Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 85 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-82412 |
8.8 (3.1)
|
ntopng: Remote Code Execution via OS Command Injection… |
ntop |
ntopng |
2026-09-21T15:56:26.703Z | 2026-09-21T15:56:26.703Z |
| CVE-2026-55563 |
8.9 (4.0)
|
Feast: `pull_request_target` integration tests run unt… |
feast-dev |
feast |
2026-09-21T15:51:06.794Z | 2026-09-21T15:51:06.794Z |
| CVE-2026-88978 |
4.3 (3.1)
|
Hatchet DurableTask WorkerStatus gRPC resolves caller-… |
hatchet-dev |
hatchet |
2026-09-21T15:49:12.735Z | 2026-09-21T15:49:12.735Z |
| CVE-2026-84298 |
3.1 (3.1)
|
Hatchet: Cross-tenant durable callback payload disclos… |
hatchet-dev |
hatchet |
2026-09-21T15:47:50.252Z | 2026-09-21T15:47:50.252Z |
| CVE-2026-61687 |
7.1 (3.1)
|
hatchet - Unauthenticated OAuth state CSRF / login-CSR… |
hatchet-dev |
hatchet |
2026-09-21T15:45:27.610Z | 2026-09-21T15:45:27.610Z |
| CVE-2026-63342 |
6.3 (3.1)
|
Hatchet: Cross-Tenant Durable Task Event Log Disclosur… |
hatchet-dev |
hatchet |
2026-09-21T15:44:07.494Z | 2026-09-21T15:44:07.494Z |
| CVE-2026-61681 |
4.1 (3.1)
|
Hatchet: SSRF via Unsigned UnsubscribeURL in SNS Unsub… |
hatchet-dev |
hatchet |
2026-09-21T15:42:21.803Z | 2026-09-21T15:42:21.803Z |
| CVE-2026-85751 |
9.8 (3.1)
|
Mailu: Authentication bypass in header-based proxy aut… |
Mailu |
Mailu |
2026-09-21T15:39:24.774Z | 2026-09-21T15:39:24.774Z |
| CVE-2026-53940 |
8.8 (3.1)
|
Conda: Entry-point path traversal in noarch:python ins… |
conda |
conda |
2026-09-21T15:35:37.770Z | 2026-09-21T15:35:37.770Z |
| CVE-2026-77165 |
6.5 (3.0)
|
File owners were unable to unlock TYPE_TOKEN lock… |
Nextcloud |
Server |
2026-09-21T15:25:33.553Z | 2026-09-21T15:25:33.553Z |
| CVE-2026-77166 |
2.4 (3.0)
|
The emoji field in the page emoji update endpoint… |
Nextcloud |
Collectives |
2026-09-21T15:25:33.269Z | 2026-09-21T15:25:33.269Z |
| CVE-2026-71543 |
7.5 (4.0)
|
OpenBao's Templated Policies Allow Privilege Escalatio… |
openbao |
openbao |
2026-09-21T15:03:59.159Z | 2026-09-21T15:03:59.159Z |
| CVE-2026-52742 |
5.1 (4.0)
|
GoCD is vulnerable to historical server configuration … |
gocd |
gocd |
2026-09-21T15:01:42.644Z | 2026-09-21T15:34:48.735Z |
| CVE-2026-55870 |
2.3 (4.0)
|
GoCD is vulnerable to credential exposure when admins … |
gocd |
gocd |
2026-09-21T15:00:48.573Z | 2026-09-21T15:00:48.573Z |
| CVE-2026-55625 |
4.9 (3.1)
|
GoCD is vulnerable to authorization bypass via materia… |
gocd |
gocd |
2026-09-21T15:00:03.935Z | 2026-09-21T15:00:03.935Z |
| CVE-2026-52740 |
5.3 (4.0)
|
GoCD is vulnerable to pipeline template view API autho… |
gocd |
gocd |
2026-09-21T14:59:15.786Z | 2026-09-21T15:43:41.189Z |
| CVE-2026-55060 |
3.7 (3.1)
|
GoCD is vulnerable to authorization bypass via support… |
gocd |
gocd |
2026-09-21T14:58:39.059Z | 2026-09-21T14:58:39.059Z |
| CVE-2026-52741 |
7.5 (4.0)
|
GoCD has stored XSS possible via tracking tool link hi… |
gocd |
gocd |
2026-09-21T14:57:50.940Z | 2026-09-21T14:57:50.940Z |
| CVE-2026-68919 |
7 (4.0)
|
GoCD has stored XSS possible via forged package materi… |
gocd |
gocd |
2026-09-21T14:56:23.341Z | 2026-09-21T14:56:23.341Z |
| CVE-2026-61628 |
8.1 (3.1)
|
nginx ignition has Unauthenticated Admin Account Creat… |
lucasdillmann |
nginx-ignition |
2026-09-21T14:44:54.985Z | 2026-09-21T15:12:59.314Z |
| CVE-2026-94301 |
9.8 (3.1)
|
Apache MINA: CVE-2026-47065 resolveProxyClass fix miss… |
Apache Software Foundation |
Apache MINA |
2026-09-21T14:35:59.952Z | 2026-09-21T15:38:00.430Z |
| CVE-2026-86473 |
N/A
|
Apache Airflow: Logout ignores a presented Authorizati… |
Apache Software Foundation |
Apache Airflow |
2026-09-21T14:33:26.110Z | 2026-09-21T14:33:42.328Z |
| CVE-2026-75158 |
4.3 (3.1)
|
Apache Airflow: Assets events API returns asset events… |
Apache Software Foundation |
Apache Airflow |
2026-09-21T14:32:47.818Z | 2026-09-21T15:26:48.122Z |
| CVE-2026-82355 |
4.2 (3.1)
|
Apache Airflow: Session cookie silently overrides expl… |
Apache Software Foundation |
Apache Airflow |
2026-09-21T14:32:04.932Z | 2026-09-21T15:26:07.194Z |
| CVE-2026-93339 |
5.1 (4.0)
5.4 (3.1)
|
Ditty < 3.1.70 Stored XSS via Layout Tag Wrapper Attribute |
Metaphor Creations |
Ditty |
2026-09-21T14:29:21.891Z | 2026-09-21T15:39:15.065Z |
| CVE-2026-52743 |
4.3 (3.1)
|
GoCD before 26.1.0 is vulnerable to authorization bypa… |
gocd |
gocd |
2026-09-21T14:24:57.713Z | 2026-09-21T14:24:57.713Z |
| CVE-2026-55074 |
8.2 (4.0)
|
Ansible FreeBSD Jail Connection Plugin: Jail escape vi… |
chofstede |
ansible_jailexec |
2026-09-21T14:24:55.995Z | 2026-09-21T15:44:36.603Z |
| CVE-2026-55567 |
7.8 (3.1)
|
BleachBit: Exploit File Delete to Escalate Privilege |
bleachbit |
bleachbit |
2026-09-21T14:23:42.014Z | 2026-09-21T15:16:03.499Z |
| CVE-2026-61629 |
7.5 (3.1)
|
nginx ignition has ParseAcceptLanguage `_` separator … |
lucasdillmann |
nginx-ignition |
2026-09-21T14:22:34.126Z | 2026-09-21T14:22:34.126Z |
| CVE-2026-94184 |
8.1 (3.1)
|
Fetchmail: fetchmail: stack-based buffer overflow in n… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-09-21T14:17:16.053Z | 2026-09-21T14:48:16.088Z |