On this page

Atomicorp WAF Rule 344360

Rule Summary

Description

This rule detects behavior identified by its current alert as “Unauthorized Operating System File Access Attempt” in the request cookies, request argument names, request arguments, JSON request data, SOAP request data, XML request data. It evaluates during the request body phase and denies matching traffic with HTTP status 403.

This is a selected list of documented research observations, not an exhaustive coverage matrix. Absence of a CVE does not imply absence of protection.

CVEVulnerabilityProductCVSSSeverity
CVE-2009-0545ZeroShell <= 1.0beta11 Remote Code Executionzeroshell10.0 (v2.0)High
CVE-2010-5286Joomla! Component Jstore - 'Controller' Local File Inclusioncom jstore10.0 (v2.0)High
CVE-2022-24816GeoServer <1.2.2 - Remote Code Executionjai-ext10.0 (v3.1)Critical
CVE-2025-34037Linksys Routers E/WAG/WAP/WES/WET/WRT-SeriesE420010.0 (v4.0)Critical
CVE-2025-55169WeGIA - Directory Traversalwegia10.0 (v4.0)Critical
CVE-2026-19188Haiwell IoT Cloud HMI Gateway OS Command InjectionHaiwell IoT Cloud HMI Gateway10.0 (v4.0)Critical
CVE-2026-33712TypeBot: Unauthenticated SSRF via isolated-vm fetch in preview chat endpoint bypasses SSRF controlstypebot.io10.0 (v3.1)Critical
CVE-2026-34234CtrlPanel: Unauthenticated RCE using installer scriptpanel10.0 (v3.1)Critical
CVE-2026-44181Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection results in Remote Code Executionenterprise gateway10.0 (v4.0)Critical
CVE-2026-47668DbGate - Remote Code Execution via Anonymous JWTdbgate10.0 (v3.1)Critical
CVE-2026-49869Kestra: Unauthenticated Remote Code Execution via Authentication Bypass in AuthenticationFilterkestra10.0 (v3.1)Critical
CVE-2026-54745Kubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /_proxy/ route, bypasses ENABpipelines10.0 (v3.1)Critical
CVE-2026-58192Appium: Unauthenticated arbitrary file/directory deletion in @appium/storage-pluginappium/storage-plugin10.0 (v3.1)Critical
CVE-2026-81735UI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command ExecutiUI-TARS-desktop10.0 (v4.0)Critical
CVE-2026-8984Unauthenticated RCEmaxicharger single charger firmware10.0 (v4.0)Critical
CVE-2026-8985Unauthenticated Command Injectionmaxicharger single charger firmware10.0 (v4.0)Critical
CVE-2026-31818Budibase: Server-Side Request Forgery via REST Connector with Empty Default Blacklistbudibase9.9 (v3.1)Critical
CVE-2026-42454Termix: OS Command Injection in Docker Container Management EndpointsTermix9.9 (v3.1)Critical
CVE-2026-43986Tautulli vulnerable to unauthenticated SSRF in /image/<hash> via attacker-seeded image hash replayTautulli9.9 (v3.1)Critical
CVE-2026-44450Lumiverse: RCE via MCP stdio argument injectionLumiverse9.9 (v3.1)Critical
CVE-2026-45629Dokploy: Authenticated Remote Code Execution via Command Injection in /listen-deployment WebSocket Endpointdokploy9.9 (v3.1)Critical
CVE-2026-45632Dokploy: Schedule Authorization Bypass Enables Host/Server Command Executiondokploy9.9 (v3.1)Critical
CVE-2026-48030Pheditor 2.0.1-2.0.3 - OS Command Injectionpheditor9.9 (v3.1)Critical
CVE-2026-51027FileThingie v.2.5.7 Information Disclosure Vulnerability-9.9 (v3.1)Critical
CVE-2026-55166Lemur: any SSO-authenticated user achieves AWS IAM compromise and permanent PKI key access via ACME acme_url SSRF and crlemur9.9 (v3.1)Critical
CVE-2026-55565Yamcs: Authenticated remote code execution via unescaped StreamSQL LIKE pattern compiled by Janino (LikeExpression)yamcs9.9 (v3.1)Critical
CVE-2026-55634Pimcore: Remote Code Execution via DataObject Class-Definition Field Namepimcore9.9 (v3.1)Critical
CVE-2026-63298LXD arbitrary lxc.conf directive injection via NVIDIA instance configurationlxd9.9 (v3.1)Critical
CVE-2026-72738Dokploy: Authenticated RCE via Command Injection in backup.listBackupFiles search Parameterdokploy9.9 (v3.1)Critical
CVE-2026-72740Dokploy: OS Command Injection via SSH-form customGitUrl domain in ssh-keyscandokploy9.9 (v3.1)Critical
CVE-2026-72865Dokploy: OS Command Injection via compose composePathdokploy9.9 (v3.1)Critical
CVE-2026-72868Dokploy: Member-role RCE as host root via destination.testConnection rclone shell injectiondokploy9.9 (v3.1)Critical
CVE-2026-72869Dokploy: Authenticated OS command injection in backup.restoreBackupWithLogs (databaseName) leading to host RCEdokploy9.9 (v3.1)Critical
CVE-2026-72872Dokploy: OS Command Injection via Bitbucket owner/repository in git clonedokploy9.9 (v3.1)Critical
CVE-2026-72876Dokploy: Cross-organization IDOR leads to root RCE on another tenant's server via swarm.*dokploy9.9 (v3.1)Critical
CVE-2026-72882Dokploy: Authenticated blind command injection via file mounts leads to direct remote host RCE on managed serversdokploy9.9 (v3.1)Critical
CVE-2026-72902Dokploy: Authenticated RCE via Command Injection in registry.testRegistry / registry.testRegistryByIddokploy9.9 (v3.1)Critical
CVE-2026-73294Semaphore U: OS Command Injectionsemaphore9.9 (v3.1)Critical
CVE-2026-8481Remote Code Execution via Code Validation Endpointlangflow9.9 (v3.1)Critical
CVE-2009-1151PhpMyAdmin Scripts - Remote Code Executionphpmyadmin9.8 (v3.1)Critical
CVE-2010-2861Adobe ColdFusion - Directory Traversalcoldfusion9.8 (v3.1)Critical
CVE-2013-4864MiCasaVerde VeraLite 1.5.408 - Multiple Vulnerabilitiesveralite firmware9.8 (v3.1)Critical
CVE-2014-1203Eyou E-Mail <3.6 - Remote Code Executioneyou9.8 (v3.1)Critical
CVE-2014-6271ShellShock - Remote Code Executionbash9.8 (v3.1)Critical
CVE-2014-9148Fiyo CMS 2.0.1.8 - Multiple Vulnerabilitiesfiyo cms9.8 (v3.0)Critical
CVE-2015-1427ElasticSearch - Remote Code Executionelasticsearch9.8 (v3.1)Critical
CVE-2015-4664Xceedium Xsuite - Multiple Vulnerabilitiesprivileged access manager9.8 (v3.0)Critical
CVE-2015-4667Xceedium Xsuite - Multiple Vulnerabilitiesxsuite9.8 (v3.0)Critical
CVE-2017-12611Apache Struts2 S2-053 - Remote Code Executionstruts9.8 (v3.0)Critical
CVE-2017-7462Intellinet NFC-30IR Camera - Multiple Vulnerabilitiesnfc-30ir firmware9.8 (v3.0)Critical
CVE-2018-12031Eaton Intelligent Power Manager 1.6 - Directory Traversalintelligent power manager9.8 (v3.0)Critical
CVE-2018-1273Spring Data Commons - Remote Code Executionspring data commons9.8 (v3.1)Critical
CVE-2018-16283WordPress Plugin Wechat Broadcast 1.2.0 - Local File Inclusionwechat brodcast9.8 (v3.0)Critical
CVE-2018-16763FUEL CMS 1.4.1 - Remote Code Executionfuel cms9.8 (v3.1)Critical
CVE-2018-17246Kibana - Local File Inclusionkibana9.8 (v3.0)Critical
CVE-2018-18925Gogs (Go Git Service) 0.11.66 - Remote Code Executiongogs9.8 (v3.0)Critical
CVE-2019-12725Zeroshell 3.9.0 - Remote Command Executionzeroshell9.8 (v3.0)Critical
CVE-2019-15107Webmin <= 1.920 - Unauthenticated Remote Command Executionwebmin9.8 (v3.1)Critical
CVE-2019-16662rConfig 3.9.2 - Remote Code Executionrconfig9.8 (v3.1)Critical
CVE-2019-16920D-Link Routers - Remote Code Executiondir-655 firmware9.8 (v3.1)Critical
CVE-2019-17270Yachtcontrol Webapplication 1.0 - Remote Command Injectionyachtcontrol9.8 (v3.1)Critical
CVE-2019-7238Sonatype Nexus Repository Manager <3.15.0 - Remote Code Executionnexus9.8 (v3.1)Critical
CVE-2019-7256eMerge E3 1.00-06 - Remote Code Executionlinear emerge essential firmware9.8 (v3.1)Critical
CVE-2019-9618WordPress GraceMedia Media Player 1.0 - Local File Inclusiongracemedia media player9.8 (v3.0)Critical
CVE-2020-11455LimeSurvey 4.1.11 - Local File Inclusionlimesurvey9.8 (v3.1)Critical
CVE-2020-15568TerraMaster TOS <.1.29 - Remote Code Executiontos9.8 (v3.1)Critical
CVE-2020-15920Mida eFramework <=2.9.0 - Remote Command Executioneframework9.8 (v3.1)Critical
CVE-2020-17496vBulletin 5.5.4 - 5.6.2- Remote Command Executionvbulletin9.8 (v3.1)Critical
CVE-2020-17530Apache Struts 2.0.0-2.5.25 - Remote Code Executionstruts9.8 (v3.1)Critical
CVE-2020-21224Inspur ClusterEngine 4.0 - Remote Code Executionclusterengine9.8 (v3.1)Critical
CVE-2020-29227Car Rental Management System 1.0 - Local File Inclusioncar rental management system9.8 (v3.1)Critical
CVE-2020-29390Zeroshell 3.9.3 - Command Injectionzeroshell9.8 (v3.1)Critical
CVE-2020-5902F5 BIG-IP TMUI - Remote Code Executionbig-ip access policy manager9.8 (v3.1)Critical
CVE-2020-7209LinuxKI Toolset <= 6.01 - Remote Command Executionlinuxki9.8 (v3.1)Critical
CVE-2020-7980Satellian Intellian Aptus Web <= 1.24 - Remote Command Executionaptus web9.8 (v3.1)Critical
CVE-2020-9054Zyxel NAS Firmware 5.21- Remote Code Executionnas326 firmware9.8 (v3.1)Critical
CVE-2021-28799QNAP HBS 3 - Broken Access Controlhybrid backup sync9.8 (v3.1)Critical
CVE-2022-0679WordPress Narnoo Distributor <=2.5.1 - Local File Inclusionnarnoo distributor9.8 (v3.1)Critical
CVE-2022-1390WordPress Admin Word Count Column 2.2 - Local File Inclusionadmin word count column9.8 (v3.1)Critical
CVE-2022-1391WordPress Cab fare calculator < 1.0.4 - Local File Inclusioncab fare calculator9.8 (v3.1)Critical
CVE-2022-22954VMware Workspace ONE Access - Server-Side Template Injectionidentity manager9.8 (v3.1)Critical
CVE-2022-24086Adobe Commerce (Magento) - Remote Code Executioncommerce9.8 (v3.1)Critical
CVE-2022-29303SolarView Compact 6.0 - OS Command Injectionsv-cpt-mc310 firmware9.8 (v3.1)Critical
CVE-2022-31137Roxy-WI < 6.1.1.0 - Remote Code Executionroxy-wi9.8 (v3.1)Critical
CVE-2022-32409Portal do Software Publico Brasileiro i3geo 7.0.5 - Local File Inclusioni3geo9.8 (v3.1)Critical
CVE-2022-35914GLPI <=10.0.2 - Remote Command Executionglpi9.8 (v3.1)Critical
CVE-2022-36553Hytec Inter HWL-2511-SS - Remote Command Executionhwl-2511-ss firmware9.8 (v3.1)Critical
CVE-2022-36642Omnia MPX 1.5.0+r1 - Local File Inclusionomnia mpx node firmware9.8 (v3.1)Critical
CVE-2022-4060WordPress User Post Gallery <=2.19 - Remote Code Executionuser post gallery9.8 (v3.1)Critical
CVE-2022-40881SolarView 6.00 - Remote Command Executionsolarview compact9.8 (v3.1)Critical
CVE-2022-41840Welcart eCommerce <=2.7.7 - Local File Inclusionwelcart e-commerce9.8 (v3.1)Critical
CVE-2022-47615LearnPress Plugin < 4.2.0 - Local File Inclusionlearnpress9.8 (v3.1)Critical
CVE-2023-34960Chamilo Command Injectionchamilo9.8 (v3.1)Critical
CVE-2023-3643CAREL Boss Mini <= 1.4.0 - Local File Inclusionboss-mini9.8 (v3.1)Critical
CVE-2023-36845Juniper J-Web - Remote Code Executionjunos9.8 (v3.1)Critical
CVE-2023-45852Viessmann Vitogate 300 - Remote Code Executionvitogate 300 firmware9.8 (v3.1)Critical
CVE-2023-5991Hotel Booking Lite < 4.8.5 - Arbitrary File Download & Deletionhotel booking lite9.8 (v3.1)Critical
CVE-2023-6623Essential Blocks < 4.4.3 - Local File Inclusionessential blocks9.8 (v3.1)Critical
CVE-2024-12209WP Umbrella Update Backup Restore & Monitoring <= 2.17.0 - Local File Inclusionwp-umbrella9.8 (v3.1)Critical
CVE-2024-31823ecommerce-codeigniter-bootstrap Arbitrary Code Execution Vulnerabilityecommerce-codeigniter-bootstrap9.8 (v3.1)Critical
CVE-2024-50603Aviatrix Controller - Remote Code Executioncontroller9.8 (v3.1)Critical
CVE-2024-53584OpenPanel 0.3.4 - OS Command Injectionopenpanel9.8 (v3.1)Critical
CVE-2024-5827Vanna - SQL injectionvanna-ai/vanna9.8 (v3.0)Critical
CVE-2024-6460WordPress Grow by Tradedoubler Plugin < 2.0.22 - Unauthenticated Local File Inclusiontradedoubler-affiliate-tracker9.8 (v3.1)Critical
CVE-2024-9047WordPress File Upload <= 4.24.11 - Arbitrary File Readwordpress file upload9.8 (v3.1)Critical
CVE-2025-2294Kubio AI Page Builder <= 2.5.1 - Local File InclusionKubio AI Page Builder9.8 (v3.1)Critical
CVE-2025-29306FoxCMS v.1.2.5 - Remote Code Executionfoxcms9.8 (v3.1)Critical
CVE-2025-3248Langflow AI - Unauthenticated Remote Code Executionlangflow9.8 (v3.1)Critical
CVE-2025-4524WordPress Madara - Local File InclusionMadara – Responsive and modern WordPress theme for manga sites9.8 (v3.1)Critical
CVE-2025-47445WordPress Eventin (Themewinter) ≤ 4.0.26 - Arbitrary File Downloadeventin9.8 (v3.1)Critical
CVE-2025-54123Hoverfly <= 1.11.3 - Remote Code Executionhoverfly9.8 (v3.1)Critical
CVE-2026-0770Langflow < 1.3.0 - Remote Code Execution via validate_code() exec()langflow9.8 (v3.0)Critical
CVE-2026-0926Prodigy Commerce <= 3.3.0 - Local File InclusionProdigy Commerce9.8 (v3.1)Critical
CVE-2026-12940Langflow is affected by remote code execution due to multiple unauthenticated and insufficiently authorized API endpointlangflow9.8 (v3.1)Critical
CVE-2026-15732WGDashboard Server-Side Request Forgery VulnerabilityWGDashboard9.8 (v3.1)Critical
CVE-2026-15733WGDashboard <= 4.3.2 - Authenticated OS Command Injection /etc/passwd ReadWGDashboard9.8 (v3.1)Critical
CVE-2026-18482neo-mjs Command Injection Vulnerabilityneo-mjs9.8 (v3.1)Critical
CVE-2026-30118scalar/astro v0.1.13 was discovered to Server-Side Request Forgery Vulnerability-9.8 (v3.1)Critical
CVE-2026-31040stata-mcp Code Injection Vulnerabilitystata-mcp9.8 (v3.1)Critical
CVE-2026-3296Everest Forms <= 3.4.3 - Unauthenticated PHP Object Injection via Form Entry MetadataEverest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder9.8 (v3.1)Critical
CVE-2026-35048Piwigo RCE via PHP Code Injection into Config File in InstallerPiwigo9.8 (v3.1)Critical
CVE-2026-35471Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshsgoshs9.8 (v3.0)Critical
CVE-2026-35847the CheckUils.php file Arbitrary Code Execution Vulnerabilitythe CheckUils.php file9.8 (v3.1)Critical
CVE-2026-37281the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 Command Injection Vulnerabilitythe /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.09.8 (v3.1)Critical
CVE-2026-38428kestra SQL Injection Vulnerabilitykestra9.8 (v3.1)Critical
CVE-2026-38431erpnext Code Injection Vulnerabilityerpnext9.8 (v3.1)Critical
CVE-2026-39394CI4MS has an .env CRLF Injection via Unvalidated host Parameter in Install Controllerci4ms9.8 (v3.1)Critical
CVE-2026-45018Chainlit: Command injection via MCP stdio transport allows unauthenticated remote code executionchainlit9.8 (v3.1)Critical
CVE-2026-46562Yamcs: Remote Code Execution via Mission Database algorithm overrideyamcs9.8 (v3.1)Critical
CVE-2026-47391PraisonAI's unauthenticated A2A official example can reach real LLM-driven eval() tool executionPraisonAI9.8 (v3.1)Critical
CVE-2026-48687fastnetmon Command Injection Vulnerabilityfastnetmon9.8 (v3.1)Critical
CVE-2026-49819UpSnap - Unauthenticated Initial-Superuser Takeover Chains to Root RCE via wake_cmdUpSnap9.8 (v3.1)Critical
CVE-2026-53545Termix: Remote Code Execution via Tunnel Disconnect pkill Command InjectionTermix9.8 (v3.1)Critical
CVE-2026-55559Yamcs: Remote Code Execution via instance-template argument YAML injection (createInstance)yamcs9.8 (v3.1)Critical
CVE-2026-67919Halo 2.25.4 Arbitrary Code Execution Vulnerability-9.8 (v3.1)Critical
CVE-2026-67926JeecgBoot v.3.9.2 Arbitrary Code Execution Vulnerability-9.8 (v3.1)Critical
CVE-2026-72592dulldusk phpfm - Unauthenticated Remote Code Execution via Unrestricted PHP File Uploadphpfm9.8 (v3.1)Critical
CVE-2026-75337Yu AI Code Mother v4.3 is vulnerable to path traversal VulnerabilityYu AI Code Mother v4.3 is vulnerable to path traversal9.8 (v3.1)Critical
CVE-2026-75411JeecgBoot v3.9.2 Code Injection Vulnerability-9.8 (v3.1)Critical
CVE-2026-75414In AntFlow V2.0.0, ActivitiTest.java Code Injection Vulnerability-9.8 (v3.1)Critical
CVE-2026-79408MetaGPT 0.8.1 Command Injection VulnerabilityMetaGPT 0.8.19.8 (v3.1)Critical
CVE-2026-8037Progress ADC LoadMaster - Command Injectionconnection manager for objectscale9.8 (v3.1)Critical
CVE-2026-84372Predis: Redis command injection and denial of service via CRLF smuggling in pipelined commands on aggregate connectionspredis9.8 (v3.1)Critical
CVE-2019-8982Wavemaker Studio 6.6 - Local File Inclusion/Server-Side Request Forgerywavemarker studio9.6 (v3.0)Critical
CVE-2026-12564Automation-controller: automation-controller: kubernetes service account token exfiltration via hashicorp vault credentiRed Hat Ansible Automation Platform 29.6 (v3.1)Critical
CVE-2026-12605glassfish Server-Side Request Forgery Vulnerabilityglassfish9.6 (v3.1)Critical
CVE-2026-34449SiYuan: Cross-Origin RCE via Permissive CORS Policy and JavaScript Snippet Injectionsiyuan9.6 (v3.1)Critical
CVE-2026-35906An undocumented debug CGI endpoint in T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03 OS Command Injection Vulnerability-9.6 (v3.1)Critical
CVE-2026-53513Better Auth: Server-side request forgery via unvalidated OIDC endpoints on @better-auth/sso provider registrationbetter-auth/sso9.6 (v3.1)Critical
CVE-2026-53649Joro: Unauthenticated Cross-Origin Plugin Upload Leads to RCEjoro9.6 (v3.1)Critical
CVE-2026-72878Dokploy: OS Command Injection in backup/restore pipeline via unescaped user-controlled shell argumentsdokploy9.6 (v3.1)Critical
CVE-2026-70477Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerabilityflowise9.5 (v4.0)Critical
CVE-2026-88062OmniRoute ACP Custom-Agent Remote Code Execution (RCE)OmniRoute9.5 (v4.0)Critical
CVE-2026-8986Command Injection via Malicious OCPP Servermaxicharger single charger firmware9.5 (v4.0)Critical
CVE-2024-9264Grafana Post-Auth DuckDB - SQL Injection To File Readgrafana9.4 (v4.0)Critical
CVE-2025-62593Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attackray9.4 (v4.0)Critical
CVE-2026-11419Path Traversal in Altium Enterprise Server Vault UploadController Allows Arbitrary File Writeon-prem enterprise server9.4 (v4.0)Critical
CVE-2026-11423Path Traversal in Altium Enterprise Server Collaboration Service Allows Privilege EscalationAltium Enterprise Server9.4 (v4.0)Critical
CVE-2026-33324SQLBot prompt injection allows arbitrary SQL execution and remote code executionsqlbot9.4 (v4.0)Critical
CVE-2026-39932OpenEMR 8.2.0 Remote Code Execution via CategoryTree eval() Injectionopenemr9.4 (v4.0)Critical
CVE-2026-45272MyBooks: Remote Code Execution via SOCIAL_AUTH Key Name Injection in Python Config Filetalebook9.4 (v4.0)Critical
CVE-2026-47670DbGate - Remote Code Execution via Dynamic Import Bypassdbgate9.4 (v4.0)Critical
CVE-2026-62668Grav API Plugin: Webhook SSRF via Unrestricted cURL Protocolsgrav9.4 (v4.0)Critical
CVE-2026-637329router before 0.4.60 Remote Code Execution via default password9router9.4 (v4.0)Critical
CVE-2026-66398phpMyFAQ before 4.1.6 Remote Code Execution via Configuration APIphpMyFAQ9.4 (v4.0)Critical
CVE-2026-69256Flowise: Remote Code Execution Vulnerability in CSVAgentFlowise9.4 (v4.0)Critical
CVE-2026-72850Budibase before 3.40.0 Arbitrary File Write via Path Traversalserver9.4 (v4.0)Critical
CVE-2026-72879Dokploy: Command Injection via Registry Credentials in Swarm Uploaddokploy9.4 (v4.0)Critical
CVE-2026-73041SiYuan before v3.7.4 Remote Code Execution via PDF Annotationssiyuan9.4 (v4.0)Critical
CVE-2026-73042SiYuan before v3.7.4 Remote Code Execution via Menu Metadatasiyuan9.4 (v4.0)Critical
CVE-2026-73483Flowise before 3.1.3 Sandbox Escape via Puppeteerflowise9.4 (v4.0)Critical
CVE-2026-77086SiYuan before v3.7.4 Path Traversal via packageNamesiyuan9.4 (v4.0)Critical
CVE-2026-82244Budibase before 3.41.3 Remote Code Execution via Plugin eval()server9.4 (v4.0)Critical
CVE-2026-86123SQL Chat Unauthenticated Database-Connection Proxy in the /api/connection Endpointssqlchat9.4 (v4.0)Critical
CVE-2013-1965Apache Struts2 S2-012 RCEstruts9.3 (v2.0)High
CVE-2018-25114osCommerce 2.3.4.1 - Remote Code ExecutionOnline Merchant9.3 (v4.0)Critical
CVE-2018-25357Dolibarr ERP CRM 7.0.3 Remote Code Execution via install/step1.phpdolibarr erp/crm9.3 (v4.0)Critical
CVE-2019-25687Pegasus CMS 1.0 Remote Code Execution via extra_fields.phppegasus cms9.3 (v4.0)Critical
CVE-2019-25727WordPress Plugin ad manager wd 1.0.11 Arbitrary File DownloadAd Manager WD9.3 (v4.0)Critical
CVE-2024-27954WordPress Automatic Plugin <3.92.1 - Arbitrary File Download and SSRFAutomatic9.3 (v3.1)Critical
CVE-2024-58348WordPress Background Image Cropper 1.2 Remote Code ExecutionBackground Image Cropper9.3 (v4.0)Critical
CVE-2025-31114Fooocus webui vulnerable to Remote Code ExecutionFooocus9.3 (v4.0)Critical
CVE-2026-19586Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gatewayser7212pc firmware9.3 (v4.0)Critical
CVE-2026-23734XWiki Platform: Path traversal via resources parameter in ssx and jsx endpoints when using leading slashxwiki-commons9.3 (v4.0)Critical
CVE-2026-27174MajorDoMo - Unauthenticated RCEmajordomo9.3 (v4.0)Critical
CVE-2026-34361HAPI FHIR: Unauthenticated SSRF via /loadIG Chains with startsWith() Credential Leak for Authentication Token Thefthl7 fhir core9.3 (v3.1)Critical
CVE-2026-41939Care Everywhere Gateway 14.3.10 Hard-coded Credentials RCE via WildFlyCare Everywhere Gateway9.3 (v4.0)Critical
CVE-2026-44343WGDashboard < 4.3.2 - Unauthenticated File Readwgdashboard9.3 (v4.0)Critical
CVE-2026-44402Voltronic Power SNMP Web Pro 1.1 Unauthenticated RCE via upload.cgiSNMP Web Pro9.3 (v4.0)Critical
CVE-2026-45668Trilium Notes : Note Import to RCE via #docName Path Traversal (Safe Import Enabled)Trilium9.3 (v4.0)Critical
CVE-2026-47669DbGate: Zip Slip in archive/unzip allows arbitrary file write leading to RCEdbgate9.3 (v4.0)Critical
CVE-2026-47754unauthenticated path traversal in Metacat 2.xmetacat9.3 (v3.1)Critical
CVE-2026-53975OpenChamber 1.11.7 Unauthenticated RCE via /api/fs/execOpenChamber9.3 (v4.0)Critical
CVE-2026-53976OpenChamber <1.13.0 - Unauthenticated Arbitrary File ReadOpenChamber9.3 (v4.0)Critical
CVE-2026-60121Vitec Flamingo 4.12.2 Unauthenticated OS Command Injection via ping.phpflamingo9.3 (v4.0)Critical
CVE-2026-61498Vitec Flamingo 4.12.2 Unauthenticated OS Command Injection via gen_graphs.phpflamingo9.3 (v4.0)Critical
CVE-2026-61511vBulletin 6.x - Remote Code ExecutionvBulletin9.3 (v4.0)Critical
CVE-2026-63766GPT-SoVITS 20250606v2pro OS Command Injection via webui.pyGPT-SoVITS9.3 (v4.0)Critical
CVE-2026-64625AVideo before 29.0 OS Command Injection via execAsyncAVideo9.3 (v4.0)Critical
CVE-2026-64824Home Assistant Core < 2026.7.0 Symlink Path Traversal RCE via backup-restoreHome Assistant Core9.3 (v4.0)Critical
CVE-2026-64849MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirectmlflow9.3 (v3.1)Critical
CVE-2026-65008Grav before 2.0.7 Remote Code Execution via Blueprint dynamicDatagrav9.3 (v4.0)Critical
CVE-2026-65700h2oGPT 0.2.1 Path Traversal via OpenAI-compatible Files APIh2ogpt9.3 (v4.0)Critical
CVE-2026-65701SoftVC VITS Singing Voice Conversion Path Traversal via /wav2wav Flask Routeso-vits-svc9.3 (v4.0)Critical
CVE-2026-66794Cluster-proxy-addon: cluster-proxy-addon: unauthenticated ssrf to arbitrary managed-cluster services via public routemulticluster engine for Kubernetes 2.19.3 (v3.1)Critical
CVE-2026-67308Wazuh GitHub Actions Shell Injection via Fork Pull Requestwazuh9.3 (v4.0)Critical
CVE-2026-67426Flyto2 Core: Unauthenticated flyto-verification /run: callback_url SSRF and internal runner-secret exfiltrationflyto-core9.3 (v3.1)Critical
CVE-2026-69110OpenCode Studio < 2.4.4 Unauthenticated File Read via /api/tmp and /api/musicopencode-studio9.3 (v4.0)Critical
CVE-2026-70553MaxSite CMS Unauthenticated RCE via Install EndpointMaxSite CMS9.3 (v4.0)Critical
CVE-2026-71921DrayTek VigorSwitch Multiple Models Pre-Authentication OS Command Injection via setget.cgiVigorSwitch G2540xs9.3 (v4.0)Critical
CVE-2026-71944D-Link DWR-M961 Command Injection via /boafrm/formLtefotaUpgradeQuectelDWR-M9619.3 (v4.0)Critical
CVE-2026-71945D-Link DWR-M961 Command Injection via /boafrm/formLtefotaUpgradeFibocomDWR-M9619.3 (v4.0)Critical
CVE-2026-71946D-Link DWR-M961 Command Injection via /boafrm/formPingDiagnosticRunDWR-M9619.3 (v4.0)Critical
CVE-2026-71947D-Link DWR-M961 Command Injection via /boafrm/formTracerouteDiagnosticRunDWR-M9619.3 (v4.0)Critical
CVE-2026-71948D-Link DWR-M961 Command Injection via /boafrm/formDebugDiagnosticRunDWR-M9619.3 (v4.0)Critical
CVE-2026-71949D-Link DWR-M961 Command Injection via /boafrm/formUSSDSetupDWR-M9619.3 (v4.0)Critical
CVE-2026-71950D-Link DWR-M961 Command Injection via /boafrm/formSmsManageDWR-M9619.3 (v4.0)Critical
CVE-2026-71951D-Link DWR-M961 Command Injection via /boafrm/formIMEISetupDWR-M9619.3 (v4.0)Critical
CVE-2026-71952D-Link DWR-M961 Command Injection via /boafrm/formPinManageSetupDWR-M9619.3 (v4.0)Critical
CVE-2026-71953D-Link DWR-M961 Command Injection via /boafrm/formNtpDWR-M9619.3 (v4.0)Critical
CVE-2026-71954D-Link DWR-M961 Command Injection via /boafrm/formL2tpv3ConfigSetupDWR-M9619.3 (v4.0)Critical
CVE-2026-71955D-Link DWR-M961 Command Injection via /boafrm/formWscDWR-M9619.3 (v4.0)Critical
CVE-2026-71956D-Link DWR-M961 Command Injection via app.cgiDWR-M9619.3 (v4.0)Critical
CVE-2026-71984MSI Radix AXE6600 v781521 Command Injection via urlfilterRadix AXE66009.3 (v4.0)Critical
CVE-2026-71992MSI Radix AXE6600 v781521 Command Injection via macfilterRadix AXE66009.3 (v4.0)Critical
CVE-2026-72710SPIP < 4.4.18 Remote Code Execution via editer_objet.php Job Queue InjectionSPIP9.3 (v4.0)Critical
CVE-2026-74798SiYuan kernel Path Traversal via database_clean MCP toolsiyuan9.3 (v4.0)Critical
CVE-2026-76070Netis NC63 V3.0.0.3327 Stack Buffer Overflow via Login Password ParameterNC639.3 (v4.0)Critical
CVE-2026-76071Netis NC63 V3.0.0.3327 Stack Buffer Overflow via destHost ParameterNC639.3 (v4.0)Critical
CVE-2026-80104DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload FilenameDB-GPT9.3 (v4.0)Critical
CVE-2026-86189WWBN AVideo Unauthenticated Path Traversal via notify.ffmpeg.json.phpAVideo9.3 (v4.0)Critical
CVE-2023-7305SmartBI RMIServlet Unrestricted File Upload RCESmartBI9.2 (v4.0)Critical
CVE-2026-26217Crawl4AI < 0.8.0 - Local File Inclusioncrawl4ai9.2 (v4.0)Critical
CVE-2026-63304AVideo through 29.0 OS Command Injection via listFFmpegProcessesAVideo9.2 (v4.0)Critical
CVE-2026-63305AVideo through 29.0 OS Command Injection via ffmpeg.json.phpAVideo9.2 (v4.0)Critical
CVE-2026-65057Keep Unauthenticated Server-Side Request Forgery via POST /providers/healthcheckkeep9.2 (v4.0)Critical
CVE-2026-65317Verba (goldenverba) Server-Side Request Forgery via /api/connect and Same-Origin Middleware BypassVerba9.2 (v4.0)Critical
CVE-2026-65318Verba (goldenverba) Unauthenticated Server-Side Request Forgery via WebSocket Import Endpoint HTMLReaderVerba9.2 (v4.0)Critical
CVE-2026-65760Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0Easy Store extension for Joomla9.2 (v4.0)Critical
CVE-2026-80138ClipBucket V5 5.5.1 through 5.5.3-#153 OS Command Injection via Installer php_cli_filepath Parameterclipbucket-v59.2 (v4.0)Critical
CVE-2026-85614OpenPanel API before 2.3.0 Unauthenticated SSRF via site-checkeropenpanel9.2 (v4.0)Critical
CVE-2026-86119Webstudio through 0.296.0 SSRF via /cgi proxy routeswebstudio9.2 (v4.0)Critical
CVE-2018-14916Loytec LGATE-902 <6.4.2 - Local File Inclusionlgate-9029.1 (v3.0)Critical
CVE-2018-16716NCBI ToolBox - Directory Traversalncbi toolbox9.1 (v3.0)Critical
CVE-2018-19365Wowza Streaming Engine Manager 4.7.4.01 - Directory Traversalstreaming engine9.1 (v3.1)Critical
CVE-2021-28918Netmask NPM Package - Server-Side Request Forgerynetmask9.1 (v3.1)Critical
CVE-2022-26960elFinder <=2.1.60 - Local File Inclusionelfinder9.1 (v3.1)Critical
CVE-2024-3673Web Directory Free < 1.7.3 - Local File Inclusionweb directory free9.1 (v3.1)Critical
CVE-2024-40422Devika v1 - Path Traversaldevika9.1 (v3.1)Critical
CVE-2025-55526n8n workflow collection Path Traversal Vulnerabilityn8n workflow collection9.1 (v3.1)Critical
CVE-2026-13147WordPress Kirki < 6.0.12 - Server-Side Request Forgerykirki9.1 (v3.1)Critical
CVE-2026-17552Plack::App::Prerender versions before 0.3.0 for Perl can proxy to an arbitrary host via unvalidated REQUEST_URI concatenPlack::App::Prerender9.1 (v3.1)Critical
CVE-2026-34745Unauthenticated Path Traversal Arbitrary File Write in /api/uploadChunked/publicfireshare9.1 (v3.1)Critical
CVE-2026-44313LinkWarden: Server-Side Request Forgery (SSRF) in Link Creation via fetchTitleAndHeaders Functionlinkwarden9.1 (v3.1)Critical
CVE-2026-46621Yamcs: Authenticated Remote Code Execution (RCE) via Jython Algorithm Code Injectionyamcs9.1 (v3.1)Critical
CVE-2026-47731NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by uAIT-Core9.1 (v3.1)Critical
CVE-2026-48024Wazuh: merged-file header path traversal in cluster sync allows arbitrary file write under WAZUH_PATH in Wazuh managerwazuh9.1 (v3.1)Critical
CVE-2026-48162Wazuh: cluster peer can read arbitrary master files and forge offline REST API administrator tokens via DAPI tmp_file pawazuh9.1 (v3.1)Critical
CVE-2026-51152Server-Side Request Forgery-9.1 (v3.1)Critical
CVE-2026-52610reportico-web <= 8.1.0 Path Traversal Vulnerabilityreportico-web <= 8.1.09.1 (v3.1)Critical
CVE-2026-55511Yamcs: Authenticated RCE via StreamSQL aggregate-compiler column-name injection in Yamcs executeSqlyamcs9.1 (v3.1)Critical
CVE-2026-57499Liman: OS Command Injection in LogRotationController allows authenticated admin to execute arbitrary commands (RCE)core9.1 (v3.1)Critical
CVE-2026-58400GeoNetwork vulnerable to Remote Code Execution via unsafe Saxon XSLT processor configuration in formattercore-geonetwork9.1 (v3.1)Critical
CVE-2026-75332Zyplayer-Doc <=1.0.0 Server-Side Request Forgery Vulnerability-9.1 (v3.1)Critical
CVE-2026-8713Avada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletionfusion-builder9.1 (v3.1)Critical
CVE-2008-4668Joomla! Image Browser 0.1.5 rc2 - Local File Inclusioncom imagebrowser9.0 (v2.0)High
CVE-2013-5758Yealink VoIP Phone SIP-T38G - Privilege Escalationsip-t38g9.0 (v2.0)High
CVE-2026-34612Kestra: Remote Code Execution via SQL Injectionkestra9.0 (v3.1)Critical
CVE-2026-45630Dokploy: Authenticated Remote Code Execution via Command Injection in updateTraefikConfig Echo Statementdokploy9.0 (v3.1)Critical
CVE-2026-53581ntp: write path traversalcore9.0 (v3.1)Critical
CVE-2026-62674Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCEomnigent9.0 (v3.1)Critical
CVE-2026-69251Flowise RCE via TypeORM DataSourceFlowise9.0 (v4.0)Critical
CVE-2026-73485Flowise before 3.1.3 Remote Code Execution via Airtable Agentflowise9.0 (v4.0)Critical
CVE-2026-73486Flowise before 3.1.3 Code Injection via CSV Agent customReadCSVflowise9.0 (v4.0)Critical
CVE-2026-73487Flowise before 3.1.3 Prompt Injection RCE via CSV Agentflowise9.0 (v4.0)Critical
CVE-2026-86259OpenMAIC before 1.0.1 SSRF via Environment-Gated URL ValidationOpenMAIC9.0 (v4.0)Critical
CVE-2026-43945FUXA Vulnerable to Pre-auth RCE via Path Manipulation & Configuration InjectionFUXA8.9 (v4.0)High
CVE-2026-7202Totolink A8000RU CGI cstecgi.cgi setWiFiWpsStart os command injectionA8000RU8.9 (v4.0)High
CVE-2026-7203Totolink A8000RU CGI cstecgi.cgi setUrlFilterRules os command injectionA8000RU8.9 (v4.0)High
CVE-2026-7204Totolink A8000RU CGI cstecgi.cgi setPptpServerCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-73570zimbra collaboration suite Arbitrary Code Execution Vulnerabilityzimbra collaboration suite8.9 (v3.1)High
CVE-2026-82866@pdfme/common before 5.5.10 SSRF via Unvalidated URL Fetchcommon8.9 (v4.0)High
CVE-2026-9384Totolink A8000RU Web Management cstecgi.cgi setDiagnosisCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9385Totolink A8000RU Web Management cstecgi.cgi setTracerouteCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9386Totolink A8000RU Web Management cstecgi.cgi setLanguageCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9387Totolink A8000RU Web Management cstecgi.cgi setUpgradeFW os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9388Totolink A8000RU Web Management cstecgi.cgi setScheduleCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9404Totolink A8000RU Web Management cstecgi.cgi setDdnsCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9405Totolink A8000RU Web Management cstecgi.cgi setGameSpeedCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9406Totolink A8000RU Web Management cstecgi.cgi setRemoteCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9407Totolink A8000RU Web Management cstecgi.cgi setFirewallType os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9408Totolink A8000RU Web Management cstecgi.cgi setStaticDhcpRules os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9432Totolink A8000RU Web Management cstecgi.cgi setWiFiAdvancedCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9433Totolink A8000RU Web Management cstecgi.cgi setMacFilterRules os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9434Totolink A8000RU Web Management cstecgi.cgi setWiFiWpsCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9435Totolink A8000RU Web Management cstecgi.cgi setQosCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9436Totolink A8000RU Web Management cstecgi.cgi setL2tpServerCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9454Totolink A8000RU Web Management cstecgi.cgi setOpenVpnCertGenerationCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9455Totolink A8000RU Web Management cstecgi.cgi UploadOpenVpnCert os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9456Totolink A8000RU Web Management cstecgi.cgi setOpenVpnCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9457Totolink A8000RU Web Management cstecgi.cgi UploadFirmwareFile os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9458Totolink A8000RU Web Management cstecgi.cgi setWanCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9476Totolink A8000RU Web Management cstecgi.cgi setPasswordCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9477Totolink A8000RU Web Management cstecgi.cgi setAccessDeviceCfg os command injectionA8000RU8.9 (v4.0)High
CVE-2026-9478Totolink A8000RU Web Management cstecgi.cgi setParentalRules os command injectionA8000RU8.9 (v4.0)High
CVE-2013-4863MiCasaVerde VeraLite 1.5.408 - Multiple Vulnerabilitiesveralite firmware8.8 (v3.1)High
CVE-2016-4808Web2py 2.14.5 - Multiple Vulnerabilitiesweb2py8.8 (v3.0)High
CVE-2017-14535Trixbox - 2.8.0.4 OS Command Injectiontrixbox8.8 (v3.1)High
CVE-2017-6884Zyxel_ EMG2926 < V1.00(AAQT.4)b8 - OS Command Injectionemg2926 firmware8.8 (v3.1)High
CVE-2018-10093AudioCodes 420HD - Remote Code Execution420hd ip phone firmware8.8 (v3.0)High
CVE-2018-12613PhpMyAdmin <4.8.2 - Local File Inclusionphpmyadmin8.8 (v3.1)High
CVE-2018-15142OpenEMR 5.0.1.3 - (Authenticated) Arbitrary File Actionsopenemr8.8 (v3.0)High
CVE-2019-14530OpenEMR <5.0.2 - Local File Inclusionopenemr8.8 (v3.1)High
CVE-2019-9189Prima Access Control 2.3.35 - Arbitrary File Uploadflexair8.8 (v3.0)High
CVE-2020-13851Artica Pandora FMS 7.44 - Remote Code Executionpandora fms8.8 (v3.1)High
CVE-2020-24579D-Link DSL 2888a - Authentication Bypass/Remote Command Executiondsl2888a firmware8.8 (v3.1)High
CVE-2020-8163Ruby on Rails <5.0.1 - Remote Code Executionrails8.8 (v3.1)High
CVE-2020-8641Lotus Core CMS 1.0.1 - Local File Inclusionlotus core cms8.8 (v3.1)High
CVE-2021-25646Apache Druid - Remote Code Executiondruid8.8 (v3.1)High
CVE-2023-39108rConfig 3.9.4 - Server-Side Request Forgeryrconfig8.8 (v3.1)High
CVE-2023-39109rConfig 3.9.4 - Server-Side Request Forgeryrconfig8.8 (v3.1)High
CVE-2023-39110rConfig 3.9.4 - Server-Side Request Forgeryrconfig8.8 (v3.1)High
CVE-2024-39024In Packetfence 13.2.0, the WebGui interface setting Arbitrary Code Execution Vulnerability-8.8 (v3.1)High
CVE-2024-41667OpenAM<=15.0.3 FreeMarker - Template InjectionOpenAM8.8 (v3.1)High
CVE-2024-8252WordPress Clean Login <= 1.14.5 Authenticated (Contributor+) - Local File Inclusionclean login8.8 (v3.1)High
CVE-2025-32614EventON Lite <= 2.4 - Authenticated Local File Inclusionflavor8.8 (v3.1)High
CVE-2025-59710biztalk360 Arbitrary Code Execution Vulnerabilitybiztalk3608.8 (v3.1)High
CVE-2026-17623Langflow is affected OS Command Injection in Model Context Protocol featureslangflow8.8 (v3.1)High
CVE-2026-17625Langflow is affected by OS Command Injection in Model Context Protocol featureslangflow8.8 (v3.1)High
CVE-2026-24893openITCOCKPIT has Authenticated Command Injection Leading to Remote Code Execution via Host Address Macro Expansionopenitcockpit8.8 (v3.1)High
CVE-2026-26899OS Command Injection-8.8 (v3.1)High
CVE-2026-34197Apache ActiveMQ - Remote Code Executionactivemq8.8 (v3.1)High
CVE-2026-34524SillyTavern: Path traversal in /api/chats/export and /api/chats/delete allows arbitrary file read/delete within usersillytavern8.8 (v3.1)High
CVE-2026-35031Jellyfin: Potential RCE via subtitle upload path traversal + .strm chainjellyfin8.8 (v3.1)High
CVE-2026-35196Chamilo LMS has OS Command Injection via export_all_certificates actionchamilo lms8.8 (v3.1)High
CVE-2026-36723bookcars v8.3 Arbitrary Code Execution Vulnerabilitybookcars v8.38.8 (v3.1)High
CVE-2026-42605AzuraCast: Path Traversal in currentDirectory Parameter Enables Remote Code Execution via Media Uploadazuracast8.8 (v3.1)High
CVE-2026-43624F5-TTS 1.1.20 Path Traversal via finetune_gradio.py create_data_project()F5-TTS8.8 (v4.0)High
CVE-2026-44829Gotenberg: Path traversal in zip entry name via Windows-style separators in upload filenamegotenberg8.8 (v3.1)High
CVE-2026-45505Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Jolokia addNetworkConnector Discovery Wrapper Bypassactivemq8.8 (v3.1)High
CVE-2026-45578WWBN AVideo Live: OS command injection in on_publish.php execAsync via unescaped m3u8 URLavideo8.8 (v3.1)High
CVE-2026-45662Dokploy: Command Injection via incomplete shell escaping in docker logout (registry deletion)dokploy8.8 (v3.1)High
CVE-2026-48017DbGate: Remote Code Execution via functionName injection in loadReader endpointdbgate8.8 (v3.1)High
CVE-2026-501864gaBoards: Path Traversal leading to Arbitrary File Read and Deletion in Board Export4gaBoards8.8 (v3.1)High
CVE-2026-55585QWED: Authenticated Remote Code Execution via Unsafe SymPy parse_expr()qwed-verification8.8 (v3.1)High
CVE-2026-58195Agentic-Flow: OS Command Injection in agentic-flow MCP server tools via unsanitized tool-parameter interpolation into exagentic-flow8.8 (v3.1)High
CVE-2026-62675Omnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable Toolsomnigent8.8 (v3.1)High
CVE-2026-62677Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNomnigent8.8 (v3.1)High
CVE-2026-62857Fedify: Server-Side Request Forgery in getNodeInfo() Allows Access to Internal Network Resourcesfedify8.8 (v4.0)High
CVE-2026-65702Vanna 2.0.2 Path Traversal via FileSystemConversationStorevanna8.8 (v4.0)High
CVE-2026-72875Dokploy: Remote Code Execution (RCE) via Command Injection in settings.readTraefikFiledokploy8.8 (v3.1)High
CVE-2026-73222Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (–studio)claude-code-templates8.8 (v3.1)High
CVE-2026-76842Mercado Pago Node.js SDK through 3.4.0 Path Injection via Unencoded Identifiers in Payment Clientsmercadopago8.8 (v4.0)High
CVE-2026-78834Code Injection-8.8 (v3.1)High
CVE-2026-79423seacms v13.6 Arbitrary Code Execution Vulnerabilityseacms v13.68.8 (v3.1)High
CVE-2026-81730Dolibarr 9.0.0 through 23.0.4 Path Traversal via EmailCollector Attachment Filenamedolibarr erp/crm8.8 (v4.0)High
CVE-2026-82217Eclipse Theia Path Traversal VulnerabilityEclipse Theia8.8 (v3.1)High
CVE-2026-82286gpt-crawler Arbitrary File Write via outputFileName Parametergpt-crawler8.8 (v4.0)High
CVE-2026-84889A path traversal vulnerability in file handling components could allow an authenticated attacker to write files to arbitLangflow OSS8.8 (v3.1)High
CVE-2026-85199Eclipse aeriOS Path Traversal VulnerabilityEclipse aeriOS8.8 (v4.0)High
CVE-2026-86542knowns before 0.30.0 Path Traversal via Import Nameknowns8.8 (v4.0)High
CVE-2026-86775knowns before 0.30.0 Path Traversal via Document APIknowns8.8 (v4.0)High
CVE-2026-87927MaxSite CMS through 109.6 Local File Inclusion via ajax dispatcherMaxSite CMS8.8 (v4.0)High
CVE-2017-20248WordPress Plugin Apptha Slider Gallery 1.0 Path Traversal File DownloadApptha Slider Gallery8.7 (v4.0)High
CVE-2017-20250WordPress Plugin Mac Photo Gallery 3.0 Arbitrary File DownloadMac Photo Gallery8.7 (v4.0)High
CVE-2018-25374Softneta MedDream PACS Server Premium 6.7.1.1 Directory TraversalMedDream PACS Server Premium8.7 (v4.0)High
CVE-2019-25671VA MAX 8.3.4 Remote Code Execution via changeip.phpVA MAX8.7 (v4.0)High
CVE-2021-4463Longjing Technology BEMS API 1.21 - Unauthenticated Arbitrary File DownloadBEMS API8.7 (v4.0)High
CVE-2021-47938ImpressCMS 1.4.2 Remote Code Execution via AutotasksImpressCMS8.7 (v4.0)High
CVE-2021-47943TextPattern CMS 4.8.7 Remote Code Execution via File UploadTextPattern CMS8.7 (v4.0)High
CVE-2022-50944Aero CMS 0.0.1 PHP Code Injection via posts.phpAero CMS8.7 (v4.0)High
CVE-2023-54350WordPress Augmented-Reality Plugin Remote Code Execution UnauthenticatedAugmented Reality8.7 (v4.0)High
CVE-2024-26291Avid NEXIS Agent - Arbitrary File Readnexis8.7 (v4.0)High
CVE-2025-30007HestiaCP < 1.9.5 Authenticated OS Command Injection via DNS Record Managementcontrol panel8.7 (v4.0)High
CVE-2025-34031Moodle Jmol Filter 6.1 - Local File Inclusionjmol8.7 (v4.0)High
CVE-2025-34045WeiPHP 5.0 - Path Traversalweiphp8.7 (v4.0)High
CVE-2025-34115OP5 Monitor <= 7.1.9 Authenticated Command Execution via command_test.phpOP5 Monitor8.7 (v4.0)High
CVE-2026-10108xiaomusic 0.5.7 Path Traversal via GET /music endpointxiaomusic8.7 (v4.0)High
CVE-2026-17524zip-lib Path Traversal Vulnerabilityzip-lib8.7 (v4.0)High
CVE-2026-25559OpenBullet2 0.3.2 Path Traversal via Wordlist Endpointopenbullet28.7 (v4.0)High
CVE-2026-25855OpenBullet2 0.3.2 Authenticated RCE via FileProxySource Script Uploadopenbullet28.7 (v4.0)High
CVE-2026-25856OpenBullet2 0.3.2 Authenticated RCE via Job Configuration Interfaceopenbullet28.7 (v4.0)High
CVE-2026-28797RAGFlow: Server-Side Template Injection (SSTI) leading to Remote Code Execution (RCE) in Agent "Text Processing" Componeragflow8.7 (v4.0)High
CVE-2026-34228Emlog: CSRF in Backend Upgrade Interface Leading to Arbitrary Remote SQL Execution and Arbitrary File Writeemlog8.7 (v4.0)High
CVE-2026-34367InvoiceShelf: SSRF in Invoice PDF Rendering via Unsanitised HTML in Notes Fieldinvoiceshelf8.7 (v3.1)High
CVE-2026-34735Hytale Modding Vulnerable to Remote Code Execution via File Upload Bypass in FileControllerwiki8.7 (v4.0)High
CVE-2026-34792Endian Firewall /cgi-bin/logs_clamav.cgi DATE Perl Command Injectionfirewall community8.7 (v4.0)High
CVE-2026-34793Endian Firewall /cgi-bin/logs_firewall.cgi DATE Perl Command Injectionfirewall community8.7 (v4.0)High
CVE-2026-34794Endian Firewall /cgi-bin/logs_ids.cgi DATE Perl Command Injectionfirewall community8.7 (v4.0)High
CVE-2026-34795Endian Firewall /cgi-bin/logs_log.cgi DATE Perl Command Injectionfirewall community8.7 (v4.0)High
CVE-2026-34796Endian Firewall /cgi-bin/logs_openvpn.cgi DATE Perl Command Injectionfirewall community8.7 (v4.0)High
CVE-2026-34797Endian Firewall /cgi-bin/logs_smtp.cgi DATE Perl Command Injectionfirewall community8.7 (v4.0)High
CVE-2026-35029LiteLLM - Arbitrary File Readlitellm8.7 (v4.0)High
CVE-2026-35214Budibase: Path traversal in plugin file upload enables arbitrary directory deletion and file writebudibase8.7 (v3.1)High
CVE-2026-39352Frappe Framework < 16.15.0 - Arbitrary File Read via render_include Path Traversalfrappe8.7 (v4.0)High
CVE-2026-43982Algernon: Path traversal file write via savein()algernon8.7 (v4.0)High
CVE-2026-46746sinec ins OS Command Injection Vulnerabilitysinec ins8.7 (v4.0)High
CVE-2026-47394PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validatePraisonAI8.7 (v4.0)High
CVE-2026-47659Pathling has path traversal in $import-pnp manifest that enables read-capable SSRF via /jobs/{jobId}/{filename}pathling8.7 (v4.0)High
CVE-2026-47661Pathling has path traversal in $result endpoint that allows arbitrary warehouse file readpathling8.7 (v4.0)High
CVE-2026-49143BrowserStack Runner 0.9.5 Unauthenticated RCE via /_log HTTP Handlerbrowserstack-runner8.7 (v4.0)High
CVE-2026-55245Bifrost: SSRF deny-list incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURLbifrost8.7 (v4.0)High
CVE-2026-57863Crater Invoice 6.0.6 Path Traversal RCE via update/unzip endpointcrater8.7 (v4.0)High
CVE-2026-62865TypeBot: Arbitrary server file read via Send Email block attachment pathtypebot.io8.7 (v4.0)High
CVE-2026-63722ICEcoder 8.1 Unauthenticated RCE via terminal-xhr.phpICEcoder8.7 (v4.0)High
CVE-2026-64837ICEcoder through 8.1 OS Command Injection via lib/properties.phpICEcoder8.7 (v4.0)High
CVE-2026-64838ICEcoder through 8.1 Path Traversal via oldFileName ParameterICEcoder8.7 (v4.0)High
CVE-2026-64850Grav: Remote code execution via unrestricted callable in Blueprint::dynamicData()grav8.7 (v4.0)High
CVE-2026-65694Microweber CMS <= 2.0.20 - Unauthenticated Arbitrary File Readmicroweber8.7 (v4.0)High
CVE-2026-65759Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1Easy Store extension for Joomla8.7 (v4.0)High
CVE-2026-65919Meshery < 1.0.57 Unauthenticated Arbitrary File Read via fileView and fileDownloadmeshery8.7 (v4.0)High
CVE-2026-67200Perspective 5.0.0 Path Traversal via cwd_static_file_handlerperspective8.7 (v4.0)High
CVE-2026-67206Wolf CMS 0.8.3.1 Authenticated RCE via FileManagerController File Uploadwolfcms8.7 (v4.0)High
CVE-2026-67281Unauthenticated file read in Mikrotik RouterOSRouterOS8.7 (v4.0)High
CVE-2026-69089Grav CMS before 2.0.11 Path Traversal via watermarkgrav8.7 (v4.0)High
CVE-2026-69095OpenWrt luci-app-bmx7 Path Traversal via bmx7-infoluci8.7 (v4.0)High
CVE-2026-69096OpenWrt luci-app-dockerman Read ACL Remote Code Executionluci8.7 (v4.0)High
CVE-2026-69100LAMP 5.6.2 GlueFactory Unsandboxed Groovy Script Remote Code Executionlamp-cloud8.7 (v4.0)High
CVE-2026-71966CyberPanel 2.4.3 Authenticated Command Injection via starRemoteTransfercyberpanel8.7 (v4.0)High
CVE-2026-72713XAgent Path Traversal Arbitrary File Read via /workspace/fileXAgent8.7 (v4.0)High
CVE-2026-72819Grav CMS before 2.0.13 Remote Code Execution via ZIP Uploadgrav8.7 (v4.0)High
CVE-2026-72830Grav API Plugin before 1.0.13 RCE via ConfigController scope bypassgrav8.7 (v4.0)High
CVE-2026-72870Dokploy: Command Injection via Docker Credentials in buildRemoteDockerdokploy8.7 (v4.0)High
CVE-2026-72874Dokploy: Command Injection via Unescaped Git URL in Clone Commandsdokploy8.7 (v4.0)High
CVE-2026-73680Cockpit CMS 2.14.0 Authenticated Command Injection via FFmpeg FilenameCockpit CMS8.7 (v4.0)High
CVE-2026-75111Evidently UI Path Traversal via Dataset Materialization Filenameevidently8.7 (v4.0)High
CVE-2026-75482SWE-agent Trajectory Inspector Path Traversal File DisclosureSWE-agent8.7 (v4.0)High
CVE-2026-75914CodeWhale before 0.8.64 Path Traversal via image_analyze symlinkCodeWhale8.7 (v4.0)High
CVE-2026-76060OS Command Injection in PayRange APIZoneminder8.7 (v4.0)High
CVE-2026-76836AzuraCast through 0.23.8 Liquidsoap Configuration Write via Profile Edit Serialization Group BypassAzuraCast8.7 (v4.0)High
CVE-2026-78416Authenticated RCE via condition.config JSON cleanse bypasscms8.7 (v4.0)High
CVE-2026-79756Nuclio: Unauthenticated OS command injection via namespace header in list-all resource path on local platformnuclio8.7 (v4.0)High
CVE-2026-79987Low-privilege RCE through element-search eager loadingcms8.7 (v4.0)High
CVE-2026-82270Portkey AI Gateway Server-Side Request Forgery via /v1/proxy/*gateway8.7 (v4.0)High
CVE-2026-82278BISHENG Authenticated Arbitrary Python Code Execution via Workflow run_oncebisheng8.7 (v4.0)High
CVE-2026-82638jina-ai reader Server-Side Request Forgery via disabled private-address guardreader8.7 (v4.0)High
CVE-2026-85608Douyin_TikTok_Download_API 4.1.2 SSRF via url parameterDouyin TikTok Download API8.7 (v4.0)High
CVE-2026-85610OpenPanel before 2.3.0 Remote Code Execution via chart formulasopenpanel8.7 (v4.0)High
CVE-2026-85612OpenPanel before 2.3.0 SSRF via favicon and og endpointsopenpanel8.7 (v4.0)High
CVE-2026-85666ogx 1.3.1 Server-Side Request Forgery via MCP tool server_urlogx8.7 (v4.0)High
CVE-2026-85673LLaMA-Factory SSRF Guard Bypass via Redirect and DNS RebindingLlamaFactory8.7 (v4.0)High
CVE-2026-85685AgentScope through 2.0.7.post1 Arbitrary Directory Copy via add_skillagentscope8.7 (v4.0)High
CVE-2026-85691MegaParse 0.0.55 Server-Side Request Forgery via POST /v1/urlmegaparse8.7 (v4.0)High
CVE-2026-86538knowns before 0.30.0 Path Traversal via templateFile parameterknowns8.7 (v4.0)High
CVE-2026-86732Craft CMS before 5.10.12 Remote Code Execution via element-indexcms8.7 (v4.0)High
CVE-2026-89250WWBN AVideo Unauthenticated File Read via getRecordedFile.phpAVideo8.7 (v4.0)High
CVE-2026-9506Path Traversal Vulnerability in BagistoBagisto8.7 (v4.0)High
CVE-2015-4694WordPress Zip Attachments <= 1.1.4 - Arbitrary File Retrievalzip attachments8.6 (v3.0)High
CVE-2021-32820Express-handlebars - Local File Inclusionexpress handlebars8.6 (v3.1)High
CVE-2022-24900Piano LED Visualizer 1.3 - Local File Inclusionpiano led visualizer8.6 (v3.1)High
CVE-2023-26360Adobe ColdFusion - Local File Readcoldfusion8.6 (v3.1)High
CVE-2024-20353adaptive security appliance software Denial of Service Vulnerabilityadaptive security appliance software8.6 (v3.1)High
CVE-2024-34470HSC Mailinspector 5.2.17-3 through 5.2.18 - Local File Inclusionmailinspector8.6 (v3.1)High
CVE-2024-48248NAKIVO Backup and Replication Solution - Unauthenticated Arbitrary File Readbackup &amp; replication director8.6 (v3.1)High
CVE-2024-48766NetAlert X - Arbitary File Readnetalertx8.6 (v3.1)High
CVE-2025-10897WooCommerce Designer Pro <= 1.9.28 - Arbitrary File ReadWooCommerce Designer Pro8.6 (v3.1)High
CVE-2025-2558WordPress The Wound Theme <= 0.0.1 - Local File Inclusionthe wound8.6 (v3.1)High
CVE-2025-27222TRUfusion Enterprise <= 7.10.4.0 - Path Traversaltrufusion enterprise8.6 (v3.1)High
CVE-2026-11974Media folder Addon < 4.1.7 - Unauthenticated Arbitrary File Downloadwp-media-folder-addon8.6 (v3.1)High
CVE-2026-34160Chamilo LMS: Unauthenticated SSRF via PENS Plugin allows attacker to probe internal network and reach cloud metadata serchamilo lms8.6 (v3.1)High
CVE-2026-34577Postiz: Unauthenticated Full-Read SSRF via /public/stream Endpoint with Trivially Bypassable Extension Checkpostiz8.6 (v3.1)High
CVE-2026-35032Jellyfin: Potential SSRF + Arbitrary file read via LiveTV M3U tunerjellyfin8.6 (v4.0)High
CVE-2026-40187Authenticated RCE via Malicious eTemplate Upload in EGroupwareegroupware8.6 (v4.0)High
CVE-2026-42785OpenKM 6.3.12 Remote Code Execution via Administrative ScriptingOpenKM Community Edition8.6 (v4.0)High
CVE-2026-45298Dozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy)dozzle8.6 (v3.1)High
CVE-2026-46491SimpleSAMLphp casserver FileSystemTicketStore path traversal allows out-of-ticket-directory read/unserialize and conditisimplesamlphp-module-casserver8.6 (v3.1)High
CVE-2026-50553Note Mark: Path traversal via unsanitized book/note slug in migrate export (sibling of GHSA-g49p)note-mark8.6 (v4.0)High
CVE-2026-53804OTRS Community Edition OS Command Injection via PGP ConfigurationOTRS Community Edition8.6 (v4.0)High
CVE-2026-55182LibreNMS: Remote Code Execution by Signal Alert Transportation Modulelibrenms8.6 (v4.0)High
CVE-2026-566779Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpoint9router8.6 (v3.1)High
CVE-2026-56703Adminer before 5.4.3 Remote Code Execution via SQLite VACUUM INTOadminer8.6 (v4.0)High
CVE-2026-61517Netis NX10 OS Command Injection via Ping Diagnostic HandlerNX108.6 (v4.0)High
CVE-2026-61523WebsiteBaker CMS < 2.13.10 Code Injection via Droplets EditorWebsiteBaker CMS8.6 (v4.0)High
CVE-2026-63725sysPass FileBackupService Authenticated OS Command Injection via Backup PathsysPass8.6 (v4.0)High
CVE-2026-65693Microweber CMS 2.0.20 Server-Side Template Injection via Mail Templatesmicroweber8.6 (v4.0)High
CVE-2026-65711sysPass 3.2.11 Authenticated OS Command Injection via Backup PathsysPass8.6 (v4.0)High
CVE-2026-66397phpMyFAQ before 4.1.6 Path Traversal via category image deletionphpMyFAQ8.6 (v4.0)High
CVE-2026-67599ClearOS 7.9 OS Command Injection via Log Viewer filter parameterClearOS8.6 (v4.0)High
CVE-2026-67608Telenia TVox 26.5.3 OS Command Injection via action_audio.phpTVox8.6 (v4.0)High
CVE-2026-69088Grav CMS 2.0.7 through 2.0.10 Arbitrary Method Invocation via Blueprintgrav8.6 (v4.0)High
CVE-2026-71906DrayTek VigorAP Multiple Models OS Command Injection via setLanVigorAP 918R8.6 (v4.0)High
CVE-2026-71907DrayTek VigorAP Multiple Models OS Command Injection via setcamsetVigorAP 918R8.6 (v4.0)High
CVE-2026-71908DrayTek VigorAP Multiple Models OS Command Injection via mesh_start_speed_testVigorAP 918R8.6 (v4.0)High
CVE-2026-71913DrayTek VigorAP Multiple Models OS Command Injection via upload_settings.cgiVigorAP 918R8.6 (v4.0)High
CVE-2026-71915DrayTek VigorSwitch Multiple Models OS Command Injection via jsonstatusVigorSwitch G2540xs8.6 (v4.0)High
CVE-2026-71918DrayTek VigorSwitch Multiple Models OS Command Injection via webBackupActionVigorSwitch G2540xs8.6 (v4.0)High
CVE-2026-71919DrayTek VigorSwitch Multiple Models OS Command Injection via sysrebootVigorSwitch G2540xs8.6 (v4.0)High
CVE-2026-71923DrayTek VigorSwitch Multiple Models OS Command Injection via auth_setVigorSwitch G2540xs8.6 (v4.0)High
CVE-2026-71924DrayTek VigorSwitch Multiple Models OS Command Injection via getVidVigorSwitch G2540xs8.6 (v4.0)High
CVE-2026-71925DrayTek VigorSwitch Multiple Models OS Command Injection via getDetailVigorSwitch G2540xs8.6 (v4.0)High
CVE-2026-71926DrayTek VigorSwitch Multiple Models OS Command Injection via setDeviceVigorSwitch G2540xs8.6 (v4.0)High
CVE-2026-71927DrayTek VigorSwitch Multiple Models OS Command Injection via rebDeviceVigorSwitch G2540xs8.6 (v4.0)High
CVE-2026-71928DrayTek VigorSwitch Multiple Models OS Command Injection via fdftDeviceVigorSwitch G2540xs8.6 (v4.0)High
CVE-2026-71929DrayTek VigorSwitch Multiple Models OS Command Injection via setDevProtoVigorSwitch G2540xs8.6 (v4.0)High
CVE-2026-71930DrayTek VigorSwitch Multiple Models OS Command Injection via setTimeVigorSwitch G2540xs8.6 (v4.0)High
CVE-2026-71931DrayTek VigorSwitch Multiple Models OS Command Injection via tftp_upgradeVigorSwitch G2540xs8.6 (v4.0)High
CVE-2026-71943DrayTek VigorSwitch Multiple Models OS Command Injection via setDevNetVigorSwitch G2540xs8.6 (v4.0)High
CVE-2026-73664FreePBX: Authenticated Arbitrary SSH Key Injection via Backup Modulebackup8.6 (v4.0)High
CVE-2026-7412Eclipse BaSyx SSRF VulnerabilityEclipse BaSyx8.6 (v3.1)High
CVE-2026-75121PLANET GS-4210-16P2S Command Injection via dispatcher.cgi web_vlan_membership_edit_dialog_postPLANET GS-4210-16P2S V38.6 (v4.0)High
CVE-2026-75122PLANET GS-4210-16P2S Command Injection via httpuploadcert.cgiPLANET GS-4210-16P2S V38.6 (v4.0)High
CVE-2026-75123PLANET GS-4210-16P2S Command Injection via dispatcher.cgi web_smtp_test_postPLANET GS-4210-16P2S V38.6 (v4.0)High
CVE-2026-80214LibreNMS Virtualisation Discovery Module RCElibrenms8.6 (v4.0)High
CVE-2026-81213Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetchesLangflow OSS8.6 (v3.1)High
CVE-2026-81889elFinder: SSRF protection bypass via DNS rebinding in the fsock_get_contents() fallbackelFinder8.6 (v3.1)High
CVE-2026-82692D-Link DNS-340L/DNS-345 iscsi_mgr.cgi os command injectionDNS-340L8.6 (v4.0)High
CVE-2026-84194LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostnamelibrenms8.6 (v4.0)High
CVE-2026-85223D-Link DNS-340L CGI dropbox.cgi os command injectionDNS-340L8.6 (v4.0)High
CVE-2026-86299Linksys RE7000 PingTest json.cgi platform_event_pingTest os command injectionRE70008.6 (v4.0)High
CVE-2026-86437Lara Dashboard before 1.3.2 Incorrect Authorization in Core-Upgrade Archive Uploadlaradashboard8.6 (v4.0)High
CVE-2026-86438Lara Dashboard before 1.3.2 Missing Authorization in Marketplace Module Install Actionlaradashboard8.6 (v4.0)High
CVE-2026-86733Snipe-IT before 8.7.0 Remote Code Execution via Backup Restoresnipe-it8.6 (v4.0)High
CVE-2026-88937knowns through 0.33.0 Path Traversal via Template Engineknowns8.6 (v4.0)High
CVE-2015-2996SysAid Help Desk <15.2 - Local File Inclusionsysaid8.5 (v2.0)High
CVE-2025-34023Karel IP Phone IP1211 Web Management Panel - Local File InclusionKarel IP Phone IP12118.5 (v4.0)High
CVE-2026-16033Arbitrary file read+write on host via templates/ symlink in malicious imagelxd8.5 (v3.1)High
CVE-2026-22244OpenMetadata Server-Side Template Injection (SSTI) in FreeMarker email templates that leads to RCEopenmetadata8.5 (v4.0)High
CVE-2026-44881Portainer: Arbitrary File Read via Git Symlink Injection in Stack Auto-Updateportainer8.5 (v4.0)High
CVE-2026-46372SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrlSillyTavern8.5 (v3.1)High
CVE-2026-51583usememos through v0.30.0 Server-Side Request Forgery Vulnerability-8.5 (v3.1)High
CVE-2026-57894Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository ExfilGitea Open Source Git Server8.5 (v3.1)High
CVE-2026-61640Wallos: SSRF via OIDC Token/UserInfo URL ConfigurationWallos8.5 (v4.0)High
CVE-2026-67424Flyto2 Core: Guarded HTTP modules follow redirects into internal space without per-hop SSRF revalidationflyto-core8.5 (v3.1)High
CVE-2026-67428Flyto2 Core: Multiple HTTP-family modules fetch client-controlled URLs without the SSRF guard their siblings apply (SSRFflyto-core8.5 (v3.1)High
CVE-2026-68558Wekan: SSRF filter bypass via DNS-resolving hostname in outgoing webhooks (incomplete fix of CVE-2026-53446)wekan8.5 (v3.1)High
CVE-2026-69250Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret ExfiltrationFlowise8.5 (v4.0)High
CVE-2026-73079Sub2API: Path traversal in the Responses subpath routes lets an authenticated tenant relay requests to arbitrary upstreasub2api8.5 (v3.1)High
CVE-2026-82690D-Link DNS-327L/DNS-340L ve_mgr.cgi os command injectionDNS-327L8.5 (v4.0)High
CVE-2026-82691D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 CGI usb_device.cgi os command injectionDNS-320L8.5 (v4.0)High
CVE-2026-85222D-Link DNS-340L Add-On Center addon_center.cgi os command injectionDNS-340L8.5 (v4.0)High
CVE-2026-85224D-Link DNS-320 ShareCenter File Sharing file_sharing.cgi os command injectionDNS-320 ShareCenter8.5 (v4.0)High
CVE-2026-57862Kanboard 1.2.52 and prior SSRF Filter Bypass via Hexadecimal IP NotationKanboard8.4 (v4.0)High
CVE-2026-62234Grav < 2.0.4 SSRF via Unrestricted cURL Protocolsgrav8.4 (v4.0)High
CVE-2026-72855Budibase before 3.40.0 DNS Rebinding SSRF via OpenAPI and RESTserver8.4 (v4.0)High
CVE-2026-73629Serendipity before 2.6.0 SSRF via hex IPv4 and IPv6 addressesSerendipity8.4 (v4.0)High
CVE-2026-75855ArcadeDB before 26.8.1 Path Traversal via create/drop databasearcadedb8.4 (v4.0)High
CVE-2026-75898RAGFlow < 0.26.3 - Server-Side Request Forgery via Agent Invoke Componentragflow8.4 (v4.0)High
CVE-2025-59711biztalk360 Path Traversal Vulnerabilitybiztalk3608.3 (v3.1)High
CVE-2026-22681OpenViking < 0.3.4 SSRF via /api/v1/resourcesOpenViking8.3 (v4.0)High
CVE-2026-34576Postiz: SSRF in upload-from-url endpoint allows fetching internal resources and cloud metadatapostiz8.3 (v4.0)High
CVE-2026-34966Gitea prior to 1.27.0 SSRF via Migration URI Fetch BypassGitea8.3 (v4.0)High
CVE-2026-48105Arc Enterprise cluster FSM applyRegisterFile accepts arbitrary file paths without validation, enabling cluster-wide patharc8.3 (v4.0)High
CVE-2026-49471Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCEserena8.3 (v3.1)High
CVE-2026-52769YesWiki: Unauthenticated Server-Side Request Forgery via ActivityPub Signature.keyIdyeswiki8.3 (v3.1)High
CVE-2026-633139Router before 0.4.72 Server-Side Request Forgery via /v1/web/fetch9router8.3 (v4.0)High
CVE-2026-65056mcp-webresearch Server-Side Request Forgery in visit_page Due to Missing Internal-IP Filteringmcp-webresearch8.3 (v4.0)High
CVE-2026-69086SiYuan before v3.7.3 Path Traversal via unvalidated avIDsiyuan8.3 (v4.0)High
CVE-2026-69101Datavane TIS v5.0.0 XXE Injection via doEditWorkflow Endpointtis8.3 (v4.0)High
CVE-2026-75842ArcadeDB before 26.8.1 Arbitrary File Read via LOAD CSVarcadedb8.3 (v4.0)High
CVE-2026-76225ArcadeDB before 26.8.1 Server-Side Request Forgery via LOAD CSVarcadedb8.3 (v4.0)High
CVE-2026-79659Ech0 before 4.7.3 Server-Side Request Forgery via fetchPeerConnectInfoEch08.3 (v4.0)High
CVE-2026-82243Budibase Server before 3.41.3 SSRF with Credential Leakageserver8.3 (v4.0)High
CVE-2026-82673Path traversal in AshAdmin file uploads via unsanitized client filenameash admin8.3 (v4.0)High
CVE-2026-84196Kyverno before 1.18.0 Server-Side Request Forgery via apiCallkyverno8.3 (v4.0)High
CVE-2026-86771Snipe-IT before 8.7.0 Server-Side Request Forgery via employee_numsnipe-it8.3 (v4.0)High
CVE-2026-9133Amazon rabbitmq-aws 0.1.0 through 0.2.0 - Arbitrary File ReadRabbitMQ AWS8.3 (v4.0)High
CVE-2025-44137MapTiler Tileserver-php v2.0 - Unauthenticated File Readtileserver php8.2 (v3.1)High
CVE-2025-69755Neterbit NW-431F Router vNW-431F-20241014-IR03 Arbitrary Code Execution Vulnerability-8.2 (v3.1)High
CVE-2026-16268Newsletters < 4.16 - Unauthenticated Server-Side Request Forgery via SNS Bounce HandlerNewsletters8.2 (v3.1)High
CVE-2026-39363Vite Affected by Arbitrary File Read via Vite Dev Server WebSocketvite8.2 (v4.0)High
CVE-2026-39364Vite Dev Server - Directory Traversalvite8.2 (v4.0)High
CVE-2026-40075OpenMRS Core arbitrary file read via path traversal in ModuleResourcesServletopenmrs8.2 (v4.0)High
CVE-2026-43910Appium java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutorjava-client8.2 (v3.1)High
CVE-2026-45711Mailpit: Path traversal & arbitrary file write in mailpit dump –http via attacker-controlled message IDsmailpit8.2 (v3.1)High
CVE-2026-48126Algernon: Host header path traversal in –domain mode reads files and runs Lua from parent diralgernon8.2 (v3.1)High
CVE-2026-54691datamodel-code-generator vulnerable to SSRF via –url: no host/IP validation, follows redirectsdatamodel-code-generator8.2 (v3.1)High
CVE-2026-61638Wallos: SSRF via Test Email Notification - unvalidated SMTP host/portWallos8.2 (v4.0)High
CVE-2026-74907Grav before 2.0.15 Path Traversal via plugin-asset-map.phpgrav8.2 (v4.0)High
CVE-2026-77348Wallos incomplete fix for CVE-2026-33407: unauthenticated httpoxy SSRF still reachable via `endpoints/payments/search.phWallos8.2 (v3.1)High
CVE-2026-82262Logto Server-Side Request Forgery via webhook test endpointlogto8.2 (v4.0)High
CVE-2013-4862MiCasaVerde VeraLite 1.5.408 - Multiple Vulnerabilitiesveralite firmware8.1 (v3.1)High
CVE-2014-3120ElasticSearch v1.1.1/1.2 RCEelasticsearch8.1 (v3.1)High
CVE-2016-3081Apache S2-032 Struts - Remote Code Executionstruts8.1 (v3.0)High
CVE-2017-12615Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution (1)tomcat8.1 (v3.1)High
CVE-2017-9805Apache Struts2 S2-052 - Remote Code Executionstruts8.1 (v3.1)High
CVE-2024-30188Apache DolphinScheduler >= 3.1.0, < 3.2.2 Resource File Read And Writedolphinscheduler8.1 (v3.1)High
CVE-2025-48157WordPress Formality Plugin <= 1.5.9 - Local File InclusionFormality8.1 (v3.1)High
CVE-2026-19303Langflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing clangflow8.1 (v3.1)High
CVE-2026-33236NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwritenltk8.1 (v3.1)High
CVE-2026-34365InvoiceShelf: SSRF in Estimate PDF Rendering via Unsanitised HTML in Notes Fieldinvoiceshelf8.1 (v3.1)High
CVE-2026-34366InvoiceShelf: SSRF in Payment Receipt PDF Rendering via Unsanitised HTML in Notes Fieldinvoiceshelf8.1 (v3.1)High
CVE-2026-34522SillyTavern: Path traversal in /api/chats/import allows arbitrary file write outside intended chat directorysillytavern8.1 (v3.1)High
CVE-2026-42588Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Remote Code Execution via Jolokia addNetworkConnectoractivemq8.1 (v3.1)High
CVE-2026-45344LinkAce: Setup database password newline injection enables pre-auth RCE on uninitialized instancesLinkAce8.1 (v3.1)High
CVE-2026-46484Headplane: Path Traversal + RBAC Bypass in renameNode allows authenticated OIDC users to expire or rename any node/userheadplane8.1 (v3.1)High
CVE-2026-47398PraisonAI: Arbitrary code execution via unguarded spec.loader.exec_module in agents_generator.py - sibling of CVE-20PraisonAI8.1 (v3.1)High
CVE-2026-48695fastnetmon Command Injection Vulnerabilityfastnetmon8.1 (v3.1)High
CVE-2026-50143Actor MCP path authority injection leaks Apify tokenapify-mcp-server8.1 (v3.1)High
CVE-2026-54083Wazuh: Path traversal in ip-customblock active response allows arbitrary file creation and deletionwazuh8.1 (v3.1)High
CVE-2026-64679Atlantis: Path Traversal in Atlantis Workspace Handling Allows Out-of-Bounds Directory Deletion/Creationatlantis8.1 (v3.1)High
CVE-2026-71320Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Propsnuxt8.1 (v3.1)High
CVE-2026-73659Trigger.dev: Cross-tenant object read/write via path traversal in packet presign APItrigger.dev8.1 (v3.1)High
CVE-2026-79755Nuclio: Unauthenticated OS command injection via function namespace in docker ps –filter label (local Docker platform)nuclio8.0 (v3.1)High
CVE-2009-1558Cisco Linksys WVC54GCA 1.00R22/1.00R24 - Local File Inclusionwvc54gca7.8 (v2.0)High
CVE-2011-3315Cisco CUCM, UCCX, and Unified IP-IVR- Directory Traversalunified ip interactive voice response7.8 (v2.0)High
CVE-2014-2962Belkin N150 Router 1.00.08/1.00.09 - Path Traversaln150 f9k1009 firmware7.8 (v2.0)High
CVE-2015-4669Xceedium Xsuite - Multiple Vulnerabilitiesxsuite7.8 (v3.0)High
CVE-2021-21315Node.JS System Information Library <5.3.1 - Remote Command Injectionsysteminformation7.8 (v3.1)High
CVE-2022-25485Cuppa CMS v1.0 - Local File Inclusioncuppacms7.8 (v3.1)High
CVE-2022-25486Cuppa CMS v1.0 - Local File Inclusioncuppacms7.8 (v3.1)High
CVE-2026-40280Gotenberg <= 8.30.1 - Server Side Request Forgerygotenberg7.8 (v4.0)High
CVE-2026-65600Traefik before v2.11.52 Authentication Bypass via ReplacePathRegextraefik7.8 (v4.0)High
CVE-2026-67179Genkit improper host header validationgenkit7.8 (v3.1)High
CVE-2026-67309Traefik v3.7.0 Path Traversal via RewriteTarget Authentication Bypasstraefik7.8 (v4.0)High
CVE-2020-35749WordPress Simple Job Board <2.9.4 - Local File Inclusionsimple board job7.7 (v3.1)High
CVE-2021-21234Spring Boot Actuator Logview Directory Traversalspring-boot-actuator-logview7.7 (v3.1)High
CVE-2025-27621UpTrain has a Constant Default API Keyuptrain7.7 (v4.0)High
CVE-2026-34163Server-Side Request Forgery via MCP Tools Endpoint in FastGPTfastgpt7.7 (v3.1)High
CVE-2026-34936PraisonAI: SSRF via Unvalidated api_base in passthrough() Fallbackpraisonai7.7 (v3.1)High
CVE-2026-39361OpenObserve has a SSRF Protection Bypass via IPv6 Bracket Notation in validate_enrichment_urlopenobserve7.7 (v3.1)High
CVE-2026-39965TypeBot: SSRF via Open Redirect Bypass in HTTP Request and Code Blockstypebot.io7.7 (v3.1)High
CVE-2026-40519Nginx Proxy Manager Authenticated RCE via setupCertbotPlugins()nginx-proxy-manager7.7 (v4.0)High
CVE-2026-42345FastGPT: Cloud metadata endpoint SSRF protection bypass via port specification, IPv6 mapping, hex/decimal IP encoding, aFastGPT7.7 (v3.1)High
CVE-2026-44285FastGPT: SSRF Protection Bypass via externalFile in Dataset Preview APIFastGPT7.7 (v3.1)High
CVE-2026-45806Penpot: Authenticated SSRF in remote image import via create-file-media-object-from-urlpenpot7.7 (v3.1)High
CVE-2026-47179Arcane: Authenticated Arbitrary Host File Read via Docker Compose Include Directives in Arcanearcane7.7 (v3.1)High
CVE-2026-53549Termix: Server-Side Request Forgery via Proxy Connectivity TestTermix7.7 (v3.1)High
CVE-2026-53553Goploy: Arbitrary File Read via Path Traversal in /deploy/fileDiff allows Remote Server Compromisegoploy7.7 (v3.1)High
CVE-2026-54910FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary filesfilebrowser7.7 (v3.1)High
CVE-2026-58314Two SSRF findings in Gitea 1.26.2Gitea Open Source Git Server7.7 (v3.1)High
CVE-2026-61835Directus: SSRF Protection Bypass via 0.0.0.0 in File Importdirectus7.7 (v3.1)High
CVE-2026-63464Nebula-mesh allows non-admin operators to disable webhook SSRF protection via allow_privatenebula-mesh7.7 (v3.1)High
CVE-2026-63764LMDeploy Server-Side Request Forgery via HTTP Redirect Bypasslmdeploy7.7 (v4.0)High
CVE-2026-66738SPIP < 4.4.18 Code Injection via Navigation Endpoint on SQLiteSPIP7.7 (v4.0)High
CVE-2026-67346Swarms 6.8.1 Server-Side Request Forgery via DNS Rebinding Bypassswarms7.7 (v4.0)High
CVE-2026-69192ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trusip-address7.7 (v4.0)High
CVE-2026-71303Lemur: Incomplete fix for CVE-2026-55166 – ACME authority update endpoint allows non-admin to replace acme_url with ilemur7.7 (v3.1)High
CVE-2026-71365Awx: webhook status callback ssrf leaks the git patRed Hat Ansible Automation Platform 2.5 for RHEL 87.7 (v3.1)High
CVE-2026-73498MCP Atlassian is a Model Context Protocol (MCP): Arbitrary file read via missing path validation in confluence_upload_atmcp-atlassian7.7 (v3.1)High
CVE-2026-77775Headroom Proxy Sends Upstream Requests to a Client-Supplied Base URL Without Address ValidationHeadroom7.7 (v4.0)High
CVE-2026-8183Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcementlangflow7.7 (v3.1)High
CVE-2026-39369WWBN AVideo's GIF poster fetch bypasses traversal scrubbing and exposes local files through public media URLsavideo7.6 (v3.1)High
CVE-2026-44239FreePBX: Authenticated Local File Inclusion in Dashboard Modulefreepbx7.6 (v4.0)High
CVE-2026-45082Karakeep has a SSRF Protection Bypass via Redirect Handlingkarakeep7.6 (v3.1)High
CVE-2026-65695Office-Word-MCP-Server 1.1.11 Path Traversal via document toolsOffice-Word-MCP-Server7.6 (v4.0)High
CVE-2026-79749MCPHub: SSRF Guard Bypass via IPv6 Transition Addresses in URL Validationmcphub7.6 (v4.0)High
CVE-2006-2842Squirrelmail <=1.4.6 - Local File Inclusionsquirrelmail7.5 (v2.0)High
CVE-2008-1059WordPress Sniplets 1.1.2 - Local File Inclusionsniplets plugin7.5 (v2.0)High
CVE-2009-1479boxalino 09.05.25-0421 - Directory Traversalboxalino7.5 (v2.0)High
CVE-2009-2015Joomla! MooFAQ 1.0 - Local File InclusionJoomla!7.5 (v2.0)High
CVE-2009-3318Joomla! Roland Breedveld Album 1.14 - Local File InclusionJoomla!7.5 (v2.0)High
CVE-2009-4202Joomla! Omilen Photo Gallery 0.5b - Local File Inclusionjoomla!7.5 (v2.0)High
CVE-2009-4679Joomla! Portfolio Nexus - Remote File Inclusioncom if nexus7.5 (v2.0)High
CVE-2010-0157Joomla! Component com_biblestudy - Local File Inclusionjoomla!7.5 (v2.0)High
CVE-2010-0759Joomla! Plugin Core Design Scriptegrator - Local File Inclusionscriptegrator plugin7.5 (v2.0)High
CVE-2010-0972Joomla! Component com_gcalendar Suite 2.1.5 - Local File Inclusioncom gcalendar7.5 (v2.0)High
CVE-2010-0985Joomla! Component com_abbrev - Local File Inclusioncom abbrev7.5 (v2.0)High
CVE-2010-1306Joomla! Component Picasa 2.0 - Local File Inclusioncom joomlapicasa27.5 (v2.0)High
CVE-2010-1470Joomla! Component Web TV 1.0 - Local File Inclusioncom webtv7.5 (v2.0)High
CVE-2010-1471Joomla! Component Address Book 1.5.0 - Local File Inclusioncom addressbook7.5 (v2.0)High
CVE-2010-1472Joomla! Component Horoscope 1.5.0 - Local File Inclusioncom horoscope7.5 (v2.0)High
CVE-2010-1495Joomla! Component Matamko 1.01 - Local File Inclusioncom matamko7.5 (v2.0)High
CVE-2010-1531Joomla! Component redSHOP 1.0 - Local File Inclusioncom redshop7.5 (v2.0)High
CVE-2010-1533Joomla! Component TweetLA 1.0.1 - Local File Inclusioncom tweetla7.5 (v2.0)High
CVE-2010-1535Joomla! Component TRAVELbook 1.0.1 - Local File Inclusioncom travelbook7.5 (v2.0)High
CVE-2010-1602Joomla! Component ZiMB Comment 0.8.1 - Local File Inclusioncom zimbcomment7.5 (v2.0)High
CVE-2010-1603Joomla! Component ZiMBCore 0.1 - Local File Inclusioncom zimbcore7.5 (v2.0)High
CVE-2010-1653Joomla! Component Graphics 1.0.6 - Local File Inclusioncom graphics7.5 (v2.0)High
CVE-2010-1717Joomla! Component iF surfALERT 1.2 - Local File Inclusionif surfalert7.5 (v2.0)High
CVE-2010-1875Joomla! Component Property - Local File Inclusioncom properties7.5 (v2.0)High
CVE-2010-1878Joomla! Component OrgChart 1.0.0 - Local File Inclusioncom orgchart7.5 (v2.0)High
CVE-2010-1952Joomla! Component BeeHeard 1.0 - Local File Inclusioncom beeheard7.5 (v2.0)High
CVE-2010-1953Joomla! Component iNetLanka Multiple Map 1.0 - Local File Inclusioncom multimap7.5 (v2.0)High
CVE-2010-1954Joomla! Component iNetLanka Multiple root 1.0 - Local File Inclusioncom multiroot7.5 (v2.0)High
CVE-2010-1955Joomla! Component Deluxe Blog Factory 1.1.2 - Local File Inclusioncom blogfactory7.5 (v2.0)High
CVE-2010-1956Joomla! Component Gadget Factory 1.0.0 - Local File Inclusioncom gadgetfactory7.5 (v2.0)High
CVE-2010-1957Joomla! Component Love Factory 1.3.4 - Local File Inclusioncom lovefactory7.5 (v2.0)High
CVE-2010-1977Joomla! Component J!WHMCS Integrator 1.5.0 - Local File Inclusioncom jwhmcs7.5 (v2.0)High
CVE-2010-1980Joomla! Component Joomla! Flickr 1.0 - Local File Inclusioncom joomlaflickr7.5 (v2.0)High
CVE-2010-1983Joomla! Component redTWITTER 1.0 - Local File Inclusioncom redtwitter7.5 (v2.0)High
CVE-2010-2033Joomla! Percha Categories Tree 0.6 - Local File Inclusioncom perchacategoriestree7.5 (v2.0)High
CVE-2010-2034Joomla! Component Percha Image Attach 1.1 - Directory Traversalcom perchaimageattach7.5 (v2.0)High
CVE-2010-2035Joomla! Component Percha Gallery 1.6 Beta - Directory Traversalcom perchagallery7.5 (v2.0)High
CVE-2010-2036Joomla! Component Percha Fields Attach 1.0 - Directory Traversalcom perchafieldsattach7.5 (v2.0)High
CVE-2010-2037Joomla! Component Percha Downloads Attach 1.1 - Directory Traversalcom perchadownloadsattach7.5 (v2.0)High
CVE-2010-2045Joomla! Component FDione Form Wizard 1.0.2 - Local File Inclusioncom dioneformwizard7.5 (v2.0)High
CVE-2010-2050Joomla! Component MS Comment 0.8.0b - Local File Inclusioncom mscomment7.5 (v2.0)High
CVE-2010-2128Joomla! Component JE Quotation Form 1.0b1 - Local File Inclusioncom jequoteform7.5 (v2.0)High
CVE-2010-2259Joomla! Component com_bfsurvey - Local File Inclusioncom bfsurvey profree7.5 (v2.0)High
CVE-2010-2682Joomla! Component Realtyna Translator 1.0.15 - Local File Inclusioncom realtyna7.5 (v2.0)High
CVE-2010-2918Joomla! Component Visites 1.1 - MosConfig_absolute_path Remote File Inclusioncom joomla visites7.5 (v2.0)High
CVE-2010-3426Joomla! Component Jphone 1.0 Alpha 3 - Local File Inclusioncom jphone7.5 (v2.0)High
CVE-2010-4282Pandora Fms < 3.1.1 - Directory Traversalpandora fms7.5 (v2.0)High
CVE-2010-4719Joomla! Component JRadio - Local File Inclusioncom jradio7.5 (v2.0)High
CVE-2010-4769Joomla! Component Jimtawl 1.0.2 - Local File Inclusioncom jimtawl7.5 (v2.0)High
CVE-2010-4977Joomla! Component Canteen 1.0 - Local File Inclusioncom canteen7.5 (v2.0)High
CVE-2010-5028Joomla! Component JE Job 1.0 - Local File Inclusioncom jejob7.5 (v2.0)High
CVE-2011-4448WikkaWiki 1.3.2 - Multiple Vulnerabilitieswikkawiki7.5 (v2.0)High
CVE-2012-1226Dolibarr ERP/CRM 3.2 Alpha - Multiple Directory Traversal Vulnerabilitiesdolibarr erp/crm7.5 (v2.0)High
CVE-2013-5639Gnew 2013.1 - Multiple Vulnerabilities (2)gnew7.5 (v2.0)High
CVE-2013-5640Gnew 2013.1 - Multiple Vulnerabilities (2)gnew7.5 (v2.0)High
CVE-2013-6041Webuzo 2.1.3 - Multiple Vulnerabilitieswebuzo7.5 (v2.0)High
CVE-2014-10037DomPHP 0.83 - Directory Traversaldomphp7.5 (v2.0)High
CVE-2014-2846WD Arkeia Virtual Appliance 10.2.9 - Local File Inclusionarkeia virtual appliance firmware7.5 (v2.0)High
CVE-2014-9145Fiyo CMS 2.0.1.8 - Multiple Vulnerabilitiesfiyo cms7.5 (v2.0)High
CVE-2014-9147Fiyo CMS 2.0.1.8 - Multiple Vulnerabilitiesfiyo cms7.5 (v3.0)High
CVE-2015-1000005WordPress Candidate Application Form <= 1.3 - Local File Inclusioncandidate-application-form7.5 (v3.0)High
CVE-2015-1000010WordPress Simple Image Manipulator < 1.0 - Local File Inclusionsimple-image-manipulator7.5 (v3.0)High
CVE-2015-1000012WordPress MyPixs <=0.3 - Local File Inclusionmypixs7.5 (v3.0)High
CVE-2015-1503IceWarp Mail Server < 11.1.1 - Directory Traversalmail server7.5 (v3.0)High
CVE-2015-3648ResourceSpace - Local File inclusionresourcespace7.5 (v2.0)High
CVE-2015-4074Joomla! Helpdesk Pro plugin <1.4.0 - Local File Inclusionhelpdesk pro7.5 (v3.0)High
CVE-2015-4632Koha 3.20.1 - Directory Traversalkoha7.5 (v3.0)High
CVE-2015-5469WordPress MDC YouTube Downloader 2.1.0 - Local File Inclusionmdc youtube downloader7.5 (v3.0)High
CVE-2015-9406mTheme Unus < 2.3 - Directory Traversalmtheme-unus7.5 (v3.1)High
CVE-2016-10924Wordpress Zedna eBook download <1.2 - Local File Inclusionzedna ebook download7.5 (v3.0)High
CVE-2016-10956WordPress Mail Masta 1.0 - Local File Inclusionmail-masta7.5 (v3.1)High
CVE-2016-2389SAP xMII 15.0 for SAP NetWeaver 7.4 - Local File Inclusionnetweaver7.5 (v3.0)High
CVE-2016-4806Web2py 2.14.5 - Multiple Vulnerabilitiesweb2py7.5 (v3.0)High
CVE-2016-6601WebNMS Framework Server 5.2/5.2 SP1 - Multiple Vulnerabilitieswebnms framework7.5 (v3.0)High
CVE-2017-15647FiberHome Routers - Local File Inclusionrouterfiberhome firmware7.5 (v3.0)High
CVE-2017-9833BOA Web Server 0.94.14 - Arbitrary File Accessboa7.5 (v3.1)High
CVE-2018-12054Schools Alert Management Script - Arbitrary File Readschools alert management script7.5 (v3.0)High
CVE-2018-12909Webgrind <= 1.5 - Local File Inclusionwebgrind7.5 (v3.0)High
CVE-2018-14912cgit < 1.2.1 - Directory Traversalcgit7.5 (v3.0)High
CVE-2018-14918LOYTEC LGATE-902 6.3.2 - Local File Inclusionlgate-902 firmware7.5 (v3.0)High
CVE-2018-15138LG-Ericsson iPECS NMS 30M - Local File Inclusionipecs nms7.5 (v3.0)High
CVE-2018-15535Responsive FileManager < 9.13.4 - Directory Traversalresponsive filemanager7.5 (v3.0)High
CVE-2018-16299WordPress Localize My Post 1.0 - Local File Inclusionlocalize my post7.5 (v3.0)High
CVE-2018-18323Centos Web Panel 0.9.8.480 - Local File Inclusionwebpanel7.5 (v3.0)High
CVE-2018-19458PHP Proxy 3.0.3 - Local File Inclusionphp-proxy7.5 (v3.0)High
CVE-2018-19753Tarantella Enterprise <3.11 - Local File Inclusiontarantella enterprise7.5 (v3.0)High
CVE-2018-20463WordPress JSmol2WP <=1.07 - Local File Inclusionjsmol2wp7.5 (v3.0)High
CVE-2018-6008Joomla! Jtag Members Directory 5.3.7 - Local File Inclusionjtag members directory7.5 (v3.0)High
CVE-2018-7422WordPress Site Editor <=1.1.1 - Local File Inclusionsite editor7.5 (v3.0)High
CVE-2018-9118WordPress 99 Robots WP Background Takeover Advertisements <=4.1.4 - Local File Inclusionwp background takeover advertisements7.5 (v3.0)High
CVE-2018-9205Drupal avatar_uploader v7.x-1.0-beta8 - Local File Inclusionavatar uploader7.5 (v3.0)High
CVE-2019-12276GrandNode 4.40 - Local File Inclusiongrandnode7.5 (v3.0)High
CVE-2019-12593IceWarp Mail Server <=10.4.4 - Local File Inclusionmail server7.5 (v3.0)High
CVE-2019-14205WordPress Nevma Adaptive Images <0.6.67 - Local File Inclusionadaptive images7.5 (v3.1)High
CVE-2019-14251T24 Web Server - Local File Inclusiont247.5 (v3.1)High
CVE-2019-16123PilusCart <=1.4.1 - Local File Inclusionpiluscart7.5 (v3.1)High
CVE-2019-17538Jiangnan Online Judge 0.8.0 - Local File Inclusionjiangnan online judge7.5 (v3.1)High
CVE-2019-18665DOMOS 5.5 - Local File Inclusiondomos7.5 (v3.1)High
CVE-2019-25213WordPress Advanced Access Manager - Path Traversaladvanced access manager7.5 (v3.1)High
CVE-2019-7254eMerge E3 1.00-06 - Local File Inclusionlinear emerge essential firmware7.5 (v3.1)High
CVE-2019-9757LabKey Server 19.1.0 - XML External Entity (XXE)labkey server7.5 (v3.1)High
CVE-2019-9922Joomla! Harmis Messenger 1.2.2 - Local File Inclusionje messenger7.5 (v3.1)High
CVE-2020-11738WordPress Duplicator 1.3.24 & 1.3.26 - Local File Inclusionduplicator7.5 (v3.1)High
CVE-2020-13158Artica Proxy Community Edition <4.30.000000 - Local File Inclusionartica proxy7.5 (v3.1)High
CVE-2020-14864Oracle Fusion - Directory Traversal/Local File Inclusionbusiness intelligence7.5 (v3.1)High
CVE-2020-19360FHEM 6.0 - Local File Inclusionfhem7.5 (v3.1)High
CVE-2020-24285INTELBRAS TELEFONE IP TIP200 60.61.75.22 - Local File Inclusiontip2007.5 (v3.1)High
CVE-2020-27191LionWiki <3.2.12 - Local File Inclusionlionwiki7.5 (v3.1)High
CVE-2020-27467Processwire CMS <2.7.1 - Local File Inclusionprocesswire7.5 (v3.1)High
CVE-2020-35580SearchBlox <9.2.2 - Local File Inclusionsearchblox7.5 (v3.1)High
CVE-2020-35598Advanced Comment System 1.0 - Local File Inclusionadvanced comment system7.5 (v3.1)High
CVE-2020-8209Citrix XenMobile Server - Local File Inclusionxenmobile server7.5 (v3.1)High
CVE-2021-20123Draytek VigorConnect 1.6.0-B - Local File Inclusionvigorconnect7.5 (v3.1)High
CVE-2021-20124Draytek VigorConnect 6.0-B3 - Local File Inclusionvigorconnect7.5 (v3.1)High
CVE-2021-24227Patreon WordPress <1.7.0 - Unauthenticated Local File Inclusionpatreon wordpress7.5 (v3.1)High
CVE-2021-33807Cartadis Gespage 8.2.1 - Directory Traversalgespage7.5 (v3.1)High
CVE-2021-39312WordPress True Ranker <2.2.4 - Local File Inclusiontrue ranker7.5 (v3.1)High
CVE-2021-39316WordPress DZS Zoomsounds <=6.50 - Local File Inclusionzoomsounds7.5 (v3.1)High
CVE-2021-39433BIQS IT Biqs-drive v1.83 Local File Inclusionbiqsdrive7.5 (v3.1)High
CVE-2021-41277Metabase - Local File Inclusionmetabase7.5 (v3.1)High
CVE-2021-41291ECOA Building Automation System - Directory Traversal Content Disclosureecs router controller-ecs firmware7.5 (v3.1)High
CVE-2021-41569SAS/Internet 9.4 1520 - Local File Inclusionsas/intrnet7.5 (v3.1)High
CVE-2021-43287Pre-Auth Takeover of Build Pipelines in GoCDgocd7.5 (v3.1)High
CVE-2021-43734kkFileview v4.0.0 - Local File Inclusionkkfileview7.5 (v3.1)High
CVE-2021-43778GLPI plugin Barcode < 2.6.1 - Path Traversal Vulnerability.barcode7.5 (v3.1)High
CVE-2021-45043HD-Network Realtime Monitoring System 2.0 - Local File Inclusionhd-network real-time monitoring system7.5 (v3.1)High
CVE-2021-46107Ligeo Archives Ligeo Basics - Server Side Request Forgeryligeo basics7.5 (v3.1)High
CVE-2021-46381DLINK DAP-1620 A1 v1.01 - Directory Traversaldap-1620 firmware7.5 (v3.1)High
CVE-2021-46417Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 - Local File Inclusion (LFI)colibri firmware7.5 (v3.1)High
CVE-2022-0656uDraw <3.3.3 - Local File Inclusion[web to print shop](/vendors/webtoprint/web-to-print-shop/)7.5 (v3.1)High
CVE-2022-1119WordPress Simple File List <3.2.8 - Local File Inclusionsimple-file-list7.5 (v3.1)High
CVE-2022-29014Razer Sila Gaming Router 2.0.441_api-2.0.418 - Local File Inclusionsila firmware7.5 (v3.1)High
CVE-2022-29298SolarView Compact 6.00 - Local File Inclusionsv-cpt-mc310 firmware7.5 (v3.1)High
CVE-2022-31474BackupBuddy - Local File Inclusionbackupbuddy7.5 (v3.1)High
CVE-2022-33901WordPress MultiSafepay for WooCommerce <=4.13.1 - Arbitrary File Readmultisafepay plugin for woocommerce7.5 (v3.1)High
CVE-2022-34121CuppaCMS v1.0 - Local File Inclusioncuppacms7.5 (v3.1)High
CVE-2022-34127GLPI 4.0.2 - Unauthenticated Local File Inclusion on Manageentities pluginmanageentities7.5 (v3.1)High
CVE-2022-37122Carel pCOWeb HVAC BACnet Gateway 2.1.0 - Path Traversalpcoweb hvac bacnet gateway7.5 (v3.1)High
CVE-2022-38840Güralp MAN-EAM-0003 3.2.4 - XML External Entity (XXE)man-eam-00037.5 (v3.1)High
CVE-2022-4140WordPress Welcart e-Commerce <2.8.5 - Arbitrary File Accesswelcart e-commerce7.5 (v3.1)High
CVE-2022-47501Apache OFBiz < 18.12.07 - Local File Inclusionofbiz7.5 (v3.1)High
CVE-2023-0159Extensive VC Addons for WPBakery page builder < 1.9.1 - Unauthenticated RCEextensive vc addons for wpbakery page builder7.5 (v3.1)High
CVE-2023-22047Oracle Peoplesoft - Unauthenticated File Readpeoplesoft enterprise7.5 (v3.1)High
CVE-2023-23063Cellinx NVT Web Server - Local File Disclosurenvt web server7.5 (v3.1)High
CVE-2023-26256STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusionstagil navigation7.5 (v3.1)High
CVE-2023-29887Nuovo Spreadsheet Reader 0.5.11 - Local File Inclusionspreadsheet-reader7.5 (v3.1)High
CVE-2023-33510Jeecg P3 Biz Chat - Local File Inclusionjeecg p3 biz chat7.5 (v3.1)High
CVE-2023-38879openSIS v9.0 - Path Traversalopensis7.5 (v3.1)High
CVE-2023-40924SolarView Compact < 6.00 - Directory Traversalsolarview compact firmware7.5 (v3.1)High
CVE-2023-6023VertaAI ModelDB - Path Traversalmodeldb7.5 (v3.1)High
CVE-2023-6038H2O ImportFiles - Local File Inclusionh2o7.5 (v3.1)High
CVE-2023-6977Mlflow <2.8.0 - Local File Inclusionmlflow7.5 (v3.1)High
CVE-2024-12849Error Log Viewer By WP Guru <= 1.0.1.3 - Missing Authorization to Arbitrary File Readerror-log-viewer-wp7.5 (v3.1)High
CVE-2024-1728Gradio > 4.19.1 UploadButton - Path Traversalgradio7.5 (v3.1)High
CVE-2024-27292Docassemble - Local File Inclusiondocassemble7.5 (v3.1)High
CVE-2024-36420Flowise 1.4.3 - Arbitrary File Readflowise7.5 (v3.1)High
CVE-2024-45388Hoverfly < 1.10.3 - Arbitrary File Readhoverfly7.5 (v3.1)High
CVE-2024-46938Sitecore Experience Platform <= 10.4 - Arbitrary File Readexperience commerce7.5 (v3.1)High
CVE-2024-5334Devika - Local File Inclusiondevika7.5 (v3.0)High
CVE-2024-6893Journyx - XML External Entities Injection (XXE)journyx-jtime7.5 (v3.1)High
CVE-2024-9362Polyaxon - Unauthenticated Directory Traversalpolyaxon/polyaxon7.5 (v3.0)High
CVE-2024-9935PDF Generator Addon for Elementor Page Builder <= 1.7.5 - Arbitrary File Downloadpdf-generator-addon-for-elementor-page-builder7.5 (v3.1)High
CVE-2025-10162WordPress OrderConvo < 14 - Path TraversalAdmin and Customer Messages After Order for WooCommerce: OrderConvo7.5 (v3.1)High
CVE-2025-11371Gladinet CentreStack & TrioFox - Local File Inclusioncentrestack7.5 (v3.1)High
CVE-2025-13339Hippoo Mobile App for WooCommerce <= 1.7.1 - Unauthenticated Arbitrary File ReadHippoo Mobile App for WooCommerce7.5 (v3.1)High
CVE-2025-13801Yoco Payments <= 3.8.8 - Path TraversalYoco Payments7.5 (v3.1)High
CVE-2025-24963Vitest Browser Mode - Local File Readvitest7.5 (v3.1)High
CVE-2025-2539File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated Arbitrary File Readfile away7.5 (v3.1)High
CVE-2025-27817Apache Kafka Client - Arbitrary File Readkafka7.5 (v3.1)High
CVE-2025-31131Yeswiki < 4.5.2 - Unauthenticated Path Traversalyeswiki7.5 (v3.1)High
CVE-2025-45145Directory traversal in Follett Software's Destiny Library Manager 22_0_2_rc1 and fixed in v.22.5 AU1 Path Traversal Vulnerability-7.5 (v3.1)High
CVE-2025-57231Path Traversal in avatar attachments in Docmost v0.21.0 Vulnerability-7.5 (v3.1)High
CVE-2025-61884Oracle E-Business Suite - Server-Side Request Forgeryconfigurator7.5 (v3.1)High
CVE-2025-69411ionCube Tester Plus <= 1.3 - Local File InclusionionCube tester plus7.5 (v3.1)High
CVE-2026-1557WP Responsive Images <= 1.0 - Arbitrary File ReadWP Responsive Images7.5 (v3.1)High
CVE-2026-23536Feast Feature Server <=0.58.0 - Arbitrary File Readfeast7.5 (v3.1)High
CVE-2026-29962HSC MailInspector - Local File Inclusionmailinspector7.5 (v3.1)High
CVE-2026-32820dataCycle Public Markdown Path Traversal Via /docs/*pathdataCycle-CORE7.5 (v3.1)High
CVE-2026-34239Chamilo Authenticated Remote Code Executionchamilo-lms7.5 (v4.0)High
CVE-2026-36783Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to Denial of Service Vulnerability-7.5 (v3.1)High
CVE-2026-36796Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to Denial of Service Vulnerability-7.5 (v3.1)High
CVE-2026-36851UnPoller 2.33.0 password field Path Traversal VulnerabilityUnPoller 2.33.0 password field7.5 (v3.1)High
CVE-2026-39359Wazuh: Unauthenticated Path Traversal in authd via Agent Group Namewazuh7.5 (v3.1)High
CVE-2026-39844NiceGUI has a Path Traversal in NiceGUI Upload Filename on Windows via Backslash Bypass of PurePosixPath Sanitizationnicegui7.5 (v3.1)High
CVE-2026-39847Emmett has a path traversal in internal assets handleremmett7.5 (v3.1)High
CVE-2026-46581mojarra Path Traversal Vulnerabilitymojarra7.5 (v3.1)High
CVE-2026-50776Pronis Loisirs Billetterie CSE - < 04/2026 Arbitrary Code Execution VulnerabilityPronis Loisirs Billetterie CSE - < 04/20267.5 (v3.1)High
CVE-2026-51078Dede CMS v.5.7.118 Information Disclosure Vulnerability-7.5 (v3.1)High
CVE-2026-53599Redaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mocore7.5 (v3.1)High
CVE-2026-5487DriveLock Directory Traversal Information Disclosure VulnerabilityDriveLock7.5 (v3.0)High
CVE-2026-5491DriveLock Directory Traversal Information Disclosure VulnerabilityDriveLock7.5 (v3.0)High
CVE-2026-55552Yamcs: Unauthenticated Directory Traversalyamcs7.5 (v3.1)High
CVE-2026-56671ComfyUI: Path traversal in /experiment/models/preview allows arbitrary image file readComfyUI7.5 (v3.1)High
CVE-2026-59765SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud MetadataGitea Open Source Git Server7.5 (v3.1)High
CVE-2026-61891theia Exposure of Sensitive Information to an Unauthorized Actor Vulnerabilitytheia7.5 (v3.1)High
CVE-2026-71209audiobookshelf - %2F Encoding Discrepancy Bypasses Cover/Image Auth Exemption Regex, Enabling Unauthenticated Path Traveaudiobookshelf7.5 (v3.1)High
CVE-2026-75328In DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller/DocController.java Path Traversal VulnerabilityIn DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller/DocController.java7.5 (v3.1)High
CVE-2026-75333yx-image-recognition v1.0 Path Traversal Vulnerability-7.5 (v3.1)High
CVE-2026-79407the SPO extension of MetaGPT 0.8.1 Path Traversal Vulnerabilitythe SPO extension of MetaGPT 0.8.17.5 (v3.1)High
CVE-2026-81265Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetchesLangflow OSS7.5 (v3.1)High
CVE-2026-9282W3 Total Cache <= 2.9.4 - Unauthenticated Arbitrary File ReadW3 Total Cache7.5 (v3.1)High
CVE-2026-49857auth-fetch-mcp has SSRF Protection Bypass via IPv4-mapped IPv6 Loopbackauth-fetch-mcp7.4 (v3.1)High
CVE-2026-70666Lemur: Server-Side Request Forgery via the ACME client following server-controlled URLslemur7.4 (v3.1)High
CVE-2026-10870Shibby Tomato Web UI rc start_dhcpc os command injectionTomato7.3 (v4.0)High
CVE-2026-10871Shibby Tomato Web UI rc start_6rd_tunnel os command injectionTomato7.3 (v4.0)High
CVE-2026-10873Shibby Tomato Web UI rstats rstats_path os command injectionTomato7.3 (v4.0)High
CVE-2026-18900H3C NX15 Backend RPC esps file.exec os command injectionNX157.3 (v4.0)High
CVE-2026-19771Baicells EG3661M LuCI Web luci os command injectionEG3661M7.3 (v4.0)High
CVE-2026-15244HUSKY - Products Filter Professional for WooCommerce < 1.4.1 - Shop Manager+ Local File Inclusion via meta_filter searchHUSKY7.2 (v3.1)High
CVE-2026-15686Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution VulnerabilityAdminer7.2 (v3.0)High
CVE-2026-18274Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution VulnerabilityDatabase Proxy7.2 (v3.0)High
CVE-2026-20297Path Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprisesplunk7.2 (v3.1)High
CVE-2026-27891Remote Code Execution (RCE) via Zip Slip in Plugin Upload Mechanismfacturascripts7.2 (v3.1)High
CVE-2026-33715Chamilo LMS has Unauthenticated SSRF and Open Email Relay via install.ajax.php test_mailer actionchamilo lms7.2 (v3.1)High
CVE-2026-34607Emlog: Path Traversal in emUnZip() allows arbitrary file write leading to RCEemlog7.2 (v3.1)High
CVE-2026-34968Adminer before 5.4.3 Arbitrary File Deletion via SQLite Dropadminer7.2 (v4.0)High
CVE-2026-35174Chyrp Lite has a Path Traversal to Remote Code Executionchyrp lite7.2 (v3.1)High
CVE-2026-3576Planyo Online Reservation System <= 3.0 - Arbitrary File ReadPlanyo online reservation system7.2 (v3.1)High
CVE-2026-39387BoidCMS: Local File Inclusion (LFI) leads to Remote Code Execution (RCE) via tpl parameterboidcms7.2 (v3.1)High
CVE-2026-45019Chainlit: SSRF via MCP SSE and streamable-http transports allows unauthenticated internal network accesschainlit7.2 (v3.1)High
CVE-2026-6229Royal Addons for Elementor <= 1.7.1057 - Authenticated (Contributor+) Server-Side Request Forgery via CSV URL ParameterRoyal Addons for Elementor – Addons and Templates Kit for Elementor7.2 (v3.1)High
CVE-2026-71284Fledge IoT Gateway Backup Restore OS Command Injection via Tar Member Filenamefledge7.2 (v3.1)High
CVE-2026-85160AVideo through c91b5975d CSRF and Path Traversal via stopLive.phpAVideo7.2 (v4.0)High
CVE-2018-25393Navigate CMS 2.8.5 Path Traversal via navigate_download.phpNavigate CMS7.1 (v4.0)High
CVE-2018-25421Open STA Manager 2.3 Arbitrary File Download via Path TraversalOpen STA Manager7.1 (v4.0)High
CVE-2019-25246BEWARD N100 H.264 VGA IP Camera M2.1.6 - Arbitrary File DisclosureN100 H.264 VGA IP Camera7.1 (v4.0)High
CVE-2026-22664prompts.chat SSRF via Fal.ai Media Status Pollingprompts.chat7.1 (v4.0)High
CVE-2026-39370WWBN AVideo has an Allowlisted downloadURL media extensions bypass SSRF protection and enable internal response exfiltravideo7.1 (v3.1)High
CVE-2026-40526Volmarg Personal Management System Path Traversal via get-file Endpointpersonal-management-system7.1 (v4.0)High
CVE-2026-42339New API: SSRF Filter Bypass via 0.0.0.0new api7.1 (v4.0)High
CVE-2026-46555WhatsApp MCP: Unauthenticated bridge API allows message sending and arbitrary file exfiltrationwhatsapp mcp server7.1 (v3.1)High
CVE-2026-47735Arc has an authenticated arbitrary local-file read via DuckDB I/O functions that bypasses RBAC table-level checksarc7.1 (v4.0)High
CVE-2026-54166Shelf Vulnerable to Server-Side Request Forgery (SSRF) via Asset CSV Import imageUrl Validation Bypassshelf.nu7.1 (v3.1)High
CVE-2026-55537PraisonAI: Webhook SSRF via DNS fail-open in JobSubmitRequest.validate_webhook_url() — bypass of CVE-2026-40114PraisonAI7.1 (v3.1)High
CVE-2026-64826rConfig < 8.2.13 Path Traversal File Read via FileDownloadControllerrConfig7.1 (v4.0)High
CVE-2026-71964CyberPanel 2.4.3 Arbitrary File Read via File Manager ZIP Uploadcyberpanel7.1 (v4.0)High
CVE-2026-72695Grav before 2.0.16 Path Traversal via MediaUploadTrait deleteFilegrav7.1 (v4.0)High
CVE-2026-74247Quay: ssrf via build archive_url in quay build apiopenshift update service7.1 (v3.1)High
CVE-2026-75830grav-plugin-api before 1.0.15 Path Traversal via batchCopygrav7.1 (v4.0)High
CVE-2026-75844ArcadeDB before 26.8.1 SSRF via IMPORT DATABASE validator bypassarcadedb7.1 (v4.0)High
CVE-2026-76210phpMyFAQ before v4.1.6 Local File Disclosure via PDF Exportphpmyfaq7.1 (v4.0)High
CVE-2026-77939Flextype CMS 1.0.0-dev RCE via POST /api/v1/query Endpointflextype7.1 (v4.0)High
CVE-2026-79747MCPHub vulnerable to SSRF: a non-admin user can make mcphub request arbitrary URLs and read the response (OpenAPI proxymcphub7.1 (v3.1)High
CVE-2026-79788Dradis Community Edition 5.1.0 through 5.2.0 Server-Side Request Forgery via Unrestricted AI Provider Addressdradis-ce7.1 (v4.0)High
CVE-2026-80350OneUptime before 12.0.7 Server-Side Request Forgery via IPv4-Mapped IPv6 Webhook URLOneUptime7.1 (v4.0)High
CVE-2026-81030Mage AI through 0.9.79 Arbitrary File Read via Unvalidated Path in browser_items Endpointmage-ai7.1 (v4.0)High
CVE-2026-82241Budibase backend-core SSRF via incomplete default blacklistserver7.1 (v4.0)High
CVE-2026-82246Budibase Server before 3.41.3 SSRF via Query Importserver7.1 (v4.0)High
CVE-2026-82877ILIAS before 9.22 Arbitrary File Read via SOAP addFileILIAS7.1 (v4.0)High
CVE-2026-85163AVideo Server-Side Request Forgery via epg_link parameterAVideo7.1 (v4.0)High
CVE-2026-85164WWBN AVideo Server-Side Request Forgery via set_api_userImagesAVideo7.1 (v4.0)High
CVE-2026-87821Lara Dashboard 0.9.2 through 1.3.1 Server-Side Request Forgery in Builder Markdown Fetchlaradashboard7.1 (v4.0)High
CVE-2026-87999Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetchopen-webui7.1 (v3.1)High
CVE-2026-88938knowns through 0.33.0 Path Traversal via code.find MCP toolknowns7.1 (v4.0)High
CVE-2026-10107MoviePilot v2 SSRF via /api/v1/system/img/{proxy} EndpointMoviePilot7.0 (v4.0)High
CVE-2026-40506OpenEMR Path Traversal Arbitrary Directory Deletion via standard_tables_manage.phpopenemr7.0 (v4.0)High
CVE-2026-54134OctoPrint: File exfiltration possible via query parameters on upload endpointsOctoPrint7.0 (v4.0)High
CVE-2026-73033Sucuri WordPress Plugin 2.7.3 Path Traversal via integrity.lib.phpsucuri-wordpress-plugin7.0 (v4.0)High
CVE-2026-74038Wazuh 4.0.0 < 4.14.6 Path Traversal DoS via Agent Enrollmentwazuh-manager7.0 (v4.0)High
CVE-2019-25760Joomla! Component Easy Shop 1.2.3 Local File Inclusioneasy shop6.9 (v4.0)Medium
CVE-2022-50954WordPress Plugin cab-fare-calculator 1.0.3 Local File Inclusioncab-fare-calculator6.9 (v4.0)Medium
CVE-2022-50956WordPress Plugin amministrazione-aperta 3.7.3 Local File Readamministrazione-aperta6.9 (v4.0)Medium
CVE-2025-1743Pichome 2.1.0 - Arbitrary File ReadPichome6.9 (v4.0)Medium
CVE-2026-11450GL.iNet GL-MT3000 Path Normalization dlopen command injectionGL-MT30006.9 (v4.0)Medium
CVE-2026-19983GL.iNet XE3000 NAS Command Service gl_nas_sys os command injectionA13006.9 (v4.0)Medium
CVE-2026-34964Adminer before 5.5.0 SSRF via PDO DSN Injectionadminer6.9 (v4.0)Medium
CVE-2026-39383Gotenberg unauthenticated blind SSRF via unfiltered webhook URLgotenberg6.9 (v4.0)Medium
CVE-2026-41917OpenKM 6.3.12 Local File Inclusion via Admin ScriptingOpenKM Community Edition6.9 (v4.0)Medium
CVE-2026-44652SillyTavern: SSRF vulnerability in the CORS proxy middlewareSillyTavern6.9 (v4.0)Medium
CVE-2026-45731WWBN AVideo: Authenticated Arbitrary File Read in view/update.phpavideo6.9 (v4.0)Medium
CVE-2026-45774compliance-trestle Profile Import has an Arbitrary File Read via trestle:// URI and Relative Path Traversalcompliance-trestle6.9 (v4.0)Medium
CVE-2026-46337WWBN AVideo: Unauthenticated Arbitrary Image Read via Path Traversal in view/img/image404Raw.phpavideo6.9 (v4.0)Medium
CVE-2026-53757Emlog: Zip Slip Path Traversal in Plugin/Template ZIP Upload Enables RCEemlog6.9 (v4.0)Medium
CVE-2026-54885Server-side request forgery in Boruta OAuth request_uri and OpenID jwks_uri fetchingboruta6.9 (v4.0)Medium
CVE-2026-5739PowerJob OpenAPI Endpoint addWorkflowNode GroovyEvaluator.evaluate code injectionPowerJob6.9 (v4.0)Medium
CVE-2026-71932DrayTek VigorSwitch Multiple Models Path Traversal via getSyslogFileVigorSwitch G2540xs6.9 (v4.0)Medium
CVE-2026-73058stoatchat before 0.15.0 SSRF via IPv6 unspecified address bypassstoatchat6.9 (v4.0)Medium
CVE-2026-74235GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Configuration Download HandlerGFI Exinda AI6.9 (v4.0)Medium
CVE-2026-75592Kirby: Access to image files outside of the site root via path traversal in the media handlingkirby6.9 (v4.0)Medium
CVE-2026-79743MCPHub: Path Traversal via Malicious MCPB Manifest Namemcphub6.9 (v4.0)Medium
CVE-2026-79773Winter CMS before 1.2.13 Local File Inclusion via JavaScriptwinter6.9 (v4.0)Medium
CVE-2026-79781rclone serve s3 Path Traversal via dot-dot object keysrclone6.9 (v4.0)Medium
CVE-2026-81678AVideo SSRF Guard Bypass via IPv6 Transition AddressesAVideo6.9 (v4.0)Medium
CVE-2026-82233SiYuan before v3.8.1 Path Traversal via asset.uploadsiyuan6.9 (v4.0)Medium
CVE-2026-84199Kyverno before 1.16.2 SSRF via APICall Featurekyverno6.9 (v4.0)Medium
CVE-2026-85609Openpanel before 2.3.0 SSRF via Site Checker Endpointopenpanel6.9 (v4.0)Medium
CVE-2026-85662Marqo 2.26.0 Server-Side Request Forgery via Media URLsmarqo6.9 (v4.0)Medium
CVE-2026-86539knowns through 0.33.0 Server-Side Request Forgery via embedding-models endpointknowns6.9 (v4.0)Medium
CVE-2026-86806opengeos GeoLibre _is_within_roots server-side request forgeryGeoLibre6.9 (v4.0)Medium
CVE-2026-8712Wyoming < 1.10.2 SSRF via uri Query Parameterwyoming6.9 (v4.0)Medium
CVE-2026-88940knowns through 0.33.0 Arbitrary Directory Enumeration via workspace browse endpointknowns6.9 (v4.0)Medium
CVE-2007-4556OpenSymphony XWork/Apache Struts2 - Remote Code Executionxwork6.8 (v2.0)Medium
CVE-2008-2650CMSimple 3.1 - Local File Inclusioncmsimple6.8 (v2.0)Medium
CVE-2008-6172Joomla! Component RWCards 3.0.11 - Local File Inclusionrwcards6.8 (v2.0)Medium
CVE-2009-3053Joomla! Agora 3.0.0b - Local File InclusionJoomla!6.8 (v2.0)Medium
CVE-2010-1056Joomla! Component com_rokdownloads - Local File Inclusioncom rokdownloads6.8 (v2.0)Medium
CVE-2010-1219Joomla! Component com_janews - Local File Inclusioncom janews6.8 (v2.0)Medium
CVE-2010-1469Joomla! Component JProject Manager 1.0 - Local File Inclusioncom jprojectmanager6.8 (v2.0)Medium
CVE-2010-1473Joomla! Component Advertising 0.25 - Local File Inclusioncom advertising6.8 (v2.0)Medium
CVE-2010-1474Joomla! Component Sweetykeeper 1.5 - Local File Inclusioncom sweetykeeper6.8 (v2.0)Medium
CVE-2010-1475Joomla! Component Preventive And Reservation 1.0.5 - Local File Inclusioncom preventive6.8 (v2.0)Medium
CVE-2010-1476Joomla! Component AlphaUserPoints 1.5.5 - Local File Inclusioncom alphauserpoints6.8 (v2.0)Medium
CVE-2010-1478Joomla! Component Jfeedback 1.2 - Local File Inclusioncom jfeedback6.8 (v2.0)Medium
CVE-2010-1607Joomla! Component WMI 1.5.0 - Local File Inclusioncom wmi6.8 (v2.0)Medium
CVE-2010-1715Joomla! Component Online Exam 1.5.0 - Local File Inclusioncom onlineexam6.8 (v2.0)Medium
CVE-2010-1718Joomla! Component Archery Scores 1.0.6 - Local File Inclusioncom archeryscores6.8 (v2.0)Medium
CVE-2010-1719Joomla! Component MT Fire Eagle 1.2 - Local File Inclusioncom mtfireeagle6.8 (v2.0)Medium
CVE-2010-1722Joomla! Component Online Market 2.x - Local File Inclusioncom market6.8 (v2.0)Medium
CVE-2010-1723Joomla! Component iNetLanka Contact Us Draw Root Map 1.1 - Local File Inclusioncom drawroot6.8 (v2.0)Medium
CVE-2010-1979Joomla! Component Affiliate Datafeeds 880 - Local File Inclusioncom datafeeds6.8 (v2.0)Medium
CVE-2010-1981Joomla! Component Fabrik 2.0 - Local File Inclusionfabrik6.8 (v2.0)Medium
CVE-2010-2122Joomla! Component simpledownload <=0.9.5 - Arbitrary File Retrievalcom simpledownload6.8 (v2.0)Medium
CVE-2010-2507Joomla! Component Picasa2Gallery 1.2.8 - Local File Inclusioncom picasa2gallery6.8 (v2.0)Medium
CVE-2010-2680Joomla! Component jesectionfinder - Local File Inclusioncom jesectionfinder6.8 (v2.0)Medium
CVE-2010-2857Joomla! Component Music Manager - Local File Inclusioncom music6.8 (v2.0)Medium
CVE-2010-2920Joomla! Component Foobla Suggestions 1.5.1.2 - Local File Inclusioncom foobla suggestions6.8 (v2.0)Medium
CVE-2010-4617Joomla! Component JotLoader 2.2.1 - Local File Inclusioncom jotloader6.8 (v2.0)Medium
CVE-2011-2744Chyrp 2.x - Local File Inclusionchyrp6.8 (v2.0)Medium
CVE-2011-4449WikkaWiki 1.3.2 - Multiple Vulnerabilitieswikkawiki6.8 (v2.0)Medium
CVE-2011-4452WikkaWiki 1.3.2 - Multiple Vulnerabilitieswikkawiki6.8 (v2.0)Medium
CVE-2012-0392Apache Struts2 S2-008 RCEstruts6.8 (v2.0)Medium
CVE-2014-2383Dompdf < v0.6.0 - Local File Inclusiondompdf6.8 (v2.0)Medium
CVE-2025-59709biztalk360 Path Traversal Vulnerabilitybiztalk3606.8 (v3.1)Medium
CVE-2026-35593Trilium Notes has Local File Inclusion via upload modified file API endpointTrilium6.8 (v3.1)Medium
CVE-2026-55421Open edX Platform: SSRF in Studio Video Download Endpointopenedx-platform6.8 (v3.1)Medium
CVE-2026-71475Insights-client-rhel9: insights-client: spoke-controlled clusterid injected unencoded into insights api url pathadvanced cluster management for kubernetes6.8 (v3.1)Medium
CVE-2026-10821Yoast SEO Premium < 27.6.1 - Author+ Arbitrary .htaccess Directive Injection to RCEYoast SEO Premium6.6 (v3.1)Medium
CVE-2026-34216CtrlPanel: Authenticated Remote Code Execution via Dynamic Class Instantiation in SettingsController.phppanel6.6 (v3.1)Medium
CVE-2013-4861MiCasaVerde VeraLite 1.5.408 - Multiple Vulnerabilitiesveralite firmware6.5 (v3.1)Medium
CVE-2013-4865MiCasaVerde VeraLite 1.5.408 - Multiple Vulnerabilitiesveralite firmware6.5 (v3.1)Medium
CVE-2016-6435Cisco Firepower Threat Management Console 6.0.1 - Local File Inclusionsecure firewall management center6.5 (v3.0)Medium
CVE-2017-14537Trixbox 2.8.0 - Path Traversaltrixbox6.5 (v3.1)Medium
CVE-2018-15140OpenEMR 5.0.1.3 - (Authenticated) Arbitrary File Actionsopenemr6.5 (v3.0)Medium
CVE-2018-15141OpenEMR 5.0.1.3 - (Authenticated) Arbitrary File Actionsopenemr6.5 (v3.0)Medium
CVE-2018-18760RhinOS CMS 3.x - Arbitrary File Downloadrhinos6.5 (v3.0)Medium
CVE-2019-14312Aptana Jaxer 1.0.3.4547 - Local File inclusionjaxer6.5 (v3.0)Medium
CVE-2021-24947WordPress Responsive Vector Maps < 6.4.2 - Arbitrary File Readresponsive vector maps6.5 (v3.1)Medium
CVE-2021-28149Hongdian H8922 3.0.5 Devices - Local File Inclusionh8922 firmware6.5 (v3.1)Medium
CVE-2021-29006rConfig 3.9.6 - Local File Inclusionrconfig6.5 (v3.1)Medium
CVE-2021-36749Apache Druid - Local File Inclusiondruid6.5 (v3.1)Medium
CVE-2021-40651OS4Ed OpenSIS Community 8.0 - Local File Inclusionopensis6.5 (v3.1)Medium
CVE-2022-34125GLPI Activity v3.1.0 - Authenticated Local File Inclusion on Activity plugincmdb6.5 (v3.1)Medium
CVE-2022-37299Shirne CMS 1.2.0 - Local File Inclusionshirne cms6.5 (v3.1)Medium
CVE-2024-24565CrateDB Database - Arbitrary File Readcratedb6.5 (v3.1)Medium
CVE-2024-27564ChatGPT个人专用版 - Server Side Request Forgerychatgpt web6.5 (v3.1)Medium
CVE-2024-36527Puppeteer Renderer - Directory Traversal-6.5 (v3.1)Medium
CVE-2024-55457MasterSAM Star Gate v11 - Local File Inclusion-6.5 (v3.1)Medium
CVE-2024-9765EKC Tournament Manager WordPress plugin - Path Traversalekc tournament manager6.5 (v3.1)Medium
CVE-2025-28367mojoPortal <=2.9.0.1 - Directory Traversalmojoportal6.5 (v3.1)Medium
CVE-2025-32815NetMRI < 7.6.1 - Authentication Bypass via Hardcoded Credentialsnetmri6.5 (v3.1)Medium
CVE-2025-45870LogicalDOC Enterprise up to and for v9.1.1 Path Traversal Vulnerability-6.5 (v3.1)Medium
CVE-2026-11442Allegra exportReport Directory Traversal Information Disclosure VulnerabilityAllegra6.5 (v3.0)Medium
CVE-2026-12898All-in-One WP Migration and Backup < 7.106 - Arbitrary Log File Writeall-in-one-wp-migration6.5 (v3.1)Medium
CVE-2026-14470Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base componelangflow6.5 (v3.1)Medium
CVE-2026-15974sglang Server-Side Request Forgery Vulnerabilitysglang6.5 (v3.1)Medium
CVE-2026-34740AVideo: Stored SSRF via Video EPG Link Missing isSSRFSafeURL() Validationavideo6.5 (v3.1)Medium
CVE-2026-34787Emlog: Local File Inclusion in plugin.php via unsanitized plugin parameteremlog6.5 (v3.1)Medium
CVE-2026-35718fd8136 firmware Path Traversal Vulnerabilityfd8136 firmware6.5 (v3.1)Medium
CVE-2026-36227Easy Chat Server 3.1 Arbitrary Code Execution VulnerabilityEasy Chat Server 3.16.5 (v3.1)Medium
CVE-2026-39368WWBN AVideo has a Live restream log callback flow enabling stored SSRF to internal servicesavideo6.5 (v3.1)Medium
CVE-2026-46397haxcms-php Local File Inclusion via saveOutline API Location Parameter v2.0haxcms-php6.5 (v3.1)Medium
CVE-2026-46556FlaskBB: SSRF in get_image_info() via unrestricted avatar URLflaskbb6.5 (v3.1)Medium
CVE-2026-52371xxl-job v3.4.0 Server-Side Request Forgery Vulnerabilityxxl-job v3.4.06.5 (v3.1)Medium
CVE-2026-52607reportico-web <= 8.1.0 Path Traversal Vulnerabilityreportico-web <= 8.1.06.5 (v3.1)Medium
CVE-2026-54054Transmute has full-read SSRF in URL file import (POST /api/files/url) — no host/IP validation, follows redirectstransmute6.5 (v3.1)Medium
CVE-2026-58442Repository migration SSRF via multi-answer DNS allow-list bypassGitea Open Source Git Server6.5 (v3.1)Medium
CVE-2026-63667ApostropheCMS: Arbitrary file read via import-export attachment-name path traversalapostrophe6.5 (v3.1)Medium
CVE-2026-72739Dokploy: Command Injection via Compose Shell Executiondokploy6.5 (v3.1)Medium
CVE-2026-73255Mongoose: Path traversal in SSI #include directives enables arbitrary file readmongoose6.5 (v3.1)Medium
CVE-2026-73573zimbra collaboration suite Path Traversal Vulnerabilityzimbra collaboration suite6.5 (v3.1)Medium
CVE-2026-73574zimbra collaboration suite Incorrect Resource Transfer Between Spheres Vulnerabilityzimbra collaboration suite6.5 (v3.1)Medium
CVE-2026-75602OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download toolOpenList6.5 (v3.1)Medium
CVE-2026-7646Langflow is affected by security vulnerabilities in Model Context Protocol featureslangflow6.5 (v3.1)Medium
CVE-2026-7658Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcementlangflow6.5 (v3.1)Medium
CVE-2026-9138Langflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing clangflow6.5 (v3.1)Medium
CVE-2009-0932Horde/Horde Groupware - Local File Inclusionhorde6.4 (v2.0)Medium
CVE-2011-4450WikkaWiki 1.3.2 - Multiple Vulnerabilitieswikkawiki6.4 (v2.0)Medium
CVE-2026-45573Decidim: Push subscriptions can be abused for server-side requestsdecidim6.4 (v3.1)Medium
CVE-2026-79717Galaxy_ng: galaxy_ng: blind ssrf via namespace avatar_url with no private-address restrictionRed Hat Ansible Automation Platform 26.4 (v3.1)Medium
CVE-2026-82081wallabag Server-Side Request Forgery Vulnerabilitywallabag6.4 (v3.1)Medium
CVE-2026-34371LibreChat Affected by Arbitrary File Write via execute_code Artifact Filename Traversallibrechat6.3 (v3.1)Medium
CVE-2026-39365Vite has a Path Traversal in Optimized Deps .map Handlingvite6.3 (v4.0)Medium
CVE-2026-42335MaxKB: SSRF Bypass in MaxKB OSS URL Fetch due to URL Parsing DiscrepancyMaxKB6.3 (v4.0)Medium
CVE-2026-42344FastGPT: DNS rebinding TOCTOU bypass in isInternalAddress allows SSRF on all protected endpointsFastGPT6.3 (v3.1)Medium
CVE-2026-44284FastGPT: Stored MCP tool URL SSRF in FastGPT workflow executionFastGPT6.3 (v3.1)Medium
CVE-2026-44287FastGPT: sandbox escape to RCE - code-sandbox regex /\bimport\s*(/ is bypassableFastGPT6.3 (v3.1)Medium
CVE-2026-45626Arcane: OS Command Injection in Volume Browser ListDirectory via path query parameterarcane6.3 (v3.1)Medium
CVE-2026-49120Medplum < 5.1.14 SSRF via FHIR Subscription Endpointmedplum6.3 (v4.0)Medium
CVE-2026-54020Open WebUI: DNS Rebinding SSRF Bypassopen-webui6.3 (v3.1)Medium
CVE-2026-56722Dompdf: Local file read due to improper file path validation in SVG images encoded as data-URIdompdf6.3 (v4.0)Medium
CVE-2026-63107LimeSurvey SSRF via REST API Survey Template Host HeaderLimeSurvey6.3 (v4.0)Medium
CVE-2026-63643MagicMirror: ssrf calendar .jsMagicMirror6.3 (v4.0)Medium
CVE-2026-63731HyperDX < 2.31.0 SSRF via ClickHouse Proxy Test Endpointhyperdx6.3 (v4.0)Medium
CVE-2026-63769Huginn 2022.08.18 SSRF via ScenarioImport fetch_url Methodhuginn6.3 (v4.0)Medium
CVE-2026-65012InvokeAI < 6.13.7 Unauthenticated Directory Enumeration via scan_folderInvokeAI6.3 (v4.0)Medium
CVE-2026-65593n8n before 1.123.64, 2.29.8, and 2.30.1 SSRF via Dynamic Node Parametersn8n6.3 (v4.0)Medium
CVE-2026-67620Flowise 3.1.4 SSRF via fetch-links Endpoint Incomplete Deny-Listflowise6.3 (v4.0)Medium
CVE-2026-70667Lemur: SSRF protection in certificate revocation checking bypassable via HTTP redirects and DNS rebinding (incomplete filemur6.3 (v3.1)Medium
CVE-2026-72814actix-web before 0.6.10 Information Disclosure via Filesactix-web6.3 (v4.0)Medium
CVE-2026-728609router Server-Side Request Forgery via /api/provider-nodes/validate Because the IPv4-Mapped IPv6 Denylist Check Is Unre9router6.3 (v4.0)Medium
CVE-2026-73530Flyto2 Core < 2.28.0 SSRF Guard Bypass via is_private_ip()flyto-core6.3 (v4.0)Medium
CVE-2026-78886liketrek TREK Public Journey Photo Proxy journey-public.controller.ts path traversalTREK6.3 (v4.0)Medium
CVE-2026-86590Eclipse Che Server-Side Request Forgery VulnerabilityEclipse Che6.3 (v4.0)Medium
CVE-2014-8727F5 BIG-IP 10.1.0 - Directory Traversalbig-ip local traffic manager6.2 (v2.0)Medium
CVE-2015-4668Xceedium Xsuite - Multiple Vulnerabilitiesxsuite6.1 (v3.0)Medium
CVE-2026-70620Odysseus SSRF via Embedding Endpoint Configurationodysseus6.1 (v4.0)Medium
CVE-2026-41363OpenClaw 2026.2.6 < 2026.3.28 - Arbitrary File Read via Feishu upload_image Parameteropenclaw6.0 (v4.0)Medium
CVE-2026-65698Void 1.3.4 Path Traversal via AI Agent File-Reading Toolsvoid6.0 (v4.0)Medium
CVE-2026-66004BlenderMCP Path Traversal via download_polyhaven_asset APIblender-mcp6.0 (v4.0)Medium
CVE-2026-79653Eclipse SW360 Path Traversal VulnerabilityEclipse SW3606.0 (v4.0)Medium
CVE-2026-13693Bit Form < 3.1.0 - Unauthenticated Arbitrary File Read via Path TraversalBit Form5.9 (v3.1)Medium
CVE-2026-49244SFTPGo: Path confinement bypass in public browsable share partial ZIP downloadsftpgo5.9 (v3.1)Medium
CVE-2026-82650SiYuan before v3.8.1 Path Traversal via /api/template/rendersiyuan5.9 (v4.0)Medium
CVE-2026-86735snipe-it before 8.7.0 SSRF via IPv6 transition address bypasssnipe-it5.9 (v4.0)Medium
CVE-2010-0467Joomla! Component CCNewsLetter - Local File Inclusioncom ccnewsletter5.8 (v3.1)Medium
CVE-2024-6095LocalAI - Partial Local File Readlocalai5.8 (v3.1)Medium
CVE-2026-10526EmbedPress < 4.6.1 - Unauthenticated Blind SSRFEmbedPress5.8 (v3.1)Medium
CVE-2026-34360HAPI FHIR: Unauthenticated Blind SSRF via /loadIG Endpoint Enables Internal Network Probinghl7 fhir core5.8 (v3.1)Medium
CVE-2026-45709Mailpit has an incomplete fix for GHSA-6jxm: HTML check still permits SSRF to private/loopback/IMDS via missing IP-filtemailpit5.8 (v3.1)Medium
CVE-2026-48053Kolibri has Unauthenticated Server-Side Request Forgery (SSRF) in RemoteFacilityUserViewsetkolibri5.8 (v3.1)Medium
CVE-2026-73243kkFileView: Unauthenticated SSRF via /addTask with fullfilename type-confusion bypasskkFileView5.8 (v3.1)Medium
CVE-2025-1035KLog Server - Path TraversalKLog Server5.7 (v3.1)Medium
CVE-2026-40605Tautulli Vulnerable to Authenticated Path Traversal in Cache Deletion APITautulli5.7 (v4.0)Medium
CVE-2018-13980Zeta Producer Desktop CMS <14.2.1 - Local File Inclusionzeta producer5.5 (v3.1)Medium
CVE-2018-15536Responsive FileManager < 9.13.4 - Directory Traversalresponsive filemanager5.5 (v3.0)Medium
CVE-2025-13786taosir WTCMS index.php fetch code injectionwtcms5.5 (v4.0)Medium
CVE-2025-13792Qualitor getResumo.php eval code injectionthe file /html/st/stdeslocamento/request/getResumo.php5.5 (v4.0)Medium
CVE-2025-13810jsnjfz WebStack-Guns KaptchaController.java renderPicture path traversalwebstack-guns5.5 (v4.0)Medium
CVE-2025-13814moxi159753 Mogu Blog v2 uploadPicsByUrl LocalFileServiceImpl.uploadPictureByUrl server-side request forgerymogublog5.5 (v4.0)Medium
CVE-2026-10214zhayujie chatgpt-on-wechat Bash Tool bash.py _get_safety_warning os command injectionchatgpt-on-wechat5.5 (v4.0)Medium
CVE-2026-10280horizon921 mcpilot MCP API Call Endpoint route.ts server-side request forgerymcpilot5.5 (v4.0)Medium
CVE-2026-10287SourceCodester SEO Meta Tag Extractor index.php get_headers server-side request forgerySEO Meta Tag Extractor5.5 (v4.0)Medium
CVE-2026-10694SourceCodester Online Food Ordering System index.php include file inclusionOnline Food Ordering System5.5 (v4.0)Medium
CVE-2026-16125zevorn rt-claw http_request net.c claw_net_post server-side request forgeryrt-claw5.5 (v4.0)Medium
CVE-2026-16127zevorn rt-claw http_request tool_net.c claw_net_post server-side request forgeryrt-claw5.5 (v4.0)Medium
CVE-2026-16128zevorn rt-claw http_request swarm.c receiver_thread server-side request forgeryrt-claw5.5 (v4.0)Medium
CVE-2026-16252Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System Staffshinel Ds.jsp sql injectionMultimedia Integrated Business Display System5.5 (v4.0)Medium
CVE-2026-16910Quay: ssrf in red hat quay notification webhooks (slack/generic)Red Hat OpenShift Update Service5.5 (v3.1)Medium
CVE-2026-18641Sangfor Operation and Maintenance Security Management System Login Endpoint portal_login com.sbr.fort.foreignDP.DpLoginCOperation and Maintenance Security Management System5.5 (v4.0)Medium
CVE-2026-18646danpros HTMLy Author Name htmly.php path traversalHTMLy5.5 (v4.0)Medium
CVE-2026-18973heshengtao super-agent-party extension_proxy Route server.py sanitize_proxy_url server-side request forgerysuper-agent-party5.5 (v4.0)Medium
CVE-2026-19000JeecgBoot Anonymous Chat Attachment send server-side request forgeryJeecgBoot5.5 (v4.0)Medium
CVE-2026-19374adafap api-mcp Proxy API Endpoint route.ts customAxios server-side request forgeryapi-mcp5.5 (v4.0)Medium
CVE-2026-19379EFM ipTIME AX8004M CGI Endpoint d.cgi popen os command injectionipTIME AX8004M5.5 (v4.0)Medium
CVE-2026-19753Model Context Protocol mcp-rdf-explorer MCP Server server.py explore_url server-side request forgerymcp-rdf-explorer5.5 (v4.0)Medium
CVE-2026-19758dromara lamp-cloud chunk-check endpoint FileChunkController.java path traversallamp-cloud5.5 (v4.0)Medium
CVE-2026-19762DTStack Taier Chunk-Check Endpoint FileChunkController.java Paths.ge path traversalTaier5.5 (v4.0)Medium
CVE-2026-19827alldatacenter alldata logDetailCat Endpoint JobLogController.java FileInputStream path traversalalldata5.5 (v4.0)Medium
CVE-2026-5346huimeicloud hm_editor image-to-base64 Endpoint mcp-server.js client.get server-side request forgeryhm editor5.5 (v4.0)Medium
CVE-2026-54611InstantCMS has Remote Code Execution in package installericms25.5 (v3.1)Medium
CVE-2026-5631assafelovic gpt-researcher ws Endpoint server_utils.py extract_command_data code injectiongpt-researcher5.5 (v4.0)Medium
CVE-2026-5677Totolink A7100RU cstecgi.cgi CsteSystem os command injectionA7100RU5.5 (v4.0)Medium
CVE-2026-5678Totolink A7100RU cstecgi.cgi setScheduleCfg os command injectionA7100RU5.5 (v4.0)Medium
CVE-2026-5688Totolink A7100RU cstecgi.cgi setDdnsCfg os command injectionA7100RU5.5 (v4.0)Medium
CVE-2026-5689Totolink A7100RU cstecgi.cgi setNtpCfg os command injectionA7100RU5.5 (v4.0)Medium
CVE-2026-5690Totolink A7100RU cstecgi.cgi setRemoteCfg os command injectionA7100RU5.5 (v4.0)Medium
CVE-2026-5691Totolink A7100RU cstecgi.cgi setFirewallType os command injectionA7100RU5.5 (v4.0)Medium
CVE-2026-5692Totolink A7100RU cstecgi.cgi setGameSpeedCfg os command injectionA7100RU5.5 (v4.0)Medium
CVE-2026-5736PowerJob detailPlus Endpoint InstanceController.java sql injectionPowerJob5.5 (v4.0)Medium
CVE-2026-5741suvarchal docker-mcp-server HTTP index.ts pull_image os command injectiondocker-mcp-server5.5 (v4.0)Medium
CVE-2026-5802idachev mcp-javadc HTTP os command injectionmcp-javadc5.5 (v4.0)Medium
CVE-2026-5832atototo api-lab-mcp HTTP http-server.ts test_http_endpoint server-side request forgeryapi-lab-mcp5.5 (v4.0)Medium
CVE-2026-68922MobSF: Arbitrary File Read via Path Traversal in ZIP UploadsMobile-Security-Framework-MobSF5.5 (v3.1)Medium
CVE-2026-7178ChatGPTNextWeb NextChat Artifacts Endpoint route.ts storeUrl server-side request forgerynextchat5.5 (v4.0)Medium
CVE-2026-7205duartium papers-mcp-server main.py search_papers path traversalpapers-mcp-server5.5 (v4.0)Medium
CVE-2026-7206dubydu sqlite-mcp entry.py extract_to_json sql injectionsqlite-mcp5.5 (v4.0)Medium
CVE-2026-7212edvardlindelof notes-mcp notes_mcp.py path traversalnotes-mcp5.5 (v4.0)Medium
CVE-2026-7214eghuzefa engineer-your-data server.py file_inf path traversalengineer-your-data5.5 (v4.0)Medium
CVE-2026-7216donchelo processing-claude-mcp-bridge create_sketch Tool processing_server.py path traversalprocessing-claude-mcp-bridge5.5 (v4.0)Medium
CVE-2026-7217Deepractice PromptX Document File index.ts read_pdf absolute path traversalPromptX5.5 (v4.0)Medium
CVE-2026-7220jackwrichards FastlyMCP fastly_cli Tool fastly-mcp.mjs os command injectionFastlyMCP5.5 (v4.0)Medium
CVE-2026-7221TencentCloudBase CloudBase-MCP open-url API Endpoint interactive-server.ts openUrl server-side request forgeryCloudBase-MCP5.5 (v4.0)Medium
CVE-2026-7314eiceblue spire-doc-mcp-server base.py get_doc_path path traversalspire-doc-mcp-server5.5 (v4.0)Medium
CVE-2026-7315eiceblue spire-pdf-mcp-server PDF File server.py get_pdf_path path traversalspire-pdf-mcp-server5.5 (v4.0)Medium
CVE-2026-7319elinsky execution-system-mcp add_action Tool server.py _get_context_file_path path traversalexecution-system-mcp5.5 (v4.0)Medium
CVE-2026-76760chenhg5 cc-connect webhook.go authenticate code injectioncc-connect5.5 (v4.0)Medium
CVE-2026-76761chenhg5 cc-connect Management API engine.go shellExecCommand os command injectioncc-connect5.5 (v4.0)Medium
CVE-2026-76795AeternaLabsHQ PullMD REST API Endpoint api server-side request forgeryPullMD5.5 (v4.0)Medium
CVE-2026-81421ddfourtwo sentry-selfhosted-mcp raw_sentry_api server-side request forgerysentry-selfhosted-mcp5.5 (v4.0)Medium
CVE-2026-81486bsmi021 mcp-file-context-server Path Resolution index.ts read_context path traversalmcp-file-context-server5.5 (v4.0)Medium
CVE-2026-81491boxpositron with-context-mcp index.ts project_folder path traversalwith-context-mcp5.5 (v4.0)Medium
CVE-2026-82598SeaCMS Template search.php parseIf code injectionSeaCMS5.5 (v4.0)Medium
CVE-2026-82630PowerJob Transport Endpoint TestController.java MuConnectionManager.getOrCreateConnection server-side request forgeryPowerJob5.5 (v4.0)Medium
CVE-2026-82801NASA earthdata-search scale Endpoint handler.js scaleImage server-side request forgeryearthdata-search5.5 (v4.0)Medium
CVE-2026-82802NASA earthdata-search granules Endpoint handler.js OpenSearchGranuleSearchLambda server-side request forgeryearthdata-search5.5 (v4.0)Medium
CVE-2026-84441Piwigo Image Derivative i.php path traversalPiwigo5.5 (v4.0)Medium
CVE-2026-85137SeaCMS Locoy Collector seacms_locoy_news.php parseIf code injectionSeaCMS5.5 (v4.0)Medium
CVE-2026-85380light0011 cms UEditor controller.php catchimage server-side request forgerycms5.5 (v4.0)Medium
CVE-2026-86237openagents-org openagents http.py test_default_model server-side request forgeryopenagents5.5 (v4.0)Medium
CVE-2026-86273projeto-siga HTML-to-PDF Endpoint ExUtilController.java DownloadExterno.getUrl server-side request forgerysiga5.5 (v4.0)Medium
CVE-2026-9372ItzCrazyKns Vane Model Provider API route.ts server-side request forgeryVane5.5 (v4.0)Medium
CVE-2026-9474yashpokharna2555 StudentManagementSystem studentdel.php confirm_logged_in sql injectionStudentManagementSystem5.5 (v4.0)Medium
CVE-2023-2745WordPress Core <=6.2 - Directory TraversalWordPress5.4 (v3.1)Medium
CVE-2026-17621Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base componelangflow5.4 (v3.1)Medium
CVE-2026-34590Postiz: SSRF via Webhook Creation Endpoint Missing URL Safety Validationpostiz5.4 (v3.1)Medium
CVE-2026-48483TypeBot's WhatsApp status forwarding uses unvalidated user-controlled URLs, allowing SSRF from the Typebot servertypebot.io5.4 (v3.1)Medium
CVE-2026-48762TypeBot Vulnerable to Server-Side Request Forgery (SSRF) in OpenAI Transcription Handlertypebot.io5.4 (v3.1)Medium
CVE-2026-54543Froxlor DomainZones.add allows DNS zone-file RR injection via record/type fieldsfroxlor5.4 (v3.1)Medium
CVE-2026-7798FluentCRM <= 2.9.87 - Unauthenticated Blind Server-Side Request Forgery via 'SubscribeURL' ParameterFluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution5.4 (v3.1)Medium
CVE-2026-7869Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcementlangflow5.4 (v3.1)Medium
CVE-2014-8676SO Planning 1.32 - Multiple Vulnerabilitiessoplanning5.3 (v3.0)Medium
CVE-2014-9609Netsweeper 4.0.8 - Directory Traversalnetsweeper5.3 (v3.1)Medium
CVE-2015-5471Swim Team <= v1.44.10777 - Local File Inclusionswim team5.3 (v3.0)Medium
CVE-2020-11798Mitel MiCollab AWV 8.1.2.4 and 9.1.3 - Directory Traversalmicollab audio, web &amp; video conferencing5.3 (v3.1)Medium
CVE-2020-13886Intelbras TIP 200/200 LITE/300 - Local File Inclusiontip200 firmware5.3 (v3.1)Medium
CVE-2021-28377Joomla! ChronoForums 2.0.11 - Local File Inclusionchronoforums5.3 (v3.1)Medium
CVE-2022-25497Cuppa CMS v1.0 - Local File Inclusioncuppacms5.3 (v3.1)Medium
CVE-2022-31062GLPI Glpiinventory v1.0.1 - Unauthenticated Local File Inclusionglpi inventory5.3 (v3.1)Medium
CVE-2023-41599JFinalCMS v5.0.0 - Directory Traversaljfinalcms5.3 (v3.1)Medium
CVE-2023-7299DataGear resolveSql sql injectiondatagear5.3 (v4.0)Medium
CVE-2025-4078Wangshen SecGate 3600 Path Traversal VulnerabilitySecGate 36005.3 (v4.0)Medium
CVE-2026-14860Podcast Player < 8.3.1 - Unauthenticated Server-Side Request ForgeryPodcast Player5.3 (v3.1)Medium
CVE-2026-15932Support Genix Lite < 1.4.48 - Unauthenticated Arbitrary File Read via Path TraversalSupport Genix5.3 (v3.1)Medium
CVE-2026-16531Pcp: pcp: arbitrary file creation via path traversal in pmproxy logger servletRed Hat Enterprise Linux 105.3 (v3.1)Medium
CVE-2026-16536Simple Google Calendar Outlook Events Widget < 3.1.0 - Unauthenticated SSRF via calendar_idSimple Google Calendar Outlook Events Widget5.3 (v3.1)Medium
CVE-2026-19785francoisjacquet RosarioSIS Student Medical Medical.inc.php sql injectionRosarioSIS5.3 (v4.0)Medium
CVE-2026-19956gomarble-ai facebook-ads-mcp-server server.py fetch_pagination_url server-side request forgeryfacebook-ads-mcp-server5.3 (v4.0)Medium
CVE-2026-22662prompts.chat Blind SSRF via media-generateprompts.chat5.3 (v4.0)Medium
CVE-2026-34523SillyTavern: Path traversal allows file existence oraclesillytavern5.3 (v3.1)Medium
CVE-2026-34967Adminer sql-log Plugin 5.3.0 through 5.4.2 Arbitrary File Writeadminer5.3 (v4.0)Medium
CVE-2026-36726bookcars v8.3 Path Traversal Vulnerabilitybookcars v8.35.3 (v3.1)Medium
CVE-2026-44583Paymenter: Blind Unauthenticated SSRF on the Paypal gateway modulePaymenter5.3 (v3.1)Medium
CVE-2026-49138Nanobot < 0.2.1 SSRF via web_fetch Tool Redirect Followingnanobot5.3 (v4.0)Medium
CVE-2026-53452Ground Station: Unauthenticated out-of-containment file read via sigmfplayback recordingPathground-station5.3 (v3.1)Medium
CVE-2026-54508TREK: Blind SSRF via unvalidated redirect-following in Google/Naver list import and Maps URL resolutionTREK5.3 (v4.0)Medium
CVE-2026-5538QingdaoU OnlineJudge judge_server_heartbeat Endpoint JudgeServer.service_url server-side request forgeryOnlineJudge5.3 (v4.0)Medium
CVE-2026-5547Tenda AC10 httpd formAddMacfilterRule os command injectionac10 firmware5.3 (v4.0)Medium
CVE-2026-59231Server-Side Request Forgery in Pentestify PDF export via unvalidated image URLsPentestify5.3 (v4.0)Medium
CVE-2026-63730HyperDX < 2.31.0 SSRF via Webhook Test Endpointhyperdx5.3 (v4.0)Medium
CVE-2026-64626AVideo Encoder downloadURL SSRF via unpinned retry fallbackAVideo5.3 (v4.0)Medium
CVE-2026-64870MaxKB: UpdateStoreTool fetches caller-supplied app-store URLs without host validationMaxKB5.3 (v4.0)Medium
CVE-2026-72846Lightdash Scheduled Delivery Webhook URLs Are Not Validated, Allowing Server-Side Request Forgerylightdash5.3 (v4.0)Medium
CVE-2026-73082Activepieces: Server-side request forgery in MCP tool validation endpointactivepieces5.3 (v4.0)Medium
CVE-2026-73244kkFileView: Unauthenticated path traversal in POST /listFiles allows arbitrary directory listingkkFileView5.3 (v3.1)Medium
CVE-2026-73845CKAN MCP Server: MQA server allowlist bypass via unanchored regex (isValidMqaServer)ckan-mcp-server5.3 (v3.1)Medium
CVE-2026-74858jae-jae fetcher-mcp URL Validation security-credentials fetch_urls server-side request forgeryfetcher-mcp5.3 (v4.0)Medium
CVE-2026-76239Stigmem before 0.9.0a11 SSRF via unvalidated webhook delivery_addressstigmem-node5.3 (v4.0)Medium
CVE-2026-76614OpenEMR < 8.3.0 Path Traversal Information Disclosure via EDI Archive Restoreopenemr5.3 (v4.0)Medium
CVE-2026-77067Omnivore Stored Server-Side Request Forgery via the setWebhook Mutationomnivore5.3 (v4.0)Medium
CVE-2026-84175Eclipse Ditto Uncontrolled Recursion VulnerabilityEclipse Ditto5.3 (v4.0)Medium
CVE-2026-84207Heym before 0.0.98 SSRF via WebSocket endpointsheym5.3 (v4.0)Medium
CVE-2026-85650Trigger.dev before 4.5.2 Server-Side Request Forgery via webhook alert-channeltrigger.dev5.3 (v4.0)Medium
CVE-2026-88892OpenPanel SSRF via Unguarded Importer File URL Fetchopenpanel5.3 (v4.0)Medium
CVE-2026-89247WWBN AVideo XML Injection via plugin/AD_Server/VMAP.phpAVideo5.3 (v4.0)Medium
CVE-2026-17597Nexus Repository 3 - Server-Side Request Forgery via Email Configuration VerificationNexus Repository 35.1 (v4.0)Medium
CVE-2026-19761DTStack Taier Upload Controller UploadController.java MultipartFile.getOriginalFilename path traversalTaier5.1 (v4.0)Medium
CVE-2026-19763DTStack Taier Cluster Creation ClusterController.java FileUtils.deleteDirectory path traversalTaier5.1 (v4.0)Medium
CVE-2026-42336MaxKB: SSRF Bypass via DNS Rebinding in MaxKB OSS URL FetchMaxKB5.1 (v4.0)Medium
CVE-2026-63302Local File Inclusion in Quick.CMSQuick.CMS5.1 (v4.0)Medium
CVE-2026-76203CSS sanitizer bypass in Pentestify report themes allows forced outbound requestsPentestify5.1 (v4.0)Medium
CVE-2026-79671Ech0 before 4.4.3 SSRF via DNS Resolution BypassEch05.1 (v4.0)Medium
CVE-2026-82112houtini-ai houtini-lm code_task_files index.ts path traversalhoutini-lm5.1 (v4.0)Medium
CVE-2007-4504Joomla! RSfiles <=1.0.2 - Local File Inclusionrsfiles5.0 (v2.0)Medium
CVE-2008-4764Joomla! <=2.0.0 RC2 - Local File Inclusioncom extplorer5.0 (v2.0)Medium
CVE-2008-6080Joomla! ionFiles 4.4.2 - Local File Inclusioncom ionfiles5.0 (v2.0)Medium
CVE-2008-6222Joomla! ProDesk 1.0/1.2 - Local File Inclusionpro desk support center5.0 (v2.0)Medium
CVE-2008-6668nweb2fax <=0.2.7 - Local File Inclusionnweb2fax5.0 (v2.0)Medium
CVE-2009-1496Joomla! Cmimarketplace 0.1 - Local File InclusionJoomla!5.0 (v2.0)Medium
CVE-2009-2100Joomla! JoomlaPraise Projectfork 2.0.10 - Local File InclusionJoomla!5.0 (v2.0)Medium
CVE-2009-5114WebGlimpse 2.18.7 - Directory Traversalwebglimpse5.0 (v2.0)Medium
CVE-2010-0696Joomla! Component Jw_allVideos - Arbitrary File Retrievaljw allvideos5.0 (v2.0)Medium
CVE-2010-0942Joomla! Component com_jvideodirect - Directory Traversalcom jvideodirect5.0 (v2.0)Medium
CVE-2010-0943Joomla! Component com_jashowcase - Directory Traversalcom jashowcase5.0 (v2.0)Medium
CVE-2010-0944Joomla! Component com_jcollection - Directory Traversalcom jcollection5.0 (v2.0)Medium
CVE-2010-1081Joomla! Component com_communitypolls 1.5.2 - Local File Inclusioncom communitypolls5.0 (v2.0)Medium
CVE-2010-1302Joomla! Component DW Graph - Local File Inclusioncom dwgraphs5.0 (v2.0)Medium
CVE-2010-1304Joomla! Component User Status - Local File Inclusioncom userstatus5.0 (v2.0)Medium
CVE-2010-1305Joomla! Component JInventory 1.23.02 - Local File Inclusioncom jinventory5.0 (v2.0)Medium
CVE-2010-1307Joomla! Component Magic Updater - Local File Inclusioncom joomlaupdater5.0 (v2.0)Medium
CVE-2010-1308Joomla! Component SVMap 1.1.1 - Local File Inclusioncom svmap5.0 (v2.0)Medium
CVE-2010-1312Joomla! Component News Portal 1.5.x - Local File Inclusioncom news portal5.0 (v2.0)Medium
CVE-2010-1314Joomla! Component Highslide 1.5 - Local File Inclusioncom hsconfig5.0 (v2.0)Medium
CVE-2010-1315Joomla! Component webERPcustomer - Local File Inclusioncom weberpcustomer5.0 (v2.0)Medium
CVE-2010-1340Joomla! Component com_jresearch - 'Controller' Local File Inclusioncom jresearch5.0 (v2.0)Medium
CVE-2010-1345Joomla! Component Cookex Agency CKForms - Local File Inclusioncom ckforms5.0 (v2.0)Medium
CVE-2010-1352Joomla! Component Juke Box 1.7 - Local File Inclusioncom jukebox5.0 (v2.0)Medium
CVE-2010-1353Joomla! Component LoginBox - Local File Inclusioncom loginbox5.0 (v2.0)Medium
CVE-2010-1354Joomla! Component VJDEO 1.0 - Local File Inclusioncom vjdeo5.0 (v2.0)Medium
CVE-2010-1461Joomla! Component Photo Battle 1.0.1 - Local File Inclusioncom photobattle5.0 (v2.0)Medium
CVE-2010-1491Joomla! Component MMS Blog 2.3.0 - Local File Inclusioncom mmsblog5.0 (v2.0)Medium
CVE-2010-1494Joomla! Component AWDwall 1.5.4 - Local File Inclusioncom awdwall5.0 (v2.0)Medium
CVE-2010-1532Joomla! Component PowerMail Pro 1.5.3 - Local File Inclusioncom powermail5.0 (v2.0)Medium
CVE-2010-1534Joomla! Component Shoutbox Pro - Local File Inclusioncom shoutbox5.0 (v2.0)Medium
CVE-2010-1540Joomla! Component com_blog - Directory Traversalcom myblog5.0 (v2.0)Medium
CVE-2010-1601Joomla! Component JA Comment - Local File Inclusioncom jacomment5.0 (v2.0)Medium
CVE-2010-1657Joomla! Component SmartSite 1.0.0 - Local File Inclusioncom smartsite5.0 (v2.0)Medium
CVE-2010-1658Joomla! Component NoticeBoard 1.3 - Local File Inclusioncom noticeboard5.0 (v2.0)Medium
CVE-2010-1659Joomla! Component Ultimate Portfolio 1.0 - Local File Inclusioncom ultimateportfolio5.0 (v2.0)Medium
CVE-2010-1714Joomla! Component Arcade Games 1.0 - Local File Inclusioncom arcadegames5.0 (v2.0)Medium
CVE-2010-1858Joomla! Component SMEStorage - Local File Inclusioncom smestorage5.0 (v2.0)Medium
CVE-2010-1982Joomla! Component JA Voice 2.0 - Local File Inclusioncom javoice5.0 (v2.0)Medium
CVE-2010-2018Lokomedia CMS - Local File Inclusionlokomedia cms5.0 (v2.0)Medium
CVE-2010-3203Joomla! Component PicSell 1.0 - Arbitrary File Retrievalcom picsell5.0 (v2.0)Medium
CVE-2011-0049Majordomo2 - SMTP/HTTP Directory Traversalmajordomo 25.0 (v2.0)Medium
CVE-2011-1669WP Custom Pages 0.5.0.1 - Local File Inclusion (LFI)wp custom pages5.0 (v2.0)Medium
CVE-2011-2780Chyrp 2.x - Local File Inclusionchyrp5.0 (v2.0)Medium
CVE-2011-4804Joomla! Component com_kp - 'Controller' Local File Inclusioncom obsuggest5.0 (v2.0)Medium
CVE-2012-0896Count Per Day <= 3.1 - download.php f Parameter Traversal Arbitrary File Accesscount per day5.0 (v2.0)Medium
CVE-2012-0981phpShowtime 2.0 - Directory Traversalphpshowtime5.0 (v2.0)Medium
CVE-2012-099611in1 CMS 1.2.1 - Local File Inclusion (LFI)11in15.0 (v2.0)Medium
CVE-2013-5979Xibo 1.2.2/1.4.1 - Directory Traversalxibo5.0 (v2.0)Medium
CVE-2013-6043Webuzo 2.1.3 - Multiple Vulnerabilitieswebuzo5.0 (v2.0)Medium
CVE-2013-7091Zimbra Collaboration Server 7.2.2/8.0.2 Local File Inclusionzimbra collaboration suite5.0 (v2.0)Medium
CVE-2013-7240WordPress Plugin Advanced Dewplayer 1.2 - Directory Traversaladvanced dewplayer5.0 (v2.0)Medium
CVE-2014-4577WP AmASIN – The Amazon Affiliate Shop - Local File Inclusionwp amasin - the amazon affiliate shop5.0 (v2.0)Medium
CVE-2014-4940WordPress Plugin Tera Charts - Local File Inclusiontera-charts5.0 (v2.0)Medium
CVE-2014-4941Cross RSS 1.7 - Local File Inclusionwp-cross-rss5.0 (v2.0)Medium
CVE-2014-5111Fonality trixbox - Local File Inclusiontrixbox5.0 (v2.0)Medium
CVE-2014-5181Last.fm Rotation 1.0 - Path Traversallastfm-rotation plugin5.0 (v2.0)Medium
CVE-2014-5187Tom M8te (tom-m8te) Plugin 1.5.3 - Directory Traversaltom-m8te plugin5.0 (v2.0)Medium
CVE-2014-5368WordPress Plugin WP Content Source Control - Directory Traversalwp content source control5.0 (v2.0)Medium
CVE-2014-6308Osclass Security Advisory 3.4.1 - Local File Inclusionosclass5.0 (v2.0)Medium
CVE-2014-8799WordPress Plugin DukaPress 2.5.2 - Directory Traversaldukapress5.0 (v2.0)Medium
CVE-2014-9119WordPress DB Backup <=4.5 - Local File Inclusiondb backup5.0 (v2.0)Medium
CVE-2015-1579WordPress Slider Revolution - Local File Disclosuredivi5.0 (v2.0)Medium
CVE-2015-2067Magento Server MAGMI - Directory Traversalmagmi5.0 (v2.0)Medium
CVE-2015-3897Bonita BPM Portal <6.5.3 - Local File Inclusionbonita bpm portal5.0 (v2.0)Medium
CVE-2015-4414WordPress SE HTML5 Album Audio Player 1.1.0 - Directory Traversalse html5 album audio player5.0 (v2.0)Medium
CVE-2015-4666Xceedium Xsuite - Multiple Vulnerabilitiesxsuite5.0 (v2.0)Medium
CVE-2026-16955AI Engine < 3.6.6 - Subscriber+ Arbitrary File Read via Audio TranscriptionAI Engine5.0 (v3.1)Medium
CVE-2026-79723Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetchesLangflow OSS5.0 (v3.1)Medium
CVE-2017-7461Intellinet NFC-30IR Camera - Multiple Vulnerabilitiesnfc-30ir firmware4.9 (v3.0)Medium
CVE-2021-24966WordPress Plugin Error Log Viewer 1.1.1 - Arbitrary File Clearing (Authenticated)error log viewer4.9 (v3.1)Medium
CVE-2024-10708System Dashboard < 2.8.15 - Admin+ Path Traversalsystem dashboard4.9 (v3.1)Medium
CVE-2025-15673Import and export users and customers < 2.4.3 - Admin+ Arbitrary File ReadImport and export users and customers4.9 (v3.1)Medium
CVE-2026-41412alf.io vulnerable to Arbitrary File Read and Exfil via simpleHttpClient Extension Scriptalf.io4.9 (v3.1)Medium
CVE-2026-52832Nuclio: Unauthenticated path traversal in spec.handler allows arbitrary file write in Dashboard containernuclio4.9 (v3.1)Medium
CVE-2026-53594FreeScout has Arbitrary File Read in App Logs Viewer via Forged Encrypted Pathfreescout4.9 (v3.1)Medium
CVE-2026-71283Fledge IoT Gateway Backup Restore Tar Path Traversalfledge4.9 (v3.1)Medium
CVE-2016-4807Web2py 2.14.5 - Multiple Vulnerabilitiesweb2py4.8 (v3.0)Medium
CVE-2008-5587phpPgAdmin <=4.2.1 - Local File Inclusionphppgadmin4.3 (v2.0)Medium
CVE-2010-0982Joomla! Component com_cartweberp - Local File Inclusioncom cartweberp4.3 (v2.0)Medium
CVE-2010-1217Joomla! Component & Plugin JE Tooltip 1.0 - Local File Inclusionje form creator4.3 (v2.0)Medium
CVE-2010-1313Joomla! Component Saber Cart 1.0.0.12 - Local File Inclusioncom sebercart4.3 (v2.0)Medium
CVE-2011-4451WikkaWiki 1.3.2 - Multiple Vulnerabilitieswikkawiki4.3 (v2.0)Medium
CVE-2012-4253MySQLDumper 1.24.4 - Directory Traversalmysqldumper4.3 (v2.0)Medium
CVE-2013-6042Webuzo 2.1.3 - Multiple Vulnerabilitieswebuzo4.3 (v2.0)Medium
CVE-2014-9146Fiyo CMS 2.0.1.8 - Multiple Vulnerabilitiesfiyo cms4.3 (v2.0)Medium
CVE-2015-4665Xceedium Xsuite - Multiple Vulnerabilitiesxsuite4.3 (v2.0)Medium
CVE-2018-18777Microstrategy Web 7 - Local File Inclusionmicrostrategy web4.3 (v3.0)Medium
CVE-2024-7631Openshift-console: openshift console: path traversalRed Hat OpenShift Container Platform 3.114.3 (v3.1)Medium
CVE-2026-26477dokuwiki Denial of Service Vulnerabilitydokuwiki4.3 (v3.1)Medium
CVE-2026-36239PbootCMS v.3.2.11 Cross-site Scripting VulnerabilityPbootCMS v.3.2.114.3 (v3.1)Medium
CVE-2026-43936e107: Server-Side Request Forgery (SSRF) in the remote file fetchere1074.3 (v3.1)Medium
CVE-2026-49856@jshookmcp/jshook: ICMP probe and traceroute skip local-network SSRF authorizationjshookmcp4.3 (v3.1)Medium
CVE-2026-55495Cloudreve: Path Traversal in WOPI PUT_RELATIVE Allows Arbitrary File Creation in Owner Accountcloudreve4.3 (v3.1)Medium
CVE-2026-77352Wallos: Authenticated SSRF via per-user SMTP notification host (low-privilege user)Wallos4.3 (v3.1)Medium
CVE-2026-10052Quay/config-tool: quay/config-tool: ssrf via unfiltered ldap and smtp config validation endpointsRed Hat Quay 34.1 (v3.1)Medium
CVE-2026-48013Shopware: SSRF in Media External-Link Endpoint Bypasses IP Validationshopware4.1 (v3.1)Medium
CVE-2011-4640WebTitan < 3.60 - Local File Inclusionwebtitan4.0 (v2.0)Medium
CVE-2013-5528Cisco Unified Communications Manager 7/8/9 - Directory Traversalunified communications manager4.0 (v2.0)Medium
CVE-2014-1222Fiyo CMS 2.0.1.8 - Multiple Vulnerabilitiesvtiger crm4.0 (v2.0)Medium
CVE-2014-5258webEdition 6.3.8.0 - Directory Traversalwebedition cms4.0 (v2.0)Medium
CVE-2012-0991OpenEMR 4.1 - Local File Inclusionopenemr3.5 (v2.0)Low
CVE-2025-55523Agent-Zero 0.8.0 - 0.9.4 - Arbitrary File Downloadagent-zero3.5 (v3.1)Low
CVE-2026-48051Papra: SSRF via HTTP redirect bypass in webhook deliverypapra3.5 (v3.1)Low
CVE-2026-77351Wallos: SSRF via Unvalidated User-Level SMTP Host in Email Notification SettingsWallos3.5 (v3.1)Low
CVE-2026-9062Agile Store Locator < 1.6.9 - Admin+ Arbitrary File Read via Path TraversalStore Locator WordPress3.4 (v3.1)Low
CVE-2026-23603Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claimGitea Open Source Git Server3.1 (v3.1)Low
CVE-2026-48707InstantCMS vulnerable to SSRF via upload redirect bypass allows internal network service scanningicms23.1 (v3.1)Low
CVE-2026-55825Contao: Possible path traversal in job download URIscontao3.1 (v3.1)Low
CVE-2026-49262Aimeos Pagible CMS vulnerable to Server Side Request Forgery (SSRF) via DNS rebinding in admin proxypagible3.0 (v3.1)Low
CVE-2026-68927MobSF: SSRF port restriction bypass in assetlinks_checkMobile-Security-Framework-MobSF3.0 (v3.1)Low
CVE-2023-2252Directorist < 7.5.4 - Local File Inclusiondirectorist2.7 (v3.1)Low
CVE-2024-55550Mitel MiCollab - Arbitary File Readcmg suite2.7 (v3.1)Low
CVE-2026-16434Adminer before 5.5.1 X-Forwarded-Prefix Backslash Bypassadminer2.3 (v4.0)Low
CVE-2026-44286FastGPT: SSRF Vulnerability in Laf Workflow Node via Missing Internal Address ValidationFastGPT2.3 (v4.0)Low
CVE-2026-55554Dompdf: Chroot Validation Bypassdompdf2.3 (v4.0)Low
CVE-2026-73087Dozzle: SSRF guard bypass via IPv6 transition addresses (6to4/NAT64/Teredo) in webhook notification dispatcherdozzle2.3 (v4.0)Low
CVE-2026-77648Glance Server-Side Request Forgery VulnerabilityGlance2.2 (v3.1)Low
CVE-2025-13789ZenTao model.php makeRequest server-side request forgeryzentao2.1 (v4.0)Low
CVE-2025-13809orionsec orion-ops SSH Connection MachineInfoController.java server-side request forgeryorion-ops2.1 (v4.0)Low
CVE-2025-13816moxi159753 Mogu Blog v2 ZIP File unzipFile FileOperation.unzip path traversalmogublog2.1 (v4.0)Low
CVE-2025-13875Yohann0617 oci-helper OCI Configuration Upload OciServiceImpl.java addCfg path traversaloci-helper2.1 (v4.0)Low
CVE-2025-15098YunaiV yudao-cloud Business Process Management BpmSyncHttpRequestTrigger server-side request forgeryyudao-cloud2.1 (v4.0)Low
CVE-2026-10172Bdtask Multi-Store Inventory Management System Component Module.php upload unrestricted uploadMulti-Store Inventory Management System2.1 (v4.0)Low
CVE-2026-10213AstrBotDevs AstrBot API Endpoint delete path traversalAstrBot2.1 (v4.0)Low
CVE-2026-10239JeecgBoot edit WordUtil.addImage server-side request forgeryJeecgBoot2.1 (v4.0)Low
CVE-2026-10240JeecgBoot test server-side request forgerythe file /airag/airagModel/test2.1 (v4.0)Low
CVE-2026-10241jeecgboot The server processes these URLs Cloud Instance Metadata Endpoint debug FileDownloadUtils.download2DiskFromNetThe server processes these URLs2.1 (v4.0)Low
CVE-2026-10274indrasishbanerjee aem-mcp-server Axios Request Flow mcp-server.ts getAssetMetadata server-side request forgeryaem-mcp-server2.1 (v4.0)Low
CVE-2026-10276hekmon8 Jenkins-server-mcp get_build_status/get_build_log/trigger_build index.ts jobPath server-side request forgeryJenkins-server-mcp2.1 (v4.0)Low
CVE-2026-10278ishayoyo excel-mcp read_file/write_file index.ts path traversalexcel-mcp2.1 (v4.0)Low
CVE-2026-10279hiraishikentaro wezterm-mcp switch_pane/write_to_specific_pane wezterm_executor.ts os command injectionwezterm-mcp2.1 (v4.0)Low
CVE-2026-10558SourceCodester Pizzafy Ecommerce System index.php file inclusionPizzafy Ecommerce System2.1 (v4.0)Low
CVE-2026-10559SourceCodester Pizzafy Ecommerce System index.php file inclusionPizzafy Ecommerce System2.1 (v4.0)Low
CVE-2026-10662ahujasid blender-mcp ZIP File server.py requests.get server-side request forgeryblender-mcp2.1 (v4.0)Low
CVE-2026-10690wonderwhy-er DesktopCommanderMCP read_file filesystem.ts readFileFromUrl server-side request forgeryDesktopCommanderMCP2.1 (v4.0)Low
CVE-2026-11408vertex-app vertex Log Viewer Endpoint LogMod.js os command injectionvertex2.1 (v4.0)Low
CVE-2026-11467jishenghua jshERP addAccountHeadAndDetail Endpoint AccountHeadService.java path traversaljshERP2.1 (v4.0)Low
CVE-2026-12210universal-tool-calling-protocol python-utcp utcp-gql/utcp-websocket server-side request forgerypython-utcp2.1 (v4.0)Low
CVE-2026-16074AstrBotDevs AstrBot Plugin Update plugin.py update_all_plugins server-side request forgeryAstrBot2.1 (v4.0)Low
CVE-2026-16194zhayujie CowAgent web_fetch.py WebFetch.execute server-side request forgeryCowAgent2.1 (v4.0)Low
CVE-2026-16219Croogo CMS Admin File Manager FileManager.php isEditable path traversalCMS2.1 (v4.0)Low
CVE-2026-162221Panel-dev CordysCRM Third Party Endpoint TokenService.java server-side request forgeryCordysCRM2.1 (v4.0)Low
CVE-2026-162231Panel-dev CordysCRM Third Party Edit Endpoint IntegrationConfigService.java getSqlBotSrc server-side request forgeryCordysCRM2.1 (v4.0)Low
CVE-2026-17458mf-yang openclaw-cn Browser Control HTTP API agent.act.ts clickViaPlaywright server-side request forgeryopenclaw-cn2.1 (v4.0)Low
CVE-2026-18644danpros HTMLy Delete Username Endpoint htmly.php unlink path traversalHTMLy2.1 (v4.0)Low
CVE-2026-18645danpros HTMLy Admin Content Endpoint admin.php add_content path traversalHTMLy2.1 (v4.0)Low
CVE-2026-18774NousResearch hermes-agent xAI Image Generation Provider image_gen_provider.py save_url_image server-side request forgeryhermes-agent2.1 (v4.0)Low
CVE-2026-18959yushine InnoShop Files Endpoint panel-api.php destroyFiles path traversalInnoShop2.1 (v4.0)Low
CVE-2026-19040MissionSquad mcp-api dcrClients.ts server-side request forgerymcp-api2.1 (v4.0)Low
CVE-2026-19246HKUDS nanobot Provider-returned Image URL image_generation.py _download_image_data_url server-side request forgerynanobot2.1 (v4.0)Low
CVE-2026-19340anubissbe ProjectHub-Mcp Webhooks API complete_backend.js server-side request forgeryProjectHub-Mcp2.1 (v4.0)Low
CVE-2026-19375dmitriiweb article-scraper-mcp server.py fetch_article server-side request forgeryarticle-scraper-mcp2.1 (v4.0)Low
CVE-2026-19752EnzoVezzaro mcp-dominican-layer PDF Parsing index.ts parse-pdf server-side request forgerymcp-dominican-layer2.1 (v4.0)Low
CVE-2026-19756Dromara lamp-cloud Code Generator DefGenProjectController.java path traversallamp-cloud2.1 (v4.0)Low
CVE-2026-19828648540858 wvp-GB28181-pro Snapshot Endpoint PlayController.java path traversalwvp-GB28181-pro2.1 (v4.0)Low
CVE-2026-19829648540858 wvp-GB28181-pro Log File Download Endpoint LogController.java path traversalwvp-GB28181-pro2.1 (v4.0)Low
CVE-2026-19927OpenBoxes Product Upload Endpoint ProductController.groovy upload server-side request forgeryOpenBoxes2.1 (v4.0)Low
CVE-2026-19932DefaultFuction Notice-System-Managent NoticeController execute GroovyShell.evaluate code injectionNotice-System-Managent2.1 (v4.0)Low
CVE-2026-19958iatsiuk pptr-mcp execute Tool vm-executor.ts executeCode code injectionpptr-mcp2.1 (v4.0)Low
CVE-2026-19984jkawamoto mcp-florence2 init.py get_images server-side request forgerymcp-florence22.1 (v4.0)Low
CVE-2026-5351Trendnet TEW-657BRM setup.cgi add_wps_client os command injectiontew-657brm firmware2.1 (v4.0)Low
CVE-2026-5352Trendnet TEW-657BRM setup.cgi edit os command injectiontew-657brm firmware2.1 (v4.0)Low
CVE-2026-5353Trendnet TEW-657BRM setup.cgi ping_test os command injectiontew-657brm firmware2.1 (v4.0)Low
CVE-2026-5354Trendnet TEW-657BRM setup.cgi vpn_connect os command injectiontew-657brm firmware2.1 (v4.0)Low
CVE-2026-5355Trendnet TEW-657BRM setup.cgi vpn_drop os command injectiontew-657brm firmware2.1 (v4.0)Low
CVE-2026-5470mixelpixx Google-Research-MCP Model Context Protocol content-extractor.service.ts extractContent server-side request forGoogle-Research-MCP2.1 (v4.0)Low
CVE-2026-5607imprvhub mcp-browser-agent URL Parameter handlers.ts CallToolRequestSchema server-side request forgerymcp-browser-agent2.1 (v4.0)Low
CVE-2026-74842Kira-Pgr PromptShopMCP Image-Toolkit-MCP-Server server.py download_image server-side request forgeryPromptShopMCP2.1 (v4.0)Low
CVE-2026-76576yangzongzhuan RuoYi-Vue Common Download Endpoint CommonController.java resourceDownload path traversalRuoYi-Vue2.1 (v4.0)Low
CVE-2026-78166provectus kafka-ui Groovy Code MessagesController.java executeSmartFilterTest code injectionkafka-ui2.1 (v4.0)Low
CVE-2026-7890Concrete CMS 9.5.0 is vulnerable to SSRF via RSS Displayer Blockconcrete cms2.1 (v4.0)Low
CVE-2026-81845arben-adm mcp-sequential-thinking Import Session/Export Session server.py export_session path traversalmcp-sequential-thinking2.1 (v4.0)Low
CVE-2026-8188Wavlink NU516U1 adm.cgi change_wifi_password os command injectionwl-nu516u1 firmware2.1 (v4.0)Low
CVE-2026-8189Wavlink NU516U1 adm.cgi wzdrepeater os command injectionwl-nu516u1 firmware2.1 (v4.0)Low
CVE-2026-8190Wavlink NU516U1 adm.cgi wan os command injectionwl-nu516u1 firmware2.1 (v4.0)Low
CVE-2026-8191Wavlink NU516U1 adm.cgi wifi_region os command injectionwl-nu516u1 firmware2.1 (v4.0)Low
CVE-2026-8192Wavlink NU516U1 adm.cgi wzdap os command injectionwl-nu516u1 firmware2.1 (v4.0)Low
CVE-2026-8227Wavlink NU516U1 adm.cgi wzdapMesh os command injectionwl-nu516u1 firmware2.1 (v4.0)Low
CVE-2026-8228Wavlink NU516U1 wireless.cgi advance os command injectionwl-nu516u1 firmware2.1 (v4.0)Low
CVE-2026-8229Wavlink NU516U1 wireless.cgi WifiBasic os command injectionwl-nu516u1 firmware2.1 (v4.0)Low
CVE-2026-8230Wavlink NU516U1 login.cgi sys_login1 os command injectionwl-nu516u1 firmware2.1 (v4.0)Low
CVE-2026-82599SeaCMS Avatar Upload member.php unlink path traversalSeaCMS2.1 (v4.0)Low
CVE-2026-82603SeaCMS Comment Cache member.php del_pl path traversalSeaCMS2.1 (v4.0)Low
CVE-2026-8264Tenda AC6 httpd WifiApScan formWifiApScan os command injectionac6 firmware2.1 (v4.0)Low
CVE-2026-82656Admidio before 5.0.12 Path Traversal via Photo ZIP Downloadadmidio2.1 (v4.0)Low
CVE-2026-82905sdcb chats fetch-tools Endpoint McpController.cs McpController server-side request forgerychats2.1 (v4.0)Low
CVE-2026-83744invoiceninja Invoice Ninja invoices Endpoint Purify.php isHostSafe server-side request forgeryInvoice Ninja2.1 (v4.0)Low
CVE-2026-9302546669204 vps-inventory-monitoring VpsTest Console VpsTest.php eval code injectionvps-inventory-monitoring2.1 (v4.0)Low
CVE-2026-9343Edimax EW-7438RPn webs formWpsStart os command injectionEW-7438RPn2.1 (v4.0)Low
CVE-2026-9347Edimax EW-7438RPn webs formWizSurvey os command injectionEW-7438RPn2.1 (v4.0)Low
CVE-2026-9424Edimax EW-7438RPn Content-Type formWlanMP os command injectionEW-7438RPn2.1 (v4.0)Low
CVE-2026-9473c-rick jimeng-mcp api.ts generateVideo path traversaljimeng-mcp2.1 (v4.0)Low
CVE-2026-9511Totolink CA750-PoE Setting cstecgi.cgi setWebWlanIdx os command injectionCA750-PoE2.1 (v4.0)Low
CVE-2026-9512Totolink CA750-PoE Setting cstecgi.cgi setPasswordCfg os command injectionCA750-PoE2.1 (v4.0)Low
CVE-2026-9514Totolink CA750-PoE Setting cstecgi.cgi setNetworkDiag os command injectionCA750-PoE2.1 (v4.0)Low
CVE-2026-9515Totolink CA750-PoE Setting cstecgi.cgi setUnloadUserData os command injectionCA750-PoE2.1 (v4.0)Low
CVE-2026-9531Totolink CA750-PoE Setting cstecgi.cgi setUpgradeUboot os command injectionCA750-PoE2.1 (v4.0)Low
CVE-2026-9532Totolink CA750-PoE Setting cstecgi.cgi setUploadUserData os command injectionCA750-PoE2.1 (v4.0)Low
CVE-2026-9533Totolink CA750-PoE Setting cstecgi.cgi recvUpgradeNewFw os command injectionCA750-PoE2.1 (v4.0)Low
CVE-2026-9534Totolink CA750-PoE Setting cstecgi.cgi setWiFiWpsConfig os command injectionCA750-PoE2.1 (v4.0)Low
CVE-2026-12211Intelbras iNVU 7016 FT Web syslog path traversaliNVU 7016 FT2.0 (v4.0)Low
CVE-2026-16088halo-dev halo Files Backup Endpoint MigrationEndpoint.java download path traversalhalo2.0 (v4.0)Low
CVE-2026-18856Poesis Rhymix CMS Data Import importer.admin.controller.php procImporterAdminCheckXmlFile server-side request forgeryRhymix CMS2.0 (v4.0)Low
CVE-2026-19964Jij-Inc Jij-MCP-Server jm_check python_repr.py PythonREPL.run code injectionJij-MCP-Server2.0 (v4.0)Low
CVE-2026-78140Dromara UJCMS web-file-template Endpoint WebFileTemplateController.java update special elements in template engineUJCMS2.0 (v4.0)Low
CVE-2026-78435Faveo Helpdesk Logo SettingsController.php unlink path traversalHelpdesk2.0 (v4.0)Low
CVE-2026-81835RooCodeInc Roo-Code MCP Integration Trust Model malicious_mcp_server.py fetch_instructions code injectionRoo-Code2.0 (v4.0)Low
CVE-2026-81847MAA-AI MaaMCP pipeline_tools.py load_pipeline path traversalMaaMCP2.0 (v4.0)Low
CVE-2026-8259Tenda AC6 httpd telnet os command injectionac6 firmware2.0 (v4.0)Low
CVE-2026-8265Tenda AC6 httpd getLogFile get_log_file os command injectionac6 firmware2.0 (v4.0)Low
CVE-2026-82678diem-project diem Administrative Console actions.class.php executeCommand os command injectiondiem2.0 (v4.0)Low
CVE-2026-82702Edimax BR-6214K asp_WlanMP Endpoint wlanMP.asp system os command injectionBR-6214K2.0 (v4.0)Low
CVE-2026-82703Edimax BR-6214K asp_setPing Endpoint ping.asp system os command injectionBR-6214K2.0 (v4.0)Low
CVE-2026-85040ZhongBangKeJi CRMEB Custom Scheduled Task Feature save eval os command injectionCRMEB2.0 (v4.0)Low
CVE-2026-86240liufee FeehiCMS UEditor Uploader.php catchImage server-side request forgeryFeehiCMS2.0 (v4.0)Low
CVE-2026-9464YunaiV yudao-cloud Admin API Endpoint create IotDataSinkHttpConfig server-side request forgeryyudao-cloud2.0 (v4.0)Low
CVE-2026-16129princezuda SafestClaw Built-in Web shell.py ShellAction._validate_command incomplete blacklistSafestClaw1.9 (v4.0)Low
CVE-2026-19369KS-GEN-AI jira-mcp-server add_attachment_from_public_url index.ts axios.get server-side request forgeryjira-mcp-server1.9 (v4.0)Low
CVE-2026-19373PhialsBasement KoboldCPP-MCP-Server BaseConfigSchema index.ts makeRequest server-side request forgeryKoboldCPP-MCP-Server1.9 (v4.0)Low
CVE-2026-5621ChrisChinchilla Vale-MCP HTTP index.ts os command injectionVale-MCP1.9 (v4.0)Low
CVE-2026-19353DedeCMS Installation Wizard index.php _4_Setup file inclusionDedeCMS1.3 (v4.0)Low
CVE-2013-5759Yealink VoIP Phone SIP-T38G - Privilege Escalation-N/AN/A

Observed CWEs

These CWEs are recorded on published CVEs in the selected observations associated with this rule. They are observational relationships, not a claim that the rule universally blocks every vulnerability assigned to a CWE.

CWERelated Published CVEs
CWE-20CVE-2009-0545 , CVE-2026-47668 , CVE-2015-4664 , CVE-2017-12611 , CVE-2022-24086 , CVE-2025-54123 , CVE-2026-35048 , CVE-2026-53513 , CVE-2026-44343 , CVE-2026-57499 , CVE-2026-24893 , CVE-2026-34197 , CVE-2026-35031 , CVE-2026-45505 , CVE-2025-34115 , CVE-2026-28797 , CVE-2026-50553 , CVE-2024-30188 , CVE-2026-42588 , CVE-2026-69192 , CVE-2016-10956 , CVE-2026-27891 , CVE-2026-3576 , CVE-2026-56722 , CVE-2026-73845 , CVE-2026-16434 , CVE-2026-55554
CWE-22CVE-2010-5286 , CVE-2025-55169 , CVE-2026-58192 , CVE-2010-2861 , CVE-2017-7462 , CVE-2018-12031 , CVE-2018-16283 , CVE-2019-9618 , CVE-2020-11455 , CVE-2020-5902 , CVE-2022-0679 , CVE-2022-1390 , CVE-2022-1391 , CVE-2022-32409 , CVE-2022-41840 , CVE-2023-5991 , CVE-2023-6623 , CVE-2024-9047 , CVE-2025-2294 , CVE-2025-4524 , CVE-2026-35471 , CVE-2026-75337 , CVE-2026-11419 , CVE-2026-11423 , CVE-2026-72850 , CVE-2026-77086 , CVE-2019-25687 , CVE-2019-25727 , CVE-2024-27954 , CVE-2026-45668 , CVE-2026-47669 , CVE-2026-47754 , CVE-2026-53976 , CVE-2026-64824 , CVE-2026-65700 , CVE-2026-65701 , CVE-2026-69110 , CVE-2026-74798 , CVE-2026-80104 , CVE-2026-26217 , CVE-2018-16716 , CVE-2018-19365 , CVE-2022-26960 , CVE-2024-40422 , CVE-2025-55526 , CVE-2026-34745 , CVE-2026-47731 , CVE-2026-48024 , CVE-2026-52610 , CVE-2026-8713 , CVE-2008-4668 , CVE-2026-53581 , CVE-2018-15142 , CVE-2019-14530 , CVE-2020-8641 , CVE-2026-34524 , CVE-2026-35031 , CVE-2026-36723 , CVE-2026-42605 , CVE-2026-43624 , CVE-2026-44829 , CVE-2026-50186 , CVE-2026-62677 , CVE-2026-65702 , CVE-2026-76842 , CVE-2026-81730 , CVE-2026-82217 , CVE-2026-82286 , CVE-2026-84889 , CVE-2026-85199 , CVE-2026-86542 , CVE-2026-86775 , CVE-2017-20248 , CVE-2017-20250 , CVE-2018-25374 , CVE-2019-25671 , CVE-2021-4463 , CVE-2025-34031 , CVE-2025-34045 , CVE-2026-10108 , CVE-2026-17524 , CVE-2026-25559 , CVE-2026-35214 , CVE-2026-39352 , CVE-2026-43982 , CVE-2026-47394 , CVE-2026-47659 , CVE-2026-47661 , CVE-2026-57863 , CVE-2026-64838 , CVE-2026-65694 , CVE-2026-65919 , CVE-2026-67200 , CVE-2026-67281 , CVE-2026-69089 , CVE-2026-69095 , CVE-2026-72713 , CVE-2026-75111 , CVE-2026-75482 , CVE-2026-75914 , CVE-2026-85685 , CVE-2026-86538 , CVE-2026-9506 , CVE-2015-4694 , CVE-2022-24900 , CVE-2024-48766 , CVE-2025-10897 , CVE-2025-27222 , CVE-2026-11974 , CVE-2026-46491 , CVE-2026-50553 , CVE-2026-66397 , CVE-2026-88937 , CVE-2015-2996 , CVE-2025-34023 , CVE-2026-16033 , CVE-2026-73079 , CVE-2026-75855 , CVE-2025-59711 , CVE-2026-48105 , CVE-2026-69086 , CVE-2026-75842 , CVE-2026-82673 , CVE-2025-44137 , CVE-2026-40075 , CVE-2026-45711 , CVE-2026-48126 , CVE-2026-74907 , CVE-2026-19303 , CVE-2026-33236 , CVE-2026-34522 , CVE-2026-46484 , CVE-2026-54083 , CVE-2026-64679 , CVE-2026-73659 , CVE-2009-1558 , CVE-2011-3315 , CVE-2014-2962 , CVE-2026-65600 , CVE-2026-67309 , CVE-2020-35749 , CVE-2021-21234 , CVE-2026-47179 , CVE-2026-53553 , CVE-2026-54910 , CVE-2026-73498 , CVE-2026-8183 , CVE-2026-39369 , CVE-2026-65695 , CVE-2009-1479 , CVE-2009-2015 , CVE-2009-3318 , CVE-2009-4202 , CVE-2009-4679 , CVE-2010-0157 , CVE-2010-0759 , CVE-2010-0972 , CVE-2010-0985 , CVE-2010-1306 , CVE-2010-1470 , CVE-2010-1471 , CVE-2010-1472 , CVE-2010-1495 , CVE-2010-1531 , CVE-2010-1533 , CVE-2010-1535 , CVE-2010-1602 , CVE-2010-1603 , CVE-2010-1653 , CVE-2010-1717 , CVE-2010-1875 , CVE-2010-1878 , CVE-2010-1952 , CVE-2010-1953 , CVE-2010-1954 , CVE-2010-1955 , CVE-2010-1956 , CVE-2010-1957 , CVE-2010-1977 , CVE-2010-1980 , CVE-2010-1983 , CVE-2010-2033 , CVE-2010-2034 , CVE-2010-2035 , CVE-2010-2036 , CVE-2010-2037 , CVE-2010-2045 , CVE-2010-2050 , CVE-2010-2128 , CVE-2010-2259 , CVE-2010-2682 , CVE-2010-3426 , CVE-2010-4282 , CVE-2010-4719 , CVE-2010-4769 , CVE-2012-1226 , CVE-2013-5639 , CVE-2014-10037 , CVE-2014-2846 , CVE-2015-1000005 , CVE-2015-1503 , CVE-2015-3648 , CVE-2015-4074 , CVE-2015-4632 , CVE-2015-5469 , CVE-2015-9406 , CVE-2016-10924 , CVE-2016-2389 , CVE-2016-6601 , CVE-2017-15647 , CVE-2017-9833 , CVE-2018-12054 , CVE-2018-12909 , CVE-2018-14912 , CVE-2018-14918 , CVE-2018-15138 , CVE-2018-15535 , CVE-2018-16299 , CVE-2018-18323 , CVE-2018-19753 , CVE-2018-20463 , CVE-2018-7422 , CVE-2018-9118 , CVE-2018-9205 , CVE-2019-12276 , CVE-2019-12593 , CVE-2019-14205 , CVE-2019-14251 , CVE-2019-16123 , CVE-2019-17538 , CVE-2019-18665 , CVE-2019-25213 , CVE-2019-7254 , CVE-2019-9922 , CVE-2020-11738 , CVE-2020-13158 , CVE-2020-14864 , CVE-2020-19360 , CVE-2020-27467 , CVE-2020-35580 , CVE-2020-35598 , CVE-2020-8209 , CVE-2021-20123 , CVE-2021-20124 , CVE-2021-33807 , CVE-2021-39312 , CVE-2021-39316 , CVE-2021-41277 , CVE-2021-41291 , CVE-2021-43734 , CVE-2021-43778 , CVE-2021-45043 , CVE-2021-46381 , CVE-2021-46417 , CVE-2022-1119 , CVE-2022-29298 , CVE-2022-31474 , CVE-2022-34127 , CVE-2022-37122 , CVE-2022-47501 , CVE-2023-23063 , CVE-2023-26256 , CVE-2023-29887 , CVE-2023-33510 , CVE-2023-38879 , CVE-2023-40924 , CVE-2023-6023 , CVE-2024-12849 , CVE-2024-1728 , CVE-2024-45388 , CVE-2024-9362 , CVE-2024-9935 , CVE-2025-13339 , CVE-2025-13801 , CVE-2025-24963 , CVE-2025-31131 , CVE-2025-45145 , CVE-2025-57231 , CVE-2025-61884 , CVE-2025-69411 , CVE-2026-1557 , CVE-2026-23536 , CVE-2026-32820 , CVE-2026-36851 , CVE-2026-39359 , CVE-2026-39844 , CVE-2026-39847 , CVE-2026-46581 , CVE-2026-50776 , CVE-2026-5487 , CVE-2026-5491 , CVE-2026-55552 , CVE-2026-56671 , CVE-2026-61891 , CVE-2026-71209 , CVE-2026-75328 , CVE-2026-75333 , CVE-2026-79407 , CVE-2026-9282 , CVE-2026-15244 , CVE-2026-18274 , CVE-2026-20297 , CVE-2026-34607 , CVE-2026-34968 , CVE-2026-35174 , CVE-2018-25393 , CVE-2018-25421 , CVE-2019-25246 , CVE-2026-40526 , CVE-2026-46555 , CVE-2026-47735 , CVE-2026-64826 , CVE-2026-72695 , CVE-2026-81030 , CVE-2026-82877 , CVE-2026-88938 , CVE-2026-40506 , CVE-2026-73033 , CVE-2026-74038 , CVE-2022-50956 , CVE-2025-1743 , CVE-2026-41917 , CVE-2026-45731 , CVE-2026-45774 , CVE-2026-46337 , CVE-2026-53757 , CVE-2026-71932 , CVE-2026-74235 , CVE-2026-75592 , CVE-2026-79743 , CVE-2026-79773 , CVE-2026-79781 , CVE-2026-82233 , CVE-2026-88940 , CVE-2008-2650 , CVE-2008-6172 , CVE-2009-3053 , CVE-2010-1056 , CVE-2010-1219 , CVE-2010-1469 , CVE-2010-1473 , CVE-2010-1474 , CVE-2010-1475 , CVE-2010-1476 , CVE-2010-1478 , CVE-2010-1607 , CVE-2010-1715 , CVE-2010-1718 , CVE-2010-1719 , CVE-2010-1722 , CVE-2010-1723 , CVE-2010-1979 , CVE-2010-1981 , CVE-2010-2122 , CVE-2010-2507 , CVE-2010-2680 , CVE-2010-2857 , CVE-2010-2920 , CVE-2010-4617 , CVE-2011-2744 , CVE-2025-59709 , CVE-2026-35593 , CVE-2026-71475 , CVE-2013-4861 , CVE-2017-14537 , CVE-2018-15140 , CVE-2018-15141 , CVE-2019-14312 , CVE-2021-28149 , CVE-2021-29006 , CVE-2021-40651 , CVE-2022-37299 , CVE-2024-24565 , CVE-2024-36527 , CVE-2024-55457 , CVE-2025-45870 , CVE-2026-11442 , CVE-2026-12898 , CVE-2026-14470 , CVE-2026-35718 , CVE-2026-36227 , CVE-2026-46397 , CVE-2026-52607 , CVE-2026-63667 , CVE-2026-73255 , CVE-2026-75602 , CVE-2026-7646 , CVE-2026-7658 , CVE-2026-9138 , CVE-2009-0932 , CVE-2011-4450 , CVE-2026-34371 , CVE-2026-39365 , CVE-2026-72814 , CVE-2026-78886 , CVE-2014-8727 , CVE-2026-41363 , CVE-2026-65698 , CVE-2026-66004 , CVE-2026-79653 , CVE-2026-13693 , CVE-2026-49244 , CVE-2010-0467 , CVE-2025-1035 , CVE-2026-40605 , CVE-2018-13980 , CVE-2018-15536 , CVE-2025-13810 , CVE-2026-18646 , CVE-2026-19758 , CVE-2026-19762 , CVE-2026-19827 , CVE-2026-68922 , CVE-2026-7205 , CVE-2026-7212 , CVE-2026-7214 , CVE-2026-7216 , CVE-2026-7217 , CVE-2026-7314 , CVE-2026-7315 , CVE-2026-7319 , CVE-2026-81486 , CVE-2026-81491 , CVE-2026-84441 , CVE-2023-2745 , CVE-2026-17621 , CVE-2026-7869 , CVE-2014-8676 , CVE-2014-9609 , CVE-2015-5471 , CVE-2020-11798 , CVE-2020-13886 , CVE-2021-28377 , CVE-2022-31062 , CVE-2023-41599 , CVE-2025-4078 , CVE-2026-15932 , CVE-2026-16531 , CVE-2026-34523 , CVE-2026-36726 , CVE-2026-53452 , CVE-2026-73244 , CVE-2026-76614 , CVE-2026-19761 , CVE-2026-19763 , CVE-2026-82112 , CVE-2008-4764 , CVE-2008-6080 , CVE-2008-6222 , CVE-2008-6668 , CVE-2009-1496 , CVE-2009-2100 , CVE-2009-5114 , CVE-2010-0696 , CVE-2010-0942 , CVE-2010-0943 , CVE-2010-0944 , CVE-2010-1081 , CVE-2010-1302 , CVE-2010-1304 , CVE-2010-1305 , CVE-2010-1307 , CVE-2010-1308 , CVE-2010-1312 , CVE-2010-1314 , CVE-2010-1315 , CVE-2010-1340 , CVE-2010-1345 , CVE-2010-1352 , CVE-2010-1353 , CVE-2010-1354 , CVE-2010-1461 , CVE-2010-1491 , CVE-2010-1494 , CVE-2010-1532 , CVE-2010-1534 , CVE-2010-1540 , CVE-2010-1601 , CVE-2010-1657 , CVE-2010-1658 , CVE-2010-1659 , CVE-2010-1714 , CVE-2010-1858 , CVE-2010-1982 , CVE-2010-2018 , CVE-2010-3203 , CVE-2011-0049 , CVE-2011-1669 , CVE-2011-2780 , CVE-2011-4804 , CVE-2012-0896 , CVE-2012-0981 , CVE-2012-0996 , CVE-2013-5979 , CVE-2013-7091 , CVE-2013-7240 , CVE-2014-4577 , CVE-2014-4940 , CVE-2014-4941 , CVE-2014-5111 , CVE-2014-5181 , CVE-2014-5187 , CVE-2014-5368 , CVE-2014-6308 , CVE-2014-8799 , CVE-2014-9119 , CVE-2015-1579 , CVE-2015-2067 , CVE-2015-3897 , CVE-2015-4414 , CVE-2015-4666 , CVE-2026-16955 , CVE-2017-7461 , CVE-2024-10708 , CVE-2025-15673 , CVE-2026-41412 , CVE-2026-52832 , CVE-2026-53594 , CVE-2026-71283 , CVE-2008-5587 , CVE-2010-0982 , CVE-2010-1217 , CVE-2010-1313 , CVE-2012-4253 , CVE-2018-18777 , CVE-2024-7631 , CVE-2026-55495 , CVE-2011-4640 , CVE-2013-5528 , CVE-2014-1222 , CVE-2014-5258 , CVE-2012-0991 , CVE-2025-55523 , CVE-2026-9062 , CVE-2026-55825 , CVE-2023-2252 , CVE-2024-55550 , CVE-2025-13816 , CVE-2025-13875 , CVE-2026-10213 , CVE-2026-10278 , CVE-2026-11467 , CVE-2026-16219 , CVE-2026-18644 , CVE-2026-18645 , CVE-2026-18959 , CVE-2026-19756 , CVE-2026-19828 , CVE-2026-19829 , CVE-2026-76576 , CVE-2026-81845 , CVE-2026-82599 , CVE-2026-82603 , CVE-2026-82656 , CVE-2026-9473 , CVE-2026-12211 , CVE-2026-16088 , CVE-2026-78435 , CVE-2026-81847
CWE-23CVE-2025-47445 , CVE-2026-23734 , CVE-2026-85199 , CVE-2026-48126 , CVE-2026-54910
CWE-24CVE-2026-73573
CWE-29CVE-2024-34470 , CVE-2023-6023 , CVE-2023-6977
CWE-35CVE-2025-27222
CWE-36CVE-2024-48248 , CVE-2026-61891 , CVE-2026-7217
CWE-59CVE-2026-44881 , CVE-2026-71964
CWE-73CVE-2026-58192 , CVE-2018-17246 , CVE-2023-3643 , CVE-2026-86189 , CVE-2026-48162 , CVE-2026-53581 , CVE-2026-62865 , CVE-2022-24900 , CVE-2026-35032 , CVE-2026-34522 , CVE-2026-64679 , CVE-2024-5334 , CVE-2026-29962 , CVE-2026-35174 , CVE-2026-85160 , CVE-2026-75830 , CVE-2026-76210 , CVE-2026-54134 , CVE-2026-35593 , CVE-2026-46397 , CVE-2026-75602 , CVE-2026-79653 , CVE-2026-40605 , CVE-2026-10694 , CVE-2026-34967 , CVE-2021-24966 , CVE-2026-41412 , CVE-2026-10558 , CVE-2026-10559 , CVE-2026-19353
CWE-74CVE-2018-16763 , CVE-2020-17496 , CVE-2022-35914 , CVE-2026-45344 , CVE-2026-71320 , CVE-2024-36420 , CVE-2026-11450 , CVE-2026-5739 , CVE-2026-10821 , CVE-2025-13786 , CVE-2025-13792 , CVE-2026-16252 , CVE-2026-5631 , CVE-2026-5736 , CVE-2026-7206 , CVE-2026-76760 , CVE-2026-82598 , CVE-2026-85137 , CVE-2026-9474 , CVE-2026-54543 , CVE-2023-7299 , CVE-2026-19785 , CVE-2026-19932 , CVE-2026-19958 , CVE-2026-78166 , CVE-2026-9302 , CVE-2026-19964 , CVE-2026-81835
CWE-77CVE-2026-72869 , CVE-2014-1203 , CVE-2022-36553 , CVE-2022-40881 , CVE-2023-34960 , CVE-2023-45852 , CVE-2026-35847 , CVE-2026-8037 , CVE-2024-9264 , CVE-2026-47670 , CVE-2026-7202 , CVE-2026-7203 , CVE-2026-7204 , CVE-2026-9384 , CVE-2026-9385 , CVE-2026-9386 , CVE-2026-9387 , CVE-2026-9388 , CVE-2026-9404 , CVE-2026-9405 , CVE-2026-9406 , CVE-2026-9407 , CVE-2026-9408 , CVE-2026-9432 , CVE-2026-9433 , CVE-2026-9434 , CVE-2026-9435 , CVE-2026-9436 , CVE-2026-9454 , CVE-2026-9455 , CVE-2026-9456 , CVE-2026-9457 , CVE-2026-9458 , CVE-2026-9476 , CVE-2026-9477 , CVE-2026-9478 , CVE-2026-55182 , CVE-2026-82692 , CVE-2026-85223 , CVE-2026-86299 , CVE-2026-82690 , CVE-2026-82691 , CVE-2026-85222 , CVE-2026-85224 , CVE-2016-3081 , CVE-2026-10870 , CVE-2026-10871 , CVE-2026-10873 , CVE-2026-18900 , CVE-2026-19771 , CVE-2026-11450 , CVE-2026-19983 , CVE-2026-10214 , CVE-2026-18641 , CVE-2026-19379 , CVE-2026-5677 , CVE-2026-5678 , CVE-2026-5688 , CVE-2026-5689 , CVE-2026-5690 , CVE-2026-5691 , CVE-2026-5692 , CVE-2026-5741 , CVE-2026-5802 , CVE-2026-7220 , CVE-2026-76761 , CVE-2026-5547 , CVE-2026-10279 , CVE-2026-11408 , CVE-2026-5351 , CVE-2026-5352 , CVE-2026-5353 , CVE-2026-5354 , CVE-2026-5355 , CVE-2026-8188 , CVE-2026-8189 , CVE-2026-8190 , CVE-2026-8191 , CVE-2026-8192 , CVE-2026-8227 , CVE-2026-8228 , CVE-2026-8229 , CVE-2026-8230 , CVE-2026-8264 , CVE-2026-9343 , CVE-2026-9347 , CVE-2026-9424 , CVE-2026-9511 , CVE-2026-9512 , CVE-2026-9514 , CVE-2026-9515 , CVE-2026-9531 , CVE-2026-9532 , CVE-2026-9533 , CVE-2026-9534 , CVE-2026-8259 , CVE-2026-8265 , CVE-2026-82678 , CVE-2026-82702 , CVE-2026-82703 , CVE-2026-85040 , CVE-2026-5621
CWE-78CVE-2025-34037 , CVE-2026-19188 , CVE-2026-34234 , CVE-2026-49869 , CVE-2026-8985 , CVE-2026-42454 , CVE-2026-45629 , CVE-2026-45632 , CVE-2026-48030 , CVE-2026-63298 , CVE-2026-72738 , CVE-2026-72740 , CVE-2026-72865 , CVE-2026-72868 , CVE-2026-72869 , CVE-2026-72872 , CVE-2026-72876 , CVE-2026-72882 , CVE-2026-72902 , CVE-2026-73294 , CVE-2014-6271 , CVE-2019-12725 , CVE-2019-15107 , CVE-2019-16662 , CVE-2019-16920 , CVE-2019-17270 , CVE-2019-7256 , CVE-2020-15920 , CVE-2020-29390 , CVE-2020-7980 , CVE-2020-9054 , CVE-2022-29303 , CVE-2022-31137 , CVE-2024-50603 , CVE-2024-53584 , CVE-2025-54123 , CVE-2026-12940 , CVE-2026-15733 , CVE-2026-18482 , CVE-2026-37281 , CVE-2026-45018 , CVE-2026-48687 , CVE-2026-49819 , CVE-2026-53545 , CVE-2026-79408 , CVE-2026-35906 , CVE-2026-72878 , CVE-2026-8986 , CVE-2026-47670 , CVE-2026-63732 , CVE-2026-72879 , CVE-2026-73483 , CVE-2026-19586 , CVE-2026-53975 , CVE-2026-60121 , CVE-2026-61498 , CVE-2026-63766 , CVE-2026-64625 , CVE-2026-67308 , CVE-2026-71921 , CVE-2026-71944 , CVE-2026-71945 , CVE-2026-71946 , CVE-2026-71947 , CVE-2026-71948 , CVE-2026-71949 , CVE-2026-71950 , CVE-2026-71951 , CVE-2026-71952 , CVE-2026-71953 , CVE-2026-71954 , CVE-2026-71955 , CVE-2026-71956 , CVE-2026-71984 , CVE-2026-71992 , CVE-2026-63304 , CVE-2026-63305 , CVE-2026-80138 , CVE-2026-57499 , CVE-2013-5758 , CVE-2026-45630 , CVE-2026-7202 , CVE-2026-7203 , CVE-2026-7204 , CVE-2026-73570 , CVE-2026-9384 , CVE-2026-9385 , CVE-2026-9386 , CVE-2026-9387 , CVE-2026-9388 , CVE-2026-9404 , CVE-2026-9405 , CVE-2026-9406 , CVE-2026-9407 , CVE-2026-9408 , CVE-2026-9432 , CVE-2026-9433 , CVE-2026-9434 , CVE-2026-9435 , CVE-2026-9436 , CVE-2026-9454 , CVE-2026-9455 , CVE-2026-9456 , CVE-2026-9457 , CVE-2026-9458 , CVE-2026-9476 , CVE-2026-9477 , CVE-2026-9478 , CVE-2017-14535 , CVE-2017-6884 , CVE-2020-13851 , CVE-2026-17623 , CVE-2026-17625 , CVE-2026-24893 , CVE-2026-26899 , CVE-2026-34197 , CVE-2026-35196 , CVE-2026-45578 , CVE-2026-45662 , CVE-2026-58195 , CVE-2026-72875 , CVE-2026-73222 , CVE-2026-79423 , CVE-2025-30007 , CVE-2025-34115 , CVE-2026-25855 , CVE-2026-28797 , CVE-2026-34792 , CVE-2026-34793 , CVE-2026-34794 , CVE-2026-34795 , CVE-2026-34796 , CVE-2026-34797 , CVE-2026-46746 , CVE-2026-64837 , CVE-2026-69096 , CVE-2026-71966 , CVE-2026-72870 , CVE-2026-72874 , CVE-2026-73680 , CVE-2026-76060 , CVE-2026-79756 , CVE-2026-40187 , CVE-2026-53804 , CVE-2026-61517 , CVE-2026-63725 , CVE-2026-65711 , CVE-2026-67599 , CVE-2026-67608 , CVE-2026-71906 , CVE-2026-71907 , CVE-2026-71908 , CVE-2026-71913 , CVE-2026-71915 , CVE-2026-71918 , CVE-2026-71919 , CVE-2026-71923 , CVE-2026-71924 , CVE-2026-71925 , CVE-2026-71926 , CVE-2026-71927 , CVE-2026-71928 , CVE-2026-71929 , CVE-2026-71930 , CVE-2026-71931 , CVE-2026-71943 , CVE-2026-75121 , CVE-2026-75122 , CVE-2026-75123 , CVE-2026-80214 , CVE-2026-82692 , CVE-2026-84194 , CVE-2026-85223 , CVE-2026-86299 , CVE-2026-86733 , CVE-2026-82690 , CVE-2026-82691 , CVE-2026-85222 , CVE-2026-85224 , CVE-2025-69755 , CVE-2026-48695 , CVE-2026-79755 , CVE-2021-21315 , CVE-2026-40519 , CVE-2013-6041 , CVE-2026-10870 , CVE-2026-10871 , CVE-2026-10873 , CVE-2026-18900 , CVE-2026-19771 , CVE-2026-71284 , CVE-2026-19983 , CVE-2026-72739 , CVE-2026-45626 , CVE-2026-10214 , CVE-2026-18641 , CVE-2026-19379 , CVE-2026-5677 , CVE-2026-5678 , CVE-2026-5688 , CVE-2026-5689 , CVE-2026-5690 , CVE-2026-5691 , CVE-2026-5692 , CVE-2026-5741 , CVE-2026-5802 , CVE-2026-7220 , CVE-2026-76761 , CVE-2026-5547 , CVE-2026-10279 , CVE-2026-11408 , CVE-2026-5351 , CVE-2026-5352 , CVE-2026-5353 , CVE-2026-5354 , CVE-2026-5355 , CVE-2026-8188 , CVE-2026-8189 , CVE-2026-8190 , CVE-2026-8191 , CVE-2026-8192 , CVE-2026-8227 , CVE-2026-8228 , CVE-2026-8229 , CVE-2026-8230 , CVE-2026-8264 , CVE-2026-9343 , CVE-2026-9347 , CVE-2026-9424 , CVE-2026-9511 , CVE-2026-9512 , CVE-2026-9514 , CVE-2026-9515 , CVE-2026-9531 , CVE-2026-9532 , CVE-2026-9533 , CVE-2026-9534 , CVE-2026-8259 , CVE-2026-8265 , CVE-2026-82678 , CVE-2026-82702 , CVE-2026-82703 , CVE-2026-85040 , CVE-2026-5621
CWE-79CVE-2026-73041 , CVE-2026-73042 , CVE-2026-45668 , CVE-2024-39024 , CVE-2016-4807 , CVE-2013-6042 , CVE-2014-9146 , CVE-2015-4665 , CVE-2026-36239
CWE-88CVE-2026-44450 , CVE-2026-73294 , CVE-2020-21224
CWE-89CVE-2026-55634 , CVE-2024-5827 , CVE-2026-38428 , CVE-2026-33324 , CVE-2026-34612 , CVE-2015-4669 , CVE-2010-4977 , CVE-2010-5028 , CVE-2011-4448 , CVE-2013-5640 , CVE-2014-9145 , CVE-2026-16252 , CVE-2026-5736 , CVE-2026-7206 , CVE-2026-9474 , CVE-2023-7299 , CVE-2026-19785
CWE-91CVE-2026-89247
CWE-93CVE-2026-39394 , CVE-2026-84372 , CVE-2025-61884
CWE-94CVE-2022-24816 , CVE-2026-47668 , CVE-2026-8984 , CVE-2026-55565 , CVE-2026-55634 , CVE-2026-8481 , CVE-2009-1151 , CVE-2018-1273 , CVE-2022-22954 , CVE-2024-31823 , CVE-2025-29306 , CVE-2025-3248 , CVE-2026-31040 , CVE-2026-38431 , CVE-2026-46562 , CVE-2026-55559 , CVE-2026-67919 , CVE-2026-67926 , CVE-2026-75411 , CVE-2026-75414 , CVE-2026-70477 , CVE-2026-88062 , CVE-2024-9264 , CVE-2025-62593 , CVE-2026-45272 , CVE-2026-69256 , CVE-2026-82244 , CVE-2013-1965 , CVE-2018-25114 , CVE-2018-25357 , CVE-2026-27174 , CVE-2026-65008 , CVE-2026-70553 , CVE-2026-46621 , CVE-2026-55511 , CVE-2026-58400 , CVE-2026-62674 , CVE-2026-69251 , CVE-2026-73485 , CVE-2026-73486 , CVE-2026-73487 , CVE-2026-43945 , CVE-2020-8163 , CVE-2024-41667 , CVE-2026-34197 , CVE-2026-45505 , CVE-2026-48017 , CVE-2026-55585 , CVE-2026-62675 , CVE-2026-78834 , CVE-2021-47938 , CVE-2022-50944 , CVE-2026-25856 , CVE-2026-28797 , CVE-2026-49143 , CVE-2026-64850 , CVE-2026-69100 , CVE-2026-72819 , CVE-2026-76836 , CVE-2026-82278 , CVE-2026-85610 , CVE-2026-86732 , CVE-2021-32820 , CVE-2026-42785 , CVE-2026-56703 , CVE-2026-61523 , CVE-2026-65693 , CVE-2026-69088 , CVE-2026-22244 , CVE-2026-42588 , CVE-2026-47398 , CVE-2026-71320 , CVE-2026-66738 , CVE-2008-1059 , CVE-2010-2918 , CVE-2026-46581 , CVE-2026-77939 , CVE-2026-5739 , CVE-2026-44287 , CVE-2025-13786 , CVE-2025-13792 , CVE-2026-54611 , CVE-2026-5631 , CVE-2026-76760 , CVE-2026-82598 , CVE-2026-85137 , CVE-2026-19932 , CVE-2026-19958 , CVE-2026-78166 , CVE-2026-9302 , CVE-2026-19964 , CVE-2026-81835
CWE-95CVE-2026-46562 , CVE-2026-47391 , CVE-2026-39932 , CVE-2025-31114 , CVE-2026-61511 , CVE-2026-40187
CWE-98CVE-2024-12209 , CVE-2026-0926 , CVE-2024-8252 , CVE-2025-32614 , CVE-2026-87927 , CVE-2025-48157 , CVE-2026-44239 , CVE-2026-39387 , CVE-2019-25760 , CVE-2022-50954 , CVE-2026-34787 , CVE-2026-63302
CWE-120CVE-2026-36796
CWE-121CVE-2026-76070 , CVE-2026-76071 , CVE-2026-36783
CWE-180CVE-2026-39364 , CVE-2026-76203
CWE-183CVE-2026-16129
CWE-184CVE-2026-49869 , CVE-2026-44287 , CVE-2026-72860 , CVE-2026-16129
CWE-187CVE-2026-35031
CWE-200CVE-2026-51027 , CVE-2026-65760 , CVE-2026-47394 , CVE-2026-62865 , CVE-2021-32820 , CVE-2026-44881 , CVE-2025-69755 , CVE-2026-39363 , CVE-2026-53553 , CVE-2014-9147 , CVE-2015-1000012 , CVE-2016-4806 , CVE-2018-6008 , CVE-2021-24227 , CVE-2021-41277 , CVE-2021-43287 , CVE-2024-45388 , CVE-2024-46938 , CVE-2026-51078 , CVE-2026-61891 , CVE-2026-47735 , CVE-2014-2383 , CVE-2016-6435 , CVE-2022-34125 , CVE-2026-58442 , CVE-2026-53452 , CVE-2026-73082 , CVE-2013-6043
CWE-203CVE-2022-34125
CWE-206CVE-2026-85199
CWE-253CVE-2026-15686
CWE-269CVE-2026-45632 , CVE-2026-49819 , CVE-2026-11423 , CVE-2026-72830 , CVE-2026-73664
CWE-284CVE-2026-34234 , CVE-2026-54745 , CVE-2014-9148 , CVE-2026-65760 , CVE-2026-43945 , CVE-2026-65759 , CVE-2023-26360 , CVE-2026-73664 , CVE-2026-39364 , CVE-2014-3120 , CVE-2015-1000010 , CVE-2025-28367 , CVE-2026-10172
CWE-285CVE-2026-55166 , CVE-2021-28799 , CVE-2024-26291 , CVE-2026-46484 , CVE-2026-34239
CWE-287CVE-2025-55169 , CVE-2026-49869 , CVE-2013-4863 , CVE-2018-12613 , CVE-2020-24579 , CVE-2025-27621 , CVE-2018-19458 , CVE-2025-61884 , CVE-2025-32815
CWE-288CVE-2026-43945
CWE-306CVE-2026-81735 , CVE-2025-3248 , CVE-2026-47391 , CVE-2026-49819 , CVE-2026-53649 , CVE-2026-88062 , CVE-2026-67426 , CVE-2026-86259 , CVE-2026-73222 , CVE-2023-54350 , CVE-2025-34115 , CVE-2026-63722 , CVE-2026-89250 , CVE-2026-34160 , CVE-2026-56677 , CVE-2026-49471 , CVE-2026-39363 , CVE-2023-22047 , CVE-2026-61891 , CVE-2026-33715 , CVE-2026-46555 , CVE-2026-65012
CWE-327CVE-2025-2539
CWE-345CVE-2026-53513 , CVE-2026-48105
CWE-346CVE-2026-46555
CWE-352CVE-2026-53649 , CVE-2025-62593 , CVE-2016-4808 , CVE-2026-73222 , CVE-2026-34228 , CVE-2026-49471 , CVE-2011-4452 , CVE-2013-4865 , CVE-2018-18760 , CVE-2021-24947
CWE-367CVE-2026-55537 , CVE-2026-42344 , CVE-2026-54020 , CVE-2026-70667 , CVE-2026-42336 , CVE-2026-49262
CWE-384CVE-2018-18925
CWE-400CVE-2026-26477
CWE-425CVE-2026-35029
CWE-434CVE-2022-47615 , CVE-2026-72592 , CVE-2026-53649 , CVE-2026-11419 , CVE-2018-25114 , CVE-2024-58348 , CVE-2026-44402 , CVE-2023-7305 , CVE-2019-9189 , CVE-2025-59710 , CVE-2021-47943 , CVE-2026-34735 , CVE-2026-67206 , CVE-2017-12615 , CVE-2026-53599 , CVE-2026-27891 , CVE-2026-35174 , CVE-2021-24947 , CVE-2026-54611 , CVE-2026-10172
CWE-441CVE-2026-53513 , CVE-2026-73079 , CVE-2026-43910 , CVE-2026-77348 , CVE-2026-63643
CWE-444CVE-2025-61884
CWE-470CVE-2026-46562 , CVE-2026-55559 , CVE-2026-58400 , CVE-2026-79987 , CVE-2026-34216
CWE-472CVE-2026-39364
CWE-473CVE-2023-36845
CWE-489CVE-2026-9133
CWE-494CVE-2026-66398
CWE-501CVE-2025-61884
CWE-502CVE-2026-3296 , CVE-2017-9805
CWE-522CVE-2026-67426
CWE-552CVE-2026-34361 , CVE-2021-4463 , CVE-2021-39316 , CVE-2022-0656 , CVE-2022-33901 , CVE-2025-11371 , CVE-2022-25497
CWE-601CVE-2015-4668
CWE-611CVE-2026-69101 , CVE-2019-9757 , CVE-2022-38840 , CVE-2024-6893
CWE-625CVE-2026-73845
CWE-639CVE-2026-55166 , CVE-2026-72876 , CVE-2026-69250
CWE-641CVE-2026-46581
CWE-644CVE-2026-48126 , CVE-2026-67179
CWE-668CVE-2022-24900 , CVE-2023-33510 , CVE-2026-82650
CWE-669CVE-2026-73574
CWE-674CVE-2026-84175
CWE-698CVE-2024-48766
CWE-704CVE-2021-28918
CWE-705CVE-2026-55537
CWE-706CVE-2024-27292
CWE-732CVE-2018-14916 , CVE-2026-73664
CWE-770CVE-2026-26477
CWE-791CVE-2026-78140
CWE-798CVE-2015-4667 , CVE-2017-7462
CWE-824CVE-2026-67281
CWE-829CVE-2018-17246 , CVE-2026-0770 , CVE-2026-45272 , CVE-2024-8252 , CVE-2026-45711 , CVE-2026-47398 , CVE-2022-25485 , CVE-2022-25486 , CVE-2018-7422 , CVE-2021-41569 , CVE-2022-34121
CWE-835CVE-2024-20353
CWE-862CVE-2026-33712 , CVE-2026-45632 , CVE-2026-72868 , CVE-2026-72876 , CVE-2022-36642 , CVE-2026-49819 , CVE-2026-47754 , CVE-2018-10093 , CVE-2026-47394 , CVE-2026-86438 , CVE-2026-63464 , CVE-2023-6038
CWE-863CVE-2026-43945 , CVE-2026-35029 , CVE-2026-76836 , CVE-2026-86437 , CVE-2013-4862 , CVE-2021-24947 , CVE-2021-36749
CWE-913CVE-2020-15568 , CVE-2026-48105
CWE-915CVE-2026-72710 , CVE-2026-78416
CWE-917CVE-2020-17530
CWE-918CVE-2026-33712 , CVE-2026-49869 , CVE-2026-54745 , CVE-2026-31818 , CVE-2026-43986 , CVE-2026-55166 , CVE-2013-4864 , CVE-2026-15732 , CVE-2026-30118 , CVE-2019-8982 , CVE-2026-12564 , CVE-2026-12605 , CVE-2026-53513 , CVE-2026-62668 , CVE-2026-86123 , CVE-2026-64849 , CVE-2026-66794 , CVE-2026-67426 , CVE-2026-65057 , CVE-2026-65317 , CVE-2026-65318 , CVE-2026-85614 , CVE-2026-86119 , CVE-2026-17552 , CVE-2026-44313 , CVE-2026-51152 , CVE-2026-75332 , CVE-2026-86259 , CVE-2026-82866 , CVE-2023-39108 , CVE-2023-39109 , CVE-2023-39110 , CVE-2026-62857 , CVE-2026-34367 , CVE-2026-47659 , CVE-2026-55245 , CVE-2026-82270 , CVE-2026-82638 , CVE-2026-85608 , CVE-2026-85612 , CVE-2026-85666 , CVE-2026-85673 , CVE-2026-85691 , CVE-2026-34160 , CVE-2026-34577 , CVE-2026-35032 , CVE-2026-45298 , CVE-2026-56677 , CVE-2026-7412 , CVE-2026-81213 , CVE-2026-81889 , CVE-2026-46372 , CVE-2026-51583 , CVE-2026-57894 , CVE-2026-61640 , CVE-2026-67424 , CVE-2026-67428 , CVE-2026-68558 , CVE-2026-57862 , CVE-2026-62234 , CVE-2026-72855 , CVE-2026-73629 , CVE-2026-75898 , CVE-2026-22681 , CVE-2026-34576 , CVE-2026-34966 , CVE-2026-52769 , CVE-2026-63313 , CVE-2026-65056 , CVE-2026-76225 , CVE-2026-79659 , CVE-2026-82243 , CVE-2026-84196 , CVE-2026-86771 , CVE-2026-16268 , CVE-2026-43910 , CVE-2026-54691 , CVE-2026-61638 , CVE-2026-77348 , CVE-2026-82262 , CVE-2026-34365 , CVE-2026-34366 , CVE-2026-50143 , CVE-2026-40280 , CVE-2026-34163 , CVE-2026-34936 , CVE-2026-39361 , CVE-2026-39965 , CVE-2026-42345 , CVE-2026-44285 , CVE-2026-45806 , CVE-2026-53549 , CVE-2026-58314 , CVE-2026-61835 , CVE-2026-63464 , CVE-2026-63764 , CVE-2026-67346 , CVE-2026-69192 , CVE-2026-71303 , CVE-2026-71365 , CVE-2026-77775 , CVE-2026-45082 , CVE-2026-79749 , CVE-2021-46107 , CVE-2025-27817 , CVE-2025-61884 , CVE-2026-59765 , CVE-2026-81265 , CVE-2026-49857 , CVE-2026-70666 , CVE-2026-33715 , CVE-2026-45019 , CVE-2026-6229 , CVE-2026-22664 , CVE-2026-39370 , CVE-2026-42339 , CVE-2026-47735 , CVE-2026-54166 , CVE-2026-55537 , CVE-2026-74247 , CVE-2026-75844 , CVE-2026-79747 , CVE-2026-79788 , CVE-2026-80350 , CVE-2026-82241 , CVE-2026-82246 , CVE-2026-85163 , CVE-2026-85164 , CVE-2026-87821 , CVE-2026-87999 , CVE-2026-10107 , CVE-2026-34964 , CVE-2026-39383 , CVE-2026-44652 , CVE-2026-54885 , CVE-2026-73058 , CVE-2026-81678 , CVE-2026-84199 , CVE-2026-85609 , CVE-2026-85662 , CVE-2026-86539 , CVE-2026-86806 , CVE-2026-8712 , CVE-2026-55421 , CVE-2024-27564 , CVE-2026-15974 , CVE-2026-34740 , CVE-2026-39368 , CVE-2026-46556 , CVE-2026-52371 , CVE-2026-54054 , CVE-2026-58442 , CVE-2026-45573 , CVE-2026-79717 , CVE-2026-82081 , CVE-2026-42335 , CVE-2026-44284 , CVE-2026-49120 , CVE-2026-54020 , CVE-2026-63107 , CVE-2026-63643 , CVE-2026-63731 , CVE-2026-63769 , CVE-2026-65593 , CVE-2026-67620 , CVE-2026-70667 , CVE-2026-72860 , CVE-2026-73530 , CVE-2026-86590 , CVE-2026-70620 , CVE-2026-86735 , CVE-2024-6095 , CVE-2026-10526 , CVE-2026-34360 , CVE-2026-45709 , CVE-2026-48053 , CVE-2026-73243 , CVE-2025-13814 , CVE-2026-10280 , CVE-2026-10287 , CVE-2026-16125 , CVE-2026-16127 , CVE-2026-16128 , CVE-2026-16910 , CVE-2026-18973 , CVE-2026-19000 , CVE-2026-19374 , CVE-2026-19753 , CVE-2026-5346 , CVE-2026-5832 , CVE-2026-7178 , CVE-2026-7221 , CVE-2026-76795 , CVE-2026-81421 , CVE-2026-82630 , CVE-2026-82801 , CVE-2026-82802 , CVE-2026-85380 , CVE-2026-86237 , CVE-2026-86273 , CVE-2026-9372 , CVE-2026-34590 , CVE-2026-48483 , CVE-2026-48762 , CVE-2026-7798 , CVE-2026-14860 , CVE-2026-16536 , CVE-2026-19956 , CVE-2026-22662 , CVE-2026-44583 , CVE-2026-49138 , CVE-2026-54508 , CVE-2026-5538 , CVE-2026-59231 , CVE-2026-63730 , CVE-2026-64626 , CVE-2026-64870 , CVE-2026-72846 , CVE-2026-73082 , CVE-2026-73845 , CVE-2026-74858 , CVE-2026-76239 , CVE-2026-77067 , CVE-2026-84175 , CVE-2026-84207 , CVE-2026-85650 , CVE-2026-88892 , CVE-2026-17597 , CVE-2026-42336 , CVE-2026-79671 , CVE-2026-79723 , CVE-2026-43936 , CVE-2026-49856 , CVE-2026-77352 , CVE-2026-10052 , CVE-2026-48013 , CVE-2026-48051 , CVE-2026-77351 , CVE-2026-23603 , CVE-2026-48707 , CVE-2026-49262 , CVE-2026-68927 , CVE-2026-44286 , CVE-2026-73087 , CVE-2026-77648 , CVE-2025-13789 , CVE-2025-13809 , CVE-2025-15098 , CVE-2026-10239 , CVE-2026-10240 , CVE-2026-10241 , CVE-2026-10274 , CVE-2026-10276 , CVE-2026-10662 , CVE-2026-10690 , CVE-2026-12210 , CVE-2026-16074 , CVE-2026-16194 , CVE-2026-16222 , CVE-2026-16223 , CVE-2026-17458 , CVE-2026-18774 , CVE-2026-19040 , CVE-2026-19246 , CVE-2026-19340 , CVE-2026-19375 , CVE-2026-19752 , CVE-2026-19927 , CVE-2026-19984 , CVE-2026-5470 , CVE-2026-5607 , CVE-2026-74842 , CVE-2026-7890 , CVE-2026-82905 , CVE-2026-83744 , CVE-2026-18856 , CVE-2026-86240 , CVE-2026-9464 , CVE-2026-19369 , CVE-2026-19373
CWE-942CVE-2026-34449 , CVE-2026-53649
CWE-1188CVE-2026-47668 , CVE-2026-31818 , CVE-2026-77348
CWE-1220CVE-2026-39363
CWE-1336CVE-2026-44181 , CVE-2026-55559 , CVE-2026-28797 , CVE-2026-22244 , CVE-2026-77939 , CVE-2026-78140
CWE-1392CVE-2026-41939