
CVE-2020-19360FHEM 6.0 - Local File Inclusionfhem7.5 (v3.1)High
CVE-2020-24285INTELBRAS TELEFONE IP TIP200 60.61.75.22 - Local File Inclusiontip2007.5 (v3.1)High
CVE-2020-27191LionWiki <3.2.12 - Local File Inclusionlionwiki7.5 (v3.1)High
CVE-2020-27467Processwire CMS <2.7.1 - Local File Inclusionprocesswire7.5 (v3.1)High
CVE-2020-35580SearchBlox <9.2.2 - Local File Inclusionsearchblox7.5 (v3.1)High
CVE-2020-35598Advanced Comment System 1.0 - Local File Inclusionadvanced comment system7.5 (v3.1)High
CVE-2020-8209Citrix XenMobile Server - Local File Inclusionxenmobile server7.5 (v3.1)High
CVE-2021-20123Draytek VigorConnect 1.6.0-B - Local File Inclusionvigorconnect7.5 (v3.1)High
CVE-2021-20124Draytek VigorConnect 6.0-B3 - Local File Inclusionvigorconnect7.5 (v3.1)High
CVE-2021-24227Patreon WordPress <1.7.0 - Unauthenticated Local File Inclusionpatreon wordpress7.5 (v3.1)High
CVE-2021-33807Cartadis Gespage 8.2.1 - Directory Traversalgespage7.5 (v3.1)High
CVE-2021-39312WordPress True Ranker <2.2.4 - Local File Inclusiontrue ranker7.5 (v3.1)High
CVE-2021-39316WordPress DZS Zoomsounds <=6.50 - Local File Inclusionzoomsounds7.5 (v3.1)High
CVE-2021-39433BIQS IT Biqs-drive v1.83 Local File Inclusionbiqsdrive7.5 (v3.1)High
CVE-2021-41277Metabase Pre-Auth Local File Inclusion (CVE-2021-41277)metabase7.5 (v3.1)High
CVE-2021-41291ECOA Building Automation System - Directory Traversal Content Disclosureecs router controller-ecs firmware7.5 (v3.1)High
CVE-2021-41569SAS/Internet 9.4 1520 - Local File Inclusionsas/intrnet7.5 (v3.1)High
CVE-2021-43287Pre-Auth Takeover of Build Pipelines in GoCDgocd7.5 (v3.1)High
CVE-2021-43734kkFileview v4.0.0 - Local File Inclusionkkfileview7.5 (v3.1)High
CVE-2021-43778GLPI plugin Barcode < 2.6.1 - Path Traversal Vulnerability.barcode7.5 (v3.1)High
CVE-2021-45043HD-Network Realtime Monitoring System 2.0 - Local File Inclusionhd-network real-time monitoring system7.5 (v3.1)High
CVE-2021-46107Ligeo Archives Ligeo Basics - Server Side Request Forgeryligeo basics7.5 (v3.1)High
CVE-2021-46381DLINK DAP-1620 A1 v1.01 - Directory Traversaldap-1620 firmware7.5 (v3.1)High
CVE-2021-46417Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 - Local File Inclusion (LFI)colibri firmware7.5 (v3.1)High
CVE-2022-0656uDraw <3.3.3 - Local File Inclusion[web to print shop](/vendors/webtoprint/web-to-print-shop/)7.5 (v3.1)High
CVE-2022-1119WordPress Simple File List <3.2.8 - Local File Inclusionsimple-file-list7.5 (v3.1)High
CVE-2022-24990TerraMaster TOS 4.2.29 or lower - Unauthenticated RCE chaining CVE-2022-24990 and CVE-2022-24989terramaster operating system7.5 (v3.1)High
CVE-2022-29014Razer Sila Gaming Router 2.0.441_api-2.0.418 - Local File Inclusionsila firmware7.5 (v3.1)High
CVE-2022-29298SolarView Compact 6.00 - Local File Inclusionsv-cpt-mc310 firmware7.5 (v3.1)High
CVE-2022-31474BackupBuddy - Local File Inclusionbackupbuddy7.5 (v3.1)High
CVE-2022-33901WordPress MultiSafepay for WooCommerce <=4.13.1 - Arbitrary File Readmultisafepay plugin for woocommerce7.5 (v3.1)High
CVE-2022-34121CuppaCMS v1.0 - Local File Inclusioncuppacms7.5 (v3.1)High
CVE-2022-34127GLPI 4.0.2 - Unauthenticated Local File Inclusion on Manageentities pluginmanageentities7.5 (v3.1)High
CVE-2022-37122Carel pCOWeb HVAC BACnet Gateway 2.1.0 - Path Traversalpcoweb hvac bacnet gateway7.5 (v3.1)High
CVE-2022-38840Güralp MAN-EAM-0003 3.2.4 - XML External Entity (XXE)man-eam-00037.5 (v3.1)High
CVE-2022-4140WordPress Welcart e-Commerce <2.8.5 - Arbitrary File Accesswelcart e-commerce7.5 (v3.1)High
CVE-2022-47501Apache OFBiz < 18.12.07 - Local File Inclusionofbiz7.5 (v3.1)High
CVE-2023-0159Extensive VC Addons for WPBakery page builder < 1.9.1 - Unauthenticated RCEextensive vc addons for wpbakery page builder7.5 (v3.1)High
CVE-2023-22047Oracle Peoplesoft - Unauthenticated File Readpeoplesoft enterprise7.5 (v3.1)High
CVE-2023-23063Cellinx NVT Web Server - Local File Disclosurenvt web server7.5 (v3.1)High
CVE-2023-26256STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusionstagil navigation7.5 (v3.1)High
CVE-2023-27170write-back manager Path Traversal Vulnerabilitywrite-back manager7.5 (v3.1)High
CVE-2023-2825GitLab Authenticated File Readgitlab7.5 (v3.1)High
CVE-2023-29887Nuovo Spreadsheet Reader 0.5.11 - Local File Inclusionspreadsheet-reader7.5 (v3.1)High
CVE-2023-32315Openfire authentication bypass with RCE pluginopenfire7.5 (v3.1)High
CVE-2023-33510Jeecg P3 Biz Chat - Local File Inclusionjeecg p3 biz chat7.5 (v3.1)High
CVE-2023-38879openSIS v9.0 - Path Traversalopensis7.5 (v3.1)High
CVE-2023-40924SolarView Compact < 6.00 - Directory Traversalsolarview compact firmware7.5 (v3.1)High
CVE-2023-6023VertaAI ModelDB - Path Traversalmodeldb7.5 (v3.1)High
CVE-2023-6038H2O ImportFiles - Local File Inclusionh2o7.5 (v3.1)High
CVE-2023-6977Mlflow <2.8.0 - Local File Inclusionmlflow7.5 (v3.1)High
CVE-2024-12849Error Log Viewer By WP Guru <= 1.0.1.3 - Missing Authorization to Arbitrary File Readerror-log-viewer-wp7.5 (v3.1)High
CVE-2024-1728Gradio > 4.19.1 UploadButton - Path Traversalgradio7.5 (v3.1)High
CVE-2024-27292Docassemble - Local File Inclusiondocassemble7.5 (v3.1)High
CVE-2024-28995SolarWinds Serv-U Unauthenticated Arbitrary File Readserv-u7.5 (v3.1)High
CVE-2024-36420Flowise 1.4.3 - Arbitrary File Readflowise7.5 (v3.1)High
CVE-2024-45388Hoverfly < 1.10.3 - Arbitrary File Readhoverfly7.5 (v3.1)High
CVE-2024-46938Sitecore Experience Platform <= 10.4 - Arbitrary File Readexperience commerce7.5 (v3.1)High
CVE-2024-5334Devika - Local File Inclusiondevika7.5 (v3.0)High
CVE-2024-6893Journyx - XML External Entities Injection (XXE)journyx-jtime7.5 (v3.1)High
CVE-2024-9362Polyaxon - Unauthenticated Directory Traversalpolyaxon/polyaxon7.5 (v3.0)High
CVE-2024-9935PDF Generator Addon for Elementor Page Builder <= 1.7.5 - Arbitrary File Downloadpdf-generator-addon-for-elementor-page-builder7.5 (v3.1)High
CVE-2025-11371Gladinet CentreStack/Triofox Path Traversalcentrestack7.5 (v3.1)High
CVE-2025-11704Elegance Menu <= 1.9 - Authenticated (Contributor+) Local File InclusionElegance Menu7.5 (v3.1)High
CVE-2025-13339Hippoo Mobile App for WooCommerce <= 1.7.1 - Unauthenticated Arbitrary File ReadHippoo Mobile App for WooCommerce7.5 (v3.1)High
CVE-2025-13801Yoco Payments <= 3.8.8 - Path TraversalYoco Payments7.5 (v3.1)High
CVE-2025-24963Vitest Browser Mode - Local File Readvitest7.5 (v3.1)High
CVE-2025-2539File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated Arbitrary File Readfile away7.5 (v3.1)High
CVE-2025-27817Apache Kafka Client - Arbitrary File Readkafka7.5 (v3.1)High
CVE-2025-31131Yeswiki < 4.5.2 - Unauthenticated Path Traversalyeswiki7.5 (v3.1)High
CVE-2025-34086Bolt CMS 3.7.0 - Authenticated Remote Code Executionbolt7.5 (v4.0)High
CVE-2025-45145Directory traversal in Follett Software's Destiny Library Manager 22_0_2_rc1 and fixed in v.22.5 AU1 Path Traversal Vulnerability-7.5 (v3.1)High
CVE-2025-57231Docmost 0.2.1-0.21.0 - Arbitrary File Readdocmost7.5 (v3.1)High
CVE-2025-59527FlowiseAI/Flowise has Server-Side Request Forgery (SSRF) vulnerabilityflowise7.5 (v3.1)High
CVE-2025-61884Oracle E-Business Suite - Server-Side Request Forgeryconfigurator7.5 (v3.1)High
CVE-2025-65878warehouse management system Path Traversal Vulnerabilitywarehouse management system7.5 (v3.1)High
CVE-2025-66645NiceGUI Path Traversal Vulnerability in app.add_media_files() Allows Arbitrary File Readingnicegui7.5 (v3.1)High
CVE-2025-69411ionCube Tester Plus <= 1.3 - Local File InclusionionCube tester plus7.5 (v3.1)High
CVE-2026-0669Path Traversal vulnerability in CSS extension on certain web serverscss7.5 (v3.1)High
CVE-2026-10737SP Project & Document Manager <= 4.71 - Missing Authorization to Unauthenticated Arbitrary File Information Disclosure vSP Project & Document Manager7.5 (v3.1)High
CVE-2026-107812Nginx UI: Self-upgrade runs an unsigned binary verified only by a same-origin digest → RCE via a compromised mirror or Mnginx ui7.5 (v3.1)High
CVE-2026-111221Netgate pfSense CE through 2.9.0 Command Injection via RADIUS Secret mpd.conf Injectionpfsense7.5 (v4.0)High
CVE-2026-113728Bulwark Webmail: DNS-rebinding SSRF in public iCalendar fetch endpointwebmail7.5 (v3.1)High
CVE-2026-14490Demi <= 0.0.6 - Unauthenticated Arbitrary Directory Deletion via demi_restore_step AJAX actionDemi – One Click Demo Import, Backup & Site Migration7.5 (v3.1)High
CVE-2026-1557WP Responsive Images <= 1.0 - Arbitrary File ReadWP Responsive Images7.5 (v3.1)High
CVE-2026-18352User Access Manager <= 2.3.15 - Unauthenticated Arbitrary File Read via 'uamgetfile' ParameterUser Access Manager7.5 (v3.1)High
CVE-2026-23536Feast Feature Server <=0.58.0 - Arbitrary File Readfeast7.5 (v3.1)High
CVE-2026-24138FOG vulnerable to unauthenticated SSRF via /fog/service/getversion.phpfogproject7.5 (v3.1)High
CVE-2026-29962HSC MailInspector - Local File Inclusionmailinspector7.5 (v3.1)High
CVE-2026-32820dataCycle Public Markdown Path Traversal Via /docs/*pathdataCycle-CORE7.5 (v3.1)High
CVE-2026-34239Chamilo Authenticated Remote Code Executionchamilo-lms7.5 (v4.0)High
CVE-2026-35036Ech0 Affected by Unauthenticated Server-Side Request Forgery in Website Preview Featureech07.5 (v3.1)High
CVE-2026-36783Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to Denial of Service Vulnerability-7.5 (v3.1)High
CVE-2026-36796Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to Denial of Service Vulnerability-7.5 (v3.1)High
CVE-2026-36851UnPoller 2.33.0 password field Path Traversal VulnerabilityUnPoller 2.33.0 password field7.5 (v3.1)High
CVE-2026-39359Wazuh: Unauthenticated Path Traversal in authd via Agent Group Namewazuh7.5 (v3.1)High
CVE-2026-39844NiceGUI has a Path Traversal in NiceGUI Upload Filename on Windows via Backslash Bypass of PurePosixPath Sanitizationnicegui7.5 (v3.1)High
CVE-2026-39847Emmett has a path traversal in internal assets handleremmett7.5 (v3.1)High
CVE-2026-41180PsiTransfer: Upload PATCH path traversal can create config.&lt;NODE_ENV&gt;.js and lead to code execution on restartpsitransfer7.5 (v3.1)High
CVE-2026-44716Pipecat: Path Traversal in Pipecat Runner /files Endpoint — Arbitrary File Read via %2F-Encoded Separatorpipecat7.5 (v3.1)High
CVE-2026-46581mojarra Path Traversal Vulnerabilitymojarra7.5 (v3.1)High
CVE-2026-50547InvoicePlane permits local file inclusion through the e-invoice XML configuration identifierInvoicePlane7.5 (v3.1)High
CVE-2026-50776Pronis Loisirs Billetterie CSE - < 04/2026 Arbitrary Code Execution VulnerabilityPronis Loisirs Billetterie CSE - < 04/20267.5 (v3.1)High
CVE-2026-51078Dede CMS v.5.7.118 Information Disclosure Vulnerability-7.5 (v3.1)High
CVE-2026-51852agent-zero 1.7, 1.8, 1.9, and 1.10 Path Traversal Vulnerability-7.5 (v3.1)High
CVE-2026-51853agent-zero 1.7, 1.8, 1.9, and 1.10 Path Traversal Vulnerability-7.5 (v3.1)High
CVE-2026-51888Path Traversal-7.5 (v3.1)High
CVE-2026-53534JabRef CAYW Sublime Text integration permits operating-system command injectionjabref7.5 (v4.0)High
CVE-2026-53599Redaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mocore7.5 (v3.1)High
CVE-2026-53754Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped)crawl4ai7.5 (v3.1)High
CVE-2026-54629Anyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Modeanyquery7.5 (v3.1)High
CVE-2026-5487DriveLock Directory Traversal Information Disclosure VulnerabilityDriveLock7.5 (v3.0)High
CVE-2026-5491DriveLock Directory Traversal Information Disclosure VulnerabilityDriveLock7.5 (v3.0)High
CVE-2026-55552Yamcs <=5.11.12 - Arbitrary File Readyamcs7.5 (v3.1)High
CVE-2026-56671ComfyUI: Path traversal in /experiment/models/preview allows arbitrary image file readComfyUI7.5 (v3.1)High
CVE-2026-57119PraisonAI: Unauthenticated Local File Inclusion via agent_file path in the Jobs APIPraisonAI7.5 (v3.1)High
CVE-2026-57129PraisonAI: Arbitrary File Read via @file: Mention Path Traversalpraisonaiagents7.5 (v3.1)High
CVE-2026-59765SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud MetadataGitea Open Source Git Server7.5 (v3.1)High
CVE-2026-61891theia Exposure of Sensitive Information to an Unauthorized Actor Vulnerabilitytheia7.5 (v3.1)High
CVE-2026-71209audiobookshelf - %2F Encoding Discrepancy Bypasses Cover/Image Auth Exemption Regex, Enabling Unauthenticated Path Traveaudiobookshelf7.5 (v3.1)High
CVE-2026-75328In DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller/DocController.java Path Traversal VulnerabilityIn DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller/DocController.java7.5 (v3.1)High
CVE-2026-75333yx-image-recognition v1.0 Path Traversal Vulnerability-7.5 (v3.1)High
CVE-2026-75887Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handlerRed Hat OpenShift Container Platform 4.127.5 (v3.1)High
CVE-2026-79407the SPO extension of MetaGPT 0.8.1 Path Traversal Vulnerabilitythe SPO extension of MetaGPT 0.8.17.5 (v3.1)High
CVE-2026-81265Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetcheslangflow7.5 (v3.1)High
CVE-2026-88392Unimall v4 Arbitrary Code Execution Vulnerability-7.5 (v3.1)High
CVE-2026-88394WookTeam 1.6.6 and Earlier Path Traversal Vulnerability-7.5 (v3.1)High
CVE-2026-88623NUUO Network Video Recorder 2.0.0 Files or Directories Accessible to External Parties Vulnerability-7.5 (v3.1)High
CVE-2026-91136Divi Plus <= 2.4.0 - Unauthenticated Arbitrary File ReadDivi Plus7.5 (v3.1)High
CVE-2026-92174SiteOrigin Widgets Bundle <= 1.73.2 - Authenticated (Contributor+) Local File Inclusion via 'theme' ParameterSiteOrigin Widgets Bundle7.5 (v3.1)High
CVE-2026-9282W3 Total Cache <= 2.9.4 - Unauthenticated Arbitrary File ReadW3 Total Cache7.5 (v3.1)High
CVE-2026-95265Feehi CMS 2.1.1 Server-Side Request Forgery VulnerabilityFeehi CMS 2.1.17.5 (v3.1)High
CVE-2024-20767CVE-2024-20767 - Adobe Coldfusion Arbitrary File Readcoldfusion7.4 (v3.1)High
CVE-2026-101860RaspAP raspap-webgui sudo Configuration PluginInstaller.php addSudoers privileges managementraspap-webgui7.4 (v4.0)High
CVE-2026-45310CodeWhale: SSRF via HTTP Redirect Bypass in fetch_url ToolCodeWhale7.4 (v3.1)High
CVE-2026-49857auth-fetch-mcp has SSRF Protection Bypass via IPv4-mapped IPv6 Loopbackauth-fetch-mcp7.4 (v3.1)High
CVE-2026-566769router: Image prefetch DNS rebinding allows SSRF to internal services9router7.4 (v3.1)High
CVE-2026-70666Lemur: Server-Side Request Forgery via the ACME client following server-controlled URLslemur7.4 (v3.1)High
CVE-2022-20707Cisco RV Series Authentication Bypass and Command Injectionrv340 firmware7.3 (v3.1)High
CVE-2024-45257BYOB Unauthenticated RCE via Arbitrary File Write and Command Injection (CVE-2024-45256, CVE-2024-45257)-7.3 (v3.1)High
CVE-2025-12835WooMulti <= 1.7 - Subscriber+ Arbitrary File DeletionWooMulti7.3 (v3.1)High
CVE-2025-45869LogicalDOC Enterprise Version up to and before v9.1.1 Server-Side Request Forgery Vulnerability-7.3 (v3.1)High
CVE-2025-68619Signal K Server Vulnerable to Remote Code Execution via Malicious npm Packagesignal k server7.3 (v4.0)High
CVE-2026-1085939router 0.4.1 through 0.5.99 Config Injection RCE via hermes-settings Endpoint9router7.3 (v4.0)High
CVE-2026-10870Shibby Tomato Web UI rc start_dhcpc os command injectionTomato7.3 (v4.0)High
CVE-2026-10871Shibby Tomato Web UI rc start_6rd_tunnel os command injectionTomato7.3 (v4.0)High
CVE-2026-10873Shibby Tomato Web UI rstats rstats_path os command injectionTomato7.3 (v4.0)High
CVE-2026-18900H3C NX15 Backend RPC esps file.exec os command injectionNX157.3 (v4.0)High
CVE-2026-19771Baicells EG3661M LuCI Web luci os command injectionEG3661M7.3 (v4.0)High
CVE-2026-36540Netis AC1200 Router NC21 V4.0.1.4296 Arbitrary Code Execution Vulnerability-7.3 (v3.1)High
CVE-2026-53554SQLBot: Arbitrary File Write via parseExcel Leading to Code Execution Through Alembic Import ProcessingSQLBot7.3 (v4.0)High
CVE-2015-10133WordPress Subscribe Comments File Read Vulnerabilitysubscribe to comments7.2 (v3.1)High
CVE-2016-0709Apache Jetspeed Arbitrary File Uploadjetspeed7.2 (v3.0)High
CVE-2019-11539Pulse Secure VPN Arbitrary Command Executionconnect secure7.2 (v3.1)High
CVE-2020-14883Oracle WebLogic Server Administration Console Handle RCEweblogic server7.2 (v3.1)High
CVE-2020-8260Pulse Secure VPN gzip RCEconnect secure7.2 (v3.1)High
CVE-2022-1373Softing Secure Integration Server v1.22 Remote Code Executionedgeaggregator7.2 (v3.1)High
CVE-2022-2334Softing Secure Integration Server v1.22 Remote Code Executionedgeaggregator7.2 (v3.1)High
CVE-2022-27925Zip Path Traversal in Zimbra (mboximport) (CVE-2022-27925)zimbra collaboration suite7.2 (v3.1)High
CVE-2025-10686Creta Testimonial Showcase < 1.2.4 - Editor+ Local File InclusionCreta Testimonial Showcase7.2 (v3.1)High
CVE-2025-34248D-Link Nuclias Connect < v1.3.1.4 Directory Traversal to Arbitrary File DeletionNuclias Connect7.2 (v4.0)High
CVE-2025-48868Horilla vulnerable to authenticated RCE via eval() in project_bulk_archivehorilla7.2 (v3.1)High
CVE-2025-58034Fortinet FortiWeb unauthenticated RCEfortiweb7.2 (v3.1)High
CVE-2025-58762Tautulli vulnerable to Authenticated Remote Code Execution via write primitive and Script notification agenttautulli7.2 (v3.1)High
CVE-2025-58763Tautulli vulnerable to Authenticated Remote Code Execution via Command Injectiontautulli7.2 (v3.1)High
CVE-2025-62429ClipBucket v5 executes arbitrary PHP codeclipbucket7.2 (v3.1)High
CVE-2026-108902pH7Builder before 18.5.0 Path Traversal Arbitrary File Deletion via picture_linkph7builder7.2 (v4.0)High
CVE-2026-15244HUSKY - Products Filter Professional for WooCommerce < 1.4.1 - Shop Manager+ Local File Inclusion via meta_filter searchHUSKY7.2 (v3.1)High
CVE-2026-15686Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution VulnerabilityAdminer7.2 (v3.0)High
CVE-2026-18274Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution VulnerabilityDatabase Proxy7.2 (v3.0)High
CVE-2026-20297Path Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprisesplunk7.2 (v3.1)High
CVE-2026-27891Remote Code Execution (RCE) via Zip Slip in Plugin Upload Mechanismfacturascripts7.2 (v3.1)High
CVE-2026-33715Chamilo LMS has Unauthenticated SSRF and Open Email Relay via install.ajax.php test_mailer actionchamilo lms7.2 (v3.1)High
CVE-2026-34607Emlog: Path Traversal in emUnZip() allows arbitrary file write leading to RCEemlog7.2 (v3.1)High
CVE-2026-34968Adminer before 5.4.3 Arbitrary File Deletion via SQLite Dropadminer7.2 (v4.0)High
CVE-2026-35174Chyrp Lite has a Path Traversal to Remote Code Executionchyrp lite7.2 (v3.1)High
CVE-2026-3576Wordpress Planyo Online Reservation System Arbitrary File Read (CVE-2026-3576)Planyo online reservation system7.2 (v3.1)High
CVE-2026-39387BoidCMS: Local File Inclusion (LFI) leads to Remote Code Execution (RCE) via tpl parameterboidcms7.2 (v3.1)High
CVE-2026-45019Chainlit: SSRF via MCP SSE and streamable-http transports allows unauthenticated internal network accesschainlit7.2 (v3.1)High
CVE-2026-45225Heym < 0.0.21 Path Traversal File Upload via upload_file()heym7.2 (v4.0)High
CVE-2026-45233HTMLy CMS 3.1.1 Path Traversal via oldfile Parameter in Autosavehtmly7.2 (v4.0)High
CVE-2026-54544Fireshare has unauthenticated SSRF via missing login_required on webhook test endpointsfireshare7.2 (v3.1)High
CVE-2026-55231Vvveb: Path traversal in Vvveb via sanitizeFileName() bypass enables arbitrary file read and delete through backup toolsVvveb7.2 (v3.1)High
CVE-2026-57114PraisonAI: Jobs webhook SSRF protection bypass via DNS rebindingPraisonAI7.2 (v3.1)High
CVE-2026-58372SeaweedFS < 4.34 - Cross-Bucket Object Deletion via DeleteObjects Request-Body Keysseaweedfs7.2 (v4.0)High
CVE-2026-6020ShopLentor <= 3.3.7 - Authenticated (Administrator+) Arbitrary Function Execution via 'callback' Parameter via REST APIShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin7.2 (v3.1)High
CVE-2026-6229Royal Addons for Elementor <= 1.7.1057 - Authenticated (Contributor+) Server-Side Request Forgery via CSV URL ParameterRoyal Addons for Elementor – Addons and Templates Kit for Elementor7.2 (v3.1)High
CVE-2026-71284Fledge IoT Gateway Backup Restore OS Command Injection via Tar Member Filenamefledge7.2 (v3.1)High
CVE-2026-7693Backup Migration <= 2.1.5.1 - Authenticated (Administrator+) OS Command Injection via 'file' ParameterBackup Migration7.2 (v3.1)High
CVE-2026-81669IBM Guardium Data Protection is affected by multiple vulnerabilities.guardium data protection7.2 (v3.1)High
CVE-2026-85160AVideo through c91b5975d CSRF and Path Traversal via stopLive.phpAVideo7.2 (v4.0)High
CVE-2026-92263SparkyFitness: Authenticated OS command injection (host RCE) via backup-restore filename in POST /api/admin/backup/restoSparkyFitness7.2 (v3.1)High
CVE-2026-92604Scirius through 3.8.0 Arbitrary File Write via PCAP Uploadscirius7.2 (v4.0)High
CVE-2026-92919admin3 through 3.0.0 Arbitrary File Write via Path Traversal in Storage Upload Filenameadmin37.2 (v4.0)High
CVE-2026-96896Malcure Malware Shield < 19.9.7 - Multisite Subsite Admin+ Arbitrary File Write and Deletion via wpmr_ajax_requestMalcure Malware Shield — Removal, Repair, Monitor7.2 (v3.1)High
CVE-2026-9777ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerabilityunizon7.2 (v3.0)High
CVE-2010-3714TYPO3 sa-2010-020 Remote File Disclosuretypo37.1 (v2.0)High
CVE-2018-25393Navigate CMS 2.8.5 Path Traversal via navigate_download.phpNavigate CMS7.1 (v4.0)High
CVE-2018-25421Open STA Manager 2.3 Arbitrary File Download via Path TraversalOpen STA Manager7.1 (v4.0)High
CVE-2019-25246BEWARD N100 H.264 VGA IP Camera M2.1.6 - Arbitrary File DisclosureN100 H.264 VGA IP Camera7.1 (v4.0)High
CVE-2022-51025Penta Security WAPPLES 4.0.54.1 / 5.0 / 6.0 Path Traversal via /webapi/file/transferWAPPLES7.1 (v4.0)High
CVE-2024-58386ZoneMinder 1.37.x Path Traversal via files viewzoneminder7.1 (v4.0)High
CVE-2025-34098Riverbed SteelHead VCX File ReadSteelHead VCX7.1 (v4.0)High
CVE-2025-65958Open WebUI vulnerable to Server-Side Request Forgery (SSRF) via Arbitrary URL Processing in /api/v1/retrieval/process/weopen webui7.1 (v3.1)High
CVE-2026-100849AzuraCast before 0.23.8 SSRF Filter Bypass via Hostname and Private IPsAzuraCast7.1 (v4.0)High
CVE-2026-100859Heym before 0.0.106 Credential Exfiltration via URL Overrideheym7.1 (v4.0)High
CVE-2026-107362Server-Side Request Forgery in MalcolmMalcolm7.1 (v3.1)High
CVE-2026-108158plugNmeet Server through 2.5.2 Path Traversal via /api/whiteboard/convertplugNmeet-server7.1 (v4.0)High
CVE-2026-111313JobOps through 0.13.1 SSRF via POST /api/manual-jobs/fetchJobOps7.1 (v4.0)High
CVE-2026-22664prompts.chat SSRF via Fal.ai Media Status Pollingprompts.chat7.1 (v4.0)High
CVE-2026-34414Xerte Online Toolkits Arbitrary File Upload - Unauthenticated Media Uploadxerteonlinetoolkits7.1 (v4.0)High
CVE-2026-34790Endian Firewall /cgi-bin/backup.cgi remove ARCHIVE Directory Traversalfirewall community7.1 (v4.0)High
CVE-2026-39308PraisonAI recipe registry publish path traversal allows out-of-root file writepraisonai7.1 (v3.1)High
CVE-2026-39370WWBN AVideo has an Allowlisted downloadURL media extensions bypass SSRF protection and enable internal response exfiltravideo7.1 (v3.1)High
CVE-2026-40160PraisonAIAgents has SSRF via unvalidated URL in web_crawl httpx fallbackpraisonaiagents7.1 (v4.0)High
CVE-2026-40526Volmarg Personal Management System Path Traversal via get-file Endpointpersonal-management-system7.1 (v4.0)High
CVE-2026-41272Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure)flowise7.1 (v3.1)High
CVE-2026-42339New API: SSRF Filter Bypass via 0.0.0.0new api7.1 (v4.0)High
CVE-2026-46555WhatsApp MCP: Unauthenticated bridge API allows message sending and arbitrary file exfiltrationwhatsapp mcp server7.1 (v3.1)High
CVE-2026-47118Agent Zero < 1.15 Path Traversal File Read via image_get APIagent-zero7.1 (v4.0)High
CVE-2026-47735Arc has an authenticated arbitrary local-file read via DuckDB I/O functions that bypasses RBAC table-level checksarc7.1 (v4.0)High
CVE-2026-48997e107: Command Injection via shell expansion in ImageMagick resize destination pathe1077.1 (v3.1)High
CVE-2026-54077ArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated usersarcadedb7.1 (v3.1)High
CVE-2026-54166Shelf Vulnerable to Server-Side Request Forgery (SSRF) via Asset CSV Import imageUrl Validation Bypassshelf.nu7.1 (v3.1)High
CVE-2026-55096SSRF via DNS-resolution gap in _validate_url_security (file download by URL)fast-mcp-telegram7.1 (v3.1)High
CVE-2026-55537PraisonAI: Webhook SSRF via DNS fail-open in JobSubmitRequest.validate_webhook_url() — bypass of CVE-2026-40114PraisonAI7.1 (v3.1)High
CVE-2026-55787Flyto2 Core: SSRF guard bypass via IPv6 transition addresses (IPv4-mapped / 6to4 / NAT64) in validate_url_ssrfflyto-core7.1 (v3.1)High
CVE-2026-56394Craft CMS - Authenticated Path Traversal in assets/icon Extension Parametercms7.1 (v4.0)High
CVE-2026-57303assembla Server-Side Request Forgery Vulnerabilityassembla7.1 (v3.1)High
CVE-2026-58451Horde IMP < 7.0.1 Path Traversal via Compose.php img srcimp7.1 (v4.0)High
CVE-2026-58485mcp-searxng: DNS-resolved Private Hostname SSRF in web_url_readmcp-searxng7.1 (v3.1)High
CVE-2026-61647@roomi-fields/notebooklm-mcp has path traversal in vault.batch tool that allows arbitrary file write outside intended vanotebooklm-mcp7.1 (v4.0)High
CVE-2026-63445Perses: Unvalidated project parameter enables filesystem path traversalperses7.1 (v4.0)High
CVE-2026-64826rConfig < 8.2.13 Path Traversal File Read via FileDownloadControllerrConfig7.1 (v4.0)High
CVE-2026-71426GetSimple CMS: Authenticated Stored Local File Inclusion (LFI) via page "template" fieldGetSimpleCMS-CE7.1 (v4.0)High
CVE-2026-71964CyberPanel 2.4.3 Arbitrary File Read via File Manager ZIP Uploadcyberpanel7.1 (v4.0)High
CVE-2026-72695Grav before 2.0.16 Path Traversal via MediaUploadTrait deleteFilegrav7.1 (v4.0)High
CVE-2026-74247Quay: ssrf via build archive_url in quay build apiopenshift update service7.1 (v3.1)High
CVE-2026-75830grav-plugin-api before 1.0.15 Path Traversal via batchCopygrav7.1 (v4.0)High
CVE-2026-75844ArcadeDB before 26.8.1 SSRF via IMPORT DATABASE validator bypassarcadedb7.1 (v4.0)High
CVE-2026-76210phpMyFAQ before v4.1.6 Local File Disclosure via PDF Exportphpmyfaq7.1 (v4.0)High
CVE-2026-77939Flextype CMS 1.0.0-dev RCE via POST /api/v1/query Endpointflextype7.1 (v4.0)High
CVE-2026-79747MCPHub vulnerable to SSRF: a non-admin user can make mcphub request arbitrary URLs and read the response (OpenAPI proxymcphub7.1 (v3.1)High
CVE-2026-79788Dradis Community Edition 5.1.0 through 5.2.0 Server-Side Request Forgery via Unrestricted AI Provider Addressdradis-ce7.1 (v4.0)High
CVE-2026-80350OneUptime before 12.0.7 Server-Side Request Forgery via IPv4-Mapped IPv6 Webhook URLOneUptime7.1 (v4.0)High
CVE-2026-81030Mage AI through 0.9.79 Arbitrary File Read via Unvalidated Path in browser_items Endpointmage-ai7.1 (v4.0)High
CVE-2026-82241Budibase backend-core SSRF via incomplete default blacklistserver7.1 (v4.0)High
CVE-2026-82246Budibase Server before 3.41.3 SSRF via Query Importserver7.1 (v4.0)High
CVE-2026-82877ILIAS before 9.22 Arbitrary File Read via SOAP addFileILIAS7.1 (v4.0)High
CVE-2026-85163AVideo Server-Side Request Forgery via epg_link parameterAVideo7.1 (v4.0)High
CVE-2026-85164WWBN AVideo Server-Side Request Forgery via set_api_userImagesAVideo7.1 (v4.0)High
CVE-2026-87821Lara Dashboard 0.9.2 through 1.3.1 Server-Side Request Forgery in Builder Markdown Fetchlaradashboard7.1 (v4.0)High
CVE-2026-87999Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetchopen webui7.1 (v3.1)High
CVE-2026-88938knowns through 0.33.0 Path Traversal via code.find MCP toolknowns7.1 (v4.0)High
CVE-2026-91750WeKnora before 0.7.0 SSRF via Unvalidated HTTP RedirectsWeKnora7.1 (v4.0)High
CVE-2026-92153F´: Arbitrary File Write in Svc::FileUplink via attacker-controlled StartPacket.destinationPathfprime7.1 (v3.1)High
CVE-2026-92775Wiki.js through 2.5.314 Server-Side Request Forgery via Image PrefetchWiki.js7.1 (v4.0)High
CVE-2026-92804Nango through 0.70.4 Server-Side Request Forgery via ConfigurationNango7.1 (v4.0)High
CVE-2026-93014RosarioSIS before 12.9 Path Traversal in File Deletion via filename ParameterRosarioSIS7.1 (v4.0)High
CVE-2026-93988QloApps through 1.7.0 Arbitrary File Read via getEmailHTMLqloapps7.1 (v4.0)High
CVE-2026-9587Authenticated Local File Inclusion (LFI) in Switchvox SMB Web PortalSwitchvox SMB Edition7.1 (v4.0)High
CVE-2026-96651Plex Media Server path traversalmedia server7.1 (v4.0)High
CVE-2026-10107MoviePilot v2 SSRF via /api/v1/system/img/{proxy} EndpointMoviePilot7.0 (v4.0)High
CVE-2026-101898Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controlsaxios7.0 (v4.0)High
CVE-2026-114399Trudesk through 1.2.11 Path Traversal via Backup Delete and Restore APItrudesk7.0 (v4.0)High
CVE-2026-114492gin-vue-admin through 2.9.2 Path Traversal via removePlugin Endpointgin-vue-admin7.0 (v4.0)High
CVE-2026-116066Firecrawl before 2.11.586 SSRF Protection Bypass via DNS Rebinding in Playwright ServiceFirecrawl7.0 (v4.0)High
CVE-2026-40506OpenEMR Path Traversal Arbitrary Directory Deletion via standard_tables_manage.phpopenemr7.0 (v4.0)High
CVE-2026-52835Tautulli: Path traversal / arbitrary file write via unsanitized upload filename in import_config and import_databaseTautulli7.0 (v4.0)High
CVE-2026-54134OctoPrint: File exfiltration possible via query parameters on upload endpointsOctoPrint7.0 (v4.0)High
CVE-2026-73033Sucuri WordPress Plugin 2.7.3 Path Traversal via integrity.lib.phpsucuri-wordpress-plugin7.0 (v4.0)High
CVE-2026-74031Wazuh 4.1.1 before 4.14.8 Path Traversal File Deletion via Rule/Decoder Delete Helperswazuh-manager7.0 (v4.0)High
CVE-2026-74038Wazuh 4.0.0 < 4.14.6 Path Traversal DoS via Agent Enrollmentwazuh7.0 (v4.0)High
CVE-2013-10062Linksys E1500 Directory Traversal VulnerabilityE15006.9 (v4.0)Medium
CVE-2019-25760Joomla! Component Easy Shop 1.2.3 Local File Inclusioneasy shop6.9 (v4.0)Medium
CVE-2022-50954WordPress Plugin cab-fare-calculator 1.0.3 Local File Inclusioncab-fare-calculator6.9 (v4.0)Medium
CVE-2022-50956WordPress Plugin amministrazione-aperta 3.7.3 Local File Readamministrazione-aperta6.9 (v4.0)Medium
CVE-2023-30804Sangfor Next-Gen Application Firewall Authenticated File Disclosurenext-gen application firewall6.9 (v4.0)Medium
CVE-2025-10695OpenSupports 4.11.0 — SSRF via test imap and smtp endpointsopensupports6.9 (v4.0)Medium
CVE-2025-11864NucleoidAI Nucleoid Outbound Request cluster.ts extension.apply server-side request forgeryNucleoid6.9 (v4.0)Medium
CVE-2025-1743Pichome 2.1.0 - Arbitrary File ReadPichome6.9 (v4.0)Medium
CVE-2025-34282ThingsBoard < v4.2.1 SVG Image SSRFthingsboard6.9 (v4.0)Medium
CVE-2026-100601ClawHub SSRF via Unchecked DNS Resolution in Profile Imageclawhub6.9 (v4.0)Medium
CVE-2026-100696Adminer before 6.0.2 Unauthenticated SSRF via Elasticsearch Driveradminer6.9 (v4.0)Medium
CVE-2026-103530decolua 9Router Search Endpoint ssrfGuard.js fetch server-side request forgery9Router6.9 (v4.0)Medium
CVE-2026-104440YesWiki before 4.6.7 Blind SSRF via bazarlist API idtypeannonce Parameteryeswiki6.9 (v4.0)Medium
CVE-2026-104459YesWiki before 4.6.7 SSRF via ActivityPub WebFinger actor_handleyeswiki6.9 (v4.0)Medium
CVE-2026-108554PDFMathTranslate through 1.9.11 SSRF via Gradio Web GUI Link InputPDFMathTranslate6.9 (v4.0)Medium
CVE-2026-109309SiYuan v3.7.0 before v3.8.6 Arbitrary File Read via Plugin ResponseFile.Pathsiyuan6.9 (v4.0)Medium
CVE-2026-110222Razorpay IFSC Ruby gem through 2.0.62 SSRF via IFSC lookupIFSC6.9 (v4.0)Medium
CVE-2026-111053FOSSBilling: Unauthenticated attacker can probe existence of arbitrary files via guest/system/template_existsFOSSBilling6.9 (v4.0)Medium
CVE-2026-111230Netgate pfSense CE through 2.9.0 Local File Read via Dynamic DNS Update URLpfsense6.9 (v4.0)Medium
CVE-2026-111320ValueCell through 0.1.20 Unauthenticated SSRF via /api/v1/models/checkValueCell6.9 (v4.0)Medium
CVE-2026-111662Chaskiq through 2.0.3 Unauthenticated SSRF via /oembed Endpointchaskiq6.9 (v4.0)Medium
CVE-2026-111720fish-island-backend through commit 7c61b78 SSRF via /api/web/parsefish-island-backend6.9 (v4.0)Medium
CVE-2026-111925Mopidy before 4.0.5 Path Traversal via File Backend library.lookupMopidy6.9 (v4.0)Medium
CVE-2026-112267SGLang through 0.5.22 SSRF via bootstrap_host and bootstrap_port on Decode Workersglang6.9 (v4.0)Medium
CVE-2026-11450GL.iNet GL-MT3000 Path Normalization dlopen command injectionGL-MT30006.9 (v4.0)Medium
CVE-2026-116069NiubiGEO before 0.3.2 Unauthenticated SSRF via /audit-plan domain Fieldniubigeo6.9 (v4.0)Medium
CVE-2026-116168SiYuan before v3.8.7 Path Traversal Local File Read via MCP Asset Toolsiyuan6.9 (v4.0)Medium
CVE-2026-116253DedeCMS Advertisement Rendering ad_js.php _RunMagicQuotes code injectionDedeCMS6.9 (v4.0)Medium
CVE-2026-19983GL.iNet XE3000 NAS Command Service gl_nas_sys os command injectionA13006.9 (v4.0)Medium
CVE-2026-34964Adminer before 5.5.0 SSRF via PDO DSN Injectionadminer6.9 (v4.0)Medium
CVE-2026-39383Gotenberg unauthenticated blind SSRF via unfiltered webhook URLgotenberg6.9 (v4.0)Medium
CVE-2026-41459Xerte Online Toolkits Arbitrary File Upload - Unauthenticated Media Uploadxerteonlinetoolkits6.9 (v4.0)Medium
CVE-2026-41917OpenKM 6.3.12 Local File Inclusion via Admin ScriptingOpenKM Community Edition6.9 (v4.0)Medium
CVE-2026-42888Audiobookshelf: Path Traversal vulnerability in the audiobookshelf projectaudiobookshelf6.9 (v4.0)Medium
CVE-2026-44652SillyTavern: SSRF vulnerability in the CORS proxy middlewareSillyTavern6.9 (v4.0)Medium
CVE-2026-45731WWBN AVideo: Authenticated Arbitrary File Read in view/update.phpavideo6.9 (v4.0)Medium
CVE-2026-45774compliance-trestle Profile Import has an Arbitrary File Read via trestle:// URI and Relative Path Traversalcompliance-trestle6.9 (v4.0)Medium
CVE-2026-46337WWBN AVideo: Unauthenticated Arbitrary Image Read via Path Traversal in view/img/image404Raw.phpavideo6.9 (v4.0)Medium
CVE-2026-53757Emlog: Zip Slip Path Traversal in Plugin/Template ZIP Upload Enables RCEemlog6.9 (v4.0)Medium
CVE-2026-54150next-video: Unauthenticated arbitrary file read via /api/video request handlernext-video6.9 (v4.0)Medium
CVE-2026-54885Server-side request forgery in Boruta OAuth request_uri and OpenID jwks_uri fetchingboruta6.9 (v4.0)Medium
CVE-2026-5739PowerJob OpenAPI Endpoint addWorkflowNode GroovyEvaluator.evaluate code injectionPowerJob6.9 (v4.0)Medium
CVE-2026-59101AutoBangumi < 3.2.8 - SSRF via /api/v1/setup/test-downloaderAuto Bangumi6.9 (v4.0)Medium
CVE-2026-60091PraisonAI before 4.6.78 Unauthenticated SSRF via webhook_urlPraisonAI6.9 (v4.0)Medium
CVE-2026-61793Nuxt OG Image has unauthenticated SSRF via fonts[].path URL parameterog-image6.9 (v4.0)Medium
CVE-2026-63086text-generation-inference 3.3.7 SSRF via fetch_image in multimodal chat completionstext-generation-inference6.9 (v4.0)Medium
CVE-2026-63096Dendrite 0.13.8 SSRF via Unauthenticated Legacy Media Download Endpointdendrite6.9 (v4.0)Medium
CVE-2026-71932DrayTek VigorSwitch Multiple Models Path Traversal via getSyslogFileVigorSwitch G2540xs6.9 (v4.0)Medium
CVE-2026-73058stoatchat before 0.15.0 SSRF via IPv6 unspecified address bypassstoatchat6.9 (v4.0)Medium
CVE-2026-74235GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Configuration Download HandlerGFI Exinda AI6.9 (v4.0)Medium
CVE-2026-75592Kirby: Access to image files outside of the site root via path traversal in the media handlingkirby6.9 (v4.0)Medium
CVE-2026-79743MCPHub: Path Traversal via Malicious MCPB Manifest Namemcphub6.9 (v4.0)Medium
CVE-2026-79773Winter CMS before 1.2.13 Local File Inclusion via JavaScriptwinter6.9 (v4.0)Medium
CVE-2026-79781rclone serve s3 Path Traversal via dot-dot object keysrclone6.9 (v4.0)Medium
CVE-2026-81678AVideo SSRF Guard Bypass via IPv6 Transition AddressesAVideo6.9 (v4.0)Medium
CVE-2026-82233SiYuan before v3.8.1 Path Traversal via asset.uploadsiyuan6.9 (v4.0)Medium
CVE-2026-84199Kyverno before 1.16.2 SSRF via APICall Featurekyverno6.9 (v4.0)Medium
CVE-2026-85609Openpanel before 2.3.0 SSRF via Site Checker Endpointopenpanel6.9 (v4.0)Medium
CVE-2026-85662Marqo 2.26.0 Server-Side Request Forgery via Media URLsmarqo6.9 (v4.0)Medium
CVE-2026-86539knowns through 0.33.0 Server-Side Request Forgery via embedding-models endpointknowns6.9 (v4.0)Medium
CVE-2026-86806opengeos GeoLibre _is_within_roots server-side request forgeryGeoLibre6.9 (v4.0)Medium
CVE-2026-8712Wyoming < 1.10.2 SSRF via uri Query Parameterwyoming6.9 (v4.0)Medium
CVE-2026-88940knowns through 0.33.0 Arbitrary Directory Enumeration via workspace browse endpointknowns6.9 (v4.0)Medium
CVE-2026-91081Docs through 5.6.1 SSRF via Unauthenticated cors-proxy Endpointdocs6.9 (v4.0)Medium
CVE-2026-91966AVideo through 29.0 Unauthenticated SSRF via Host HeaderAVideo6.9 (v4.0)Medium
CVE-2026-92813Metabase through 0.63.18 SSRF via GeoJSON URL validation bypassMetabase6.9 (v4.0)Medium
CVE-2026-93347Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster get_list_filewazuh-manager6.9 (v4.0)Medium
CVE-2007-4556OpenSymphony XWork/Apache Struts2 - Remote Code Executionxwork6.8 (v2.0)Medium
CVE-2008-2650CMSimple 3.1 - Local File Inclusioncmsimple6.8 (v2.0)Medium
CVE-2008-6172Joomla! Component RWCards 3.0.11 - Local File Inclusionrwcards6.8 (v2.0)Medium
CVE-2009-3053Joomla! Agora 3.0.0b - Local File InclusionJoomla!6.8 (v2.0)Medium
CVE-2010-1056Joomla! Component com_rokdownloads - Local File Inclusioncom rokdownloads6.8 (v2.0)Medium
CVE-2010-1219Joomla! Component com_janews - Local File Inclusioncom janews6.8 (v2.0)Medium
CVE-2010-1469Joomla! Component JProject Manager 1.0 - Local File Inclusioncom jprojectmanager6.8 (v2.0)Medium
CVE-2010-1473Joomla! Component Advertising 0.25 - Local File Inclusioncom advertising6.8 (v2.0)Medium
CVE-2010-1474Joomla! Component Sweetykeeper 1.5 - Local File Inclusioncom sweetykeeper6.8 (v2.0)Medium
CVE-2010-1475Joomla! Component Preventive And Reservation 1.0.5 - Local File Inclusioncom preventive6.8 (v2.0)Medium
CVE-2010-1476Joomla! Component AlphaUserPoints 1.5.5 - Local File Inclusioncom alphauserpoints6.8 (v2.0)Medium
CVE-2010-1478Joomla! Component Jfeedback 1.2 - Local File Inclusioncom jfeedback6.8 (v2.0)Medium
CVE-2010-1607Joomla! Component WMI 1.5.0 - Local File Inclusioncom wmi6.8 (v2.0)Medium
CVE-2010-1715Joomla! Component Online Exam 1.5.0 - Local File Inclusioncom onlineexam6.8 (v2.0)Medium
CVE-2010-1718Joomla! Component Archery Scores 1.0.6 - Local File Inclusioncom archeryscores6.8 (v2.0)Medium
CVE-2010-1719Joomla! Component MT Fire Eagle 1.2 - Local File Inclusioncom mtfireeagle6.8 (v2.0)Medium
CVE-2010-1722Joomla! Component Online Market 2.x - Local File Inclusioncom market6.8 (v2.0)Medium
CVE-2010-1723Joomla! Component iNetLanka Contact Us Draw Root Map 1.1 - Local File Inclusioncom drawroot6.8 (v2.0)Medium
CVE-2010-1979Joomla! Component Affiliate Datafeeds 880 - Local File Inclusioncom datafeeds6.8 (v2.0)Medium
CVE-2010-1981Joomla! Component Fabrik 2.0 - Local File Inclusionfabrik6.8 (v2.0)Medium
CVE-2010-2122Joomla! Component simpledownload <=0.9.5 - Arbitrary File Retrievalcom simpledownload6.8 (v2.0)Medium
CVE-2010-2507Joomla! Component Picasa2Gallery 1.2.8 - Local File Inclusioncom picasa2gallery6.8 (v2.0)Medium
CVE-2010-2680Joomla! Component jesectionfinder - Local File Inclusioncom jesectionfinder6.8 (v2.0)Medium
CVE-2010-2857Joomla! Component Music Manager - Local File Inclusioncom music6.8 (v2.0)Medium
CVE-2010-2920Joomla! Component Foobla Suggestions 1.5.1.2 - Local File Inclusioncom foobla suggestions6.8 (v2.0)Medium
CVE-2010-4617Joomla! Component JotLoader 2.2.1 - Local File Inclusioncom jotloader6.8 (v2.0)Medium
CVE-2011-2744Chyrp 2.x - Local File Inclusionchyrp6.8 (v2.0)Medium
CVE-2011-4449WikkaWiki 1.3.2 - Multiple Vulnerabilitieswikkawiki6.8 (v2.0)Medium
CVE-2011-4452WikkaWiki 1.3.2 - Multiple Vulnerabilitieswikkawiki6.8 (v2.0)Medium
CVE-2012-0392Apache Struts2 S2-008 RCEstruts6.8 (v2.0)Medium
CVE-2014-2383Dompdf < v0.6.0 - Local File Inclusiondompdf6.8 (v2.0)Medium
CVE-2018-6230Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilitiesemail encryption gateway6.8 (v3.0)Medium
CVE-2022-28810ManageEngine ADSelfService Plus Custom Script Executionmanageengine adselfservice plus6.8 (v3.1)Medium
CVE-2025-12136Real Cookie Banner: GDPR & ePrivacy Cookie Consent <= 5.2.4 - Authenticated (Admin+) Server-Side Request Forgery via scaReal Cookie Banner: GDPR & ePrivacy Cookie Consent6.8 (v3.1)Medium
CVE-2025-59709biztalk360 Path Traversal Vulnerabilitybiztalk3606.8 (v3.1)Medium
CVE-2025-66302Grav vulnerable to Path Traversal allowing server files backupgrav6.8 (v3.1)Medium
CVE-2025-8385Zombify <= 1.7.5 - Authenticated (Subscriber+) Path Traversal to Arbitrary File ReadZombify6.8 (v3.1)Medium
CVE-2026-102354BentoPDF: SSRF via DNS Rebinding (TOCTOU) in Cloudflare CORS Proxy Workerbentopdf6.8 (v3.1)Medium
CVE-2026-35593Trilium Notes has Local File Inclusion via upload modified file API endpointTrilium6.8 (v3.1)Medium
CVE-2026-55421Open edX Platform: SSRF in Studio Video Download Endpointopenedx-platform6.8 (v3.1)Medium
CVE-2026-63334draw.io: SSRF via DNS rebinding in ProxyServlet bypasses private IP blocklistdrawio6.8 (v3.1)Medium
CVE-2026-71475Insights-client-rhel9: insights-client: spoke-controlled clusterid injected unencoded into insights api url pathadvanced cluster management for kubernetes6.8 (v3.1)Medium
CVE-2026-76900CordysCRM: SSRF via Approval Flow Webhook Execution due to Missing SSRF Validation at RuntimeCordysCRM6.8 (v3.1)Medium
CVE-2025-11977HappyForms <= 1.26.12 - Authenticated (Admin+) Local File InclusionHappyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms6.6 (v3.1)Medium
CVE-2026-10821Yoast SEO Premium < 27.6.1 - Author+ Arbitrary .htaccess Directive Injection to RCEYoast SEO Premium6.6 (v3.1)Medium
CVE-2026-14280Events Manager <= 7.3.7.4 - Authenticated (Administrator+) Local File Inclusion via 'dbem_data[updates]' Array KeysEvents Manager – Calendar, Bookings, Tickets, and more!6.6 (v3.1)Medium
CVE-2026-34216CtrlPanel: Authenticated Remote Code Execution via Dynamic Class Instantiation in SettingsController.phppanel6.6 (v3.1)Medium
CVE-2026-53708ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (/admin/gateways/test)mcp-context-forge6.6 (v3.1)Medium
CVE-2026-79761Termix: Command injection in SSH key deployment verificationTermix6.6 (v3.1)Medium
CVE-2013-4861MiCasaVerde VeraLite 1.5.408 - Multiple Vulnerabilitiesveralite firmware6.5 (v3.1)Medium
CVE-2013-4865MiCasaVerde VeraLite 1.5.408 - Multiple Vulnerabilitiesveralite firmware6.5 (v3.1)Medium
CVE-2015-9538WordPress NextGEN Gallery Directory Read Vulnerabilitynextgen gallery6.5 (v3.1)Medium
CVE-2016-6435Cisco Firepower Management Console 6.0 Post Auth Report Download Directory Traversalsecure firewall management center6.5 (v3.0)Medium
CVE-2016-6897WordPress Traversal Directory DoSWordPress6.5 (v3.0)Medium
CVE-2017-14537Trixbox 2.8.0 - Path Traversaltrixbox6.5 (v3.1)Medium
CVE-2017-18357Shopware createInstanceFromNamedArguments PHP Object Instantiation RCEshopware6.5 (v3.0)Medium
CVE-2018-15140OpenEMR 5.0.1.3 - (Authenticated) Arbitrary File Actionsopenemr6.5 (v3.0)Medium
CVE-2018-15141OpenEMR 5.0.1.3 - (Authenticated) Arbitrary File Actionsopenemr6.5 (v3.0)Medium
CVE-2018-18760RhinOS CMS 3.x - Arbitrary File Downloadrhinos6.5 (v3.0)Medium
CVE-2018-6219Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilitiesemail encryption gateway6.5 (v3.0)Medium
CVE-2019-14312Aptana Jaxer 1.0.3.4547 - Local File inclusionjaxer6.5 (v3.0)Medium
CVE-2019-8943WordPress Crop-image Shell UploadWordPress6.5 (v3.1)Medium
CVE-2021-24947WordPress Responsive Vector Maps < 6.4.2 - Arbitrary File Readresponsive vector maps6.5 (v3.1)Medium
CVE-2021-28149Hongdian H8922 3.0.5 Devices - Local File Inclusionh8922 firmware6.5 (v3.1)Medium
CVE-2021-29006rConfig 3.9.6 - Local File Inclusionrconfig6.5 (v3.1)Medium
CVE-2021-36749Apache Druid - Local File Inclusiondruid6.5 (v3.1)Medium
CVE-2021-40651OS4Ed OpenSIS Community 8.0 - Local File Inclusionopensis6.5 (v3.1)Medium
CVE-2021-45839TerraMaster TOS 4.2.15 or lower - RCE chain from unauthenticated to root via session crafting.tos6.5 (v3.1)Medium
CVE-2022-34125GLPI Activity v3.1.0 - Authenticated Local File Inclusion on Activity plugincmdb6.5 (v3.1)Medium
CVE-2022-37299Shirne CMS 1.2.0 - Local File Inclusionshirne cms6.5 (v3.1)Medium
CVE-2024-24565CrateDB Database - Arbitrary File Readcratedb6.5 (v3.1)Medium
CVE-2024-27564ChatGPT个人专用版 - Server Side Request Forgerychatgpt web6.5 (v3.1)Medium
CVE-2024-30851Jasmin Ransomware Web Server Unauthenticated Directory Traversaljasmin-ransomware6.5 (v3.1)Medium
CVE-2024-34319Server-Side Request Forgery-6.5 (v3.1)Medium
CVE-2024-36527Puppeteer Renderer - Directory Traversal-6.5 (v3.1)Medium
CVE-2024-55457MasterSAM Star Gate v11 - Local File Inclusion-6.5 (v3.1)Medium
CVE-2024-9765EKC Tournament Manager WordPress plugin - Path Traversalekc tournament manager6.5 (v3.1)Medium
CVE-2025-11372LearnPress – WordPress LMS Plugin <= 4.2.9.3 - Missing Authorization to Unauthenticated Database Table ManipulationLearnPress – WordPress LMS Plugin for Create and Sell Online Courses6.5 (v3.1)Medium
CVE-2025-11705Anti-Malware Security and Brute-Force Firewall <= 4.23.81 - Missing Authorization to Authenticated (Subscriber+) ArbitraAnti-Malware Security and Brute-Force Firewall6.5 (v3.1)Medium
CVE-2025-13380AI Engine for WordPress: ChatGPT, GPT Content Generator <= 1.0.1 - Authenticated (Contributor+) Arbitrary File ReadAI Engine for WordPress: ChatGPT, GPT Content Generator6.5 (v3.1)Medium
CVE-2025-13891Image Gallery – Photo Grid & Video Gallery (Modula) <= 2.13.3 - Missing Authorization to Arbitrary Directory ListingModula Image Gallery – Photo Grid & Video Gallery6.5 (v3.1)Medium
CVE-2025-14545YML for Yandex Market < 5.0.26 - Shop Manager+ RCE via Feed GenerationYML for Yandex Market6.5 (v3.1)Medium
CVE-2025-2292Xorcom CompletePBX Authenticated File Disclosure via Backup Downloadcompletepbx6.5 (v3.1)Medium
CVE-2025-28367mojoPortal <=2.9.0.1 - Directory Traversalmojoportal6.5 (v3.1)Medium
CVE-2025-32815NetMRI < 7.6.1 - Authentication Bypass via Hardcoded Credentialsnetmri6.5 (v3.1)Medium
CVE-2025-45870LogicalDOC Enterprise up to and for v9.1.1 Path Traversal Vulnerability-6.5 (v3.1)Medium
CVE-2025-49138HAX CMS vulnerable to Local File Inclusion via saveOutline API Location Parameterhaxcms-php6.5 (v3.1)Medium
CVE-2025-50234mccms Arbitrary Code Execution Vulnerabilitymccms6.5 (v3.1)Medium
CVE-2025-62424ClipBucket path traversal vulnerability in template editor allows arbitrary file read and writeclipbucket6.5 (v3.1)Medium
CVE-2025-67743Local Deep Research is Vulnerable to Server-Side Request Forgery (SSRF) in Download Servicelocal deep research6.5 (v3.1)Medium
CVE-2025-68477Langflow vulnerable to Server-Side Request Forgerylangflow6.5 (v3.1)Medium
CVE-2026-104107FileRise: Authenticated path traversal escapes configured storage root through inherited ACLsFileRise6.5 (v3.1)Medium
CVE-2026-11442Allegra exportReport Directory Traversal Information Disclosure VulnerabilityAllegra6.5 (v3.0)Medium
CVE-2026-114623baserCMS: Path traversal in the BcThemeFile admin screen allows file disclosurebasercms6.5 (v3.1)Medium
CVE-2026-115886MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI emlflow6.5 (v3.1)Medium
CVE-2026-12767Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetchesLangflow OSS6.5 (v3.1)Medium
CVE-2026-12898All-in-One WP Migration and Backup < 7.106 - Arbitrary Log File Writeall-in-one-wp-migration6.5 (v3.1)Medium
CVE-2026-14470Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base componelangflow6.5 (v3.1)Medium
CVE-2026-15974sglang Server-Side Request Forgery Vulnerabilitysglang6.5 (v3.1)Medium
CVE-2026-17557Lm-evaluation-harness: lm-evaluation-harness: ssrf via job-spec model.url with bearer credential forwardingRed Hat OpenShift AI (RHOAI)6.5 (v3.1)Medium
CVE-2026-30480LibreNMS 22.11.0-23-gd091788f2 Path Traversal VulnerabilityLibreNMS 22.11.0-23-gd091788f26.5 (v3.1)Medium
CVE-2026-31941Server-Side Request Forgery (SSRF) in Chamilo LMSchamilo lms6.5 (v3.1)Medium
CVE-2026-31978motionEye: Arbitrary File Read via Path Traversal in Picture/Movie Preview Endpointmotioneye6.5 (v3.1)Medium
CVE-2026-3345Path Traversal and Arbitrary File Write Vulnerability in IBM Langflow Desktop API v2 File Upload Endpointlangflow desktop6.5 (v3.1)Medium
CVE-2026-33989@mobilenext/mobile-mcp alllows arbitrary file write via Path Traversal in mobile screen capture toolsmobile mcp6.5 (v3.1)Medium
CVE-2026-34740AVideo: Stored SSRF via Video EPG Link Missing isSSRFSafeURL() Validationavideo6.5 (v3.1)Medium
CVE-2026-34787Emlog: Local File Inclusion in plugin.php via unsanitized plugin parameteremlog6.5 (v3.1)Medium
CVE-2026-35718fd8136 firmware Path Traversal Vulnerabilityfd8136 firmware6.5 (v3.1)Medium
CVE-2026-36227Easy Chat Server 3.1 Arbitrary Code Execution VulnerabilityEasy Chat Server 3.16.5 (v3.1)Medium
CVE-2026-39368WWBN AVideo has a Live restream log callback flow enabling stored SSRF to internal servicesavideo6.5 (v3.1)Medium
CVE-2026-40909WWBN AVideo has a Path Traversal in Locale Save Endpoint that Enables Arbitrary PHP File Write to Any Web-Accessible Diravideo6.5 (v3.1)Medium
CVE-2026-41060AVideo's SSRF via same-domain hostname with alternate port bypasses isSSRFSafeURLavideo6.5 (v3.1)Medium
CVE-2026-41062WWBN/AVideo has an incomplete fix for a directory traversal bypass via query string in ReceiveImage downloadURL parameteavideo6.5 (v3.1)Medium
CVE-2026-42181Lemmy: SSRF and internal image disclosure in post link metadata via unvalidated og:imagelemmy6.5 (v3.1)Medium
CVE-2026-42867Langflow: Path Traversal in Knowledge Bases API via Creation Endpointlangflow6.5 (v3.1)Medium
CVE-2026-4502Arbitrary File Write and Remote Code Execution Vulnerability in Langflow v2 APIlangflow desktop6.5 (v3.1)Medium
CVE-2026-46397haxcms-php Local File Inclusion via saveOutline API Location Parameter v2.0haxcms-php6.5 (v3.1)Medium
CVE-2026-46556FlaskBB: SSRF in get_image_info() via unrestricted avatar URLflaskbb6.5 (v3.1)Medium
CVE-2026-48129Kestra task inputFiles accepts traversal filenames for worker file writeskestra6.5 (v3.1)Medium
CVE-2026-51772Server-Side Request Forgery-6.5 (v3.1)Medium
CVE-2026-52371xxl-job v3.4.0 Server-Side Request Forgery Vulnerabilityxxl-job v3.4.06.5 (v3.1)Medium
CVE-2026-52607reportico-web <= 8.1.0 Path Traversal Vulnerabilityreportico-web <= 8.1.06.5 (v3.1)Medium
CVE-2026-54054Transmute has full-read SSRF in URL file import (POST /api/files/url) — no host/IP validation, follows redirectstransmute6.5 (v3.1)Medium
CVE-2026-54688mcp-searxng: SSRF in web_url_read: the internal-address guard is disabled by default (MCP_HTTP_HARDEN off)mcp-searxng6.5 (v3.1)Medium
CVE-2026-55679WeGIA: Pre-auth Installer Injection Chain Enables Command Execution and Arbitrary PHP Code InjectionWeGIA6.5 (v3.1)Medium
CVE-2026-58418SSRF via HTTP Redirect in Repository MigrationGitea Open Source Git Server6.5 (v3.1)Medium
CVE-2026-58442Repository migration SSRF via multi-answer DNS allow-list bypassGitea Open Source Git Server6.5 (v3.1)Medium
CVE-2026-62282OpenCVE: Server-Side Request Forgery (SSRF) in notificationsopencve6.5 (v3.1)Medium
CVE-2026-63667ApostropheCMS: Arbitrary file read via import-export attachment-name path traversalapostrophe6.5 (v3.1)Medium
CVE-2026-72739Dokploy: Command Injection via Compose Shell Executiondokploy6.5 (v3.1)Medium
CVE-2026-73255Mongoose: Path traversal in SSI #include directives enables arbitrary file readmongoose6.5 (v3.1)Medium
CVE-2026-73573zimbra collaboration suite Path Traversal Vulnerabilityzimbra collaboration suite6.5 (v3.1)Medium
CVE-2026-73574zimbra collaboration suite Incorrect Resource Transfer Between Spheres Vulnerabilityzimbra collaboration suite6.5 (v3.1)Medium
CVE-2026-7542Slider Revolution 7.0 - 7.0.10 - Authenticated (Subscriber+) Sensitive Information DisclosureSlider Revolution6.5 (v3.1)Medium
CVE-2026-75602OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download toolOpenList6.5 (v3.1)Medium
CVE-2026-7646Langflow is affected by security vulnerabilities in Model Context Protocol featureslangflow6.5 (v3.1)Medium
CVE-2026-7658Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcementlangflow6.5 (v3.1)Medium
CVE-2026-78851Grav CMS 2.0.3 through 2.0.6 Path Traversal VulnerabilityGrav CMS 2.0.3 through 2.0.66.5 (v3.1)Medium
CVE-2026-88403nocobase v2.1.21 Server-Side Request Forgery Vulnerabilitynocobase v2.1.216.5 (v3.1)Medium
CVE-2026-9138Langflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing clangflow6.5 (v3.1)Medium
CVE-2026-93767Tainacan <= 1.3.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'guid' ParameterTainacan6.5 (v3.1)Medium
CVE-2026-95264Feehi CMS 2.1.1 Path Traversal Vulnerability-6.5 (v3.1)Medium
CVE-2026-9774ATEN Unizon updateLicense Directory Traversal Arbitrary File Deletion Vulnerabilityunizon6.5 (v3.1)Medium
CVE-2026-9775ATEN Unizon uploadSSL Directory Traversal Arbitrary File Deletion Vulnerabilityunizon6.5 (v3.1)Medium
CVE-2009-0932Horde/Horde Groupware - Local File Inclusionhorde6.4 (v2.0)Medium
CVE-2011-4450WikkaWiki 1.3.2 - Multiple Vulnerabilitieswikkawiki6.4 (v2.0)Medium
CVE-2012-3153Oracle Forms and Reports Remote Code Executionfusion middleware6.4 (v2.0)Medium
CVE-2012-4940Axigen Arbitrary File Read and Deleteaxigen free mail server6.4 (v2.0)Medium
CVE-2025-11361Essential Blocks <= 5.7.1 - Authenticated (Author+) Server-Side Request ForgeryGutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns6.4 (v3.1)Medium
CVE-2026-45573Decidim: Push subscriptions can be abused for server-side requestsdecidim6.4 (v3.1)Medium
CVE-2026-47268Nezha Monitoring: Authenticated DDNS webhook configuration allows blind SSRF from the dashboard hostnezha6.4 (v3.1)Medium
CVE-2026-566789Router: Kiro region injection allows authenticated SSRF with Authorization header forwarding9router6.4 (v3.1)Medium
CVE-2026-79717Galaxy_ng: galaxy_ng: blind ssrf via namespace avatar_url with no private-address restrictionRed Hat Ansible Automation Platform 26.4 (v3.1)Medium
CVE-2026-79760Termix: Authenticated blind SSRF through notification channel test endpointsTermix6.4 (v3.1)Medium
CVE-2026-82081wallabag Server-Side Request Forgery Vulnerabilitywallabag6.4 (v3.1)Medium
CVE-2019-2557Oracle Application Testing Suite Post-Auth DownloadServlet Directory Traversalapplication testing suite6.3 (v3.0)Medium
CVE-2026-100681Budibase before 3.45.0 SSRF and OAuth Token Exfiltration via Teams Webhookserver6.3 (v4.0)Medium
CVE-2026-102783Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0Gridbox extension for Joomla6.3 (v4.0)Medium
CVE-2026-102983Astro: Netlify Image CDN allowlist bypass enables SSRFastro6.3 (v4.0)Medium
CVE-2026-105125LaraDashboard before 1.4.8 Path Traversal via /api/translations/{lang} Endpointlaradashboard6.3 (v4.0)Medium
CVE-2026-110652ONLYOFFICE DocumentServer before 10.0.0 SSRF via downloadfile isInJwtToken BypassDocumentServer6.3 (v4.0)Medium
CVE-2026-111171Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF Bypassweb3.py6.3 (v4.0)Medium
CVE-2026-112947Vite: First 4 bytes of files outside of server.fs setting is exposed by ?vite-wasm-instancevite6.3 (v4.0)Medium
CVE-2026-115717Frappe Builder before 1.36.1 SSRF via convert_to_webpbuilder6.3 (v4.0)Medium
CVE-2026-115810Tandoor Recipes before 2.7.0 SSRF via Pestle Importer Image URLrecipes6.3 (v4.0)Medium
CVE-2026-34371LibreChat Affected by Arbitrary File Write via execute_code Artifact Filename Traversallibrechat6.3 (v3.1)Medium
CVE-2026-39365Vite has a Path Traversal in Optimized Deps .map Handlingvite6.3 (v4.0)Medium
CVE-2026-42180Lemmy: SSRF in /api/v3/post via Webmention dispatchlemmy6.3 (v3.1)Medium
CVE-2026-42335MaxKB: SSRF Bypass in MaxKB OSS URL Fetch due to URL Parsing DiscrepancyMaxKB6.3 (v4.0)Medium
CVE-2026-42344FastGPT: DNS rebinding TOCTOU bypass in isInternalAddress allows SSRF on all protected endpointsFastGPT6.3 (v3.1)Medium
CVE-2026-44284FastGPT: Stored MCP tool URL SSRF in FastGPT workflow executionFastGPT6.3 (v3.1)Medium
CVE-2026-44287FastGPT: sandbox escape to RCE - code-sandbox regex /\bimport\s*(/ is bypassableFastGPT6.3 (v3.1)Medium
CVE-2026-45626Arcane: OS Command Injection in Volume Browser ListDirectory via path query parameterarcane6.3 (v3.1)Medium
CVE-2026-49120Medplum < 5.1.14 SSRF via FHIR Subscription Endpointmedplum6.3 (v4.0)Medium
CVE-2026-52756Ghidra < 12.2 - Unauthenticated Path Traversal in Debugger ISF Serverghidra6.3 (v4.0)Medium
CVE-2026-54020Open WebUI: DNS Rebinding SSRF Bypassopen webui6.3 (v3.1)Medium
CVE-2026-56722Dompdf: Local file read due to improper file path validation in SVG images encoded as data-URIdompdf6.3 (v4.0)Medium
CVE-2026-56769Huly Platform - Server-Side Request Forgery via /import Endpointplatform6.3 (v4.0)Medium
CVE-2026-56771NewsBlur < 14.5.0 - Server-Side Request Forgery via add_url EndpointNewsBlur6.3 (v4.0)Medium
CVE-2026-57947Pinpoint - Server-Side Request Forgery via Alarm Webhook Registrationpinpoint6.3 (v4.0)Medium
CVE-2026-63107LimeSurvey SSRF via REST API Survey Template Host HeaderLimeSurvey6.3 (v4.0)Medium
CVE-2026-63643MagicMirror: ssrf calendar .jsMagicMirror6.3 (v4.0)Medium
CVE-2026-63731HyperDX < 2.31.0 SSRF via ClickHouse Proxy Test Endpointhyperdx6.3 (v4.0)Medium
CVE-2026-63769Huginn 2022.08.18 SSRF via ScenarioImport fetch_url Methodhuginn6.3 (v4.0)Medium
CVE-2026-65012InvokeAI < 6.13.7 Unauthenticated Directory Enumeration via scan_folderInvokeAI6.3 (v4.0)Medium
CVE-2026-65593n8n before 1.123.64, 2.29.8, and 2.30.1 SSRF via Dynamic Node Parametersn8n6.3 (v4.0)Medium
CVE-2026-67620Flowise 3.1.4 SSRF via fetch-links Endpoint Incomplete Deny-Listflowise6.3 (v4.0)Medium
CVE-2026-70667Lemur: SSRF protection in certificate revocation checking bypassable via HTTP redirects and DNS rebinding (incomplete filemur6.3 (v3.1)Medium
CVE-2026-72814actix-web before 0.6.10 Information Disclosure via Filesactix-web6.3 (v4.0)Medium
CVE-2026-728609router Server-Side Request Forgery via /api/provider-nodes/validate Because the IPv4-Mapped IPv6 Denylist Check Is Unre9router6.3 (v4.0)Medium
CVE-2026-73530Flyto2 Core < 2.28.0 SSRF Guard Bypass via is_private_ip()flyto-core6.3 (v4.0)Medium
CVE-2026-78886liketrek TREK Public Journey Photo Proxy journey-public.controller.ts path traversalTREK6.3 (v4.0)Medium
CVE-2026-82044UTMStack < 11.2.16 Server-Side Request Forgery via downloadPdfUTMStack6.3 (v4.0)Medium
CVE-2026-85738TREK: SSRF Guard Bypass via IPv6 Transition Addresses (NAT64/6to4)TREK6.3 (v3.1)Medium
CVE-2026-86590Eclipse Che Server-Side Request Forgery VulnerabilityEclipse Che6.3 (v4.0)Medium
CVE-2026-91079Huly Platform through 0.7.426 SSRF via Print Serviceplatform6.3 (v4.0)Medium
CVE-2014-8727F5 BIG-IP 10.1.0 - Directory Traversalbig-ip local traffic manager6.2 (v2.0)Medium
CVE-2015-4668Xceedium Xsuite - Multiple Vulnerabilitiesxsuite6.1 (v3.0)Medium
CVE-2025-34076Microweber CMS v1.2.10 Local File Inclusion (Authenticated)microweber6.1 (v4.0)Medium
CVE-2025-35053Newforma Info Exchange (NIX) arbitrary file read and deleteproject center6.1 (v4.0)Medium
CVE-2026-47250mcp-server-kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltrationmcp-server-kubernetes6.1 (v3.1)Medium
CVE-2026-70620Odysseus SSRF via Embedding Endpoint Configurationodysseus6.1 (v4.0)Medium
CVE-2012-6081MoinMoin twikidraw Action Traversal File Uploadmoinmoin6.0 (v2.0)Medium
CVE-2013-3631NAS4Free Arbitrary Remote Code Executionnas4free6.0 (v2.0)Medium
CVE-2026-105689Penpot: SSRF guard bypass via IPv6 transition addresses (NAT64/6to4/Teredo) in webhook delivery and media downloadpenpot6.0 (v4.0)Medium
CVE-2026-1776Camaleon CMS AWS Uploader Authenticated Path Traversal Arbitrary File Readcamaleon cms6.0 (v4.0)Medium
CVE-2026-22677Hermes WebUI < 0.51.44 Path Traversal via Session Import Endpointhermes-webui6.0 (v4.0)Medium
CVE-2026-41363OpenClaw 2026.2.6 < 2026.3.28 - Arbitrary File Read via Feishu upload_image Parameteropenclaw6.0 (v4.0)Medium
CVE-2026-41689Wallos: Shared local webhook allowlist lets low-privilege users send arbitrary requests to allowlisted internal servicesWallos6.0 (v3.1)Medium
CVE-2026-55473HomeBox: Notifier SSRF guard misses NAT64 prefixes (64:ff9b::/96, 64:ff9b:1::/48) — generic:// URL reaches cloud metadathomebox6.0 (v4.0)Medium
CVE-2026-56275Flowise - Server-Side Request Forgery via Execute Flow Base URLflowise6.0 (v4.0)Medium
CVE-2026-65698Void 1.3.4 Path Traversal via AI Agent File-Reading Toolsvoid6.0 (v4.0)Medium
CVE-2026-66004BlenderMCP Path Traversal via download_polyhaven_asset APIblender-mcp6.0 (v4.0)Medium
CVE-2026-79653Eclipse SW360 Path Traversal VulnerabilityEclipse SW3606.0 (v4.0)Medium
CVE-2026-103061Path traversal in Gleam via unvalidated package application namesGleam5.9 (v4.0)Medium
CVE-2026-104246Contact Form 7 Signature Addon <= 4.2.2 - Unauthenticated Arbitrary File Read via Path Traversal in Email AttachmentsContact Form 7 Signature Addon5.9 (v3.1)Medium
CVE-2026-13693Bit Form < 3.1.0 - Unauthenticated Arbitrary File Read via Path TraversalBit Form5.9 (v3.1)Medium
CVE-2026-49244SFTPGo: Path confinement bypass in public browsable share partial ZIP downloadsftpgo5.9 (v3.1)Medium
CVE-2026-82650SiYuan before v3.8.1 Path Traversal via /api/template/rendersiyuan5.9 (v4.0)Medium
CVE-2026-86735snipe-it before 8.7.0 SSRF via IPv6 transition address bypasssnipe-it5.9 (v4.0)Medium
CVE-2010-0467Joomla! Component CCNewsLetter - Local File Inclusioncom ccnewsletter5.8 (v3.1)Medium
CVE-2024-6095LocalAI - Partial Local File Readlocalai5.8 (v3.1)Medium
CVE-2025-11427WP Migrate Lite <= 2.7.6 - Unauthenticated Blind Server-Side Request ForgeryWP Migrate Lite – Migration Made Easy5.8 (v3.1)Medium
CVE-2026-10526EmbedPress < 4.6.1 - Unauthenticated Blind SSRFEmbedPress5.8 (v3.1)Medium
CVE-2026-111761A2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification deliverya2a-java5.8 (v3.1)Medium
CVE-2026-34360HAPI FHIR: Unauthenticated Blind SSRF via /loadIG Endpoint Enables Internal Network Probinghl7 fhir core5.8 (v3.1)Medium
CVE-2026-34981whisperX REST API: SSRF in download_from_url() — URL validation happens after HTTP request, extension bypass via .mp3whisperx rest api5.8 (v3.1)Medium
CVE-2026-45709Mailpit has an incomplete fix for GHSA-6jxm: HTML check still permits SSRF to private/loopback/IMDS via missing IP-filtemailpit5.8 (v3.1)Medium
CVE-2026-47160Vaultwarden: Server-side request forgery (SSRF) via Icon Endpoint Decimal/Hex/Octal IP Bypassvaultwarden5.8 (v3.1)Medium
CVE-2026-48053Kolibri has Unauthenticated Server-Side Request Forgery (SSRF) in RemoteFacilityUserViewsetkolibri5.8 (v3.1)Medium
CVE-2026-55187Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms (follow-up to CVE-2026-27808)mailpit5.8 (v3.1)Medium
CVE-2026-55591Signal K Server: Server-Side Request Forgery via Remote Connection Endpointssignalk-server5.8 (v3.1)Medium
CVE-2026-61852Chartbrew: SQL Injection via row_limit Parameter in AI runQuery Toolchartbrew5.8 (v4.0)Medium
CVE-2026-73243kkFileView: Unauthenticated SSRF via /addTask with fullfilename type-confusion bypasskkFileView5.8 (v3.1)Medium
CVE-2025-1035KLog Server - Path TraversalKLog Server5.7 (v3.1)Medium
CVE-2026-40605Tautulli Vulnerable to Authenticated Path Traversal in Cache Deletion APITautulli5.7 (v4.0)Medium
CVE-2026-44520Docling-Graph: SSRF via Missing Internal IP Validation in URLInputHandlerdocling-graph5.7 (v3.1)Medium
CVE-2015-1487Symantec Endpoint Protection Manager Authentication Bypass and Code Executionendpoint protection manager5.5 (v2.0)Medium
CVE-2018-13980Zeta Producer Desktop CMS <14.2.1 - Local File Inclusionzeta producer5.5 (v3.1)Medium
CVE-2018-15536Responsive FileManager < 9.13.4 - Directory Traversalresponsive filemanager5.5 (v3.0)Medium
CVE-2020-10977GitLab File Read Remote Code Executiongitlab5.5 (v3.1)Medium
CVE-2025-10091Jinher OA XML Type xml external entity referencejinher oa5.5 (v4.0)Medium
CVE-2025-10709Four-Faith Water Conservancy Informatization Platform historyDownload.do;otheruserLogin.do;getfile path traversalwater conservancy informatization5.5 (v4.0)Medium
CVE-2025-10816Jinher OA XML text xml external entity referencejinher oa5.5 (v4.0)Medium
CVE-2025-10874Orbit Fox < 3.0.2 - Author+ Server-Side Request ForgeryOrbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More5.5 (v3.1)Medium
CVE-2025-11018Four-Faith Water Conservancy Informatization Platform download.do;usrlogout.do.do path traversalwater conservancy informatization5.5 (v4.0)Medium
CVE-2025-11031DataTables examples.php path traversaldatatables5.5 (v4.0)Medium
CVE-2025-11046Tencent WeKnora test testEmbeddingModel server-side request forgeryweknora5.5 (v4.0)Medium
CVE-2025-11336Four-Faith Water Conservancy Informatization Platform download.do;otherlogout.do path traversalWater Conservancy Informatization Platform5.5 (v4.0)Medium
CVE-2025-11337Four-Faith Water Conservancy Informatization Platform download.do;othersusrlogout.do path traversalWater Conservancy Informatization Platform5.5 (v4.0)Medium
CVE-2025-13261lsfusion platform DownloadFileRequestHandler.java DownloadFileRequestHandler path traversallsfusion platform5.5 (v4.0)Medium
CVE-2025-13262lsfusion platform UploadFileRequestHandler.java UploadFileRequestHandler path traversallsfusion platform5.5 (v4.0)Medium
CVE-2025-13266wwwlike vlife VLifeApi SysFileApi.java create path traversalvlife5.5 (v4.0)Medium
CVE-2025-13786taosir WTCMS index.php fetch code injectionwtcms5.5 (v4.0)Medium
CVE-2025-13792Qualitor getResumo.php eval code injectionthe file /html/st/stdeslocamento/request/getResumo.php5.5 (v4.0)Medium
CVE-2025-13810jsnjfz WebStack-Guns KaptchaController.java renderPicture path traversalwebstack-guns5.5 (v4.0)Medium
CVE-2025-13814moxi159753 Mogu Blog v2 uploadPicsByUrl LocalFileServiceImpl.uploadPictureByUrl server-side request forgerymogublog5.5 (v4.0)Medium
CVE-2025-15432yeqifu carRental com.yeqifu.sys.controller.FileController downloadShowFile.action downloadShowFile path traversalcarrental5.5 (v4.0)Medium
CVE-2025-6095Jasmin Ransomware Web Server Unauthenticated SQL Injectionjasmin-ransomware5.5 (v4.0)Medium
CVE-2026-100893Privoce VoceChat Server open_graphic_parse Endpoint resource.rs fetch server-side request forgeryVoceChat Server5.5 (v4.0)Medium
CVE-2026-100901athlon1600 youtube-downloader stream.php stream server-side request forgeryyoutube-downloader5.5 (v4.0)Medium
CVE-2026-100909OctoberCMS ResizeImages.php getSourcePathForResize server-side request forgerythe file modules/system/classes/ResizeImages.php5.5 (v4.0)Medium
CVE-2026-101005October CMS SSRF Protection ResizeImages.php validateExternalImageHost server-side request forgeryOctober CMS5.5 (v4.0)Medium
CVE-2026-101067dbgate save-uploaded-file Endpoint files.js saveUploadedFile path traversaldbgate5.5 (v4.0)Medium
CVE-2026-101068dbgate Create Connection Endpoint zipJsonLinesData.js zipJsonLinesData path traversaldbgate5.5 (v4.0)Medium
CVE-2026-101070dbgate Files Endpoint runners.js files path traversaldbgate5.5 (v4.0)Medium
CVE-2026-101082PMWeb downloader.aspx path traversalPMWeb5.5 (v4.0)Medium
CVE-2026-10214zhayujie chatgpt-on-wechat Bash Tool bash.py _get_safety_warning os command injectionchatgpt-on-wechat5.5 (v4.0)Medium
CVE-2026-10280horizon921 mcpilot MCP API Call Endpoint route.ts server-side request forgerymcpilot5.5 (v4.0)Medium
CVE-2026-10287SourceCodester SEO Meta Tag Extractor index.php get_headers server-side request forgerySEO Meta Tag Extractor5.5 (v4.0)Medium
CVE-2026-102874HKUDS AnyTool Execute Endpoint main.py subprocess.run os command injectionAnyTool5.5 (v4.0)Medium
CVE-2026-103687rhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklistdom-sanitizer5.5 (v4.0)Medium
CVE-2026-105148SciPhi-AI R2R Retrieval Completion API Endpoint llm.py server-side request forgeryR2R5.5 (v4.0)Medium
CVE-2026-105290feelec-yishu feelcrm-os getCurlData Endpoint GoogleController.class.php server-side request forgeryfeelcrm-os5.5 (v4.0)Medium
CVE-2026-10694SourceCodester Online Food Ordering System index.php include file inclusionOnline Food Ordering System5.5 (v4.0)Medium
CVE-2026-108772bleenco abstruse Cache Endpoint download_cache.go filepath.Join path traversalabstruse5.5 (v4.0)Medium
CVE-2026-112027light0011 cms Uploadify check-exists.php file_exists file information disclosurecms5.5 (v4.0)Medium
CVE-2026-112252Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System ws.asmx xp_cmdshell sqlWubang Five-in-One Safety Production Management Information System5.5 (v4.0)Medium
CVE-2026-11344code-projects Vehicle Management System New Driver Registration Form newdriver.php unrestricted uploadVehicle Management System5.5 (v4.0)Medium
CVE-2026-116000Zylon PrivateGPT URI Artifact Loader uri_loader.py load_file_from_uri server-side request forgeryPrivateGPT5.5 (v4.0)Medium
CVE-2026-116256geesondog RhaPHP Mp Module Media Proxy Show.php image server-side request forgeryRhaPHP5.5 (v4.0)Medium
CVE-2026-116602SourceCodester Online Food Ordering System delete.php unlink path traversalOnline Food Ordering System5.5 (v4.0)Medium
CVE-2026-14635kirilkirkov Ecommerce-CodeIgniter-Bootstrap Vendor Multi-Image Endpoint AddProduct.php path traversalEcommerce-CodeIgniter-Bootstrap5.5 (v4.0)Medium
CVE-2026-15204TOTOLINK X5000R OpenVPN Export cstecgi.cgi exportOvpn path traversalX5000R5.5 (v4.0)Medium
CVE-2026-16016poco-ai poco-claw task.py run_task server-side request forgerypoco-claw5.5 (v4.0)Medium
CVE-2026-16125zevorn rt-claw http_request net.c claw_net_post server-side request forgeryrt-claw5.5 (v4.0)Medium
CVE-2026-16127zevorn rt-claw http_request tool_net.c claw_net_post server-side request forgeryrt-claw5.5 (v4.0)Medium
CVE-2026-16128zevorn rt-claw http_request swarm.c receiver_thread server-side request forgeryrt-claw5.5 (v4.0)Medium
CVE-2026-16252Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System Staffshinel Ds.jsp sql injectionMultimedia Integrated Business Display System5.5 (v4.0)Medium
CVE-2026-16910Quay: ssrf in red hat quay notification webhooks (slack/generic)Red Hat OpenShift Update Service5.5 (v3.1)Medium
CVE-2026-18641Sangfor Operation and Maintenance Security Management System Login Endpoint portal_login com.sbr.fort.foreignDP.DpLoginCOperation and Maintenance Security Management System5.5 (v4.0)Medium
CVE-2026-18646danpros HTMLy Author Name htmly.php path traversalHTMLy5.5 (v4.0)Medium
CVE-2026-18973heshengtao super-agent-party extension_proxy Route server.py sanitize_proxy_url server-side request forgerysuper-agent-party5.5 (v4.0)Medium
CVE-2026-19000JeecgBoot Anonymous Chat Attachment send server-side request forgeryJeecgBoot5.5 (v4.0)Medium
CVE-2026-19374adafap api-mcp Proxy API Endpoint route.ts customAxios server-side request forgeryapi-mcp5.5 (v4.0)Medium
CVE-2026-19379EFM ipTIME AX8004M CGI Endpoint d.cgi popen os command injectionipTIME AX8004M5.5 (v4.0)Medium
CVE-2026-19753Model Context Protocol mcp-rdf-explorer MCP Server server.py explore_url server-side request forgerymcp-rdf-explorer5.5 (v4.0)Medium
CVE-2026-19758dromara lamp-cloud chunk-check endpoint FileChunkController.java path traversallamp-cloud5.5 (v4.0)Medium
CVE-2026-19762DTStack Taier Chunk-Check Endpoint FileChunkController.java Paths.ge path traversalTaier5.5 (v4.0)Medium
CVE-2026-19827alldatacenter alldata logDetailCat Endpoint JobLogController.java FileInputStream path traversalalldata5.5 (v4.0)Medium
CVE-2026-41130Craft CMS has a host header injection leading to SSRF via resource-js endpointcms5.5 (v4.0)Medium
CVE-2026-5333DefaultFuction Content-Management-System tools.php command injectioncontent management system5.5 (v4.0)Medium
CVE-2026-5346huimeicloud hm_editor image-to-base64 Endpoint mcp-server.js client.get server-side request forgeryhm editor5.5 (v4.0)Medium
CVE-2026-54611InstantCMS has Remote Code Execution in package installericms25.5 (v3.1)Medium
CVE-2026-55439Halo: Path Traversal in Backup Download Leads to Arbitrary File Readhalo5.5 (v3.1)Medium
CVE-2026-5631assafelovic gpt-researcher ws Endpoint server_utils.py extract_command_data code injectiongpt-researcher5.5 (v4.0)Medium
CVE-2026-5677Totolink A7100RU cstecgi.cgi CsteSystem os command injectionA7100RU5.5 (v4.0)Medium
CVE-2026-5678Totolink A7100RU cstecgi.cgi setScheduleCfg os command injectionA7100RU5.5 (v4.0)Medium
CVE-2026-5688Totolink A7100RU cstecgi.cgi setDdnsCfg os command injectionA7100RU5.5 (v4.0)Medium
CVE-2026-5689Totolink A7100RU cstecgi.cgi setNtpCfg os command injectionA7100RU5.5 (v4.0)Medium
CVE-2026-5690Totolink A7100RU cstecgi.cgi setRemoteCfg os command injectionA7100RU5.5 (v4.0)Medium
CVE-2026-5691Totolink A7100RU cstecgi.cgi setFirewallType os command injectionA7100RU5.5 (v4.0)Medium
CVE-2026-5692Totolink A7100RU cstecgi.cgi setGameSpeedCfg os command injectionA7100RU5.5 (v4.0)Medium
CVE-2026-5736PowerJob detailPlus Endpoint InstanceController.java sql injectionPowerJob5.5 (v4.0)Medium
CVE-2026-5741suvarchal docker-mcp-server HTTP index.ts pull_image os command injectiondocker-mcp-server5.5 (v4.0)Medium
CVE-2026-5802idachev mcp-javadc HTTP os command injectionmcp-javadc5.5 (v4.0)Medium
CVE-2026-5832atototo api-lab-mcp HTTP http-server.ts test_http_endpoint server-side request forgeryapi-lab-mcp5.5 (v4.0)Medium
CVE-2026-6604modelscope agentscope Cloud Metadata Endpoint _openai_tools.py openai_audio_to_text server-side request forgeryagentscope5.5 (v4.0)Medium
CVE-2026-6606modelscope agentscope _agent_base.py _process_audio_block server-side request forgeryagentscope5.5 (v4.0)Medium
CVE-2026-6625moxi624 Mogu Blog v2 Picture Storage Service LocalFileServiceImpl.java LocalFileServiceImpl.uploadPictureByUrl server-siMogu Blog v25.5 (v4.0)Medium
CVE-2026-68922MobSF: Arbitrary File Read via Path Traversal in ZIP UploadsMobile-Security-Framework-MobSF5.5 (v3.1)Medium
CVE-2026-7059666ghj MiroFish Query Parameter simulation.py get_simulation_posts path traversalMiroFish5.5 (v4.0)Medium
CVE-2026-7061Toowiredd chatgpt-mcp-server MCP/HTTP docker.service.ts os command injectionchatgpt-mcp-server5.5 (v4.0)Medium
CVE-2026-7062Intina47 context-sync Git Integration git-integration.ts os command injectioncontext-sync5.5 (v4.0)Medium
CVE-2026-7064AgentDeskAI browser-tools-mcp browser-connector.ts os command injectionbrowser-tools-mcp5.5 (v4.0)Medium
CVE-2026-7065BidingCC BuildingAI Remote Upload API file-storage.service.ts uploadRemoteFile server-side request forgeryBuildingAI5.5 (v4.0)Medium
CVE-2026-7066choieastsea simple-openstack-mcp server.py exec_openstack os command injectionsimple-openstack-mcp5.5 (v4.0)Medium
CVE-2026-7094ShadowCloneLabs GlutamateMCPServers puppeteer_navigate index.ts server-side request forgeryglutamate mcp servers5.5 (v4.0)Medium
CVE-2026-7132code-projects Online Lot Reservation System download.php readfile path traversalOnline Lot Reservation System5.5 (v4.0)Medium
CVE-2026-7146AlejandroArciniegas mcp-data-vis HTTP Request server.js axios server-side request forgerymcp-data-vis5.5 (v4.0)Medium
CVE-2026-7147JoeCastrom mcp-chat-studio LLM Models API llm.js server-side request forgerymcp-chat-studio5.5 (v4.0)Medium
CVE-2026-7149dexhunter kaggle-mcp server.py prepare_kaggle_dataset path traversalkaggle-mcp5.5 (v4.0)Medium
CVE-2026-7158dmitryglhf mcp-url-downloader server.py _validate_url_safe server-side request forgerymcp-url-downloader5.5 (v4.0)Medium
CVE-2026-7159douinc mkdocs-mcp-plugin server.py list_documents path traversalmkdocs-mcp-plugin5.5 (v4.0)Medium
CVE-2026-7178ChatGPTNextWeb NextChat Artifacts Endpoint route.ts storeUrl server-side request forgerynextchat5.5 (v4.0)Medium
CVE-2026-7205duartium papers-mcp-server main.py search_papers path traversalpapers-mcp-server5.5 (v4.0)Medium
CVE-2026-7206dubydu sqlite-mcp entry.py extract_to_json sql injectionsqlite-mcp5.5 (v4.0)Medium
CVE-2026-7212edvardlindelof notes-mcp notes_mcp.py path traversalnotes-mcp5.5 (v4.0)Medium
CVE-2026-7214eghuzefa engineer-your-data server.py file_inf path traversalengineer-your-data5.5 (v4.0)Medium
CVE-2026-7216donchelo processing-claude-mcp-bridge create_sketch Tool processing_server.py path traversalprocessing-claude-mcp-bridge5.5 (v4.0)Medium
CVE-2026-7217Deepractice PromptX Document File index.ts read_pdf absolute path traversalPromptX5.5 (v4.0)Medium
CVE-2026-7220jackwrichards FastlyMCP fastly_cli Tool fastly-mcp.mjs os command injectionFastlyMCP5.5 (v4.0)Medium
CVE-2026-7221TencentCloudBase CloudBase-MCP open-url API Endpoint interactive-server.ts openUrl server-side request forgeryCloudBase-MCP5.5 (v4.0)Medium
CVE-2026-7235ErlichLiu claude-agent-sdk-master route.ts path traversalclaude-agent-sdk-master5.5 (v4.0)Medium
CVE-2026-7271DV0x creative-ad-agent creative-ad-agent-server sdk-server.ts path traversalcreative-ad-agent5.5 (v4.0)Medium
CVE-2026-7272WilliamCloudQi matlab-mcp-server MCP index.ts execute_matlab_code path traversalmatlab-mcp-server5.5 (v4.0)Medium
CVE-2026-7314eiceblue spire-doc-mcp-server base.py get_doc_path path traversalspire-doc-mcp-server5.5 (v4.0)Medium
CVE-2026-7315eiceblue spire-pdf-mcp-server PDF File server.py get_pdf_path path traversalspire-pdf-mcp-server5.5 (v4.0)Medium
CVE-2026-7319elinsky execution-system-mcp add_action Tool server.py _get_context_file_path path traversalexecution-system-mcp5.5 (v4.0)Medium
CVE-2026-7384ezequiroga mcp-bases research_server.py search_papers path traversalmcp-bases5.5 (v4.0)Medium
CVE-2026-7400geekgod382 filesystem-mcp-server read_file_tool/write_file_tool server.py is_path_allowed path traversalfilesystem-mcp-server5.5 (v4.0)Medium
CVE-2026-7403geldata gel-mcp server.py fetch_rule path traversalgel-mcp5.5 (v4.0)Medium
CVE-2026-7416PolarVista xcode-mcp-server MCP index.ts run_tests os command injectionxcode-mcp-server5.5 (v4.0)Medium
CVE-2026-7443BurtTheCoder mcp-dnstwist MCP index.ts fuzz_domain os command injectionmcp-dnstwist5.5 (v4.0)Medium
CVE-2026-7519Fujian Apex LiveBOS Endpoint UploadImage.do path traversalLiveBOS5.5 (v4.0)Medium
CVE-2026-7588ggerve coding-standards-mcp server.py get_best_practices path traversalcoding-standards-mcp5.5 (v4.0)Medium
CVE-2026-7589ghantakiran splunk-mcp-integration CSV Export csv_export.py create_csv_export path traversalsplunk-mcp-integration5.5 (v4.0)Medium
CVE-2026-7590eyal-gor p_69_branch_monkey_mcp Preview Endpoint advanced.py os command injectionp 69 branch monkey mcp5.5 (v4.0)Medium
CVE-2026-7594Flux159 mcp-game-asset-gen MCP index.ts image_to_3d_async path traversalmcp-game-asset-gen5.5 (v4.0)Medium
CVE-2026-7630innocommerce InnoShop Installation Endpoint InstallServiceProvider.php boot improper authenticationInnoShop5.5 (v4.0)Medium
CVE-2026-7645ruvnet sublinear-time-solver MCP server.js export_state path traversalsublinear-time-solver5.5 (v4.0)Medium
CVE-2026-76760chenhg5 cc-connect webhook.go authenticate code injectioncc-connect5.5 (v4.0)Medium
CVE-2026-76761chenhg5 cc-connect Management API engine.go shellExecCommand os command injectioncc-connect5.5 (v4.0)Medium
CVE-2026-76795AeternaLabsHQ PullMD REST API Endpoint api server-side request forgeryPullMD5.5 (v4.0)Medium
CVE-2026-7698Tiandy Easy7 Integrated Management Platform updateDbBackupInfo os command injectionEasy7 Integrated Management Platform5.5 (v4.0)Medium
CVE-2026-7784RTGS2017 NagaAgent Skills Endpoint extensions.py path traversalNagaAgent5.5 (v4.0)Medium
CVE-2026-7788Axle-Bucamp MCP-Docusaurus document.py get_content path traversalMCP-Docusaurus5.5 (v4.0)Medium
CVE-2026-7810UsamaK98 python-notebook-mcp server.py add_cell path traversalpython-notebook-mcp5.5 (v4.0)Medium
CVE-2026-81421ddfourtwo sentry-selfhosted-mcp raw_sentry_api server-side request forgerysentry-selfhosted-mcp5.5 (v4.0)Medium
CVE-2026-81486bsmi021 mcp-file-context-server Path Resolution index.ts read_context path traversalmcp-file-context-server5.5 (v4.0)Medium
CVE-2026-81491boxpositron with-context-mcp index.ts project_folder path traversalwith-context-mcp5.5 (v4.0)Medium
CVE-2026-82598SeaCMS Template search.php parseIf code injectionSeaCMS5.5 (v4.0)Medium
CVE-2026-82630PowerJob Transport Endpoint TestController.java MuConnectionManager.getOrCreateConnection server-side request forgeryPowerJob5.5 (v4.0)Medium
CVE-2026-82801NASA earthdata-search scale Endpoint handler.js scaleImage server-side request forgeryearthdata-search5.5 (v4.0)Medium
CVE-2026-82802NASA earthdata-search granules Endpoint handler.js OpenSearchGranuleSearchLambda server-side request forgeryearthdata-search5.5 (v4.0)Medium
CVE-2026-84441Piwigo Image Derivative i.php path traversalPiwigo5.5 (v4.0)Medium
CVE-2026-85137SeaCMS Locoy Collector seacms_locoy_news.php parseIf code injectionSeaCMS5.5 (v4.0)Medium
CVE-2026-85380light0011 cms UEditor controller.php catchimage server-side request forgerycms5.5 (v4.0)Medium
CVE-2026-86237openagents-org openagents http.py test_default_model server-side request forgeryopenagents5.5 (v4.0)Medium
CVE-2026-86273projeto-siga HTML-to-PDF Endpoint ExUtilController.java DownloadExterno.getUrl server-side request forgerysiga5.5 (v4.0)Medium
CVE-2026-8725CoreWorxLab CAAL test-hass Endpoint webhooks.py server-side request forgeryCAAL5.5 (v4.0)Medium
CVE-2026-8755fishaudio Bert-VITS2 Model hiyoriUI.py _get_all_models path traversalBert-VITS25.5 (v4.0)Medium
CVE-2026-8756fishaudio Bert-VITS2 Gradio webui_preprocess.py generate_config path traversalBert-VITS25.5 (v4.0)Medium
CVE-2026-90617GH05TCREW PentestAgent MCP HTTP Server main.py run_task os command injectionPentestAgent5.5 (v4.0)Medium
CVE-2026-906190x4m4 HexStrike AI Execute Endpoint hexstrike_server.py os command injectionHexStrike AI5.5 (v4.0)Medium
CVE-2026-906900x4m4 HexStrike AI API Tools Endpoint hexstrike_server.py subprocess.Popen os command injectionHexStrike AI5.5 (v4.0)Medium
CVE-2026-906910x4m4 HexStrike AI API Files Endpoint hexstrike_server.py FileOperationsManager path traversalHexStrike AI5.5 (v4.0)Medium
CVE-2026-90843SabyasachiRana WebMap New Nmap Scan functions_nmap.py nmap_newscan os command injectionWebMap5.5 (v4.0)Medium
CVE-2026-92380WuzhiCMS Remote Image Fetch index.php saveRemote server-side request forgeryWuzhiCMS5.5 (v4.0)Medium
CVE-2026-9372ItzCrazyKns Vane Model Provider API route.ts server-side request forgeryVane5.5 (v4.0)Medium
CVE-2026-94038NonceGeek dim-sum-app Deno Backend main.tsx textSearchV2Handler server-side request forgerydim-sum-app5.5 (v4.0)Medium
CVE-2026-94039vas3k TaxHacker Invoice PDF Renderer actions.ts generateInvoicePDF server-side request forgeryTaxHacker5.5 (v4.0)Medium
CVE-2026-94040vas3k TaxHacker actions.ts testLLMProviderAction server-side request forgeryTaxHacker5.5 (v4.0)Medium
CVE-2026-9404403-lovepreetSingh MCP route.ts create_file path traversalMCP5.5 (v4.0)Medium
CVE-2026-9474yashpokharna2555 StudentManagementSystem studentdel.php confirm_logged_in sql injectionStudentManagementSystem5.5 (v4.0)Medium
CVE-2026-96898yhx070424 ShopXO Ueditor Upload ueditor.php path traversalShopXO5.5 (v4.0)Medium
CVE-2018-6226Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilitiesemail encryption gateway5.4 (v3.0)Medium
CVE-2018-6227Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilitiesemail encryption gateway5.4 (v3.0)Medium
CVE-2023-2745WordPress Core <=6.2 - Directory TraversalWordPress5.4 (v3.1)Medium
CVE-2026-102923SparkyFitness: SSRF via unvalidated custom_url in AI service settingsSparkyFitness5.4 (v3.1)Medium
CVE-2026-114620Authlib: Unvalidated request_uri fetch in JWT-secured authorization request (JAR) leading to SSRFauthlib5.4 (v3.1)Medium
CVE-2026-17621Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base componelangflow5.4 (v3.1)Medium
CVE-2026-34590Postiz: SSRF via Webhook Creation Endpoint Missing URL Safety Validationpostiz5.4 (v3.1)Medium
CVE-2026-48483TypeBot's WhatsApp status forwarding uses unvalidated user-controlled URLs, allowing SSRF from the Typebot servertypebot.io5.4 (v3.1)Medium
CVE-2026-48762TypeBot Vulnerable to Server-Side Request Forgery (SSRF) in OpenAI Transcription Handlertypebot.io5.4 (v3.1)Medium
CVE-2026-54543Froxlor DomainZones.add allows DNS zone-file RR injection via record/type fieldsfroxlor5.4 (v3.1)Medium
CVE-2026-54613Vvveb: Path Traversal in Revision Backup Reader/Deleter via Unsanitized theme ParameterVvveb5.4 (v3.1)Medium
CVE-2026-58391OPNsense: Stored XSS in Firewall Rules/NAT pages via a HTML-attribute breakoutcore5.4 (v3.1)Medium
CVE-2026-6394Nexa Blocks <= 1.1.1 - Unauthenticated Blind Server-Side Request Forgery via 'demo_json_file' ParameterNexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE5.4 (v3.1)Medium
CVE-2026-7798FluentCRM <= 2.9.87 - Unauthenticated Blind Server-Side Request Forgery via 'SubscribeURL' ParameterFluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution5.4 (v3.1)Medium
CVE-2026-7869Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcementlangflow5.4 (v3.1)Medium
CVE-2014-8676SO Planning 1.32 - Multiple Vulnerabilitiessoplanning5.3 (v3.0)Medium
CVE-2014-9609Netsweeper 4.0.8 - Directory Traversalnetsweeper5.3 (v3.1)Medium
CVE-2015-5471Swim Team <= v1.44.10777 - Local File Inclusionswim team5.3 (v3.0)Medium
CVE-2020-11798Mitel MiCollab AWV 8.1.2.4 and 9.1.3 - Directory Traversalmicollab audio, web &amp; video conferencing5.3 (v3.1)Medium
CVE-2020-13886Intelbras TIP 200/200 LITE/300 - Local File Inclusiontip200 firmware5.3 (v3.1)Medium
CVE-2021-28377Joomla! ChronoForums 2.0.11 - Local File Inclusionchronoforums5.3 (v3.1)Medium
CVE-2022-25497Cuppa CMS v1.0 - Local File Inclusioncuppacms5.3 (v3.1)Medium
CVE-2022-31062GLPI Glpiinventory v1.0.1 - Unauthenticated Local File Inclusionglpi inventory5.3 (v3.1)Medium
CVE-2023-41599JFinalCMS v5.0.0 - Directory Traversaljfinalcms5.3 (v3.1)Medium
CVE-2023-7299DataGear resolveSql sql injectiondatagear5.3 (v4.0)Medium
CVE-2025-10097SimStudioAI sim route.ts code injectionsim5.3 (v4.0)Medium
CVE-2025-10268Printcart Web to Print Product Designer for WooCommerce <= 2.4.8 - Unauthenticated Folder Content Disclosure via Path TrPrintcart Web to Print Product Designer for WooCommerce5.3 (v3.1)Medium
CVE-2025-11072Download Counter Button <= 1.8.6.7 - Unauthenticated Arbitrary File DownloadMelAbu WP Download Counter Button5.3 (v3.1)Medium
CVE-2025-11344ILIAS Certificate Import code injectionilias5.3 (v4.0)Medium
CVE-2025-12972fluent bit Path Traversal Vulnerabilityfluent bit5.3 (v3.1)Medium
CVE-2025-15152h-moses moga-mall PmsProductController.java addProduct unrestricted uploadmoga-mall5.3 (v4.0)Medium
CVE-2025-35056Newforma Info Exchange (NIX) limited file readproject center5.3 (v4.0)Medium
CVE-2025-4078Wangshen SecGate 3600 Path Traversal VulnerabilitySecGate 36005.3 (v4.0)Medium
CVE-2026-100697Adminer 6.0.0 Server-Side Request Forgery via ClickHouse driveradminer5.3 (v4.0)Medium
CVE-2026-100861heym before 0.0.105 SSRF via credential-controlled base URLsheym5.3 (v4.0)Medium
CVE-2026-105122OpenAM before 16.1.3 SSRF via OpenID Connect Client jwks_uriOpenAM5.3 (v4.0)Medium
CVE-2026-107273Gophish 0.11.0 through 0.12.1 SSRF via POST /api/import/sitegophish5.3 (v4.0)Medium
CVE-2026-107844Contao: Path traversal in the images controllercontao5.3 (v3.1)Medium
CVE-2026-108585argocd-mcp through 0.9.0 Path Traversal via delete_application Toolargocd-mcp5.3 (v4.0)Medium
CVE-2026-108719LLMGateway through 1.20.0 Blind SSRF via Video-Generation callback_urlLLMGateway5.3 (v4.0)Medium
CVE-2026-109354LibreNMS before 26.9.0 Path Traversal via NFSen channel Parameterlibrenms5.3 (v4.0)Medium
CVE-2026-110212ai-fusion-video through 1.2.0 Path Traversal in Media Upload subDir Parameterai-fusion-video5.3 (v4.0)Medium
CVE-2026-110254Dockhand before 1.0.45 SSRF via IPv6 Transition Address Bypass in ipCategorydockhand5.3 (v4.0)Medium
CVE-2026-110766Colanode Server through 0.4.7 Path Traversal via Avatar Download Routecolanode5.3 (v4.0)Medium
CVE-2026-111321TaskingAI through 0.3.0 SSRF via OpenAPI servers[0].url in ActionsTaskingAI5.3 (v4.0)Medium
CVE-2026-111635Helical Insight through 7.0.0 Path Traversal via /getExternalResourcehelicalinsight5.3 (v4.0)Medium
CVE-2026-113664ApostropheCMS import-export tar guard misses './..' because it is a literal '../' substring testapostrophe5.3 (v4.0)Medium
CVE-2026-114076Trigger.dev before 4.5.2 Blind SSRF via Alert Channel Webhook URLtrigger.dev5.3 (v4.0)Medium
CVE-2026-114080Trigger.dev before 4.5.2 Blind SSRF via Alert-Channel Webhook URLtrigger.dev5.3 (v4.0)Medium
CVE-2026-114362HarnessRouter Targets Test Endpoint app.py server-side request forgeryHarnessRouter5.3 (v4.0)Medium
CVE-2026-114634WWBN AVideo before 29.4.0 Blind SSRF via getHeaderContentTypeFromURL RedirectAVideo5.3 (v4.0)Medium
CVE-2026-115411crawlseo before 0.2.4 Server-Side Request Forgery via Crawlercrawlseo5.3 (v4.0)Medium
CVE-2026-115720Frappe Builder before 1.36.1 SSRF Guard Bypass via HTTP Redirectbuilder5.3 (v4.0)Medium
CVE-2026-11944openSIS Classic 9.3 - Authenticated path traversal in SentMail attachment downloadopensis5.3 (v4.0)Medium
CVE-2026-14636kirilkirkov Ecommerce-CodeIgniter-Bootstrap Vendor Image Manager AddProduct.php do_upload_others_images path traversalEcommerce-CodeIgniter-Bootstrap5.3 (v4.0)Medium
CVE-2026-14860Podcast Player < 8.3.1 - Unauthenticated Server-Side Request ForgeryPodcast Player5.3 (v3.1)Medium
CVE-2026-15485TRENDnet TEW-821DAP DNS Lookup tools_nslookup sub_43F2C4 os command injectionTEW-821DAP5.3 (v4.0)Medium
CVE-2026-15932Support Genix Lite < 1.4.48 - Unauthenticated Arbitrary File Read via Path TraversalSupport Genix5.3 (v3.1)Medium
CVE-2026-16531Pcp: pcp: arbitrary file creation via path traversal in pmproxy logger servletRed Hat Enterprise Linux 105.3 (v3.1)Medium
CVE-2026-16536Simple Google Calendar Outlook Events Widget < 3.1.0 - Unauthenticated SSRF via calendar_idSimple Google Calendar Outlook Events Widget5.3 (v3.1)Medium
CVE-2026-19785francoisjacquet RosarioSIS Student Medical Medical.inc.php sql injectionRosarioSIS5.3 (v4.0)Medium
CVE-2026-19956gomarble-ai facebook-ads-mcp-server server.py fetch_pagination_url server-side request forgeryfacebook-ads-mcp-server5.3 (v4.0)Medium
CVE-2026-21726Loki Path Traversal - CVE-2021-36156 Bypassloki5.3 (v3.1)Medium
CVE-2026-22662prompts.chat Blind SSRF via media-generateprompts.chat5.3 (v4.0)Medium
CVE-2026-25946Gitea OpenID discovery server-side request forgeryGitea5.3 (v3.1)Medium
CVE-2026-29202cPanel Code Injection VulnerabilitycPanel5.3 (v4.0)Medium
CVE-2026-33766AVideo has SSRF Protection Bypass via HTTP Redirect in Image Download Endpointsavideo5.3 (v4.0)Medium
CVE-2026-34523SillyTavern: Path traversal allows file existence oraclesillytavern5.3 (v3.1)Medium
CVE-2026-34967Adminer sql-log Plugin 5.3.0 through 5.4.2 Arbitrary File Writeadminer5.3 (v4.0)Medium
CVE-2026-35583Emissary has a Path Traversal via Blacklist Bypass in Configuration APIemissary5.3 (v3.1)Medium
CVE-2026-36726bookcars v8.3 Path Traversal Vulnerabilitybookcars v8.35.3 (v3.1)Medium
CVE-2026-3835Prevent Direct Access – Protect WordPress Files <= 2.8.8.8 - Unauthenticated Protected File AccessPrevent Direct Access – Protect WordPress Files5.3 (v3.1)Medium
CVE-2026-40100FastGPT has Unauthenticated SSRF in /api/core/app/mcpTools/runTool via missing CHECK_INTERNAL_IP defaultfastgpt5.3 (v3.1)Medium
CVE-2026-42028novaGallery: Unauthenticated Path Traversal in Album and Cached Image Routes Allows Reading Images Outside Gallery Rootnovagallery5.3 (v3.1)Medium
CVE-2026-44202OpenAM Authenticated Server-Side Request Forgery (SSRF) via /sessionserviceOpenAM5.3 (v4.0)Medium
CVE-2026-44583Paymenter: Blind Unauthenticated SSRF on the Paypal gateway modulePaymenter5.3 (v3.1)Medium
CVE-2026-49138Nanobot < 0.2.1 SSRF via web_fetch Tool Redirect Followingnanobot5.3 (v4.0)Medium
CVE-2026-49345Mercator CVE Configuration Vulnerable to Server-Side Request Forgery (SSRF)mercator5.3 (v4.0)Medium
CVE-2026-53452Ground Station: Unauthenticated out-of-containment file read via sigmfplayback recordingPathground-station5.3 (v3.1)Medium
CVE-2026-54300@astrojs/netlify broadens Astro image.remotePatterns in Netlify Image CDN configastro5.3 (v3.1)Medium
CVE-2026-54508TREK: Blind SSRF via unvalidated redirect-following in Google/Naver list import and Maps URL resolutionTREK5.3 (v4.0)Medium
CVE-2026-55156Token Optimizer MCP: Unauthenticated Path Traversal in Dashboard Session Log API Endpointstoken-optimizer-mcp5.3 (v3.1)Medium
CVE-2026-5538QingdaoU OnlineJudge judge_server_heartbeat Endpoint JudgeServer.service_url server-side request forgeryOnlineJudge5.3 (v4.0)Medium
CVE-2026-55414NL Portal Backend Libraries: Unauthenticated form resolver forwards the privileged Objecten-API token to a caller-supplinl-portal-backend-libraries5.3 (v3.1)Medium
CVE-2026-5547Tenda AC10 httpd formAddMacfilterRule os command injectionac10 firmware5.3 (v4.0)Medium
CVE-2026-56138Authenticated Path Traversal in AIL framework /objects/item/diff Allows Reading Gzip-Compressed Filesail-framework5.3 (v4.0)Medium
CVE-2026-56779MaxKB < 2.10.0 - Server-Side Request Forgery via downloadCallbackUrl and download_url ParametersMaxKB5.3 (v4.0)Medium
CVE-2026-59231Server-Side Request Forgery in Pentestify PDF export via unvalidated image URLsPentestify5.3 (v4.0)Medium
CVE-2026-63730HyperDX < 2.31.0 SSRF via Webhook Test Endpointhyperdx5.3 (v4.0)Medium
CVE-2026-64626AVideo Encoder downloadURL SSRF via unpinned retry fallbackAVideo5.3 (v4.0)Medium
CVE-2026-64870MaxKB: UpdateStoreTool fetches caller-supplied app-store URLs without host validationMaxKB5.3 (v4.0)Medium
CVE-2026-72846Lightdash Scheduled Delivery Webhook URLs Are Not Validated, Allowing Server-Side Request Forgerylightdash5.3 (v4.0)Medium
CVE-2026-73082Activepieces: Server-side request forgery in MCP tool validation endpointactivepieces5.3 (v4.0)Medium
CVE-2026-73244kkFileView: Unauthenticated path traversal in POST /listFiles allows arbitrary directory listingkkFileView5.3 (v3.1)Medium
CVE-2026-73845CKAN MCP Server: MQA server allowlist bypass via unanchored regex (isValidMqaServer)ckan-mcp-server5.3 (v3.1)Medium
CVE-2026-74858jae-jae fetcher-mcp URL Validation security-credentials fetch_urls server-side request forgeryfetcher-mcp5.3 (v4.0)Medium
CVE-2026-76239Stigmem before 0.9.0a11 SSRF via unvalidated webhook delivery_addressstigmem-node5.3 (v4.0)Medium
CVE-2026-76614OpenEMR < 8.3.0 Path Traversal Information Disclosure via EDI Archive Restoreopenemr5.3 (v4.0)Medium
CVE-2026-77067Omnivore Stored Server-Side Request Forgery via the setWebhook Mutationomnivore5.3 (v4.0)Medium
CVE-2026-78231Gitea blind SSRF through OpenID assertion verificationGitea5.3 (v3.1)Medium
CVE-2026-82040UTMStack < 11.2.16 SSRF via IdentityProviderServiceUTMStack5.3 (v4.0)Medium
CVE-2026-84069WebFacing Email Accounts for cPanel 5.3 - 5.3.6 - Unauthenticated LFI via assets/index.phpWebFacing™5.3 (v3.1)Medium
CVE-2026-84175Eclipse Ditto Uncontrolled Recursion VulnerabilityEclipse Ditto5.3 (v4.0)Medium
CVE-2026-84207Heym before 0.0.98 SSRF via WebSocket endpointsheym5.3 (v4.0)Medium
CVE-2026-85650Trigger.dev before 4.5.2 Server-Side Request Forgery via webhook alert-channeltrigger.dev5.3 (v4.0)Medium
CVE-2026-88892OpenPanel SSRF via Unguarded Importer File URL Fetchopenpanel5.3 (v4.0)Medium
CVE-2026-89247WWBN AVideo XML Injection via plugin/AD_Server/VMAP.phpAVideo5.3 (v4.0)Medium
CVE-2026-91199Refly through 1.1.0 Server-Side Request Forgery via scrape endpointrefly5.3 (v4.0)Medium
CVE-2026-91967AVideo through 29.0 Blind SSRF via getHeaderContentTypeFromURLAVideo5.3 (v4.0)Medium
CVE-2026-92184ag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen server-side request forgeryag-ui5.3 (v4.0)Medium
CVE-2026-92569Hippo4j through 1.5.0 SSRF via clientAddress Parameterhippo4j5.3 (v4.0)Medium
CVE-2026-93597ArcadeDB before 26.9.1 SSRF via IPv6 transition addressesarcadedb5.3 (v4.0)Medium
CVE-2026-96652Plex Media Server SSRFmedia server5.3 (v4.0)Medium
CVE-2026-96655Plex Media Server arbitrary-host SSRFmedia server5.3 (v4.0)Medium
CVE-2025-59751Multiple vulnerabilities in AndSoft's e-TMSe-tms5.1 (v4.0)Medium
CVE-2025-59752Multiple vulnerabilities in AndSoft's e-TMSe-tms5.1 (v4.0)Medium
CVE-2025-59753Multiple vulnerabilities in AndSoft's e-TMSe-tms5.1 (v4.0)Medium
CVE-2025-59754Multiple vulnerabilities in AndSoft's e-TMSe-tms5.1 (v4.0)Medium
CVE-2025-59759Multiple vulnerabilities in AndSoft's e-TMSe-tms5.1 (v4.0)Medium
CVE-2025-59773Multiple vulnerabilities in AndSoft's e-TMSe-tms5.1 (v4.0)Medium
CVE-2025-59774Multiple vulnerabilities in AndSoft's e-TMSe-tms5.1 (v4.0)Medium
CVE-2026-100373OpenMetadata through 2.0.2 SSRF via Webhook URL Validation BypassOpenMetadata5.1 (v4.0)Medium
CVE-2026-105263Shaarli Admin Metadata Endpoint MetadataController.php MetadataController server-side request forgeryShaarli5.1 (v4.0)Medium
CVE-2026-110225Shaarli through 0.16.9 SSRF via Thumbnail Retrieval update-thumbnail RouteShaarli5.1 (v4.0)Medium
CVE-2026-17597Nexus Repository 3 - Server-Side Request Forgery via Email Configuration Verificationnexus repository manager5.1 (v4.0)Medium
CVE-2026-19761DTStack Taier Upload Controller UploadController.java MultipartFile.getOriginalFilename path traversalTaier5.1 (v4.0)Medium
CVE-2026-19763DTStack Taier Cluster Creation ClusterController.java FileUtils.deleteDirectory path traversalTaier5.1 (v4.0)Medium
CVE-2026-42213SolidCAM-GPPL-IDE: Path traversal in inc directive enables file probing and NTLM-hash leakSolidCAM-GPPL-IDE5.1 (v4.0)Medium
CVE-2026-42336MaxKB: SSRF Bypass via DNS Rebinding in MaxKB OSS URL FetchMaxKB5.1 (v4.0)Medium
CVE-2026-63302Local File Inclusion in Quick.CMSQuick.CMS5.1 (v4.0)Medium
CVE-2026-76203CSS sanitizer bypass in Pentestify report themes allows forced outbound requestsPentestify5.1 (v4.0)Medium
CVE-2026-79671Ech0 before 4.4.3 SSRF via DNS Resolution BypassEch05.1 (v4.0)Medium
CVE-2026-82112houtini-ai houtini-lm code_task_files index.ts path traversalhoutini-lm5.1 (v4.0)Medium
CVE-2007-4504Joomla! RSfiles <=1.0.2 - Local File Inclusionrsfiles5.0 (v2.0)Medium
CVE-2008-4764Joomla! <=2.0.0 RC2 - Local File Inclusioncom extplorer5.0 (v2.0)Medium
CVE-2008-6080Joomla! ionFiles 4.4.2 - Local File Inclusioncom ionfiles5.0 (v2.0)Medium
CVE-2008-6222Joomla! ProDesk 1.0/1.2 - Local File Inclusionpro desk support center5.0 (v2.0)Medium
CVE-2008-6668nweb2fax <=0.2.7 - Local File Inclusionnweb2fax5.0 (v2.0)Medium
CVE-2009-0815Typo3 sa-2009-002 File Disclosuretypo35.0 (v2.0)Medium
CVE-2009-1496Joomla! Cmimarketplace 0.1 - Local File InclusionJoomla!5.0 (v2.0)Medium
CVE-2009-2100Joomla! JoomlaPraise Projectfork 2.0.10 - Local File InclusionJoomla!5.0 (v2.0)Medium
CVE-2009-5114WebGlimpse 2.18.7 - Directory Traversalwebglimpse5.0 (v2.0)Medium
CVE-2010-0696Joomla! Component Jw_allVideos - Arbitrary File Retrievaljw allvideos5.0 (v2.0)Medium
CVE-2010-0942Joomla! Component com_jvideodirect - Directory Traversalcom jvideodirect5.0 (v2.0)Medium
CVE-2010-0943Joomla! Component com_jashowcase - Directory Traversalcom jashowcase5.0 (v2.0)Medium
CVE-2010-0944Joomla! Component com_jcollection - Directory Traversalcom jcollection5.0 (v2.0)Medium
CVE-2010-1081Joomla! Component com_communitypolls 1.5.2 - Local File Inclusioncom communitypolls5.0 (v2.0)Medium
CVE-2010-1302Joomla! Component DW Graph - Local File Inclusioncom dwgraphs5.0 (v2.0)Medium
CVE-2010-1304Joomla! Component User Status - Local File Inclusioncom userstatus5.0 (v2.0)Medium
CVE-2010-1305Joomla! Component JInventory 1.23.02 - Local File Inclusioncom jinventory5.0 (v2.0)Medium
CVE-2010-1307Joomla! Component Magic Updater - Local File Inclusioncom joomlaupdater5.0 (v2.0)Medium
CVE-2010-1308Joomla! Component SVMap 1.1.1 - Local File Inclusioncom svmap5.0 (v2.0)Medium
CVE-2010-1312Joomla! Component News Portal 1.5.x - Local File Inclusioncom news portal5.0 (v2.0)Medium
CVE-2010-1314Joomla! Component Highslide 1.5 - Local File Inclusioncom hsconfig5.0 (v2.0)Medium
CVE-2010-1315Joomla! Component webERPcustomer - Local File Inclusioncom weberpcustomer5.0 (v2.0)Medium
CVE-2010-1340Joomla! Component com_jresearch - 'Controller' Local File Inclusioncom jresearch5.0 (v2.0)Medium
CVE-2010-1345Joomla! Component Cookex Agency CKForms - Local File Inclusioncom ckforms5.0 (v2.0)Medium
CVE-2010-1352Joomla! Component Juke Box 1.7 - Local File Inclusioncom jukebox5.0 (v2.0)Medium
CVE-2010-1353Joomla! Component LoginBox - Local File Inclusioncom loginbox5.0 (v2.0)Medium
CVE-2010-1354Joomla! Component VJDEO 1.0 - Local File Inclusioncom vjdeo5.0 (v2.0)Medium
CVE-2010-1461Joomla! Component Photo Battle 1.0.1 - Local File Inclusioncom photobattle5.0 (v2.0)Medium
CVE-2010-1491Joomla! Component MMS Blog 2.3.0 - Local File Inclusioncom mmsblog5.0 (v2.0)Medium
CVE-2010-1494Joomla! Component AWDwall 1.5.4 - Local File Inclusioncom awdwall5.0 (v2.0)Medium
CVE-2010-1532Joomla! Component PowerMail Pro 1.5.3 - Local File Inclusioncom powermail5.0 (v2.0)Medium
CVE-2010-1534Joomla! Component Shoutbox Pro - Local File Inclusioncom shoutbox5.0 (v2.0)Medium
CVE-2010-1540Joomla! Component com_blog - Directory Traversalcom myblog5.0 (v2.0)Medium
CVE-2010-1601Joomla! Component JA Comment - Local File Inclusioncom jacomment5.0 (v2.0)Medium
CVE-2010-1657Joomla! Component SmartSite 1.0.0 - Local File Inclusioncom smartsite5.0 (v2.0)Medium
CVE-2010-1658Joomla! Component NoticeBoard 1.3 - Local File Inclusioncom noticeboard5.0 (v2.0)Medium
CVE-2010-1659Joomla! Component Ultimate Portfolio 1.0 - Local File Inclusioncom ultimateportfolio5.0 (v2.0)Medium
CVE-2010-1714Joomla! Component Arcade Games 1.0 - Local File Inclusioncom arcadegames5.0 (v2.0)Medium
CVE-2010-1858Joomla! Component SMEStorage - Local File Inclusioncom smestorage5.0 (v2.0)Medium
CVE-2010-1982Joomla! Component JA Voice 2.0 - Local File Inclusioncom javoice5.0 (v2.0)Medium
CVE-2010-2018Lokomedia CMS - Local File Inclusionlokomedia cms5.0 (v2.0)Medium
CVE-2010-3203Joomla! Component PicSell 1.0 - Arbitrary File Retrievalcom picsell5.0 (v2.0)Medium
CVE-2011-0049Majordomo2 _list_file_get() Directory Traversalmajordomo 25.0 (v2.0)Medium
CVE-2011-1669WP Custom Pages 0.5.0.1 - Local File Inclusion (LFI)wp custom pages5.0 (v2.0)Medium
CVE-2011-2780Chyrp 2.x - Local File Inclusionchyrp5.0 (v2.0)Medium
CVE-2011-4804Joomla! Component com_kp - 'Controller' Local File Inclusioncom obsuggest5.0 (v2.0)Medium
CVE-2012-0896Count Per Day <= 3.1 - download.php f Parameter Traversal Arbitrary File Accesscount per day5.0 (v2.0)Medium
CVE-2012-0981phpShowtime 2.0 - Directory Traversalphpshowtime5.0 (v2.0)Medium
CVE-2012-099611in1 CMS 1.2.1 - Local File Inclusion (LFI)11in15.0 (v2.0)Medium
CVE-2012-2983Webmin edit_html.cgi file Parameter Traversal Arbitrary File Accesswebmin5.0 (v2.0)Medium
CVE-2012-4031WANGKONGBAO CNS-1000 and 1100 UTM Directory Traversalcns-10005.0 (v2.0)Medium
CVE-2012-4347Symantec Messaging Gateway 9.5 Log File Download Vulnerabilitymessaging gateway5.0 (v2.0)Medium
CVE-2012-4915WordPress Plugin Google Document Embedder Arbitrary File Disclosuregoogle doc embedder5.0 (v2.0)Medium
CVE-2012-5192Bitweaver overlay_type Directory Traversalbitweaver5.0 (v2.0)Medium
CVE-2013-2641Sophos Web Protection Appliance patience.cgi Directory Traversalweb appliance firmware5.0 (v2.0)Medium
CVE-2013-3336ColdFusion 'password.properties' Hash Extractioncoldfusion5.0 (v2.0)Medium
CVE-2013-4823HP Intelligent Management BIMS DownloadServlet Directory Traversalintelligent management center5.0 (v2.0)Medium
CVE-2013-4826HP Intelligent Management SOM FileDownloadServlet Arbitrary Downloadimc service operation management software module5.0 (v2.0)Medium
CVE-2013-5979Xibo 1.2.2/1.4.1 - Directory Traversalxibo5.0 (v2.0)Medium
CVE-2013-6043Webuzo 2.1.3 - Multiple Vulnerabilitieswebuzo5.0 (v2.0)Medium
CVE-2013-7091Zimbra Collaboration Server LFIzimbra collaboration suite5.0 (v2.0)Medium
CVE-2013-7240WordPress Plugin Advanced Dewplayer 1.2 - Directory Traversaladvanced dewplayer5.0 (v2.0)Medium
CVE-2014-100002ManageEngine Support Center Plus Directory Traversalmanageengine supportcenter plus5.0 (v2.0)Medium
CVE-2014-4577WP AmASIN – The Amazon Affiliate Shop - Local File Inclusionwp amasin - the amazon affiliate shop5.0 (v2.0)Medium
CVE-2014-4940WordPress Plugin Tera Charts - Local File Inclusiontera-charts5.0 (v2.0)Medium
CVE-2014-4941Cross RSS 1.7 - Local File Inclusionwp-cross-rss5.0 (v2.0)Medium
CVE-2014-5111Fonality trixbox - Local File Inclusiontrixbox5.0 (v2.0)Medium
CVE-2014-5181Last.fm Rotation 1.0 - Path Traversallastfm-rotation plugin5.0 (v2.0)Medium
CVE-2014-5187Tom M8te (tom-m8te) Plugin 1.5.3 - Directory Traversaltom-m8te plugin5.0 (v2.0)Medium
CVE-2014-5368WordPress Plugin WP Content Source Control - Directory Traversalwp content source control5.0 (v2.0)Medium
CVE-2014-6308Osclass Security Advisory 3.4.1 - Local File Inclusionosclass5.0 (v2.0)Medium
CVE-2014-8799WordPress DukaPress Plugin File Read Vulnerabilitydukapress5.0 (v2.0)Medium
CVE-2014-9119WordPress DB Backup <=4.5 - Local File Inclusiondb backup5.0 (v2.0)Medium
CVE-2015-0922McAfee ePolicy Orchestrator Authenticated XXE Credentials Exposureepolicy orchestrator5.0 (v2.0)Medium
CVE-2015-0923Ektron 8.5, 8.7, 9.0 XSLT Transform Remote Code Executionektron content management system5.0 (v2.0)Medium
CVE-2015-1579WordPress Slider Revolution - Local File Disclosuredivi5.0 (v2.0)Medium
CVE-2015-1830Apache ActiveMQ 5.x-5.11.1 Directory Traversal Shell Uploadactivemq5.0 (v2.0)Medium
CVE-2015-2067Magento Server MAGMI - Directory Traversalmagmi5.0 (v2.0)Medium
CVE-2015-2997SysAid Help Desk Arbitrary File Downloadsysaid5.0 (v2.0)Medium
CVE-2015-3897Bonita BPM Portal <6.5.3 - Local File Inclusionbonita bpm portal5.0 (v2.0)Medium
CVE-2015-4414WordPress SE HTML5 Album Audio Player 1.1.0 - Directory Traversalse html5 album audio player5.0 (v2.0)Medium
CVE-2015-4666Xceedium Xsuite - Multiple Vulnerabilitiesxsuite5.0 (v2.0)Medium
CVE-2025-11536Element Pack Addons for Elementor <= 8.2.5 - Authenticated (Subscriber+) Blind Server-Side Request ForgeryElement Pack – Widgets, Templates & Addons for Elementor5.0 (v3.1)Medium
CVE-2026-16955AI Engine < 3.6.6 - Subscriber+ Arbitrary File Read via Audio TranscriptionAI Engine5.0 (v3.1)Medium
CVE-2026-28385SSRF via image import from URL allows internal network probing by authenticated userslxd5.0 (v3.1)Medium
CVE-2026-35516LinkAce has SSRF via CheckLinksCommand - Link URL Update Bypasses laravel-html-meta Protectionlinkace5.0 (v3.1)Medium
CVE-2026-54546CloudTAK: Authenticated full-read SSRF in CloudTAK basemap import (PUT /api/basemap) — no IP-classification guardCloudTAK5.0 (v3.1)Medium
CVE-2026-78850Matomo v.5.11.2 Information Disclosure Vulnerability-5.0 (v3.1)Medium
CVE-2026-79723Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetcheslangflow5.0 (v3.1)Medium
CVE-2017-7461Intellinet NFC-30IR Camera - Multiple Vulnerabilitiesnfc-30ir firmware4.9 (v3.0)Medium
CVE-2020-11491Zen Load Balancer Directory Traversalzen load balancer4.9 (v3.1)Medium
CVE-2021-24966WordPress Plugin Error Log Viewer 1.1.1 - Arbitrary File Clearing (Authenticated)error log viewer4.9 (v3.1)Medium
CVE-2024-10708System Dashboard < 2.8.15 - Admin+ Path Traversalsystem dashboard4.9 (v3.1)Medium
CVE-2025-11466Allegra DatabaseBackupBL Directory Traversal Information Disclosure VulnerabilityAllegra4.9 (v3.0)Medium
CVE-2025-15673Import and export users and customers < 2.4.3 - Admin+ Arbitrary File ReadImport and export users and customers4.9 (v3.1)Medium
CVE-2025-67819weaviate Path Traversal Vulnerabilityweaviate4.9 (v3.1)Medium
CVE-2025-69904Linkstack 4.8.4 and Earlier Path Traversal Vulnerability-4.9 (v3.1)Medium
CVE-2026-25525OpenMage LTS has Path Traversal Filter Bypass in Dataflow Modulemagento4.9 (v3.1)Medium
CVE-2026-41412alf.io vulnerable to Arbitrary File Read and Exfil via simpleHttpClient Extension Scriptalf.io4.9 (v3.1)Medium
CVE-2026-5114SpeedyCache <= 1.3.8 - Authenticated (Administrator+) Arbitrary File ReadSpeedyCache – Cache, Optimization, Performance4.9 (v3.1)Medium
CVE-2026-52832Nuclio: Unauthenticated path traversal in spec.handler allows arbitrary file write in Dashboard containernuclio4.9 (v3.1)Medium
CVE-2026-53594FreeScout has Arbitrary File Read in App Logs Viewer via Forged Encrypted Pathfreescout4.9 (v3.1)Medium
CVE-2026-71283Fledge IoT Gateway Backup Restore Tar Path Traversalfledge4.9 (v3.1)Medium
CVE-2026-76083Redash: JSON data source query URL can bypass base URL restrictionredash4.9 (v4.0)Medium
CVE-2026-77825IBM ContextForge MCP Gateway is affected by path traversalcontextforge4.9 (v3.1)Medium
CVE-2016-4807Web2py 2.14.5 - Multiple Vulnerabilitiesweb2py4.8 (v3.0)Medium
CVE-2025-54292Client-Side Path Traversal in LXD-UIlxd4.8 (v4.0)Medium
CVE-2026-100850AzuraCast before 0.23.8 SSRF and Local File Read via Remote PlaylistAzuraCast4.8 (v4.0)Medium
CVE-2026-112949Vitest: Code injection via unauthenticated manual mock registrationvitest4.7 (v3.1)Medium
CVE-2026-102332Dozzle before 11.1.2 Path Traversal via Log ZIP Downloaddozzle4.6 (v4.0)Medium
CVE-2025-13698Deciso OPNsense diag_backup.php filename Directory Traversal Arbitrary File Creation VulnerabilityOPNsense4.5 (v3.0)Medium
CVE-2008-5587phpPgAdmin <=4.2.1 - Local File Inclusionphppgadmin4.3 (v2.0)Medium
CVE-2010-0982Joomla! Component com_cartweberp - Local File Inclusioncom cartweberp4.3 (v2.0)Medium
CVE-2010-1217Joomla! Component & Plugin JE Tooltip 1.0 - Local File Inclusionje form creator4.3 (v2.0)Medium
CVE-2010-1313Joomla! Component Saber Cart 1.0.0.12 - Local File Inclusioncom sebercart4.3 (v2.0)Medium
CVE-2011-4451WikkaWiki 1.3.2 - Multiple Vulnerabilitieswikkawiki4.3 (v2.0)Medium
CVE-2012-4253MySQLDumper 1.24.4 - Directory Traversalmysqldumper4.3 (v2.0)Medium
CVE-2013-6042Webuzo 2.1.3 - Multiple Vulnerabilitieswebuzo4.3 (v2.0)Medium
CVE-2013-6785Supermicro Onboard IPMI url_redirect.cgi Authenticated Directory Traversalintelligent platform management interface4.3 (v3.1)Medium
CVE-2014-9146Fiyo CMS 2.0.1.8 - Multiple Vulnerabilitiesfiyo cms4.3 (v2.0)Medium
CVE-2015-4665Xceedium Xsuite - Multiple Vulnerabilitiesxsuite4.3 (v2.0)Medium
CVE-2018-18777Microstrategy Web 7 - Local File Inclusionmicrostrategy web4.3 (v3.0)Medium
CVE-2018-6225Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilitiesemail encryption gateway4.3 (v3.0)Medium
CVE-2024-7631Openshift-console: openshift console: path traversalRed Hat OpenShift Container Platform 3.114.3 (v3.1)Medium
CVE-2025-12494Image Gallery – Photo Grid & Video Gallery <= 2.12.28 - Improper Authorization to Authenticated (Author+) Arbitrary ImagModula Image Gallery – Photo Grid & Video Gallery4.3 (v3.1)Medium
CVE-2025-63739rockoa Improper Access Control Vulnerabilityrockoa4.3 (v3.1)Medium
CVE-2025-69206Hemmelig has SSRF Filter bypass in Secret Request functionalityhemmelig4.3 (v3.1)Medium
CVE-2026-101029Gitea migration and pull mirror SSRF through multi-answer DNSgitea4.3 (v3.1)Medium
CVE-2026-113671ApostropheCMS: Host header controls server-side image fetch origin in @apostrophecms/ai-helper, enabling authenticated Sapostrophe4.3 (v3.1)Medium
CVE-2026-12905Online Scheduling and Appointment Booking System – Bookly <= 27.7 - Authenticated (Staff+) Insecure Direct Object RefereOnline Scheduling and Appointment Booking System – Bookly4.3 (v3.1)Medium
CVE-2026-26477dokuwiki Denial of Service Vulnerabilitydokuwiki4.3 (v3.1)Medium
CVE-2026-34170Coolify: Server-Side Request Forgery via attacker-controlled GitHub App API URLcoolify4.3 (v3.1)Medium
CVE-2026-36239PbootCMS v.3.2.11 Cross-site Scripting VulnerabilityPbootCMS v.3.2.114.3 (v3.1)Medium
CVE-2026-42885Audiobookshelf: Path prefix bypass in filesystem existence check leaks out-of-scope file existenceaudiobookshelf4.3 (v3.1)Medium
CVE-2026-43936e107: Server-Side Request Forgery (SSRF) in the remote file fetchere1074.3 (v3.1)Medium
CVE-2026-48789AnythingLLM: Windows path containment bypass in document folder routeanything-llm4.3 (v3.1)Medium
CVE-2026-49856@jshookmcp/jshook: ICMP probe and traceroute skip local-network SSRF authorizationjshookmcp4.3 (v3.1)Medium
CVE-2026-55495Cloudreve: Path Traversal in WOPI PUT_RELATIVE Allows Arbitrary File Creation in Owner Accountcloudreve4.3 (v3.1)Medium
CVE-2026-55875Helium: SSRF via External Calendar URL Allows Authenticated Users to Probe Internal Networkplatform4.3 (v3.1)Medium
CVE-2026-59816Joplin: Path traversal in transcribe proxy endpoint via URL-encoded slashjoplin4.3 (v3.1)Medium
CVE-2026-77352Wallos: Authenticated SSRF via per-user SMTP notification host (low-privilege user)Wallos4.3 (v3.1)Medium
CVE-2026-77522MaxKB: Authenticated full-read SSRF via the knowledge web-document import/sync crawler (Fork.fork requests.get, no interMaxKB4.3 (v3.1)Medium
CVE-2026-10052Quay/config-tool: quay/config-tool: ssrf via unfiltered ldap and smtp config validation endpointsRed Hat Quay 34.1 (v3.1)Medium
CVE-2026-48013Shopware: SSRF in Media External-Link Endpoint Bypasses IP Validationshopware4.1 (v3.1)Medium
CVE-2026-61681Hatchet: SSRF via Unsigned UnsubscribeURL in SNS UnsubscribeConfirmation Handlerhatchet4.1 (v3.1)Medium
CVE-2011-4640WebTitan < 3.60 - Local File Inclusionwebtitan4.0 (v2.0)Medium
CVE-2013-5528Cisco Unified Communications Manager 7/8/9 - Directory Traversalunified communications manager4.0 (v2.0)Medium
CVE-2014-1222Fiyo CMS 2.0.1.8 - Multiple Vulnerabilitiesvtiger crm4.0 (v2.0)Medium
CVE-2014-2424Oracle Event Processing FileUploadServlet Arbitrary File Uploadfusion middleware4.0 (v2.0)Medium
CVE-2014-5258webEdition 6.3.8.0 - Directory Traversalwebedition cms4.0 (v2.0)Medium
CVE-2015-0921McAfee ePolicy Orchestrator Authenticated XXE Credentials Exposureepolicy orchestrator4.0 (v2.0)Medium
CVE-2015-1376WordPress Pixabay Images PHP Code Uploadpixabay images4.0 (v2.0)Medium
CVE-2025-67737AzuraCast Vulnerable to Pre-Auth File Deletion & Admin RCEazuracast3.7 (v3.1)Low
CVE-2012-0991OpenEMR 4.1 - Local File Inclusionopenemr3.5 (v2.0)Low
CVE-2025-10583WP Fastest Cache Premium <= 1.7.4 - Missing Authorization to Authenticated (Subscriber+) Blind Server-Side Request ForgeWP Fastest Cache Premium3.5 (v3.1)Low
CVE-2025-11990Improper Handling of URL Encoding (Hex Encoding) in GitLabgitlab3.5 (v3.1)Low
CVE-2025-55523Agent-Zero 0.8.0 - 0.9.4 - Arbitrary File Downloadagent-zero3.5 (v3.1)Low
CVE-2026-48051Papra: SSRF via HTTP redirect bypass in webhook deliverypapra3.5 (v3.1)Low
CVE-2026-77351Wallos: SSRF via Unvalidated User-Level SMTP Host in Email Notification SettingsWallos3.5 (v3.1)Low
CVE-2026-107449Heimdall Server-Side Request Forgery VulnerabilityHeimdall3.4 (v3.1)Low
CVE-2026-9062WordPress Agile Store Locator < 1.6.9 - Arbitrary File Readagile-store-locator3.4 (v3.1)Low
CVE-2026-113651ApostropheCMS: Path traversal in uploadfsapostrophe3.3 (v3.1)Low
CVE-2026-42201Coolify: OS Command Injection via Database Credential Fields in Docker Compose Service Commandscoolify3.3 (v3.1)Low
CVE-2026-23603Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claimGitea Open Source Git Server3.1 (v3.1)Low
CVE-2026-48707InstantCMS vulnerable to SSRF via upload redirect bypass allows internal network service scanningicms23.1 (v3.1)Low
CVE-2026-55825Contao: Possible path traversal in job download URIscontao3.1 (v3.1)Low
CVE-2025-62505SSRF in lobehub/lobe-chat with native web fetch modulelobe-chat3.0 (v3.1)Low
CVE-2026-49262Aimeos Pagible CMS vulnerable to Server Side Request Forgery (SSRF) via DNS rebinding in admin proxypagible3.0 (v3.1)Low
CVE-2026-68927MobSF: SSRF port restriction bypass in assetlinks_checkMobile-Security-Framework-MobSF3.0 (v3.1)Low
CVE-2025-14276Ilevia EVE X1 Server leaf_search.php command injectionEVE X1 Server2.9 (v4.0)Low
CVE-2026-112076alexta69 MeTube Feed-metadata Thumbnail Fetch ytdl.py DownloadQueue.__write_feed_metadata_sync server-side request forgeMeTube2.9 (v4.0)Low
CVE-2026-38924Serena Incorrect Resource Transfer Between Spheres VulnerabilitySerena2.9 (v3.1)Low
CVE-2023-2252Directorist < 7.5.4 - Local File Inclusiondirectorist2.7 (v3.1)Low
CVE-2024-55550Mitel MiCollab - Arbitary File Readcmg suite2.7 (v3.1)Low
CVE-2025-10723PixelYourSite < 11.1.2 - Admin+ LFIPixelYourSite2.7 (v3.1)Low
CVE-2026-52840Easy!Appointments has server-side request forgery in CalDAV connection test that exposes the deployment's internal netwoeasyappointments2.7 (v3.1)Low
CVE-2025-62719LinkAce: Limited Server-Side Request Forgery (SSRF) in Keyword Fetching Functionalitylinkace2.3 (v4.0)Low
CVE-2026-101061utcp-gql and utcp-websocket before 1.1.1 SSRF via URL validation bypasspython-utcp2.3 (v4.0)Low
CVE-2026-110223Kavita 0.9.0 through 0.9.1.4 SSRF Blocklist Bypass via upload-cbl-file EndpointKavita2.3 (v4.0)Low
CVE-2026-115730i18next-http-backend 4.0.2 Protocol-Relative URL Injection via Namespace in interpolateUrli18next-http-backend2.3 (v4.0)Low
CVE-2026-115752Signal K Server 2.28.0-beta.2 before 2.34.0 SSRF via App Store appIconsignalk-server2.3 (v4.0)Low
CVE-2026-16434Adminer before 5.5.1 X-Forwarded-Prefix Backslash Bypassadminer2.3 (v4.0)Low
CVE-2026-44286FastGPT: SSRF Vulnerability in Laf Workflow Node via Missing Internal Address ValidationFastGPT2.3 (v4.0)Low
CVE-2026-55554Dompdf: Chroot Validation Bypassdompdf2.3 (v4.0)Low
CVE-2026-73087Dozzle: SSRF guard bypass via IPv6 transition addresses (6to4/NAT64/Teredo) in webhook notification dispatcherdozzle2.3 (v4.0)Low
CVE-2026-41321@astrojs/cloudflare: SSRF via redirect following in Cloudflare image-binding-transform endpoint@astrojs/cloudflare2.2 (v3.1)Low
CVE-2026-77648Glance Server-Side Request Forgery VulnerabilityGlance2.2 (v3.1)Low
CVE-2025-10232299ko FileManagerAPIController.php delete path traversalthe file plugin/filemanager/controllers/FileManagerAPIController.php2.1 (v4.0)Low
CVE-2025-10233kalcaddle kodbox editor.class.php fileSave path traversalkodbox2.1 (v4.0)Low
CVE-2025-10787MuYuCMS Add Fiend Link index.html server-side request forgeryMuYuCMS2.1 (v4.0)Low
CVE-2025-11034Dibo Data Decision Making System common_dep.action.jsp downloadImpTemplet path traversalData Decision Making System2.1 (v4.0)Low
CVE-2025-11035Jinher OA text xml external entity referencejinher oa2.1 (v4.0)Low
CVE-2025-11138mirweiye wenkucms common.php createPathOne os command injectionwenkucms2.1 (v4.0)Low
CVE-2025-11139Bjskzy Zhiyou ERP com.artery.form.services.FormStudioUpdater uploadStudioFile path traversalzhiyou erp2.1 (v4.0)Low
CVE-2025-11490wonderwhy-er DesktopCommanderMCP Absolute Path command-manager.ts extractBaseCommand os command injectiondesktopcommandermcp2.1 (v4.0)Low
CVE-2025-11607harry0703 MoneyPrinterTurbo API Endpoint music.py upload_music path traversalmoneyprinterturbo2.1 (v4.0)Low
CVE-2025-11631RainyGao DocSys deleteDoc.do path traversaldocsys2.1 (v4.0)Low
CVE-2025-11902yanyutao0402 ChanCMS findField sql injectionchancms2.1 (v4.0)Low
CVE-2025-11903yanyutao0402 ChanCMS update sql injectionchancms2.1 (v4.0)Low
CVE-2025-11905yanyutao0402 ChanCMS gather.js getArticle code injectionchancms2.1 (v4.0)Low
CVE-2025-11913Shenzhen Ruiming Technology Streamax Crocus Service.do download path traversalstreamax crocus2.1 (v4.0)Low
CVE-2025-11914Shenzhen Ruiming Technology Streamax Crocus DeviceFileReport.do download path traversalstreamax crocus2.1 (v4.0)Low
CVE-2025-11941e107 CMS Avatar image.php path traversale1072.1 (v4.0)Low
CVE-2025-12203givanz Vvveb Code Editor functions.php sanitizeFileName path traversalvvveb2.1 (v4.0)Low
CVE-2025-12266Zytec Dalian Zhuoyun Technology Central Authentication Service widget _empty code injectionCentral Authentication Service2.1 (v4.0)Low
CVE-2025-12626jeecgboot jeewx-boot WxActGoldeneggsPrizesController.java getImgUrl path traversaljeewx-boot2.1 (v4.0)Low
CVE-2025-12922OpenClinica Community Edition CRF Data Import ImportCRFData path traversalopenclinica2.1 (v4.0)Low
CVE-2025-13174rachelos WeRSS we-mp-rss Webhook mps.py do_job server-side request forgeryWeRSS we-mp-rss2.1 (v4.0)Low
CVE-2025-13209bestfeng oa_git_free WorkflowPredefineController.java updateWriteBack xml external entity referenceoa git free2.1 (v4.0)Low
CVE-2025-13246shsuishang ShopSuite ModulithShop JwtAuthenticationFilter.java JwtAuthenticationFilter path traversalShopSuite ModulithShop2.1 (v4.0)Low
CVE-2025-13789ZenTao model.php makeRequest server-side request forgeryzentao2.1 (v4.0)Low
CVE-2025-13809orionsec orion-ops SSH Connection MachineInfoController.java server-side request forgeryorion ops2.1 (v4.0)Low
CVE-2025-13816moxi159753 Mogu Blog v2 ZIP File unzipFile FileOperation.unzip path traversalmogublog2.1 (v4.0)Low
CVE-2025-13875Yohann0617 oci-helper OCI Configuration Upload OciServiceImpl.java addCfg path traversaloci-helper2.1 (v4.0)Low
CVE-2025-14182Sobey Media Convergence System upload path traversalmedia convergence system2.1 (v4.0)Low
CVE-2025-14204TykoDev cherry-studio-TykoFork OAuth Server Discovery oauth-authorization-server redirectToAuthorization os command injecherry-studio-TykoFork2.1 (v4.0)Low
CVE-2025-14518PowerJob Network Request PingPongUtils.java checkConnectivity server-side request forgerypowerjob2.1 (v4.0)Low
CVE-2025-14520baowzh hfly delfile path traversalhfly2.1 (v4.0)Low
CVE-2025-14521baowzh hfly download path traversalhfly2.1 (v4.0)Low
CVE-2025-14731CTCMS Content Management System Frontend/Template Management CT_Parser.php special elements used in a template enginectcms2.1 (v4.0)Low
CVE-2025-15098YunaiV yudao-cloud Business Process Management BpmSyncHttpRequestTrigger server-side request forgeryyudao-cloud2.1 (v4.0)Low
CVE-2026-10172Bdtask Multi-Store Inventory Management System Component Module.php upload unrestricted uploadMulti-Store Inventory Management System2.1 (v4.0)Low
CVE-2026-101859RaspAP raspap-webgui OpenVPN Configuration del_ovpncfg.php escapeshellcmd os command injectionraspap-webgui2.1 (v4.0)Low
CVE-2026-101861Langflow Code Execution via eval() in Component Input Schemalangflow2.1 (v4.0)Low
CVE-2026-10213AstrBotDevs AstrBot API Endpoint delete path traversalAstrBot2.1 (v4.0)Low
CVE-2026-102244MODSetter SurfSense Document Export Feature editor_routes.py server-side request forgerySurfSense2.1 (v4.0)Low
CVE-2026-10239JeecgBoot edit WordUtil.addImage server-side request forgeryJeecgBoot2.1 (v4.0)Low
CVE-2026-10240JeecgBoot test server-side request forgerythe file /airag/airagModel/test2.1 (v4.0)Low
CVE-2026-10241jeecgboot The server processes these URLs Cloud Instance Metadata Endpoint debug FileDownloadUtils.download2DiskFromNetThe server processes these URLs2.1 (v4.0)Low
CVE-2026-10274indrasishbanerjee aem-mcp-server Axios Request Flow mcp-server.ts getAssetMetadata server-side request forgeryaem-mcp-server2.1 (v4.0)Low
CVE-2026-10276hekmon8 Jenkins-server-mcp get_build_status/get_build_log/trigger_build index.ts jobPath server-side request forgeryJenkins-server-mcp2.1 (v4.0)Low
CVE-2026-10278ishayoyo excel-mcp read_file/write_file index.ts path traversalexcel-mcp2.1 (v4.0)Low
CVE-2026-10279hiraishikentaro wezterm-mcp switch_pane/write_to_specific_pane wezterm_executor.ts os command injectionwezterm-mcp2.1 (v4.0)Low
CVE-2026-1029060xshariq github-mcp-server Git Remove MCP Tool github.ts child_process.exec os command injectiongithub-mcp-server2.1 (v4.0)Low
CVE-2026-103540formtools.org Form Tools Client Settings Clients.class.php updateClientSettingsTab special elements in template engineForm Tools2.1 (v4.0)Low
CVE-2026-104983Linux Mint Xreader PDF Attachment Saving ev-window.c g_file_get_child path traversalXreader2.1 (v4.0)Low
CVE-2026-105286Totolink A3002MU File Upload formUploadFile sub_44B250 path traversalA3002MU2.1 (v4.0)Low
CVE-2026-105329TallCMS PluginManager ThemeManager.php code injectionTallCMS2.1 (v4.0)Low
CVE-2026-105438O2OA General url ActionUploadExcelWithUrl server-side request forgeryO2OA2.1 (v4.0)Low
CVE-2026-10558SourceCodester Pizzafy Ecommerce System index.php file inclusionPizzafy Ecommerce System2.1 (v4.0)Low
CVE-2026-10559SourceCodester Pizzafy Ecommerce System index.php file inclusionPizzafy Ecommerce System2.1 (v4.0)Low
CVE-2026-10662ahujasid blender-mcp ZIP File server.py requests.get server-side request forgeryblender-mcp2.1 (v4.0)Low
CVE-2026-10690wonderwhy-er DesktopCommanderMCP read_file filesystem.ts readFileFromUrl server-side request forgeryDesktopCommanderMCP2.1 (v4.0)Low
CVE-2026-108523Studio-Saelix Sencho git-sources Browse API Endpoint outboundTarget.ts server-side request forgerySencho2.1 (v4.0)Low
CVE-2026-108542021is elvix-sdk MCP Request index.ts server-side request forgeryelvix-sdk2.1 (v4.0)Low
CVE-2026-108787houtini-ai voice-analyser-mcp collect_corpus crawler.ts fetch server-side request forgeryvoice-analyser-mcp2.1 (v4.0)Low
CVE-2026-108791westboy CicadasCMS Template Management input TemplateController.input path traversalCicadasCMS2.1 (v4.0)Low
CVE-2026-108811WMCMS index.php information disclosureWMCMS2.1 (v4.0)Low
CVE-2026-109402conductor-oss conductor MCP Service MCPService.java MCPService.listTools server-side request forgeryconductor2.1 (v4.0)Low
CVE-2026-111986AUTOMATIC1111 stable-diffusion-webui Model Instantiation sd_models.py get_obj_from_str code injectionstable-diffusion-webui2.1 (v4.0)Low
CVE-2026-112078RVC-Project Retrieval-based-Voice-Conversion-WebUI webui.py change_info_ code injectionRetrieval-based-Voice-Conversion-WebUI2.1 (v4.0)Low
CVE-2026-112254agit8or1 clientst0r Property URL Importer property_url_importer.py _fetch_html server-side request forgeryclientst0r2.1 (v4.0)Low
CVE-2026-112302kiwilan php-archive Extraction ArchiveZip.php extract path traversalphp-archive2.1 (v4.0)Low
CVE-2026-113505aaPanel Download Endpoint v2.py send_file path traversalaaPanel2.1 (v4.0)Low
CVE-2026-113738R6410418 Jackrong-llm-finetuning-guide MTP weight_map qwen_mtp_gguf_pipeline.py extract_mtp_heads path traversalJackrong-llm-finetuning-guide2.1 (v4.0)Low
CVE-2026-11408vertex-app vertex Log Viewer Endpoint LogMod.js os command injectionvertex2.1 (v4.0)Low
CVE-2026-114374leomoon-studios wiki-go fetch-metadata Endpoint metadata_api.go server-side request forgerywiki-go2.1 (v4.0)Low
CVE-2026-114375leomoon-studios wiki-go Files Rename API files.go RenameFileHandler path traversalwiki-go2.1 (v4.0)Low
CVE-2026-114376leomoon-studios wiki-go API editor.go SourceHandler path traversalwiki-go2.1 (v4.0)Low
CVE-2026-11467jishenghua jshERP addAccountHeadAndDetail Endpoint AccountHeadService.java path traversaljshERP2.1 (v4.0)Low
CVE-2026-1160451999AZZAR designer-mcp MCP motion-dev-guidelines.md get_reference path traversaldesigner-mcp2.1 (v4.0)Low
CVE-2026-116224fr0tt benotes Bookmark Metadata Endpoint PostController.php getUrlInfo server-side request forgerybenotes2.1 (v4.0)Low
CVE-2026-12210universal-tool-calling-protocol python-utcp utcp-gql/utcp-websocket server-side request forgerypython-utcp2.1 (v4.0)Low
CVE-2026-12774BerriAI litellm MCP Server Connection Testing rest_endpoints.py _execute_with_mcp_client server-side request forgerylitellm2.1 (v4.0)Low
CVE-2026-12798BerriAI litellm MCP OpenAPI Spec Loader openapi_to_mcp_generator.py load_openapi_spec_async server-side request forgerylitellm2.1 (v4.0)Low
CVE-2026-12814Comfast CF-WR631AX V3 API Endpoint mbox-config system os command injectionCF-WR631AX V32.1 (v4.0)Low
CVE-2026-13560Edimax EW-7478APC POST Request formAccept os command injectionEW-7478APC2.1 (v4.0)Low
CVE-2026-13561Edimax EW-7478APC POST Request formiNICbasic os command injectionEW-7478APC2.1 (v4.0)Low
CVE-2026-13581Edimax EW-7478APC POST Request formStaDrvSetup os command injectionEW-7478APC2.1 (v4.0)Low
CVE-2026-14691SourceCodester Multi-Vendor Online Grocery Management System Setting SystemSettings.php update_settings_info code injectMulti-Vendor Online Grocery Management System2.1 (v4.0)Low
CVE-2026-14698SourceCodester Syllabus-Aligned Learning Management and Examination System upload_files.php unrestricted uploadSyllabus-Aligned Learning Management and Examination System2.1 (v4.0)Low
CVE-2026-14748AIAnytime Awesome-MCP-Server mcp-wiki/wiki-summary server.py server-side request forgeryAwesome-MCP-Server2.1 (v4.0)Low
CVE-2026-14783NousResearch hermes-agent skills_tool.py skill_view path traversalhermes-agent2.1 (v4.0)Low
CVE-2026-15138tumf mcp-text-editor text_editor.py _validate_file_path path traversalmcp-text-editor2.1 (v4.0)Low
CVE-2026-15496SonicCloudOrg sonic-agent Groovy Script GroovyScriptImpl.java evalIsFailed os command injectionsonic-agent2.1 (v4.0)Low
CVE-2026-15500AstrBotDevs AstrBot market_list Endpoint plugin.py get_online_plugins server-side request forgeryAstrBot2.1 (v4.0)Low
CVE-2026-15501AstrBotDevs AstrBot MCP Test Endpoint tools.py ToolsRoute.test_mcp_connection server-side request forgeryAstrBot2.1 (v4.0)Low
CVE-2026-15512pig-mesh Pig pig-codegen GeneratorServiceImpl.java code injectionPig2.1 (v4.0)Low
CVE-2026-15619mosaxiv clawlet IPv4 tool_web_fetch.go web_fetch server-side request forgeryclawlet2.1 (v4.0)Low
CVE-2026-15620mosaxiv clawlet tool_web_fetch.go tools.webFetch server-side request forgeryclawlet2.1 (v4.0)Low
CVE-2026-15626nextlevelbuilder GoClaw ACP ToolBridge Workspace tool_bridge.go writeFile path traversalGoClaw2.1 (v4.0)Low
CVE-2026-15628zhayujie chatgpt-on-wechat CowAgent Vision Tool vision.py Vision._download_to_data_url server-side request forgerychatgpt-on-wechat CowAgent2.1 (v4.0)Low
CVE-2026-16074AstrBotDevs AstrBot Plugin Update plugin.py update_all_plugins server-side request forgeryAstrBot2.1 (v4.0)Low
CVE-2026-16194zhayujie CowAgent web_fetch.py WebFetch.execute server-side request forgeryCowAgent2.1 (v4.0)Low
CVE-2026-16219Croogo CMS Admin File Manager FileManager.php isEditable path traversalCMS2.1 (v4.0)Low
CVE-2026-162221Panel-dev CordysCRM Third Party Endpoint TokenService.java server-side request forgeryCordysCRM2.1 (v4.0)Low
CVE-2026-162231Panel-dev CordysCRM Third Party Edit Endpoint IntegrationConfigService.java getSqlBotSrc server-side request forgeryCordysCRM2.1 (v4.0)Low
CVE-2026-17458mf-yang openclaw-cn Browser Control HTTP API agent.act.ts clickViaPlaywright server-side request forgeryopenclaw-cn2.1 (v4.0)Low
CVE-2026-18644danpros HTMLy Delete Username Endpoint htmly.php unlink path traversalHTMLy2.1 (v4.0)Low
CVE-2026-18645danpros HTMLy Admin Content Endpoint admin.php add_content path traversalHTMLy2.1 (v4.0)Low
CVE-2026-18774NousResearch hermes-agent xAI Image Generation Provider image_gen_provider.py save_url_image server-side request forgeryhermes-agent2.1 (v4.0)Low
CVE-2026-18959yushine InnoShop Files Endpoint panel-api.php destroyFiles path traversalInnoShop2.1 (v4.0)Low
CVE-2026-19040MissionSquad mcp-api dcrClients.ts server-side request forgerymcp-api2.1 (v4.0)Low
CVE-2026-19246HKUDS nanobot Provider-returned Image URL image_generation.py _download_image_data_url server-side request forgerynanobot2.1 (v4.0)Low
CVE-2026-19340anubissbe ProjectHub-Mcp Webhooks API complete_backend.js server-side request forgeryProjectHub-Mcp2.1 (v4.0)Low
CVE-2026-19375dmitriiweb article-scraper-mcp server.py fetch_article server-side request forgeryarticle-scraper-mcp2.1 (v4.0)Low
CVE-2026-19752EnzoVezzaro mcp-dominican-layer PDF Parsing index.ts parse-pdf server-side request forgerymcp-dominican-layer2.1 (v4.0)Low
CVE-2026-19756Dromara lamp-cloud Code Generator DefGenProjectController.java path traversallamp-cloud2.1 (v4.0)Low
CVE-2026-19828648540858 wvp-GB28181-pro Snapshot Endpoint PlayController.java path traversalwvp-GB28181-pro2.1 (v4.0)Low
CVE-2026-19829648540858 wvp-GB28181-pro Log File Download Endpoint LogController.java path traversalwvp-GB28181-pro2.1 (v4.0)Low
CVE-2026-19927OpenBoxes Product Upload Endpoint ProductController.groovy upload server-side request forgeryOpenBoxes2.1 (v4.0)Low
CVE-2026-19932DefaultFuction Notice-System-Managent NoticeController execute GroovyShell.evaluate code injectionNotice-System-Managent2.1 (v4.0)Low
CVE-2026-19958iatsiuk pptr-mcp execute Tool vm-executor.ts executeCode code injectionpptr-mcp2.1 (v4.0)Low
CVE-2026-19984jkawamoto mcp-florence2 init.py get_images server-side request forgerymcp-florence22.1 (v4.0)Low
CVE-2026-5351Trendnet TEW-657BRM setup.cgi add_wps_client os command injectiontew-657brm firmware2.1 (v4.0)Low
CVE-2026-5352Trendnet TEW-657BRM setup.cgi edit os command injectiontew-657brm firmware2.1 (v4.0)Low
CVE-2026-5353Trendnet TEW-657BRM setup.cgi ping_test os command injectiontew-657brm firmware2.1 (v4.0)Low
CVE-2026-5354Trendnet TEW-657BRM setup.cgi vpn_connect os command injectiontew-657brm firmware2.1 (v4.0)Low
CVE-2026-5355Trendnet TEW-657BRM setup.cgi vpn_drop os command injectiontew-657brm firmware2.1 (v4.0)Low
CVE-2026-5470mixelpixx Google-Research-MCP Model Context Protocol content-extractor.service.ts extractContent server-side request forGoogle-Research-MCP2.1 (v4.0)Low
CVE-2026-5607imprvhub mcp-browser-agent URL Parameter handlers.ts CallToolRequestSchema server-side request forgerymcp-browser-agent2.1 (v4.0)Low
CVE-2026-6111FoundationAgents MetaGPT common.py decode_image server-side request forgerymetagpt2.1 (v4.0)Low
CVE-2026-6119AstrBotDevs AstrBot API Endpoint post_data.get server-side request forgeryAstrBot2.1 (v4.0)Low
CVE-2026-6125Dromara warm-flow Workflow Definition save-json SpelHelper.parseExpression code injectionwarm-flow2.1 (v4.0)Low
CVE-2026-6487Qihui jtbc5 CMS Code Endpoint manage.php path traversaljtbc5 CMS2.1 (v4.0)Low
CVE-2026-6489QueryMine sms Background Management addteacher.php unrestricted uploadsms2.1 (v4.0)Low
CVE-2026-6496prasathmani TinyFileManager POST Parameter filemanager.php path traversalTinyFileManager2.1 (v4.0)Low
CVE-2026-6616TransformerOptimus SuperAGI WebScraperTool webpage_extractor.py extract_with_lxml server-side request forgerySuperAGI2.1 (v4.0)Low
CVE-2026-6649Qibo CMS headers server-side request forgeryCMS2.1 (v4.0)Low
CVE-2026-6979devlikeapro WAHA API Request media.controller.ts server-side request forgeryWAHA2.1 (v4.0)Low
CVE-2026-7024rawchen sims deleteFileServlet Endpoint DeleteFileServlet.java path traversalsims2.1 (v4.0)Low
CVE-2026-7150dh1011 auto-favicon MCP Tool server.py generate_favicon_from_url server-side request forgeryauto-favicon2.1 (v4.0)Low
CVE-2026-74842Kira-Pgr PromptShopMCP Image-Toolkit-MCP-Server server.py download_image server-side request forgeryPromptShopMCP2.1 (v4.0)Low
CVE-2026-7599Dayoooun hwpx-mcp MCP index.ts export_to_html path traversalhwpx-mcp2.1 (v4.0)Low
CVE-2026-7600ArtMin96 yii2-mcp-server MCP index.ts yii_execute_command os command injectionyii2-mcp-server2.1 (v4.0)Low
CVE-2026-76278nite metatrader-4-mcp sync_ea_from_file index.ts CallToolRequestSchema path traversalmetatrader-4-mcp2.1 (v4.0)Low
CVE-2026-7642pskill9 website-downloader MCP index.ts download_website os command injectionwebsite-downloader2.1 (v4.0)Low
CVE-2026-7653r-huijts mcp-server-rijksmuseum MCP index.ts open_image_in_browser os command injectionmcp-server-rijksmuseum2.1 (v4.0)Low
CVE-2026-76576yangzongzhuan RuoYi-Vue Common Download Endpoint CommonController.java resourceDownload path traversalRuoYi-Vue2.1 (v4.0)Low
CVE-2026-7676kerwincui FastBee Tool Download Endpoint ToolController.java ToolController.download path traversalFastBee2.1 (v4.0)Low
CVE-2026-7683Edimax BR-6428nC Web setWAN command injectionBR-6428nC2.1 (v4.0)Low
CVE-2026-7715ravenwits mcp-server-arangodb MCP tools.ts arango_backup path traversalmcp-server-arangodb2.1 (v4.0)Low
CVE-2026-7728ryanjoachim mcp-rtfm MCP update_doc path traversalmcp-rtfm2.1 (v4.0)Low
CVE-2026-7729pixelsock directus-mcp MCP index.ts validateUrl server-side request forgerydirectus-mcp2.1 (v4.0)Low
CVE-2026-7738puchunjie doc-tools-mcp MCP mcp-server.ts open_document path traversaldoc-tools-mcp2.1 (v4.0)Low
CVE-2026-78166provectus kafka-ui Groovy Code MessagesController.java executeSmartFilterTest code injectionkafka-ui2.1 (v4.0)Low
CVE-2026-7890Concrete CMS 9.5.0 is vulnerable to SSRF via RSS Displayer Blockconcrete cms2.1 (v4.0)Low
CVE-2026-8081router-for-me CLIProxyAPI api_tools.go server-side request forgerycliproxyapi2.1 (v4.0)Low
CVE-2026-81845arben-adm mcp-sequential-thinking Import Session/Export Session server.py export_session path traversalmcp-sequential-thinking2.1 (v4.0)Low
CVE-2026-8188Wavlink NU516U1 adm.cgi change_wifi_password os command injectionwl-nu516u1 firmware2.1 (v4.0)Low
CVE-2026-8189Wavlink NU516U1 adm.cgi wzdrepeater os command injectionwl-nu516u1 firmware2.1 (v4.0)Low
CVE-2026-8190Wavlink NU516U1 adm.cgi wan os command injectionwl-nu516u1 firmware2.1 (v4.0)Low
CVE-2026-8191Wavlink NU516U1 adm.cgi wifi_region os command injectionwl-nu516u1 firmware2.1 (v4.0)Low
CVE-2026-8192Wavlink NU516U1 adm.cgi wzdap os command injectionwl-nu516u1 firmware2.1 (v4.0)Low
CVE-2026-8227Wavlink NU516U1 adm.cgi wzdapMesh os command injectionwl-nu516u1 firmware2.1 (v4.0)Low
CVE-2026-8228Wavlink NU516U1 wireless.cgi advance os command injectionwl-nu516u1 firmware2.1 (v4.0)Low
CVE-2026-8229Wavlink NU516U1 wireless.cgi WifiBasic os command injectionwl-nu516u1 firmware2.1 (v4.0)Low
CVE-2026-8230Wavlink NU516U1 login.cgi sys_login1 os command injectionwl-nu516u1 firmware2.1 (v4.0)Low
CVE-2026-82599SeaCMS Avatar Upload member.php unlink path traversalSeaCMS2.1 (v4.0)Low
CVE-2026-82603SeaCMS Comment Cache member.php del_pl path traversalSeaCMS2.1 (v4.0)Low
CVE-2026-8264Tenda AC6 httpd WifiApScan formWifiApScan os command injectionac6 firmware2.1 (v4.0)Low
CVE-2026-82656Admidio before 5.0.12 Path Traversal via Photo ZIP Downloadadmidio2.1 (v4.0)Low
CVE-2026-82905sdcb chats fetch-tools Endpoint McpController.cs McpController server-side request forgerychats2.1 (v4.0)Low
CVE-2026-83744invoiceninja Invoice Ninja invoices Endpoint Purify.php isHostSafe server-side request forgeryInvoice Ninja2.1 (v4.0)Low
CVE-2026-8754AstrBotDevs AstrBot File Upload chat.py post_file path traversalAstrBot2.1 (v4.0)Low
CVE-2026-90488Xuxueli xxl-job GlueFactory.java GroovyClassLoader.parseClass code injectionxxl-job2.1 (v4.0)Low
CVE-2026-90581cym1102 nginxWebUI autoUpdate MainController.autoUpdate code injectionnginxWebUI2.1 (v4.0)Low
CVE-2026-90814cosmicstack-labs mercury-agent GitHub API github.ts githubRequest server-side request forgerymercury-agent2.1 (v4.0)Low
CVE-2026-91853TOTOLINK X5000R Export Ovpn cstecgi.cgi exportOvpn os command injectionX5000R2.1 (v4.0)Low
CVE-2026-92527chatwoot Shopify OAuth callbacks_controller.rb server-side request forgerychatwoot2.1 (v4.0)Low
CVE-2026-92993Dromara mayfly-go Machine Script Feature machine_script.go RunMachineScript os command injectionmayfly-go2.1 (v4.0)Low
CVE-2026-9302546669204 vps-inventory-monitoring VpsTest Console VpsTest.php eval code injectionvps-inventory-monitoring2.1 (v4.0)Low
CVE-2026-9343Edimax EW-7438RPn webs formWpsStart os command injectionEW-7438RPn2.1 (v4.0)Low
CVE-2026-9347Edimax EW-7438RPn webs formWizSurvey os command injectionEW-7438RPn2.1 (v4.0)Low
CVE-2026-94028mealie-recipes Mealie Recipe Action Trigger controller_group_recipe_actions.py payload.model_dump server-side request foMealie2.1 (v4.0)Low
CVE-2026-940460215AndrewFeng ACE-MCP MCP Tool getFileSnippet.ts get_file_snippet path traversalACE-MCP2.1 (v4.0)Low
CVE-2026-9404906ketan slideshot renderer.ts render_slides path traversalslideshot2.1 (v4.0)Low
CVE-2026-9424Edimax EW-7438RPn Content-Type formWlanMP os command injectionEW-7438RPn2.1 (v4.0)Low
CVE-2026-9473c-rick jimeng-mcp api.ts generateVideo path traversaljimeng-mcp2.1 (v4.0)Low
CVE-2026-9511Totolink CA750-PoE Setting cstecgi.cgi setWebWlanIdx os command injectionCA750-PoE2.1 (v4.0)Low
CVE-2026-9512Totolink CA750-PoE Setting cstecgi.cgi setPasswordCfg os command injectionCA750-PoE2.1 (v4.0)Low
CVE-2026-9514Totolink CA750-PoE Setting cstecgi.cgi setNetworkDiag os command injectionCA750-PoE2.1 (v4.0)Low
CVE-2026-9515Totolink CA750-PoE Setting cstecgi.cgi setUnloadUserData os command injectionCA750-PoE2.1 (v4.0)Low
CVE-2026-9531Totolink CA750-PoE Setting cstecgi.cgi setUpgradeUboot os command injectionCA750-PoE2.1 (v4.0)Low
CVE-2026-9532Totolink CA750-PoE Setting cstecgi.cgi setUploadUserData os command injectionCA750-PoE2.1 (v4.0)Low
CVE-2026-9533Totolink CA750-PoE Setting cstecgi.cgi recvUpgradeNewFw os command injectionCA750-PoE2.1 (v4.0)Low
CVE-2026-9534Totolink CA750-PoE Setting cstecgi.cgi setWiFiWpsConfig os command injectionCA750-PoE2.1 (v4.0)Low
CVE-2026-96678weiqingwen spring-boot-forum Avatar Upload NewUserFormValidator.java validate path traversalspring-boot-forum2.1 (v4.0)Low
CVE-2026-97232volotat Anagnorisis page.html start_streaming path traversalAnagnorisis2.1 (v4.0)Low
CVE-2025-11073Keyfactor RG-EW5100BE HTTP POST Request cmd command injectionRG-EW5100BE2.0 (v4.0)Low
CVE-2025-11141Ruijie NBR2100G-E branch_passw.php listAction os command injectionNBR2100G-E2.0 (v4.0)Low
CVE-2025-11939ChurchCRM Backup Restore RestoreJob.php path traversalchurchcrm2.0 (v4.0)Low
CVE-2025-12923liweiyi ChestnutCMS download resourceDownload path traversalchestnutcms2.0 (v4.0)Low
CVE-2025-13198DouPHP file.class.php unrestricted uploadDouPHP2.0 (v4.0)Low
CVE-2025-14116xerrors Yuxi-Know embed.py OtherEmbedding.aencode server-side request forgeryYuxi-Know2.0 (v4.0)Low
CVE-2025-14729CTCMS Content Management System Backend App Configuration Ct_App.php save code injectionctcms2.0 (v4.0)Low
CVE-2025-14730CTCMS Content Management System Backend System Configuration Ct_Config.php code injectionctcms2.0 (v4.0)Low
CVE-2025-14837ZZCMS Backend Website Settings siteconfig.php stripfxg code injectionzzcms2.0 (v4.0)Low
CVE-2025-15130shanyu SyCms Administrative Panel FileManageController.class.php addPost code injectionSyCms2.0 (v4.0)Low
CVE-2025-15138prasathmani TinyFileManager tinyfilemanager.php path traversaltiny file manager2.0 (v4.0)Low
CVE-2025-15148CmsEasy Backend Template Management template_admin.php savetemp_action code injectioncmseasy2.0 (v4.0)Low
CVE-2025-15187GreenCMS File DataController.class.php path traversalgreencms2.0 (v4.0)Low
CVE-2025-15394iCMS POST Parameter ConfigAdmincp.php save code injectionicms2.0 (v4.0)Low
CVE-2025-15414go-sonic Theme Fetching API git_fetcher.go FetchTheme server-side request forgerysonic2.0 (v4.0)Low
CVE-2026-100900DevaslanPHP project-management Jira Import jira-import updateJiraProjects server-side request forgeryproject-management2.0 (v4.0)Low
CVE-2026-105226osCommerce osCommerce2 Newsletter Management newsletters.php include code injectionosCommerce22.0 (v4.0)Low
CVE-2026-108521Studio-Saelix Sencho Add Remote Node API Endpoint validation.ts isValidRemoteUrl server-side request forgerySencho2.0 (v4.0)Low
CVE-2026-108790westboy CicadasCMS Backend Template Editor save TemplateController.save path traversalCicadasCMS2.0 (v4.0)Low
CVE-2026-112138diem-project diem dmCodeEditor actions.class.php join path traversaldiem2.0 (v4.0)Low
CVE-2026-112195FusionPBX Dialplan Editor dialplan.php os command injectionFusionPBX2.0 (v4.0)Low
CVE-2026-112372H3C Magic NX15 upload importprofile path traversalMagic NX152.0 (v4.0)Low
CVE-2026-114377leomoon-studios wiki-go Comment Deletion comments.go DeleteComment path traversalwiki-go2.0 (v4.0)Low
CVE-2026-12211Intelbras iNVU 7016 FT Web syslog path traversaliNVU 7016 FT2.0 (v4.0)Low
CVE-2026-15326halo-dev halo Theme Installation ThemeUtils.java ThemeUtils.unzipThemeTo path traversalhalo2.0 (v4.0)Low
CVE-2026-16088halo-dev halo Files Backup Endpoint MigrationEndpoint.java download path traversalhalo2.0 (v4.0)Low
CVE-2026-18856Poesis Rhymix CMS Data Import importer.admin.controller.php procImporterAdminCheckXmlFile server-side request forgeryRhymix CMS2.0 (v4.0)Low
CVE-2026-19964Jij-Inc Jij-MCP-Server jm_check python_repr.py PythonREPL.run code injectionJij-MCP-Server2.0 (v4.0)Low
CVE-2026-5848jeecgboot JimuReport Data Source testConnection DriverManager.getConnection code injectionJimuReport2.0 (v4.0)Low
CVE-2026-78140Dromara UJCMS web-file-template Endpoint WebFileTemplateController.java update special elements in template engineUJCMS2.0 (v4.0)Low
CVE-2026-78435Faveo Helpdesk Logo SettingsController.php unlink path traversalHelpdesk2.0 (v4.0)Low
CVE-2026-81835RooCodeInc Roo-Code MCP Integration Trust Model malicious_mcp_server.py fetch_instructions code injectionRoo-Code2.0 (v4.0)Low
CVE-2026-81847MAA-AI MaaMCP pipeline_tools.py load_pipeline path traversalMaaMCP2.0 (v4.0)Low
CVE-2026-8259Tenda AC6 httpd telnet os command injectionac6 firmware2.0 (v4.0)Low
CVE-2026-8265Tenda AC6 httpd getLogFile get_log_file os command injectionac6 firmware2.0 (v4.0)Low
CVE-2026-82678diem-project diem Administrative Console actions.class.php executeCommand os command injectiondiem2.0 (v4.0)Low
CVE-2026-82702Edimax BR-6214K asp_WlanMP Endpoint wlanMP.asp system os command injectionBR-6214K2.0 (v4.0)Low
CVE-2026-82703Edimax BR-6214K asp_setPing Endpoint ping.asp system os command injectionBR-6214K2.0 (v4.0)Low
CVE-2026-85040ZhongBangKeJi CRMEB Custom Scheduled Task Feature save eval os command injectionCRMEB2.0 (v4.0)Low
CVE-2026-86240liufee FeehiCMS UEditor Uploader.php catchImage server-side request forgeryFeehiCMS2.0 (v4.0)Low
CVE-2026-90705D-Link DWR-M921 Boa Dispatch Table formsysCmd os command injectionDWR-M9212.0 (v4.0)Low
CVE-2026-90706D-Link DWR-M921 formWsc os command injectionDWR-M9212.0 (v4.0)Low
CVE-2026-90788magicblack MacCMS10 Template .%40template%40default%40html%40label.html os command injectionMacCMS102.0 (v4.0)Low
CVE-2026-94103RooCMS Frontend Rendering site_pagePHP.php eval code injectionRooCMS2.0 (v4.0)Low
CVE-2026-9464YunaiV yudao-cloud Admin API Endpoint create IotDataSinkHttpConfig server-side request forgeryyudao-cloud2.0 (v4.0)Low
CVE-2026-113388opensource-socialnetwork Cache Settings dynamic.php input code injectionopensource-socialnetwork1.9 (v4.0)Low
CVE-2026-16129princezuda SafestClaw Built-in Web shell.py ShellAction._validate_command incomplete blacklistSafestClaw1.9 (v4.0)Low
CVE-2026-19369KS-GEN-AI jira-mcp-server add_attachment_from_public_url index.ts axios.get server-side request forgeryjira-mcp-server1.9 (v4.0)Low
CVE-2026-19373PhialsBasement KoboldCPP-MCP-Server BaseConfigSchema index.ts makeRequest server-side request forgeryKoboldCPP-MCP-Server1.9 (v4.0)Low
CVE-2026-5323priyankark a11y-mcp index.js A11yServer server-side request forgerya11y-mcp1.9 (v4.0)Low
CVE-2026-5621ChrisChinchilla Vale-MCP HTTP index.ts os command injectionVale-MCP1.9 (v4.0)Low
CVE-2026-40072web3.py affected by SSRF via CCIP Read (EIP-3668) OffchainLookup URL handlingweb3.py1.7 (v4.0)Low
CVE-2025-58161MobSF Path Traversal in GET /download/<filename> using absolute filenamesmobile security framework1.3 (v4.0)Low
CVE-2026-19353DedeCMS Installation Wizard index.php _4_Setup file inclusionDedeCMS1.3 (v4.0)Low
CVE-2026-108827Zen Cart Administrative Module Management general.php zen_call_function code injectionZen Cart1.2 (v4.0)Low
CVE-2013-5759Yealink VoIP Phone SIP-T38G - Privilege Escalation-N/AN/A
CVE-2015-0975OpenNMS Authenticated XXE-N/AN/A
CVE-2026-86147Apache bRPC: Arbitrary file creation/truncation via /flags and unbounded profiling duration via /pprofApache bRPCN/AN/A

Observed CWEs

These CWEs are recorded on published CVEs in the selected observations associated with this rule. They are observational relationships, not a claim that the rule universally blocks every vulnerability assigned to a CWE.

CWERelated Published CVEs
CWE-15CVE-2026-45087
CWE-20CVE-2009-0545 , CVE-2026-21858 , CVE-2026-47668 , CVE-2015-4664 , CVE-2017-12611 , CVE-2020-3243 , CVE-2020-3250 , CVE-2022-24086 , CVE-2025-54123 , CVE-2026-35048 , CVE-2026-53513 , CVE-2025-34100 , CVE-2026-44343 , CVE-2026-57499 , CVE-2026-13603 , CVE-2014-5468 , CVE-2026-24893 , CVE-2026-34197 , CVE-2026-35031 , CVE-2026-45505 , CVE-2026-57143 , CVE-2026-84317 , CVE-2025-34115 , CVE-2026-28797 , CVE-2026-55094 , CVE-2026-50553 , CVE-2026-54710 , CVE-2024-30188 , CVE-2026-42588 , CVE-2026-69192 , CVE-2016-10956 , CVE-2026-27891 , CVE-2026-3576 , CVE-2026-61793 , CVE-2026-56678 , CVE-2026-56722 , CVE-2015-1487 , CVE-2026-73845 , CVE-2026-16434 , CVE-2026-55554
CWE-22CVE-2010-5286 , CVE-2011-2653 , CVE-2014-3914 , CVE-2015-0779 , CVE-2024-13984 , CVE-2025-55169 , CVE-2026-11414 , CVE-2026-58192 , CVE-2026-7411 , CVE-2026-85706 , CVE-2025-61913 , CVE-2026-57155 , CVE-2026-85526 , CVE-2010-2861 , CVE-2016-6600 , CVE-2017-1000002 , CVE-2017-7462 , CVE-2018-12031 , CVE-2018-16283 , CVE-2019-16278 , CVE-2019-19781 , CVE-2019-7194 , CVE-2019-7195 , CVE-2019-9618 , CVE-2019-9960 , CVE-2020-11455 , CVE-2020-5902 , CVE-2021-22005 , CVE-2021-32682 , CVE-2022-0679 , CVE-2022-1390 , CVE-2022-1391 , CVE-2022-29806 , CVE-2022-32409 , CVE-2022-37042 , CVE-2022-41840 , CVE-2023-26469 , CVE-2023-5991 , CVE-2023-6623 , CVE-2024-45256 , CVE-2024-7399 , CVE-2024-9047 , CVE-2025-14344 , CVE-2025-2294 , CVE-2025-4524 , CVE-2025-6439 , CVE-2025-67506 , CVE-2026-35471 , CVE-2026-51884 , CVE-2026-61560 , CVE-2026-75337 , CVE-2026-57496 , CVE-2025-6793 , CVE-2026-11419 , CVE-2026-11423 , CVE-2026-40076 , CVE-2026-40576 , CVE-2026-41203 , CVE-2026-72850 , CVE-2026-77086 , CVE-2012-10054 , CVE-2019-25687 , CVE-2019-25727 , CVE-2021-48014 , CVE-2024-27954 , CVE-2026-24479 , CVE-2026-45668 , CVE-2026-47669 , CVE-2026-47754 , CVE-2026-48768 , CVE-2026-48777 , CVE-2026-53976 , CVE-2026-64824 , CVE-2026-65700 , CVE-2026-65701 , CVE-2026-69110 , CVE-2026-74798 , CVE-2026-80104 , CVE-2026-26217 , CVE-2026-66914 , CVE-2018-16716 , CVE-2018-19365 , CVE-2021-25282 , CVE-2022-26960 , CVE-2024-40422 , CVE-2025-55526 , CVE-2026-34745 , CVE-2026-35573 , CVE-2026-44542 , CVE-2026-47731 , CVE-2026-48024 , CVE-2026-50006 , CVE-2026-51859 , CVE-2026-51862 , CVE-2026-51864 , CVE-2026-51882 , CVE-2026-51883 , CVE-2026-52610 , CVE-2026-54670 , CVE-2026-8713 , CVE-2026-9827 , CVE-2008-4668 , CVE-2026-53581 , CVE-2025-12060 , CVE-2026-62679 , CVE-2014-125125 , CVE-2017-5261 , CVE-2018-12895 , CVE-2018-15142 , CVE-2018-17553 , CVE-2019-12169 , CVE-2019-14530 , CVE-2019-16113 , CVE-2019-9858 , CVE-2020-8641 , CVE-2021-37343 , CVE-2022-51022 , CVE-2024-37032 , CVE-2025-66295 , CVE-2025-66449 , CVE-2025-68705 , CVE-2026-110116 , CVE-2026-116067 , CVE-2026-34524 , CVE-2026-35031 , CVE-2026-35050 , CVE-2026-36723 , CVE-2026-39981 , CVE-2026-40611 , CVE-2026-42200 , CVE-2026-42605 , CVE-2026-42608 , CVE-2026-43624 , CVE-2026-44829 , CVE-2026-45230 , CVE-2026-50186 , CVE-2026-53995 , CVE-2026-55888 , CVE-2026-57296 , CVE-2026-58166 , CVE-2026-61525 , CVE-2026-62677 , CVE-2026-65702 , CVE-2026-76842 , CVE-2026-81730 , CVE-2026-82217 , CVE-2026-82286 , CVE-2026-84889 , CVE-2026-85199 , CVE-2026-86542 , CVE-2026-86775 , CVE-2011-10009 , CVE-2012-10034 , CVE-2014-125130 , CVE-2014-125133 , CVE-2014-125134 , CVE-2015-20124 , CVE-2015-20125 , CVE-2016-20103 , CVE-2016-20104 , CVE-2017-20248 , CVE-2017-20250 , CVE-2017-20284 , CVE-2017-20287 , CVE-2018-25113 , CVE-2018-25374 , CVE-2018-25438 , CVE-2019-25671 , CVE-2019-25779 , CVE-2020-37214 , CVE-2021-4463 , CVE-2021-48013 , CVE-2021-48015 , CVE-2021-48017 , CVE-2022-51024 , CVE-2023-54403 , CVE-2024-13991 , CVE-2024-58387 , CVE-2024-58388 , CVE-2024-58396 , CVE-2025-34031 , CVE-2025-34045 , CVE-2025-34126 , CVE-2025-34181 , CVE-2025-34350 , CVE-2026-100520 , CVE-2026-100682 , CVE-2026-10108 , CVE-2026-110115 , CVE-2026-116009 , CVE-2026-116171 , CVE-2026-17524 , CVE-2026-25559 , CVE-2026-35214 , CVE-2026-39352 , CVE-2026-40521 , CVE-2026-43982 , CVE-2026-47394 , CVE-2026-47659 , CVE-2026-47661 , CVE-2026-49119 , CVE-2026-55629 , CVE-2026-57863 , CVE-2026-64838 , CVE-2026-65694 , CVE-2026-65919 , CVE-2026-67200 , CVE-2026-67281 , CVE-2026-69089 , CVE-2026-69095 , CVE-2026-72713 , CVE-2026-75111 , CVE-2026-75482 , CVE-2026-75914 , CVE-2026-7807 , CVE-2026-85685 , CVE-2026-86538 , CVE-2026-91771 , CVE-2026-91940 , CVE-2026-91989 , CVE-2026-92791 , CVE-2026-92970 , CVE-2026-9506 , CVE-2015-4694 , CVE-2022-24900 , CVE-2024-48766 , CVE-2025-10897 , CVE-2025-27222 , CVE-2026-100372 , CVE-2026-115924 , CVE-2026-11974 , CVE-2026-41690 , CVE-2026-46491 , CVE-2026-50553 , CVE-2026-53777 , CVE-2026-66397 , CVE-2026-88937 , CVE-2013-0136 , CVE-2015-2996 , CVE-2025-34023 , CVE-2025-66300 , CVE-2026-16033 , CVE-2026-73079 , CVE-2024-1708 , CVE-2026-75855 , CVE-2025-30005 , CVE-2025-59711 , CVE-2026-112051 , CVE-2026-31939 , CVE-2026-48105 , CVE-2026-69086 , CVE-2026-75842 , CVE-2026-82673 , CVE-2025-44137 , CVE-2026-111915 , CVE-2026-40075 , CVE-2026-45711 , CVE-2026-48126 , CVE-2026-53571 , CVE-2026-58499 , CVE-2026-74907 , CVE-2025-61784 , CVE-2025-65879 , CVE-2026-19303 , CVE-2026-19942 , CVE-2026-33236 , CVE-2026-34522 , CVE-2026-42269 , CVE-2026-46402 , CVE-2026-46484 , CVE-2026-49340 , CVE-2026-51907 , CVE-2026-54083 , CVE-2026-54591 , CVE-2026-62278 , CVE-2026-64679 , CVE-2026-73659 , CVE-2026-90959 , CVE-2009-1558 , CVE-2011-3305 , CVE-2011-3315 , CVE-2014-2962 , CVE-2026-65600 , CVE-2026-67309 , CVE-2020-35749 , CVE-2021-21234 , CVE-2024-46987 , CVE-2026-47179 , CVE-2026-53553 , CVE-2026-54910 , CVE-2026-73498 , CVE-2026-8183 , CVE-2025-67442 , CVE-2026-39369 , CVE-2026-41419 , CVE-2026-65695 , CVE-2009-1479 , CVE-2009-2015 , CVE-2009-3318 , CVE-2009-4202 , CVE-2009-4679 , CVE-2010-0157 , CVE-2010-0759 , CVE-2010-0972 , CVE-2010-0985 , CVE-2010-1306 , CVE-2010-1470 , CVE-2010-1471 , CVE-2010-1472 , CVE-2010-1495 , CVE-2010-1531 , CVE-2010-1533 , CVE-2010-1535 , CVE-2010-1602 , CVE-2010-1603 , CVE-2010-1653 , CVE-2010-1717 , CVE-2010-1875 , CVE-2010-1878 , CVE-2010-1952 , CVE-2010-1953 , CVE-2010-1954 , CVE-2010-1955 , CVE-2010-1956 , CVE-2010-1957 , CVE-2010-1977 , CVE-2010-1980 , CVE-2010-1983 , CVE-2010-2033 , CVE-2010-2034 , CVE-2010-2035 , CVE-2010-2036 , CVE-2010-2037 , CVE-2010-2045 , CVE-2010-2050 , CVE-2010-2128 , CVE-2010-2259 , CVE-2010-2682 , CVE-2010-3426 , CVE-2010-4282 , CVE-2010-4719 , CVE-2010-4769 , CVE-2011-4166 , CVE-2012-1226 , CVE-2013-1081 , CVE-2013-5639 , CVE-2014-10037 , CVE-2014-2846 , CVE-2015-1000005 , CVE-2015-10134 , CVE-2015-10136 , CVE-2015-1503 , CVE-2015-3648 , CVE-2015-4074 , CVE-2015-4632 , CVE-2015-5469 , CVE-2015-9406 , CVE-2016-10924 , CVE-2016-2389 , CVE-2016-6601 , CVE-2017-15647 , CVE-2017-6527 , CVE-2017-9833 , CVE-2018-12054 , CVE-2018-12909 , CVE-2018-14912 , CVE-2018-14918 , CVE-2018-15138 , CVE-2018-15535 , CVE-2018-15745 , CVE-2018-16299 , CVE-2018-18323 , CVE-2018-19753 , CVE-2018-20463 , CVE-2018-7422 , CVE-2018-9118 , CVE-2018-9205 , CVE-2019-12276 , CVE-2019-12593 , CVE-2019-14205 , CVE-2019-14251 , CVE-2019-16123 , CVE-2019-1621 , CVE-2019-17199 , CVE-2019-17538 , CVE-2019-18665 , CVE-2019-25213 , CVE-2019-7254 , CVE-2019-9922 , CVE-2020-11738 , CVE-2020-13158 , CVE-2020-14864 , CVE-2020-19360 , CVE-2020-27467 , CVE-2020-35580 , CVE-2020-35598 , CVE-2020-8209 , CVE-2021-20123 , CVE-2021-20124 , CVE-2021-33807 , CVE-2021-39312 , CVE-2021-39316 , CVE-2021-41277 , CVE-2021-41291 , CVE-2021-43734 , CVE-2021-43778 , CVE-2021-45043 , CVE-2021-46381 , CVE-2021-46417 , CVE-2022-1119 , CVE-2022-29298 , CVE-2022-31474 , CVE-2022-34127 , CVE-2022-37122 , CVE-2022-47501 , CVE-2023-23063 , CVE-2023-26256 , CVE-2023-27170 , CVE-2023-2825 , CVE-2023-29887 , CVE-2023-32315 , CVE-2023-33510 , CVE-2023-38879 , CVE-2023-40924 , CVE-2023-6023 , CVE-2024-12849 , CVE-2024-1728 , CVE-2024-28995 , CVE-2024-45388 , CVE-2024-9362 , CVE-2024-9935 , CVE-2025-13339 , CVE-2025-13801 , CVE-2025-24963 , CVE-2025-31131 , CVE-2025-45145 , CVE-2025-57231 , CVE-2025-61884 , CVE-2025-65878 , CVE-2025-66645 , CVE-2025-69411 , CVE-2026-0669 , CVE-2026-14490 , CVE-2026-1557 , CVE-2026-18352 , CVE-2026-23536 , CVE-2026-32820 , CVE-2026-36851 , CVE-2026-39359 , CVE-2026-39844 , CVE-2026-39847 , CVE-2026-41180 , CVE-2026-44716 , CVE-2026-46581 , CVE-2026-50547 , CVE-2026-50776 , CVE-2026-51852 , CVE-2026-51853 , CVE-2026-51888 , CVE-2026-54629 , CVE-2026-5487 , CVE-2026-5491 , CVE-2026-55552 , CVE-2026-56671 , CVE-2026-57119 , CVE-2026-57129 , CVE-2026-61891 , CVE-2026-71209 , CVE-2026-75328 , CVE-2026-75333 , CVE-2026-75887 , CVE-2026-79407 , CVE-2026-88392 , CVE-2026-88394 , CVE-2026-91136 , CVE-2026-9282 , CVE-2026-53554 , CVE-2016-0709 , CVE-2022-1373 , CVE-2022-27925 , CVE-2025-34248 , CVE-2026-108902 , CVE-2026-15244 , CVE-2026-18274 , CVE-2026-20297 , CVE-2026-34607 , CVE-2026-34968 , CVE-2026-35174 , CVE-2026-45225 , CVE-2026-45233 , CVE-2026-55231 , CVE-2026-58372 , CVE-2026-92604 , CVE-2026-92919 , CVE-2026-9777 , CVE-2018-25393 , CVE-2018-25421 , CVE-2019-25246 , CVE-2022-51025 , CVE-2024-58386 , CVE-2026-108158 , CVE-2026-34414 , CVE-2026-34790 , CVE-2026-39308 , CVE-2026-40526 , CVE-2026-46555 , CVE-2026-47118 , CVE-2026-47735 , CVE-2026-54077 , CVE-2026-56394 , CVE-2026-58451 , CVE-2026-61647 , CVE-2026-63445 , CVE-2026-64826 , CVE-2026-71426 , CVE-2026-72695 , CVE-2026-81030 , CVE-2026-82877 , CVE-2026-88938 , CVE-2026-92153 , CVE-2026-93014 , CVE-2026-93988 , CVE-2026-96651 , CVE-2026-114399 , CVE-2026-114492 , CVE-2026-40506 , CVE-2026-52835 , CVE-2026-73033 , CVE-2026-74031 , CVE-2026-74038 , CVE-2013-10062 , CVE-2022-50956 , CVE-2023-30804 , CVE-2025-1743 , CVE-2026-109309 , CVE-2026-111053 , CVE-2026-111925 , CVE-2026-116168 , CVE-2026-41917 , CVE-2026-42888 , CVE-2026-45731 , CVE-2026-45774 , CVE-2026-46337 , CVE-2026-53757 , CVE-2026-54150 , CVE-2026-71932 , CVE-2026-74235 , CVE-2026-75592 , CVE-2026-79743 , CVE-2026-79773 , CVE-2026-79781 , CVE-2026-82233 , CVE-2026-88940 , CVE-2026-93347 , CVE-2008-2650 , CVE-2008-6172 , CVE-2009-3053 , CVE-2010-1056 , CVE-2010-1219 , CVE-2010-1469 , CVE-2010-1473 , CVE-2010-1474 , CVE-2010-1475 , CVE-2010-1476 , CVE-2010-1478 , CVE-2010-1607 , CVE-2010-1715 , CVE-2010-1718 , CVE-2010-1719 , CVE-2010-1722 , CVE-2010-1723 , CVE-2010-1979 , CVE-2010-1981 , CVE-2010-2122 , CVE-2010-2507 , CVE-2010-2680 , CVE-2010-2857 , CVE-2010-2920 , CVE-2010-4617 , CVE-2011-2744 , CVE-2025-59709 , CVE-2025-66302 , CVE-2025-8385 , CVE-2026-35593 , CVE-2026-71475 , CVE-2013-4861 , CVE-2015-9538 , CVE-2017-14537 , CVE-2018-15140 , CVE-2018-15141 , CVE-2019-14312 , CVE-2019-8943 , CVE-2021-28149 , CVE-2021-29006 , CVE-2021-40651 , CVE-2022-37299 , CVE-2024-24565 , CVE-2024-30851 , CVE-2024-36527 , CVE-2024-55457 , CVE-2025-13891 , CVE-2025-2292 , CVE-2025-45870 , CVE-2025-49138 , CVE-2025-62424 , CVE-2026-104107 , CVE-2026-11442 , CVE-2026-114623 , CVE-2026-12898 , CVE-2026-14470 , CVE-2026-31978 , CVE-2026-3345 , CVE-2026-33989 , CVE-2026-35718 , CVE-2026-36227 , CVE-2026-40909 , CVE-2026-41062 , CVE-2026-42867 , CVE-2026-4502 , CVE-2026-46397 , CVE-2026-48129 , CVE-2026-52607 , CVE-2026-63667 , CVE-2026-73255 , CVE-2026-75602 , CVE-2026-7646 , CVE-2026-7658 , CVE-2026-78851 , CVE-2026-9138 , CVE-2026-93767 , CVE-2026-95264 , CVE-2026-9774 , CVE-2026-9775 , CVE-2009-0932 , CVE-2011-4450 , CVE-2012-4940 , CVE-2026-102783 , CVE-2026-105125 , CVE-2026-112947 , CVE-2026-34371 , CVE-2026-39365 , CVE-2026-52756 , CVE-2026-72814 , CVE-2026-78886 , CVE-2014-8727 , CVE-2025-34076 , CVE-2025-35053 , CVE-2026-1776 , CVE-2026-22677 , CVE-2026-41363 , CVE-2026-65698 , CVE-2026-66004 , CVE-2026-79653 , CVE-2026-103061 , CVE-2026-104246 , CVE-2026-13693 , CVE-2026-49244 , CVE-2010-0467 , CVE-2025-1035 , CVE-2026-40605 , CVE-2018-13980 , CVE-2018-15536 , CVE-2020-10977 , CVE-2025-10709 , CVE-2025-11018 , CVE-2025-11031 , CVE-2025-11336 , CVE-2025-11337 , CVE-2025-13261 , CVE-2025-13262 , CVE-2025-13266 , CVE-2025-13810 , CVE-2025-15432 , CVE-2026-101067 , CVE-2026-101068 , CVE-2026-101070 , CVE-2026-101082 , CVE-2026-108772 , CVE-2026-116602 , CVE-2026-14635 , CVE-2026-15204 , CVE-2026-18646 , CVE-2026-19758 , CVE-2026-19762 , CVE-2026-19827 , CVE-2026-55439 , CVE-2026-68922 , CVE-2026-7059 , CVE-2026-7132 , CVE-2026-7149 , CVE-2026-7159 , CVE-2026-7205 , CVE-2026-7212 , CVE-2026-7214 , CVE-2026-7216 , CVE-2026-7217 , CVE-2026-7235 , CVE-2026-7271 , CVE-2026-7272 , CVE-2026-7314 , CVE-2026-7315 , CVE-2026-7319 , CVE-2026-7384 , CVE-2026-7400 , CVE-2026-7403 , CVE-2026-7519 , CVE-2026-7588 , CVE-2026-7589 , CVE-2026-7594 , CVE-2026-7645 , CVE-2026-7784 , CVE-2026-7788 , CVE-2026-7810 , CVE-2026-81486 , CVE-2026-81491 , CVE-2026-84441 , CVE-2026-8755 , CVE-2026-8756 , CVE-2026-90691 , CVE-2026-94044 , CVE-2026-96898 , CVE-2023-2745 , CVE-2026-17621 , CVE-2026-54613 , CVE-2026-7869 , CVE-2014-8676 , CVE-2014-9609 , CVE-2015-5471 , CVE-2020-11798 , CVE-2020-13886 , CVE-2021-28377 , CVE-2022-31062 , CVE-2023-41599 , CVE-2025-12972 , CVE-2025-35056 , CVE-2025-4078 , CVE-2026-107844 , CVE-2026-108585 , CVE-2026-109354 , CVE-2026-110212 , CVE-2026-110766 , CVE-2026-111635 , CVE-2026-113664 , CVE-2026-11944 , CVE-2026-14636 , CVE-2026-15932 , CVE-2026-16531 , CVE-2026-21726 , CVE-2026-34523 , CVE-2026-35583 , CVE-2026-36726 , CVE-2026-42028 , CVE-2026-53452 , CVE-2026-55156 , CVE-2026-56138 , CVE-2026-73244 , CVE-2026-76614 , CVE-2026-84069 , CVE-2026-19761 , CVE-2026-19763 , CVE-2026-42213 , CVE-2026-82112 , CVE-2008-4764 , CVE-2008-6080 , CVE-2008-6222 , CVE-2008-6668 , CVE-2009-1496 , CVE-2009-2100 , CVE-2009-5114 , CVE-2010-0696 , CVE-2010-0942 , CVE-2010-0943 , CVE-2010-0944 , CVE-2010-1081 , CVE-2010-1302 , CVE-2010-1304 , CVE-2010-1305 , CVE-2010-1307 , CVE-2010-1308 , CVE-2010-1312 , CVE-2010-1314 , CVE-2010-1315 , CVE-2010-1340 , CVE-2010-1345 , CVE-2010-1352 , CVE-2010-1353 , CVE-2010-1354 , CVE-2010-1461 , CVE-2010-1491 , CVE-2010-1494 , CVE-2010-1532 , CVE-2010-1534 , CVE-2010-1540 , CVE-2010-1601 , CVE-2010-1657 , CVE-2010-1658 , CVE-2010-1659 , CVE-2010-1714 , CVE-2010-1858 , CVE-2010-1982 , CVE-2010-2018 , CVE-2010-3203 , CVE-2011-0049 , CVE-2011-1669 , CVE-2011-2780 , CVE-2011-4804 , CVE-2012-0896 , CVE-2012-0981 , CVE-2012-0996 , CVE-2012-4031 , CVE-2012-4347 , CVE-2012-4915 , CVE-2012-5192 , CVE-2013-2641 , CVE-2013-5979 , CVE-2013-7091 , CVE-2013-7240 , CVE-2014-100002 , CVE-2014-4577 , CVE-2014-4940 , CVE-2014-4941 , CVE-2014-5111 , CVE-2014-5181 , CVE-2014-5187 , CVE-2014-5368 , CVE-2014-6308 , CVE-2014-8799 , CVE-2014-9119 , CVE-2015-1579 , CVE-2015-1830 , CVE-2015-2067 , CVE-2015-3897 , CVE-2015-4414 , CVE-2015-4666 , CVE-2026-16955 , CVE-2017-7461 , CVE-2020-11491 , CVE-2024-10708 , CVE-2025-11466 , CVE-2025-15673 , CVE-2025-67819 , CVE-2025-69904 , CVE-2026-25525 , CVE-2026-41412 , CVE-2026-5114 , CVE-2026-52832 , CVE-2026-53594 , CVE-2026-71283 , CVE-2026-77825 , CVE-2025-54292 , CVE-2026-102332 , CVE-2025-13698 , CVE-2008-5587 , CVE-2010-0982 , CVE-2010-1217 , CVE-2010-1313 , CVE-2012-4253 , CVE-2013-6785 , CVE-2018-18777 , CVE-2024-7631 , CVE-2026-42885 , CVE-2026-48789 , CVE-2026-55495 , CVE-2026-59816 , CVE-2011-4640 , CVE-2013-5528 , CVE-2014-1222 , CVE-2014-5258 , CVE-2012-0991 , CVE-2025-11990 , CVE-2025-55523 , CVE-2026-9062 , CVE-2026-113651 , CVE-2026-55825 , CVE-2023-2252 , CVE-2024-55550 , CVE-2025-10723 , CVE-2025-10232 , CVE-2025-10233 , CVE-2025-11034 , CVE-2025-11139 , CVE-2025-11607 , CVE-2025-11631 , CVE-2025-11913 , CVE-2025-11914 , CVE-2025-11941 , CVE-2025-12203 , CVE-2025-12626 , CVE-2025-12922 , CVE-2025-13246 , CVE-2025-13816 , CVE-2025-13875 , CVE-2025-14182 , CVE-2025-14520 , CVE-2025-14521 , CVE-2026-10213 , CVE-2026-10278 , CVE-2026-104983 , CVE-2026-105286 , CVE-2026-108791 , CVE-2026-112302 , CVE-2026-113505 , CVE-2026-113738 , CVE-2026-114375 , CVE-2026-114376 , CVE-2026-11467 , CVE-2026-116045 , CVE-2026-14783 , CVE-2026-15138 , CVE-2026-15626 , CVE-2026-16219 , CVE-2026-18644 , CVE-2026-18645 , CVE-2026-18959 , CVE-2026-19756 , CVE-2026-19828 , CVE-2026-19829 , CVE-2026-6487 , CVE-2026-6496 , CVE-2026-7024 , CVE-2026-7599 , CVE-2026-7627 , CVE-2026-76576 , CVE-2026-7676 , CVE-2026-7715 , CVE-2026-7728 , CVE-2026-7738 , CVE-2026-81845 , CVE-2026-82599 , CVE-2026-82603 , CVE-2026-82656 , CVE-2026-8754 , CVE-2026-94046 , CVE-2026-94049 , CVE-2026-9473 , CVE-2026-96678 , CVE-2026-97232 , CVE-2025-11939 , CVE-2025-12923 , CVE-2025-15138 , CVE-2025-15187 , CVE-2026-108790 , CVE-2026-112138 , CVE-2026-112372 , CVE-2026-114377 , CVE-2026-12211 , CVE-2026-15326 , CVE-2026-16088 , CVE-2026-78435 , CVE-2026-81847 , CVE-2025-58161
CWE-23CVE-2025-47445 , CVE-2025-64446 , CVE-2026-23734 , CVE-2025-34510 , CVE-2026-85199 , CVE-2025-59835 , CVE-2026-48126 , CVE-2026-54910 , CVE-2022-1373
CWE-24CVE-2025-61318 , CVE-2026-34151 , CVE-2026-73573
CWE-26CVE-2026-15896 , CVE-2026-112904
CWE-27CVE-2024-24809
CWE-29CVE-2024-34470 , CVE-2023-6023 , CVE-2023-6977
CWE-31CVE-2024-2044
CWE-35CVE-2026-6074 , CVE-2025-27222 , CVE-2026-25705
CWE-36CVE-2024-48248 , CVE-2026-61891 , CVE-2026-7217
CWE-59CVE-2026-44881 , CVE-2026-71964
CWE-73CVE-2024-13984 , CVE-2026-58192 , CVE-2026-57155 , CVE-2018-17246 , CVE-2023-3643 , CVE-2026-85520 , CVE-2026-86189 , CVE-2025-65473 , CVE-2026-48162 , CVE-2026-50006 , CVE-2026-53581 , CVE-2025-66449 , CVE-2026-62865 , CVE-2022-24900 , CVE-2026-35032 , CVE-2026-31939 , CVE-2026-111234 , CVE-2025-13322 , CVE-2026-15983 , CVE-2026-34522 , CVE-2026-46402 , CVE-2026-64679 , CVE-2024-5334 , CVE-2026-29962 , CVE-2026-54629 , CVE-2025-58762 , CVE-2026-35174 , CVE-2026-85160 , CVE-2026-61647 , CVE-2026-75830 , CVE-2026-76210 , CVE-2026-92153 , CVE-2026-9587 , CVE-2026-54134 , CVE-2026-111230 , CVE-2026-35593 , CVE-2025-13380 , CVE-2025-49138 , CVE-2026-33989 , CVE-2026-46397 , CVE-2026-75602 , CVE-2025-35053 , CVE-2026-79653 , CVE-2026-40605 , CVE-2026-10694 , CVE-2026-34967 , CVE-2021-24966 , CVE-2026-41412 , CVE-2026-10558 , CVE-2026-10559 , CVE-2026-19353 , CVE-2026-86147
CWE-74CVE-2018-16763 , CVE-2018-6220 , CVE-2020-17496 , CVE-2022-24989 , CVE-2022-35914 , CVE-2023-43661 , CVE-2026-22200 , CVE-2026-45344 , CVE-2026-71320 , CVE-2015-1592 , CVE-2024-36420 , CVE-2026-11450 , CVE-2026-116253 , CVE-2026-5739 , CVE-2026-10821 , CVE-2025-13786 , CVE-2025-13792 , CVE-2025-6095 , CVE-2026-112252 , CVE-2026-16252 , CVE-2026-5333 , CVE-2026-5631 , CVE-2026-5736 , CVE-2026-7206 , CVE-2026-76760 , CVE-2026-82598 , CVE-2026-85137 , CVE-2026-9474 , CVE-2026-54543 , CVE-2023-7299 , CVE-2025-10097 , CVE-2025-11344 , CVE-2026-19785 , CVE-2025-14276 , CVE-2026-115730 , CVE-2025-11902 , CVE-2025-11903 , CVE-2025-11905 , CVE-2025-12266 , CVE-2026-105329 , CVE-2026-111986 , CVE-2026-112078 , CVE-2026-14691 , CVE-2026-15512 , CVE-2026-19932 , CVE-2026-19958 , CVE-2026-6125 , CVE-2026-7683 , CVE-2026-78166 , CVE-2026-90488 , CVE-2026-90581 , CVE-2026-9302 , CVE-2025-11073 , CVE-2025-14729 , CVE-2025-14730 , CVE-2025-14837 , CVE-2025-15130 , CVE-2025-15148 , CVE-2025-15394 , CVE-2026-105226 , CVE-2026-19964 , CVE-2026-5848 , CVE-2026-81835 , CVE-2026-94103 , CVE-2026-113388 , CVE-2026-108827
CWE-77CVE-2026-105134 , CVE-2026-108576 , CVE-2026-26015 , CVE-2026-72869 , CVE-2014-1203 , CVE-2022-2143 , CVE-2022-36553 , CVE-2022-40881 , CVE-2023-34960 , CVE-2023-45852 , CVE-2026-35847 , CVE-2026-8037 , CVE-2024-9264 , CVE-2026-47670 , CVE-2025-10364 , CVE-2025-59735 , CVE-2025-59736 , CVE-2025-59737 , CVE-2025-59738 , CVE-2025-59739 , CVE-2025-59740 , CVE-2025-59741 , CVE-2026-101001 , CVE-2026-101072 , CVE-2026-101075 , CVE-2026-101076 , CVE-2026-102240 , CVE-2026-108804 , CVE-2026-44257 , CVE-2026-41304 , CVE-2026-5850 , CVE-2026-5851 , CVE-2026-5852 , CVE-2026-5853 , CVE-2026-5854 , CVE-2026-5975 , CVE-2026-5976 , CVE-2026-5977 , CVE-2026-5978 , CVE-2026-5993 , CVE-2026-5994 , CVE-2026-5996 , CVE-2026-5997 , CVE-2026-6025 , CVE-2026-6026 , CVE-2026-6028 , CVE-2026-6029 , CVE-2026-6112 , CVE-2026-6113 , CVE-2026-6114 , CVE-2026-6115 , CVE-2026-6116 , CVE-2026-6131 , CVE-2026-6132 , CVE-2026-6138 , CVE-2026-6139 , CVE-2026-6140 , CVE-2026-6154 , CVE-2026-6155 , CVE-2026-6156 , CVE-2026-6195 , CVE-2026-7121 , CVE-2026-7122 , CVE-2026-7123 , CVE-2026-7124 , CVE-2026-7125 , CVE-2026-7136 , CVE-2026-7137 , CVE-2026-7138 , CVE-2026-7139 , CVE-2026-7140 , CVE-2026-7152 , CVE-2026-7153 , CVE-2026-7154 , CVE-2026-7155 , CVE-2026-7156 , CVE-2026-7202 , CVE-2026-7203 , CVE-2026-7204 , CVE-2026-7240 , CVE-2026-7241 , CVE-2026-7242 , CVE-2026-7243 , CVE-2026-7244 , CVE-2026-7538 , CVE-2026-7823 , CVE-2026-9384 , CVE-2026-9385 , CVE-2026-9386 , CVE-2026-9387 , CVE-2026-9388 , CVE-2026-9404 , CVE-2026-9405 , CVE-2026-9406 , CVE-2026-9407 , CVE-2026-9408 , CVE-2026-9432 , CVE-2026-9433 , CVE-2026-9434 , CVE-2026-9435 , CVE-2026-9436 , CVE-2026-9454 , CVE-2026-9455 , CVE-2026-9456 , CVE-2026-9457 , CVE-2026-9458 , CVE-2026-9476 , CVE-2026-9477 , CVE-2026-9478 , CVE-2025-51457 , CVE-2026-88622 , CVE-2026-100896 , CVE-2026-102911 , CVE-2026-108540 , CVE-2026-108894 , CVE-2026-109108 , CVE-2026-113390 , CVE-2026-113506 , CVE-2026-55182 , CVE-2026-82692 , CVE-2026-85223 , CVE-2026-86299 , CVE-2026-90699 , CVE-2026-101009 , CVE-2026-82690 , CVE-2026-82691 , CVE-2026-85222 , CVE-2026-85224 , CVE-2026-90702 , CVE-2026-90703 , CVE-2026-92397 , CVE-2026-92398 , CVE-2016-3081 , CVE-2024-45257 , CVE-2026-10870 , CVE-2026-10871 , CVE-2026-10873 , CVE-2026-18900 , CVE-2026-19771 , CVE-2026-36540 , CVE-2026-7693 , CVE-2026-11450 , CVE-2026-19983 , CVE-2026-10214 , CVE-2026-102874 , CVE-2026-18641 , CVE-2026-19379 , CVE-2026-5333 , CVE-2026-5677 , CVE-2026-5678 , CVE-2026-5688 , CVE-2026-5689 , CVE-2026-5690 , CVE-2026-5691 , CVE-2026-5692 , CVE-2026-5741 , CVE-2026-5802 , CVE-2026-7061 , CVE-2026-7062 , CVE-2026-7064 , CVE-2026-7066 , CVE-2026-7220 , CVE-2026-7416 , CVE-2026-7443 , CVE-2026-7590 , CVE-2026-76761 , CVE-2026-7698 , CVE-2026-90617 , CVE-2026-90619 , CVE-2026-90690 , CVE-2026-90843 , CVE-2026-15485 , CVE-2026-5547 , CVE-2025-14276 , CVE-2025-11138 , CVE-2025-11490 , CVE-2025-14204 , CVE-2026-101859 , CVE-2026-10279 , CVE-2026-102906 , CVE-2026-11408 , CVE-2026-12814 , CVE-2026-13560 , CVE-2026-13561 , CVE-2026-13581 , CVE-2026-15496 , CVE-2026-5351 , CVE-2026-5352 , CVE-2026-5353 , CVE-2026-5354 , CVE-2026-5355 , CVE-2026-7600 , CVE-2026-7642 , CVE-2026-7653 , CVE-2026-7683 , CVE-2026-8188 , CVE-2026-8189 , CVE-2026-8190 , CVE-2026-8191 , CVE-2026-8192 , CVE-2026-8227 , CVE-2026-8228 , CVE-2026-8229 , CVE-2026-8230 , CVE-2026-8264 , CVE-2026-91853 , CVE-2026-92993 , CVE-2026-9343 , CVE-2026-9347 , CVE-2026-9424 , CVE-2026-9511 , CVE-2026-9512 , CVE-2026-9514 , CVE-2026-9515 , CVE-2026-9531 , CVE-2026-9532 , CVE-2026-9533 , CVE-2026-9534 , CVE-2025-11073 , CVE-2025-11141 , CVE-2026-112195 , CVE-2026-8259 , CVE-2026-8265 , CVE-2026-82678 , CVE-2026-82702 , CVE-2026-82703 , CVE-2026-85040 , CVE-2026-90705 , CVE-2026-90706 , CVE-2026-90788 , CVE-2026-5621
CWE-78CVE-2013-5486 , CVE-2025-34037 , CVE-2026-100382 , CVE-2026-105134 , CVE-2026-108576 , CVE-2026-19188 , CVE-2026-34234 , CVE-2026-41900 , CVE-2026-45087 , CVE-2026-49869 , CVE-2026-8985 , CVE-2026-105691 , CVE-2026-105697 , CVE-2026-105740 , CVE-2026-34038 , CVE-2026-40933 , CVE-2026-42454 , CVE-2026-45629 , CVE-2026-45632 , CVE-2026-48030 , CVE-2026-57155 , CVE-2026-63298 , CVE-2026-72738 , CVE-2026-72740 , CVE-2026-72865 , CVE-2026-72868 , CVE-2026-72869 , CVE-2026-72872 , CVE-2026-72876 , CVE-2026-72882 , CVE-2026-72902 , CVE-2026-73294 , CVE-2026-93698 , CVE-2014-6271 , CVE-2019-12725 , CVE-2019-15107 , CVE-2019-16662 , CVE-2019-16920 , CVE-2019-17270 , CVE-2019-7256 , CVE-2019-9194 , CVE-2020-15920 , CVE-2020-29390 , CVE-2020-7980 , CVE-2020-9054 , CVE-2021-32682 , CVE-2022-29303 , CVE-2022-31137 , CVE-2024-50603 , CVE-2024-53584 , CVE-2025-54123 , CVE-2025-66401 , CVE-2026-110392 , CVE-2026-12940 , CVE-2026-15733 , CVE-2026-18482 , CVE-2026-37281 , CVE-2026-42846 , CVE-2026-45018 , CVE-2026-45748 , CVE-2026-48687 , CVE-2026-49819 , CVE-2026-53545 , CVE-2026-57124 , CVE-2026-79408 , CVE-2026-35906 , CVE-2026-72878 , CVE-2026-8986 , CVE-2020-36856 , CVE-2025-66210 , CVE-2026-103056 , CVE-2026-47670 , CVE-2026-58146 , CVE-2026-63732 , CVE-2026-6644 , CVE-2026-72879 , CVE-2026-73483 , CVE-2013-10049 , CVE-2025-59735 , CVE-2025-59736 , CVE-2025-59737 , CVE-2025-59738 , CVE-2025-59739 , CVE-2025-59740 , CVE-2025-59741 , CVE-2025-71284 , CVE-2025-71336 , CVE-2025-71429 , CVE-2026-101001 , CVE-2026-101072 , CVE-2026-101075 , CVE-2026-101076 , CVE-2026-102240 , CVE-2026-105110 , CVE-2026-107780 , CVE-2026-108804 , CVE-2026-113802 , CVE-2026-19586 , CVE-2026-34106 , CVE-2026-34108 , CVE-2026-34109 , CVE-2026-34110 , CVE-2026-34111 , CVE-2026-34112 , CVE-2026-34115 , CVE-2026-41064 , CVE-2026-41315 , CVE-2026-41923 , CVE-2026-41925 , CVE-2026-53975 , CVE-2026-58147 , CVE-2026-58457 , CVE-2026-60121 , CVE-2026-61498 , CVE-2026-63766 , CVE-2026-64625 , CVE-2026-67308 , CVE-2026-71921 , CVE-2026-71944 , CVE-2026-71945 , CVE-2026-71946 , CVE-2026-71947 , CVE-2026-71948 , CVE-2026-71949 , CVE-2026-71950 , CVE-2026-71951 , CVE-2026-71952 , CVE-2026-71953 , CVE-2026-71954 , CVE-2026-71955 , CVE-2026-71956 , CVE-2026-71984 , CVE-2026-71992 , CVE-2026-89308 , CVE-2026-59800 , CVE-2026-63304 , CVE-2026-63305 , CVE-2026-80138 , CVE-2025-66203 , CVE-2026-10131 , CVE-2026-10135 , CVE-2026-12486 , CVE-2026-12849 , CVE-2026-12850 , CVE-2026-12851 , CVE-2026-33568 , CVE-2026-35499 , CVE-2026-40627 , CVE-2026-57499 , CVE-2026-79766 , CVE-2026-79916 , CVE-2026-9814 , CVE-2013-5758 , CVE-2026-102608 , CVE-2026-45630 , CVE-2026-45750 , CVE-2026-91931 , CVE-2026-33765 , CVE-2026-5850 , CVE-2026-5851 , CVE-2026-5852 , CVE-2026-5853 , CVE-2026-5854 , CVE-2026-5975 , CVE-2026-5976 , CVE-2026-5977 , CVE-2026-5978 , CVE-2026-5993 , CVE-2026-5994 , CVE-2026-5996 , CVE-2026-5997 , CVE-2026-6025 , CVE-2026-6026 , CVE-2026-6028 , CVE-2026-6029 , CVE-2026-6112 , CVE-2026-6113 , CVE-2026-6114 , CVE-2026-6115 , CVE-2026-6116 , CVE-2026-6131 , CVE-2026-6132 , CVE-2026-6138 , CVE-2026-6139 , CVE-2026-6140 , CVE-2026-6154 , CVE-2026-6155 , CVE-2026-6156 , CVE-2026-6195 , CVE-2026-7121 , CVE-2026-7122 , CVE-2026-7123 , CVE-2026-7124 , CVE-2026-7125 , CVE-2026-7136 , CVE-2026-7137 , CVE-2026-7138 , CVE-2026-7139 , CVE-2026-7140 , CVE-2026-7152 , CVE-2026-7153 , CVE-2026-7154 , CVE-2026-7155 , CVE-2026-7156 , CVE-2026-7202 , CVE-2026-7203 , CVE-2026-7204 , CVE-2026-7240 , CVE-2026-7241 , CVE-2026-7242 , CVE-2026-7243 , CVE-2026-7244 , CVE-2026-73570 , CVE-2026-7538 , CVE-2026-7823 , CVE-2026-9384 , CVE-2026-9385 , CVE-2026-9386 , CVE-2026-9387 , CVE-2026-9388 , CVE-2026-9404 , CVE-2026-9405 , CVE-2026-9406 , CVE-2026-9407 , CVE-2026-9408 , CVE-2026-9432 , CVE-2026-9433 , CVE-2026-9434 , CVE-2026-9435 , CVE-2026-9436 , CVE-2026-9454 , CVE-2026-9455 , CVE-2026-9456 , CVE-2026-9457 , CVE-2026-9458 , CVE-2026-9476 , CVE-2026-9477 , CVE-2026-9478 , CVE-2017-14535 , CVE-2017-6884 , CVE-2020-13851 , CVE-2025-66209 , CVE-2026-105106 , CVE-2026-105797 , CVE-2026-110908 , CVE-2026-17623 , CVE-2026-17625 , CVE-2026-24893 , CVE-2026-26899 , CVE-2026-30971 , CVE-2026-34057 , CVE-2026-34153 , CVE-2026-34158 , CVE-2026-34197 , CVE-2026-34594 , CVE-2026-34599 , CVE-2026-35196 , CVE-2026-35519 , CVE-2026-35520 , CVE-2026-41208 , CVE-2026-45578 , CVE-2026-45662 , CVE-2026-52483 , CVE-2026-52484 , CVE-2026-54149 , CVE-2026-58195 , CVE-2026-59734 , CVE-2026-62312 , CVE-2026-72875 , CVE-2026-73222 , CVE-2026-77601 , CVE-2026-79423 , CVE-2026-82804 , CVE-2005-10004 , CVE-2015-10145 , CVE-2025-30007 , CVE-2025-34115 , CVE-2025-34311 , CVE-2025-34312 , CVE-2025-34334 , CVE-2026-100852 , CVE-2026-25855 , CVE-2026-28797 , CVE-2026-34791 , CVE-2026-34792 , CVE-2026-34793 , CVE-2026-34794 , CVE-2026-34795 , CVE-2026-34796 , CVE-2026-34797 , CVE-2026-46746 , CVE-2026-58000 , CVE-2026-58452 , CVE-2026-64837 , CVE-2026-69096 , CVE-2026-71966 , CVE-2026-72870 , CVE-2026-72874 , CVE-2026-73680 , CVE-2026-76060 , CVE-2026-79756 , CVE-2026-90770 , CVE-2026-92580 , CVE-2025-68700 , CVE-2026-100896 , CVE-2026-102911 , CVE-2026-108540 , CVE-2026-108894 , CVE-2026-109108 , CVE-2026-111214 , CVE-2026-111217 , CVE-2026-111218 , CVE-2026-113390 , CVE-2026-113506 , CVE-2026-22100 , CVE-2026-40187 , CVE-2026-53804 , CVE-2026-61517 , CVE-2026-63725 , CVE-2026-65711 , CVE-2026-67599 , CVE-2026-67608 , CVE-2026-71906 , CVE-2026-71907 , CVE-2026-71908 , CVE-2026-71913 , CVE-2026-71915 , CVE-2026-71918 , CVE-2026-71919 , CVE-2026-71923 , CVE-2026-71924 , CVE-2026-71925 , CVE-2026-71926 , CVE-2026-71927 , CVE-2026-71928 , CVE-2026-71929 , CVE-2026-71930 , CVE-2026-71931 , CVE-2026-71943 , CVE-2026-75121 , CVE-2026-75122 , CVE-2026-75123 , CVE-2026-80214 , CVE-2026-82692 , CVE-2026-84194 , CVE-2026-85223 , CVE-2026-86299 , CVE-2026-86733 , CVE-2026-90699 , CVE-2026-101009 , CVE-2026-12195 , CVE-2026-82690 , CVE-2026-82691 , CVE-2026-85222 , CVE-2026-85224 , CVE-2026-90702 , CVE-2026-90703 , CVE-2026-92397 , CVE-2026-92398 , CVE-2026-55786 , CVE-2024-58274 , CVE-2025-69755 , CVE-2026-48695 , CVE-2026-55173 , CVE-2026-79755 , CVE-2018-6222 , CVE-2021-21315 , CVE-2026-108161 , CVE-2026-40519 , CVE-2013-6041 , CVE-2026-53534 , CVE-2026-10870 , CVE-2026-10871 , CVE-2026-10873 , CVE-2026-18900 , CVE-2026-19771 , CVE-2019-11539 , CVE-2025-58034 , CVE-2025-58763 , CVE-2026-71284 , CVE-2026-81669 , CVE-2026-92263 , CVE-2026-48997 , CVE-2026-19983 , CVE-2022-28810 , CVE-2026-79761 , CVE-2026-55679 , CVE-2026-72739 , CVE-2026-45626 , CVE-2026-10214 , CVE-2026-102874 , CVE-2026-18641 , CVE-2026-19379 , CVE-2026-5677 , CVE-2026-5678 , CVE-2026-5688 , CVE-2026-5689 , CVE-2026-5690 , CVE-2026-5691 , CVE-2026-5692 , CVE-2026-5741 , CVE-2026-5802 , CVE-2026-7061 , CVE-2026-7062 , CVE-2026-7064 , CVE-2026-7066 , CVE-2026-7220 , CVE-2026-7416 , CVE-2026-7443 , CVE-2026-7590 , CVE-2026-76761 , CVE-2026-7698 , CVE-2026-90617 , CVE-2026-90619 , CVE-2026-90690 , CVE-2026-90843 , CVE-2026-15485 , CVE-2026-5547 , CVE-2026-42201 , CVE-2025-11138 , CVE-2025-11490 , CVE-2025-14204 , CVE-2026-101859 , CVE-2026-10279 , CVE-2026-102906 , CVE-2026-11408 , CVE-2026-12814 , CVE-2026-13560 , CVE-2026-13561 , CVE-2026-13581 , CVE-2026-15496 , CVE-2026-5351 , CVE-2026-5352 , CVE-2026-5353 , CVE-2026-5354 , CVE-2026-5355 , CVE-2026-7600 , CVE-2026-7642 , CVE-2026-7653 , CVE-2026-8188 , CVE-2026-8189 , CVE-2026-8190 , CVE-2026-8191 , CVE-2026-8192 , CVE-2026-8227 , CVE-2026-8228 , CVE-2026-8229 , CVE-2026-8230 , CVE-2026-8264 , CVE-2026-91853 , CVE-2026-92993 , CVE-2026-9343 , CVE-2026-9347 , CVE-2026-9424 , CVE-2026-9511 , CVE-2026-9512 , CVE-2026-9514 , CVE-2026-9515 , CVE-2026-9531 , CVE-2026-9532 , CVE-2026-9533 , CVE-2026-9534 , CVE-2025-11141 , CVE-2026-112195 , CVE-2026-8259 , CVE-2026-8265 , CVE-2026-82678 , CVE-2026-82702 , CVE-2026-82703 , CVE-2026-85040 , CVE-2026-90705 , CVE-2026-90706 , CVE-2026-90788 , CVE-2026-5621
CWE-79CVE-2026-73041 , CVE-2026-73042 , CVE-2026-45668 , CVE-2026-48768 , CVE-2026-93697 , CVE-2024-39024 , CVE-2026-104078 , CVE-2018-6226 , CVE-2018-6227 , CVE-2026-58391 , CVE-2025-59751 , CVE-2025-59752 , CVE-2025-59753 , CVE-2025-59754 , CVE-2025-59759 , CVE-2025-59773 , CVE-2025-59774 , CVE-2016-4807 , CVE-2013-6042 , CVE-2014-9146 , CVE-2015-4665 , CVE-2026-36239
CWE-83CVE-2026-58391
CWE-88CVE-2026-57572 , CVE-2026-108390 , CVE-2026-113708 , CVE-2026-44450 , CVE-2026-73294 , CVE-2020-21224 , CVE-2026-100714 , CVE-2026-108963 , CVE-2026-107639 , CVE-2026-47250
CWE-89CVE-2026-55634 , CVE-2016-2555 , CVE-2018-17552 , CVE-2018-6228 , CVE-2018-6229 , CVE-2024-5827 , CVE-2026-38428 , CVE-2026-33324 , CVE-2026-34612 , CVE-2016-0710 , CVE-2022-34876 , CVE-2022-34877 , CVE-2022-34878 , CVE-2023-49085 , CVE-2015-4669 , CVE-2026-32271 , CVE-2010-4977 , CVE-2010-5028 , CVE-2011-4448 , CVE-2013-5640 , CVE-2014-9145 , CVE-2018-6230 , CVE-2026-55679 , CVE-2026-61852 , CVE-2025-6095 , CVE-2026-112252 , CVE-2026-16252 , CVE-2026-5736 , CVE-2026-7206 , CVE-2026-9474 , CVE-2023-7299 , CVE-2026-19785 , CVE-2025-11902 , CVE-2025-11903
CWE-91CVE-2026-89247
CWE-93CVE-2026-39394 , CVE-2026-84372 , CVE-2026-35519 , CVE-2026-35520 , CVE-2025-61884 , CVE-2026-111221
CWE-94CVE-2022-24816 , CVE-2024-4040 , CVE-2025-49132 , CVE-2026-10134 , CVE-2026-41900 , CVE-2026-47668 , CVE-2026-57572 , CVE-2026-8984 , CVE-2026-94169 , CVE-2025-11539 , CVE-2026-108390 , CVE-2026-46512 , CVE-2026-55565 , CVE-2026-55634 , CVE-2026-8481 , CVE-2009-1151 , CVE-2018-1273 , CVE-2022-22954 , CVE-2023-30145 , CVE-2024-31823 , CVE-2024-32641 , CVE-2025-29306 , CVE-2025-3248 , CVE-2025-65719 , CVE-2026-104586 , CVE-2026-30993 , CVE-2026-31040 , CVE-2026-38431 , CVE-2026-39117 , CVE-2026-3960 , CVE-2026-46562 , CVE-2026-51861 , CVE-2026-51866 , CVE-2026-51886 , CVE-2026-51911 , CVE-2026-55559 , CVE-2026-57131 , CVE-2026-62379 , CVE-2026-67827 , CVE-2026-67919 , CVE-2026-67926 , CVE-2026-75031 , CVE-2026-75411 , CVE-2026-75414 , CVE-2026-79538 , CVE-2026-83627 , CVE-2026-86793 , CVE-2026-88393 , CVE-2026-48519 , CVE-2026-70477 , CVE-2026-88062 , CVE-2024-9264 , CVE-2025-62593 , CVE-2026-45272 , CVE-2026-55413 , CVE-2026-69256 , CVE-2026-82244 , CVE-2026-93985 , CVE-2013-1965 , CVE-2018-25114 , CVE-2018-25357 , CVE-2026-108598 , CVE-2026-12257 , CVE-2026-27174 , CVE-2026-65008 , CVE-2026-70553 , CVE-2026-96754 , CVE-2026-114053 , CVE-2026-82531 , CVE-2026-37637 , CVE-2026-42555 , CVE-2026-46621 , CVE-2026-55511 , CVE-2026-58400 , CVE-2026-42238 , CVE-2026-47252 , CVE-2026-62674 , CVE-2026-69251 , CVE-2026-73485 , CVE-2026-73486 , CVE-2026-73487 , CVE-2026-43945 , CVE-2020-8163 , CVE-2023-43661 , CVE-2024-41667 , CVE-2025-66438 , CVE-2026-104851 , CVE-2026-34197 , CVE-2026-4327 , CVE-2026-45505 , CVE-2026-48017 , CVE-2026-55585 , CVE-2026-62675 , CVE-2026-6543 , CVE-2026-65660 , CVE-2026-78834 , CVE-2026-96795 , CVE-2021-47938 , CVE-2022-50944 , CVE-2026-100856 , CVE-2026-100864 , CVE-2026-109308 , CVE-2026-116811 , CVE-2026-25856 , CVE-2026-28797 , CVE-2026-34965 , CVE-2026-49143 , CVE-2026-55094 , CVE-2026-64850 , CVE-2026-69100 , CVE-2026-72819 , CVE-2026-76836 , CVE-2026-82278 , CVE-2026-85610 , CVE-2026-86732 , CVE-2021-32820 , CVE-2026-42785 , CVE-2026-54710 , CVE-2026-56382 , CVE-2026-56703 , CVE-2026-61523 , CVE-2026-65693 , CVE-2026-69088 , CVE-2026-22244 , CVE-2026-42588 , CVE-2026-47398 , CVE-2026-71320 , CVE-2026-105764 , CVE-2026-66738 , CVE-2008-1059 , CVE-2010-2918 , CVE-2025-34086 , CVE-2026-46581 , CVE-2025-68619 , CVE-2026-108593 , CVE-2025-62429 , CVE-2026-77939 , CVE-2026-116253 , CVE-2026-5739 , CVE-2026-55679 , CVE-2026-44287 , CVE-2013-3631 , CVE-2025-13786 , CVE-2025-13792 , CVE-2026-54611 , CVE-2026-5631 , CVE-2026-76760 , CVE-2026-82598 , CVE-2026-85137 , CVE-2025-10097 , CVE-2025-11344 , CVE-2026-29202 , CVE-2026-112949 , CVE-2025-11905 , CVE-2025-12266 , CVE-2026-101861 , CVE-2026-105329 , CVE-2026-111986 , CVE-2026-112078 , CVE-2026-14691 , CVE-2026-15512 , CVE-2026-19932 , CVE-2026-19958 , CVE-2026-6125 , CVE-2026-78166 , CVE-2026-90488 , CVE-2026-90581 , CVE-2026-9302 , CVE-2025-14729 , CVE-2025-14730 , CVE-2025-14837 , CVE-2025-15130 , CVE-2025-15148 , CVE-2025-15394 , CVE-2026-105226 , CVE-2026-19964 , CVE-2026-5848 , CVE-2026-81835 , CVE-2026-94103 , CVE-2026-113388 , CVE-2026-108827
CWE-95CVE-2026-46562 , CVE-2026-47391 , CVE-2026-39932 , CVE-2025-31114 , CVE-2026-61511 , CVE-2026-55094 , CVE-2026-40187 , CVE-2025-48868 , CVE-2026-101861
CWE-98CVE-2024-12209 , CVE-2026-0926 , CVE-2026-12227 , CVE-2016-20101 , CVE-2026-39353 , CVE-2023-49084 , CVE-2024-8252 , CVE-2025-32614 , CVE-2026-87927 , CVE-2026-49954 , CVE-2025-48157 , CVE-2025-9990 , CVE-2026-104995 , CVE-2026-44239 , CVE-2025-11704 , CVE-2026-50547 , CVE-2026-92174 , CVE-2015-10133 , CVE-2026-39387 , CVE-2026-71426 , CVE-2019-25760 , CVE-2022-50954 , CVE-2025-11977 , CVE-2026-14280 , CVE-2026-30480 , CVE-2026-34787 , CVE-2026-63302
CWE-116CVE-2026-112949
CWE-120CVE-2026-36796
CWE-121CVE-2022-20705 , CVE-2026-76070 , CVE-2026-76071 , CVE-2026-36783 , CVE-2022-20707
CWE-177CVE-2025-11990
CWE-180CVE-2026-39364 , CVE-2026-76203
CWE-183CVE-2026-103687 , CVE-2026-16129
CWE-184CVE-2026-49869 , CVE-2026-34415 , CVE-2026-41934 , CVE-2026-55096 , CVE-2026-44287 , CVE-2026-72860 , CVE-2026-103687 , CVE-2026-25525 , CVE-2026-16129
CWE-187CVE-2026-35031
CWE-200CVE-2026-51027 , CVE-2026-65760 , CVE-2026-47394 , CVE-2026-62865 , CVE-2021-32820 , CVE-2024-24919 , CVE-2026-10055 , CVE-2026-44881 , CVE-2025-69755 , CVE-2026-39363 , CVE-2026-53571 , CVE-2014-0644 , CVE-2024-46987 , CVE-2026-53553 , CVE-2014-7863 , CVE-2014-9147 , CVE-2015-1000012 , CVE-2016-4806 , CVE-2018-6008 , CVE-2021-24227 , CVE-2021-41277 , CVE-2021-43287 , CVE-2024-45388 , CVE-2024-46938 , CVE-2026-51078 , CVE-2026-61891 , CVE-2025-34098 , CVE-2026-47735 , CVE-2026-111053 , CVE-2014-2383 , CVE-2016-6435 , CVE-2022-34125 , CVE-2026-114623 , CVE-2026-58442 , CVE-2026-7542 , CVE-2026-78851 , CVE-2026-112947 , CVE-2026-112027 , CVE-2026-53452 , CVE-2026-73082 , CVE-2026-42213 , CVE-2009-0815 , CVE-2013-4826 , CVE-2013-6043 , CVE-2015-0922 , CVE-2015-2997 , CVE-2026-108811
CWE-203CVE-2022-34125
CWE-206CVE-2026-85199
CWE-209CVE-2026-112947 , CVE-2026-101029
CWE-250CVE-2026-41900 , CVE-2026-9209 , CVE-2026-55094
CWE-253CVE-2026-15686
CWE-255CVE-2012-4933
CWE-264CVE-2012-0297 , CVE-2015-1489 , CVE-2019-1621 , CVE-2010-3714
CWE-266CVE-2026-101860
CWE-269CVE-2026-45632 , CVE-2020-3243 , CVE-2020-3250 , CVE-2026-104798 , CVE-2026-37107 , CVE-2026-49819 , CVE-2026-11423 , CVE-2026-40484 , CVE-2026-76801 , CVE-2026-72830 , CVE-2026-73664 , CVE-2026-101860
CWE-276CVE-2025-34332 , CVE-2025-34333
CWE-284CVE-2026-34234 , CVE-2026-41900 , CVE-2026-54745 , CVE-2014-9148 , CVE-2019-1619 , CVE-2026-65760 , CVE-2026-50006 , CVE-2026-43945 , CVE-2026-57855 , CVE-2026-65759 , CVE-2023-26360 , CVE-2026-73664 , CVE-2026-39364 , CVE-2014-3120 , CVE-2015-1000010 , CVE-2026-54629 , CVE-2024-20767 , CVE-2025-28367 , CVE-2026-31978 , CVE-2026-11344 , CVE-2025-15152 , CVE-2025-63739 , CVE-2015-1376 , CVE-2026-10172 , CVE-2026-108811 , CVE-2026-14698 , CVE-2026-6489 , CVE-2025-13198
CWE-285CVE-2026-55166 , CVE-2021-28799 , CVE-2024-26291 , CVE-2026-46484 , CVE-2026-34239 , CVE-2026-3835 , CVE-2025-12494
CWE-287CVE-2025-55169 , CVE-2026-49869 , CVE-2020-4427 , CVE-2021-25281 , CVE-2025-61882 , CVE-2025-66039 , CVE-2013-4863 , CVE-2018-12613 , CVE-2020-24579 , CVE-2021-45841 , CVE-2025-27621 , CVE-2015-1486 , CVE-2018-19458 , CVE-2025-61884 , CVE-2025-32815 , CVE-2026-7630 , CVE-2012-2983
CWE-288CVE-2024-1709 , CVE-2026-43945
CWE-295CVE-2018-6221 , CVE-2018-6219 , CVE-2026-42213
CWE-306CVE-2026-45087 , CVE-2026-81735 , CVE-2026-42864 , CVE-2018-6223 , CVE-2025-3248 , CVE-2026-47391 , CVE-2026-49819 , CVE-2026-57124 , CVE-2026-57131 , CVE-2026-53649 , CVE-2026-88062 , CVE-2025-34100 , CVE-2026-105110 , CVE-2026-67426 , CVE-2026-85688 , CVE-2026-9209 , CVE-2026-54670 , CVE-2026-86259 , CVE-2026-73222 , CVE-2023-54350 , CVE-2025-34115 , CVE-2025-34331 , CVE-2026-55094 , CVE-2026-63722 , CVE-2026-89250 , CVE-2026-34160 , CVE-2026-56677 , CVE-2026-55786 , CVE-2026-46711 , CVE-2026-49471 , CVE-2026-39363 , CVE-2022-24990 , CVE-2023-22047 , CVE-2026-61891 , CVE-2026-33715 , CVE-2026-46555 , CVE-2026-65012 , CVE-2026-112949
CWE-319CVE-2017-5259
CWE-321CVE-2026-89026
CWE-327CVE-2025-2539
CWE-330CVE-2009-0255
CWE-345CVE-2026-53513 , CVE-2025-12999 , CVE-2026-48105
CWE-346CVE-2026-109286 , CVE-2026-46555
CWE-350CVE-2026-97875 , CVE-2026-53708
CWE-352CVE-2026-53649 , CVE-2025-62593 , CVE-2016-4808 , CVE-2018-6224 , CVE-2026-73222 , CVE-2026-34228 , CVE-2025-12061 , CVE-2026-49471 , CVE-2011-4452 , CVE-2013-4865 , CVE-2016-6897 , CVE-2018-18760 , CVE-2021-24947
CWE-362CVE-2026-42099
CWE-367CVE-2026-56676 , CVE-2026-57114 , CVE-2026-55537 , CVE-2026-102354 , CVE-2026-63334 , CVE-2026-53708 , CVE-2026-42344 , CVE-2026-54020 , CVE-2026-70667 , CVE-2026-42336 , CVE-2026-101029 , CVE-2026-49262
CWE-384CVE-2018-18925
CWE-400CVE-2026-26477 , CVE-2026-86147
CWE-425CVE-2026-35029
CWE-427CVE-2026-108390 , CVE-2022-2334
CWE-434CVE-2020-24186 , CVE-2025-52691 , CVE-2022-44276 , CVE-2022-47615 , CVE-2024-7399 , CVE-2025-67506 , CVE-2026-103889 , CVE-2026-72592 , CVE-2024-31214 , CVE-2026-107188 , CVE-2026-53649 , CVE-2026-11419 , CVE-2009-20006 , CVE-2012-10054 , CVE-2018-25114 , CVE-2024-58348 , CVE-2025-34100 , CVE-2026-35047 , CVE-2026-44402 , CVE-2023-7305 , CVE-2026-35573 , CVE-2026-40484 , CVE-2026-50006 , CVE-2026-58409 , CVE-2018-17553 , CVE-2019-8942 , CVE-2019-9189 , CVE-2025-59710 , CVE-2025-65471 , CVE-2025-66449 , CVE-2026-14498 , CVE-2026-17196 , CVE-2026-33704 , CVE-2021-47943 , CVE-2026-105123 , CVE-2026-34735 , CVE-2026-40488 , CVE-2026-67206 , CVE-2025-59835 , CVE-2025-61678 , CVE-2026-109397 , CVE-2026-23698 , CVE-2026-41587 , CVE-2024-24809 , CVE-2017-12615 , CVE-2025-34086 , CVE-2026-53599 , CVE-2020-8260 , CVE-2026-27891 , CVE-2026-35174 , CVE-2026-52835 , CVE-2021-24947 , CVE-2026-11344 , CVE-2026-54611 , CVE-2025-15152 , CVE-2026-10172 , CVE-2026-14698 , CVE-2026-6489 , CVE-2025-13198
CWE-441CVE-2026-53513 , CVE-2026-73079 , CVE-2026-43910 , CVE-2026-77348 , CVE-2026-61793 , CVE-2026-63643
CWE-444CVE-2025-61884
CWE-470CVE-2026-46562 , CVE-2026-55559 , CVE-2026-62379 , CVE-2026-58400 , CVE-2026-79987 , CVE-2025-68455 , CVE-2026-6020 , CVE-2026-34216 , CVE-2026-115886
CWE-472CVE-2017-5261 , CVE-2026-39364
CWE-473CVE-2023-36845
CWE-479CVE-2026-44011
CWE-489CVE-2017-5259 , CVE-2026-9133
CWE-494CVE-2026-66398 , CVE-2026-107812
CWE-497CVE-2026-34413 , CVE-2026-41459
CWE-501CVE-2025-61884
CWE-502CVE-2025-24016 , CVE-2026-3296 , CVE-2026-55573 , CVE-2019-12799 , CVE-2017-9805
CWE-522CVE-2026-67426
CWE-538CVE-2026-112027
CWE-552CVE-2026-34361 , CVE-2026-40484 , CVE-2009-10005 , CVE-2021-4463 , CVE-2017-16651 , CVE-2021-39316 , CVE-2022-0656 , CVE-2022-33901 , CVE-2025-11371 , CVE-2026-54629 , CVE-2026-88623 , CVE-2022-25497
CWE-601CVE-2015-4668 , CVE-2026-44520
CWE-610CVE-2017-18357 , CVE-2025-10091 , CVE-2025-10816 , CVE-2025-11035 , CVE-2025-13209
CWE-611CVE-2017-12629 , CVE-2019-9670 , CVE-2022-28219 , CVE-2025-66516 , CVE-2026-41936 , CVE-2025-54988 , CVE-2026-69101 , CVE-2026-54640 , CVE-2019-9757 , CVE-2022-38840 , CVE-2024-6893 , CVE-2025-10091 , CVE-2025-10816 , CVE-2018-6225 , CVE-2025-11035 , CVE-2025-13209
CWE-625CVE-2026-102983 , CVE-2026-73845
CWE-639CVE-2026-55166 , CVE-2026-72876 , CVE-2026-45750 , CVE-2026-69250 , CVE-2026-12905
CWE-641CVE-2026-46581
CWE-642CVE-2026-50053
CWE-644CVE-2026-48126 , CVE-2026-67179
CWE-668CVE-2022-24900 , CVE-2023-33510 , CVE-2026-82650
CWE-669CVE-2026-73574 , CVE-2026-38924
CWE-674CVE-2026-84175
CWE-693CVE-2026-41900 , CVE-2026-39353 , CVE-2026-84317 , CVE-2026-84318
CWE-697CVE-2026-49340
CWE-698CVE-2024-48766
CWE-704CVE-2021-28918
CWE-705CVE-2026-55537
CWE-706CVE-2021-40539 , CVE-2014-125125 , CVE-2024-27292
CWE-732CVE-2018-14916 , CVE-2026-39353 , CVE-2026-73664 , CVE-2026-49340
CWE-749CVE-2026-61793
CWE-770CVE-2026-26477
CWE-776CVE-2026-54077
CWE-787CVE-2022-20705 , CVE-2022-20707
CWE-791CVE-2025-14731 , CVE-2026-103540 , CVE-2026-78140
CWE-798CVE-2026-11414 , CVE-2015-4667 , CVE-2017-7462 , CVE-2019-1619 , CVE-2020-4429 , CVE-2021-45841 , CVE-2022-28810
CWE-824CVE-2026-67281
CWE-829CVE-2018-17246 , CVE-2020-16152 , CVE-2026-0770 , CVE-2026-13751 , CVE-2026-45272 , CVE-2024-8252 , CVE-2026-45711 , CVE-2026-47398 , CVE-2022-25485 , CVE-2022-25486 , CVE-2018-7422 , CVE-2021-41569 , CVE-2022-34121
CWE-835CVE-2024-20353
CWE-862CVE-2026-33712 , CVE-2026-45632 , CVE-2026-72868 , CVE-2026-72876 , CVE-2026-79920 , CVE-2021-21307 , CVE-2022-36642 , CVE-2026-49819 , CVE-2026-57131 , CVE-2026-41315 , CVE-2026-47754 , CVE-2026-3141 , CVE-2026-50006 , CVE-2018-10093 , CVE-2025-10706 , CVE-2026-14357 , CVE-2026-47394 , CVE-2025-12061 , CVE-2026-86438 , CVE-2026-76086 , CVE-2026-63464 , CVE-2023-6038 , CVE-2026-10737 , CVE-2026-54629 , CVE-2026-96896 , CVE-2025-11372 , CVE-2025-11705 , CVE-2026-55414 , CVE-2025-67737 , CVE-2025-10583
CWE-863CVE-2019-7192 , CVE-2026-43945 , CVE-2026-105797 , CVE-2026-35029 , CVE-2026-76836 , CVE-2026-86437 , CVE-2013-4862 , CVE-2026-46717 , CVE-2021-24947 , CVE-2021-36749 , CVE-2026-114623 , CVE-2026-41689
CWE-913CVE-2020-15568 , CVE-2026-48105
CWE-915CVE-2026-72710 , CVE-2026-78416 , CVE-2026-76086
CWE-917CVE-2020-17530
CWE-918CVE-2026-33712 , CVE-2026-40114 , CVE-2026-49869 , CVE-2026-54745 , CVE-2025-64709 , CVE-2026-31818 , CVE-2026-40089 , CVE-2026-42864 , CVE-2026-43986 , CVE-2026-55166 , CVE-2013-4864 , CVE-2021-32682 , CVE-2025-56563 , CVE-2026-15732 , CVE-2026-30118 , CVE-2019-8982 , CVE-2026-12564 , CVE-2026-12605 , CVE-2026-13751 , CVE-2026-53513 , CVE-2026-61559 , CVE-2026-62668 , CVE-2026-86123 , CVE-2026-64849 , CVE-2026-66794 , CVE-2026-67426 , CVE-2026-75885 , CVE-2026-109238 , CVE-2026-110628 , CVE-2026-111663 , CVE-2026-114493 , CVE-2026-56266 , CVE-2026-59707 , CVE-2026-63306 , CVE-2026-65057 , CVE-2026-65317 , CVE-2026-65318 , CVE-2026-85614 , CVE-2026-86119 , CVE-2026-92576 , CVE-2026-107781 , CVE-2026-17552 , CVE-2026-44313 , CVE-2026-51152 , CVE-2026-62308 , CVE-2026-75332 , CVE-2026-13603 , CVE-2026-86259 , CVE-2026-115729 , CVE-2026-82866 , CVE-2023-39108 , CVE-2023-39109 , CVE-2023-39110 , CVE-2026-100391 , CVE-2026-104464 , CVE-2026-57143 , CVE-2026-62857 , CVE-2026-92566 , CVE-2020-37278 , CVE-2023-54402 , CVE-2025-34350 , CVE-2026-33226 , CVE-2026-34367 , CVE-2026-47659 , CVE-2026-55245 , CVE-2026-82270 , CVE-2026-82638 , CVE-2026-85608 , CVE-2026-85612 , CVE-2026-85666 , CVE-2026-85673 , CVE-2026-85691 , CVE-2026-91935 , CVE-2026-92719 , CVE-2026-92815 , CVE-2026-34160 , CVE-2026-34577 , CVE-2026-35032 , CVE-2026-45298 , CVE-2026-56677 , CVE-2026-57573 , CVE-2026-7412 , CVE-2026-77581 , CVE-2026-81213 , CVE-2026-81889 , CVE-2026-10055 , CVE-2026-31943 , CVE-2026-42860 , CVE-2026-46372 , CVE-2026-51583 , CVE-2026-56663 , CVE-2026-56739 , CVE-2026-57126 , CVE-2026-57894 , CVE-2026-61640 , CVE-2026-67424 , CVE-2026-67428 , CVE-2026-68558 , CVE-2026-76086 , CVE-2026-110255 , CVE-2026-54507 , CVE-2026-57862 , CVE-2026-61429 , CVE-2026-61430 , CVE-2026-62234 , CVE-2026-72855 , CVE-2026-73629 , CVE-2026-75898 , CVE-2026-103757 , CVE-2026-104458 , CVE-2026-104463 , CVE-2026-105762 , CVE-2026-22219 , CVE-2026-22681 , CVE-2026-34428 , CVE-2026-34576 , CVE-2026-34966 , CVE-2026-41271 , CVE-2026-52769 , CVE-2026-59095 , CVE-2026-63313 , CVE-2026-65056 , CVE-2026-76225 , CVE-2026-79659 , CVE-2026-82243 , CVE-2026-84196 , CVE-2026-86771 , CVE-2026-90769 , CVE-2026-91943 , CVE-2026-116192 , CVE-2026-116826 , CVE-2026-116827 , CVE-2026-16268 , CVE-2026-43910 , CVE-2026-54691 , CVE-2026-61638 , CVE-2026-77348 , CVE-2026-82262 , CVE-2025-61784 , CVE-2025-69222 , CVE-2026-34365 , CVE-2026-34366 , CVE-2026-49213 , CVE-2026-50143 , CVE-2026-51773 , CVE-2026-77294 , CVE-2026-79425 , CVE-2025-68696 , CVE-2026-40280 , CVE-2026-55864 , CVE-2026-104977 , CVE-2026-33655 , CVE-2026-34163 , CVE-2026-34936 , CVE-2026-39361 , CVE-2026-39843 , CVE-2026-39965 , CVE-2026-40348 , CVE-2026-42345 , CVE-2026-43884 , CVE-2026-44285 , CVE-2026-45806 , CVE-2026-46717 , CVE-2026-47170 , CVE-2026-53549 , CVE-2026-54339 , CVE-2026-54607 , CVE-2026-56285 , CVE-2026-58314 , CVE-2026-61835 , CVE-2026-62242 , CVE-2026-63088 , CVE-2026-63464 , CVE-2026-63764 , CVE-2026-67346 , CVE-2026-69192 , CVE-2026-71303 , CVE-2026-71365 , CVE-2026-75888 , CVE-2026-76820 , CVE-2026-76898 , CVE-2026-77775 , CVE-2026-79764 , CVE-2026-100858 , CVE-2026-104973 , CVE-2026-105628 , CVE-2026-45082 , CVE-2026-55160 , CVE-2026-55177 , CVE-2026-55232 , CVE-2026-79749 , CVE-2019-9621 , CVE-2021-46107 , CVE-2025-27817 , CVE-2025-59527 , CVE-2025-61884 , CVE-2026-113728 , CVE-2026-24138 , CVE-2026-35036 , CVE-2026-53754 , CVE-2026-59765 , CVE-2026-81265 , CVE-2026-95265 , CVE-2026-45310 , CVE-2026-49857 , CVE-2026-56676 , CVE-2026-70666 , CVE-2025-45869 , CVE-2026-33715 , CVE-2026-45019 , CVE-2026-54544 , CVE-2026-57114 , CVE-2026-6229 , CVE-2025-65958 , CVE-2026-100849 , CVE-2026-100859 , CVE-2026-107362 , CVE-2026-111313 , CVE-2026-22664 , CVE-2026-39370 , CVE-2026-40160 , CVE-2026-41272 , CVE-2026-42339 , CVE-2026-47735 , CVE-2026-54077 , CVE-2026-54166 , CVE-2026-55096 , CVE-2026-55537 , CVE-2026-55787 , CVE-2026-57303 , CVE-2026-58485 , CVE-2026-74247 , CVE-2026-75844 , CVE-2026-79747 , CVE-2026-79788 , CVE-2026-80350 , CVE-2026-82241 , CVE-2026-82246 , CVE-2026-85163 , CVE-2026-85164 , CVE-2026-87821 , CVE-2026-87999 , CVE-2026-91750 , CVE-2026-92775 , CVE-2026-92804 , CVE-2026-10107 , CVE-2026-101898 , CVE-2026-116066 , CVE-2025-10695 , CVE-2025-11864 , CVE-2025-34282 , CVE-2026-100601 , CVE-2026-100696 , CVE-2026-103530 , CVE-2026-104440 , CVE-2026-104459 , CVE-2026-108554 , CVE-2026-110222 , CVE-2026-111320 , CVE-2026-111662 , CVE-2026-111720 , CVE-2026-112267 , CVE-2026-116069 , CVE-2026-34964 , CVE-2026-39383 , CVE-2026-44652 , CVE-2026-54885 , CVE-2026-59101 , CVE-2026-60091 , CVE-2026-61793 , CVE-2026-63086 , CVE-2026-63096 , CVE-2026-73058 , CVE-2026-81678 , CVE-2026-84199 , CVE-2026-85609 , CVE-2026-85662 , CVE-2026-86539 , CVE-2026-86806 , CVE-2026-8712 , CVE-2026-91081 , CVE-2026-91966 , CVE-2026-92813 , CVE-2025-12136 , CVE-2026-102354 , CVE-2026-55421 , CVE-2026-63334 , CVE-2026-76900 , CVE-2026-53708 , CVE-2024-27564 , CVE-2024-34319 , CVE-2025-50234 , CVE-2025-67743 , CVE-2025-68477 , CVE-2026-115886 , CVE-2026-12767 , CVE-2026-15974 , CVE-2026-17557 , CVE-2026-31941 , CVE-2026-34740 , CVE-2026-39368 , CVE-2026-41060 , CVE-2026-42181 , CVE-2026-46556 , CVE-2026-51772 , CVE-2026-52371 , CVE-2026-54054 , CVE-2026-54688 , CVE-2026-58418 , CVE-2026-58442 , CVE-2026-62282 , CVE-2026-88403 , CVE-2025-11361 , CVE-2026-45573 , CVE-2026-47268 , CVE-2026-56678 , CVE-2026-79717 , CVE-2026-79760 , CVE-2026-82081 , CVE-2026-100681 , CVE-2026-102983 , CVE-2026-110652 , CVE-2026-111171 , CVE-2026-115717 , CVE-2026-115810 , CVE-2026-42180 , CVE-2026-42335 , CVE-2026-44284 , CVE-2026-49120 , CVE-2026-54020 , CVE-2026-56769 , CVE-2026-56771 , CVE-2026-57947 , CVE-2026-63107 , CVE-2026-63643 , CVE-2026-63731 , CVE-2026-63769 , CVE-2026-65593 , CVE-2026-67620 , CVE-2026-70667 , CVE-2026-72860 , CVE-2026-73530 , CVE-2026-82044 , CVE-2026-85738 , CVE-2026-86590 , CVE-2026-91079 , CVE-2026-70620 , CVE-2026-105689 , CVE-2026-41689 , CVE-2026-55473 , CVE-2026-56275 , CVE-2026-86735 , CVE-2024-6095 , CVE-2025-11427 , CVE-2026-10526 , CVE-2026-111761 , CVE-2026-34360 , CVE-2026-34981 , CVE-2026-45709 , CVE-2026-47160 , CVE-2026-48053 , CVE-2026-55187 , CVE-2026-55591 , CVE-2026-73243 , CVE-2026-44520 , CVE-2025-10874 , CVE-2025-11046 , CVE-2025-13814 , CVE-2026-100893 , CVE-2026-100901 , CVE-2026-100909 , CVE-2026-101005 , CVE-2026-10280 , CVE-2026-10287 , CVE-2026-105148 , CVE-2026-105290 , CVE-2026-116000 , CVE-2026-116256 , CVE-2026-16016 , CVE-2026-16125 , CVE-2026-16127 , CVE-2026-16128 , CVE-2026-16910 , CVE-2026-18973 , CVE-2026-19000 , CVE-2026-19374 , CVE-2026-19753 , CVE-2026-41130 , CVE-2026-5346 , CVE-2026-5832 , CVE-2026-6604 , CVE-2026-6606 , CVE-2026-6625 , CVE-2026-7065 , CVE-2026-7094 , CVE-2026-7146 , CVE-2026-7147 , CVE-2026-7158 , CVE-2026-7178 , CVE-2026-7221 , CVE-2026-76795 , CVE-2026-81421 , CVE-2026-82630 , CVE-2026-82801 , CVE-2026-82802 , CVE-2026-85380 , CVE-2026-86237 , CVE-2026-86273 , CVE-2026-8725 , CVE-2026-92380 , CVE-2026-9372 , CVE-2026-94038 , CVE-2026-94039 , CVE-2026-94040 , CVE-2026-102923 , CVE-2026-114620 , CVE-2026-34590 , CVE-2026-48483 , CVE-2026-48762 , CVE-2026-6394 , CVE-2026-7798 , CVE-2026-100697 , CVE-2026-100861 , CVE-2026-105122 , CVE-2026-107273 , CVE-2026-108719 , CVE-2026-110254 , CVE-2026-111321 , CVE-2026-114076 , CVE-2026-114080 , CVE-2026-114362 , CVE-2026-114634 , CVE-2026-115411 , CVE-2026-115720 , CVE-2026-14860 , CVE-2026-16536 , CVE-2026-19956 , CVE-2026-22662 , CVE-2026-25946 , CVE-2026-33766 , CVE-2026-40100 , CVE-2026-44202 , CVE-2026-44583 , CVE-2026-49138 , CVE-2026-49345 , CVE-2026-54300 , CVE-2026-54508 , CVE-2026-5538 , CVE-2026-55414 , CVE-2026-56779 , CVE-2026-59231 , CVE-2026-63730 , CVE-2026-64626 , CVE-2026-64870 , CVE-2026-72846 , CVE-2026-73082 , CVE-2026-73845 , CVE-2026-74858 , CVE-2026-76239 , CVE-2026-77067 , CVE-2026-78231 , CVE-2026-82040 , CVE-2026-84175 , CVE-2026-84207 , CVE-2026-85650 , CVE-2026-88892 , CVE-2026-91199 , CVE-2026-91967 , CVE-2026-92184 , CVE-2026-92569 , CVE-2026-93597 , CVE-2026-96652 , CVE-2026-96655 , CVE-2026-100373 , CVE-2026-105263 , CVE-2026-110225 , CVE-2026-17597 , CVE-2026-42213 , CVE-2026-42336 , CVE-2026-79671 , CVE-2025-11536 , CVE-2026-28385 , CVE-2026-35516 , CVE-2026-54546 , CVE-2026-78850 , CVE-2026-79723 , CVE-2026-76083 , CVE-2026-100850 , CVE-2025-69206 , CVE-2026-101029 , CVE-2026-113671 , CVE-2026-34170 , CVE-2026-43936 , CVE-2026-49856 , CVE-2026-55875 , CVE-2026-77352 , CVE-2026-77522 , CVE-2026-10052 , CVE-2026-48013 , CVE-2026-61681 , CVE-2026-48051 , CVE-2026-77351 , CVE-2026-107449 , CVE-2026-23603 , CVE-2026-48707 , CVE-2025-62505 , CVE-2026-49262 , CVE-2026-68927 , CVE-2026-112076 , CVE-2026-52840 , CVE-2025-62719 , CVE-2026-101061 , CVE-2026-110223 , CVE-2026-115752 , CVE-2026-44286 , CVE-2026-73087 , CVE-2026-41321 , CVE-2026-77648 , CVE-2025-10787 , CVE-2025-13174 , CVE-2025-13789 , CVE-2025-13809 , CVE-2025-14518 , CVE-2025-15098 , CVE-2026-102244 , CVE-2026-10239 , CVE-2026-10240 , CVE-2026-10241 , CVE-2026-10274 , CVE-2026-10276 , CVE-2026-105438 , CVE-2026-10662 , CVE-2026-10690 , CVE-2026-108523 , CVE-2026-108542 , CVE-2026-108787 , CVE-2026-109402 , CVE-2026-112254 , CVE-2026-114374 , CVE-2026-116224 , CVE-2026-12210 , CVE-2026-12774 , CVE-2026-12798 , CVE-2026-14748 , CVE-2026-15500 , CVE-2026-15501 , CVE-2026-15619 , CVE-2026-15620 , CVE-2026-15628 , CVE-2026-16074 , CVE-2026-16194 , CVE-2026-16222 , CVE-2026-16223 , CVE-2026-17458 , CVE-2026-18774 , CVE-2026-19040 , CVE-2026-19246 , CVE-2026-19340 , CVE-2026-19375 , CVE-2026-19752 , CVE-2026-19927 , CVE-2026-19984 , CVE-2026-5470 , CVE-2026-5607 , CVE-2026-6111 , CVE-2026-6119 , CVE-2026-6616 , CVE-2026-6649 , CVE-2026-6979 , CVE-2026-7150 , CVE-2026-74842 , CVE-2026-7729 , CVE-2026-7890 , CVE-2026-8081 , CVE-2026-82905 , CVE-2026-83744 , CVE-2026-90814 , CVE-2026-92527 , CVE-2026-94028 , CVE-2025-14116 , CVE-2025-15414 , CVE-2026-100900 , CVE-2026-108521 , CVE-2026-18856 , CVE-2026-86240 , CVE-2026-9464 , CVE-2026-19369 , CVE-2026-19373 , CVE-2026-5323 , CVE-2026-40072
CWE-942CVE-2026-34449 , CVE-2026-53649
CWE-1188CVE-2026-47668 , CVE-2026-31818 , CVE-2026-104078 , CVE-2026-77348 , CVE-2026-56285 , CVE-2026-61793
CWE-1220CVE-2026-39363
CWE-1287CVE-2025-12977
CWE-1321CVE-2026-41690
CWE-1336CVE-2024-4040 , CVE-2026-44181 , CVE-2026-55559 , CVE-2025-66438 , CVE-2026-104851 , CVE-2026-105985 , CVE-2026-28797 , CVE-2026-22244 , CVE-2026-77939 , CVE-2025-14731 , CVE-2026-103540 , CVE-2026-78140
CWE-1389CVE-2026-47160
CWE-1392CVE-2026-41939