Browse CVEs by Ecosystem and Severity
5,773 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2026-28367
Undertow is Vulnerable to HTTP Request/Response Smuggling
HIGH
CVE-2026-28368
Undertow is Vulnerable to HTTP Request/Response Smuggling
HIGH
CVE-2026-28369
Undertow is Vulnerable to HTTP Request/Response Smuggling
CRITICAL
CVE-2026-33937
Handlebars.js has JavaScript Injection via AST Type Confusion
CRITICAL
CVE-2026-33992
pyLoad: Server-Side Request Forgery via Download Link Submission Enables Cloud Metadata Exfiltration
HIGH
CVE-2026-34040
Moby has AuthZ plugin bypass when provided oversized request bodies
CRITICAL
CVE-2026-33945
Incus has an abitrary file write through its systemd-creds options
HIGH
CVE-2026-33898
Local Incus UI web server vulnerable to nuthentication bypass
CRITICAL
CVE-2026-33897
Incus vulnerable to arbitrary file read and write through pongo templates
HIGH
CVE-2026-22742
Spring AI: Insufficient Validation causes SSRF when processing multimodal messages with user-supplied URLs
CRITICAL
CVE-2026-22738
Spring AI: SpEL injection is triggered when a user-supplied value is used as a filter expression key
CRITICAL
CVE-2026-33718
HIGH
CVE-2026-33943
Happy DOM ECMAScriptModuleCompiler: unsanitized export names are interpolated as executable code
LOW
CVE-2026-56366
ImageMagick: META reader memory leak in the APP1JPEG input path
LOW
CVE-2026-56375
ImageMagick has possible memory leak in ASHLAR coder when action fails
CRITICAL
CVE-2026-35639
OpenClaw Gateway: RCE and Privilege Escalation from operator.pairing to operator.admin via device.pair.approve
HIGH
CVE-2026-35643
OpenClaw: Arbitrary code execution via unvalidated WebView JavascriptInterface
MEDIUM
CVE-2026-33536
ImageMagick has an Out-of-bounds Write via InterpretImageFilename
HIGH
CVE-2026-35666
OpenClaw's system.run allowlist can be bypassed through an unregistered time dispatch wrapper
CRITICAL
CVE-2026-33864
Convict has Prototype Pollution via startsWith() function
CRITICAL
CVE-2026-33863
Convict has prototype pollution via load(), loadFile(), and schema initialization
CRITICAL
CVE-2026-33758
OpenBao has Reflected XSS in its OIDC authentication error message
CRITICAL
CVE-2026-33757
OpenBao lacks user confirmation for OIDC direct callback mode
HIGH
CVE-2026-3108
Mattermost allows attackers to manipulate administrator terminals via crafted messages containing ANSI and OSC escape sequences
CRITICAL
CVE-2026-33873
Langflow has Authenticated Code Execution in Agentic Assistant Validation
MEDIUM
CVE-2026-33749
n8n Vulnerable to XSS via Binary Data Inline HTML Rendering
HIGH
CVE-2026-33747
BuildKit's Malicious frontend can cause file escape outside of storage root
MEDIUM
CVE-2026-33729
OpenFGA has an Authorization Bypass through cached keys
MEDIUM
CVE-2026-33535
ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction
CRITICAL
CVE-2026-56765
Vikunja: Unauthenticated Instance-Wide Data Breach via Link Share Hash Disclosure Chained with Cross-Project Attachment IDOR
CRITICAL
CVE-2026-33728
dd-trace-java: Unsafe deserialization in RMI instrumentation may lead to remote code execution
HIGH
CVE-2026-33713
n8n has SQL Injection in Data Table Node via orderByColumn Expression
CRITICAL
CVE-2026-33696
n8n: Prototype Pollution in XML and GSuiteAdmin node parameters lead to RCE
HIGH
CVE-2026-33719
AVideo: Unauthenticated CDN Configuration Takeover via Empty Default Key Bypass and Mass-Assignment
HIGH
CVE-2026-33717
AVideo: Remote Code Execution via PHP Temp File in Encoder downloadURL
CRITICAL
CVE-2026-33716
AVideo Allows Unauthenticated Live Stream Control via Token Verification URL Override in control.json.php
CRITICAL
CVE-2026-33701
OpenTelemetry: Unsafe Deserialization in RMI Instrumentation may Lead to Remote Code Execution
HIGH
CVE-2026-33663
n8n is Vulnerable to Credential Theft via Name-Based Resolution and Permission Checker Bypass in Community Edition
CRITICAL
CVE-2026-33660
n8n has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode
LOW
CVE-2026-33658
Rails Active Storage has a possible DoS vulnerability in proxy mode via multi-range requests
MEDIUM
CVE-2026-33693
Activitypub-Federation has SSRF via 0.0.0.0 bypass in activitypub-federation-rust v4_is_invalid()
HIGH
CVE-2026-33686
Sharp is Vulnerable to Path Traversal via Unsanitized Extension in FileUtil
HIGH
CVE-2026-33687
Sharp has Unrestricted File Upload via Client-Controlled Validation Rules
CRITICAL
CVE-2026-33670
SiYuan has directory traversal within its publishing service
CRITICAL
CVE-2026-33669
SiYuan has Arbitrary Document Reading within the Publishing Service
HIGH
CVE-2026-33661
WeChat Pay callback signature verification bypassed when Host header is localhost
CRITICAL
CVE-2026-26832
node-tesseract-ocr is vulnerable to OS Command Injection through unsanitized recognize() function parameter
CRITICAL
CVE-2026-26831
textract is vulnerable to OS Command Injection
CRITICAL
CVE-2026-26833
thumbler allows OS Command Injection
HIGH
CVE-2026-33648
AVideo Vulnerable to OS Command Injection via Unsanitized `users_id` and `liveTransmitionHistory_id` in Restreamer Log File Path