Browse CVEs by Ecosystem and Severity
5,773 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2026-42605
AzuraCast has Path Traversal in `currentDirectory` Parameter that Enables Remote Code Execution via Media Upload
CRITICAL
CVE-2026-41901
Sandboxed Thymeleaf expressions vulnerable to improper recognition of unauthorized syntax patterns
MEDIUM
CVE-2026-44116
OpenClaw validates Zalo outbound photo URLs through the SSRF guard
HIGH
CVE-2026-42296
Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure
HIGH
CVE-2026-42297
Argo has Missing Authorization in its Sync ConfigMap Provider
CRITICAL
CVE-2026-41258
OpenMRS has Stored Velocity SSTI to RCE via ConceptReferenceRange
CRITICAL
CVE-2026-42809
Apache Polaris has an Improper Input Validation Issue
CRITICAL
CVE-2026-42027
Apache OpenNLP ExtensionLoader Vulnerable to Arbitrary Class Instantiation via Model Manifest
CRITICAL
CVE-2026-42811
Apache Polaris has an Improper Input Validation issue
CRITICAL
CVE-2026-42810
Apache Polaris has an Improper Input Validation Issue
CRITICAL
CVE-2026-42812
Apache Polaris has an Improper Input Validation issue
CRITICAL
CVE-2026-40682
Apache OpenNLP DictionaryEntryPersistor Vulnerable to XML External Entity (XXE) via Unsanitized Dictionary Parsing
CRITICAL
CVE-2026-40076
OpenMRS Module Upload Vulnerable to Path Traversal (Zip Slip)
HIGH
CVE-2026-39852
Quarkus has Authentication/Authorization bypasses
CRITICAL
CVE-2026-24118
VM2 Sandbox Breakout Through __lookupGetter__
HIGH
CVE-2026-7482
Ollama contains a heap out-of-bounds read vulnerability in the GGUF model loader
HIGH
CVE-2026-29199
phpBB has Password Reset Link Poisoning via Host Header injection
CRITICAL
CVE-2026-42778
Apache MINA vulnerable to Deserialization of Untrusted Data (CVE-2026-41409 Incomplete Fix)
CRITICAL
CVE-2026-42779
Apache MINA vulnerable to Deserialization of Untrusted Data (CVE-2026-41635 Incomplete Fix)
CRITICAL
CVE-2026-42560
auth: Patreon provider assigns the same local user ID to every authenticated Patreon account, enabling cross‑user impersonation
CRITICAL
CVE-2026-42354
Sentry's improper authentication on SAML SSO process allows user identity linking
MEDIUM
CVE-2026-42191
OpenTelemetry's disk retry default temp path enables local blob injection via OTLP Exporter
CRITICAL
CVE-2026-36767
Shopizer has a path traversal issue
HIGH
CVE-2026-42349
Clerk has an authorization bypass when combining organization, billing, or reverification checks
HIGH
CVE-2026-42254
Hickory DNS's Record Cache Accepts AUTHORITY-Section NS from Sibling Zone via Parent-Pool Zone-Context Elevation
CRITICAL
CVE-2026-40281
Gotenberg has ExifTool stdin argument injection via metadata value newlines (bypass of key sanitization fix)
MEDIUM
CVE-2026-39383
Gotenberg Vulnerable to Unauthenticated SSRF via Unfiltered Webhook URL
HIGH
CVE-2026-40280
Gotenberg has case-insensitive URL scheme that bypasses webhook and downloadFrom deny-list SSRF protection
HIGH
CVE-2026-41670
Admidio Sends SAML Response to Unvalidated Assertion Consumer Service URL from AuthnRequest
HIGH
CVE-2026-41669
Admidio Ignores SAML Signature Validation Result, Processes Forged AuthnRequests and LogoutRequests
CRITICAL
CVE-2026-42232
n8n has XML Node Prototype Pollution that to RCE
CRITICAL
CVE-2026-42231
n8n has Prototype Pollution in XML Webhook Body Parser that Leads to RCE
HIGH
CVE-2026-42235
n8n Vulnerable to XSS via MCP OAuth client
HIGH
CVE-2026-42226
n8n's Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key Replay
MEDIUM
CVE-2026-42233
n8n has SQL Injection in Oracle Database Node via Limit Field
HIGH
CVE-2026-44015
Nginx-UI has Server-Side Request Forgery (SSRF) via Cluster Proxy Middleware that Allows Access to Internal Services
CRITICAL
CVE-2026-41586
fabric-sdk-java has ObjectInputStream.readObject() without ObjectInputFilter, which allows Java deserialization RCE
HIGH
CVE-2026-40902
PhpSpreadsheet has CPU Denial of Service via Unbounded Row Number in XLSX Row Dimensions
HIGH
CVE-2026-40863
PhpSpreadsheet has CPU Denial of Service via Unbounded Row Index in SpreadsheetML XML Reader
CRITICAL
CVE-2026-34084
PhpSpreadsheet has SSRF/RCE in IOFactory::load when $filename is user controlled
MEDIUM
CVE-2026-41484
OneCollector exporter reads unbounded HTTP response bodies
HIGH
CVE-2026-38991
Cockpit Vulnerable to Unrestricted Upload of File with Dangerous Type
MEDIUM
CVE-2026-41483
OpenTelemetry.Resources.Azure has an unbounded HTTP response body read
CRITICAL
CVE-2026-38992
Cockpit is vulnerable to arbitrary code execution
CRITICAL
CVE-2026-42523
Jenkins GitHub Plugin has an XSS vulnerability
MEDIUM
CVE-2026-41310
OpenTelemetry's Zipkin remote endpoint cache could grow without bounds and increase memory pressure
CRITICAL
CVE-2026-24178
NVIDIA NVFlare Dashboard: Authorization bypass through user-controlled key via user management and authentication system
HIGH
CVE-2026-40978
Spring AI has SQL Injection in CosmosDBVectorStore.doDelete()
HIGH
CVE-2026-40967
Spring AI has a VectorStore FilterExpression Converter injection
CRITICAL
CVE-2026-40976
Spring Boot's default security filter chain has no authorization rule with Actuator but without Health