Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-20188 |
0 (3.1)
|
Cisco Crosswork Network Controller and Cisco Network S… |
Cisco |
Cisco Crosswork Network Change Automation |
2026-05-06T16:15:37.396Z | 2026-05-14T16:30:22.826Z |
| CVE-2026-22254 |
0 (3.1)
|
Winter Affected by Stored Cross-Site Scripting (XSS) i… |
wintercms |
winter |
2026-02-06T19:11:27.260Z | 2026-02-09T15:28:17.194Z |
| CVE-2026-23634 |
0 (3.1)
|
Pepr Overly Permissive RBAC ClusterRole in Admin Mode |
defenseunicorns |
pepr |
2026-01-16T19:14:46.483Z | 2026-01-16T21:38:59.905Z |
| CVE-2026-23741 |
0 (3.1)
|
ast_coredumper running as root sources ast_debug_tools… |
asterisk |
asterisk |
2026-02-06T16:47:19.611Z | 2026-02-06T17:26:22.216Z |
| CVE-2026-24005 |
0 (3.1)
|
OpenKruise PodProbeMarker is Vulnerable to SSRF via Un… |
openkruise |
kruise |
2026-02-25T18:53:30.170Z | 2026-02-26T20:44:09.282Z |
| CVE-2026-24408 |
0 (3.1)
|
sigstore has CSRF possibility in OIDC authentication d… |
sigstore |
sigstore-python |
2026-01-26T22:21:35.047Z | 2026-01-27T21:35:14.119Z |
| CVE-2026-26979 |
0 (4.0)
|
Discourse: TL4 users are able to change status of rest… |
discourse |
discourse |
2026-02-26T19:25:15.812Z | 2026-02-26T20:38:24.755Z |
| CVE-2026-27167 |
0 (3.1)
|
Gradio: Mocked OAuth Login Exposes Server Credentials … |
gradio-app |
gradio |
2026-02-27T21:40:57.917Z | 2026-03-02T22:02:47.868Z |
| CVE-2026-30892 |
0 (3.1)
|
Crun incorrectly parses `crun exec` option `-u`, leadi… |
containers |
crun |
2026-03-25T23:57:01.741Z | 2026-03-26T18:10:16.318Z |
| CVE-2026-31873 |
0 (3.1)
|
Unhead has a Bypass of URI Scheme Sanitization in make… |
unjs |
unhead |
2026-03-12T17:20:35.660Z | 2026-03-12T17:46:46.723Z |
| CVE-2026-31897 |
0 (3.1)
|
FreeRDP has an out-of-bounds read in `freerdp_bitmap_d… |
FreeRDP |
FreeRDP |
2026-03-13T17:42:11.932Z | 2026-03-13T18:10:06.909Z |
| CVE-2026-31954 |
0 (3.1)
|
Emlog asynchronous media file deletion missing CSRF pr… |
emlog |
emlog |
2026-03-11T19:21:52.781Z | 2026-03-12T20:01:11.679Z |
| CVE-2026-32732 |
0 (4.0)
|
XSS in @leanprover/unicode-input-component |
leanprover |
vscode-lean4 |
2026-03-13T21:43:22.209Z | 2026-03-16T20:22:43.428Z |
| CVE-2026-32752 |
0 (3.1)
|
FreeScout: Broken Access Control in ThreadPolicy — Any… |
freescout-help-desk |
freescout |
2026-03-19T21:21:54.613Z | 2026-03-20T18:10:32.968Z |
| CVE-2026-33343 |
0 (3.1)
|
etcd: Nested etcd transactions bypass RBAC authorizati… |
etcd-io |
etcd |
2026-03-26T13:23:48.247Z | 2026-03-26T18:25:09.851Z |
| CVE-2026-33637 |
0 (3.1)
|
Faraday: Protocol-relative URI objects still bypass ho… |
lostisland |
faraday |
2026-05-19T17:44:42.557Z | 2026-05-19T18:37:22.100Z |
| CVE-2026-34095 |
0 (4.0)
|
action=raw with Special:Mypage subpage title responds … |
Wikimedia Foundation |
MediaWiki |
2026-05-11T16:53:25.421Z | 2026-05-11T18:04:03.036Z |
| CVE-2026-3479 |
0 (4.0)
|
pkgutil.get_data() does not enforce documented restrictions |
Python Software Foundation |
CPython |
2026-03-18T18:13:42.288Z | 2026-04-07T22:01:35.724Z |
| CVE-2026-41144 |
0 (3.1)
|
F´ (F Prime) has Integer Overflow in FileUplink |
nasa |
fprime |
2026-04-21T23:58:11.855Z | 2026-04-22T18:15:17.297Z |
| CVE-2026-41517 |
0 (4.0)
|
Emlog: Remote Code Execution via Malicious Plugin Upload |
emlog |
emlog |
2026-05-08T21:50:27.441Z | 2026-05-11T18:40:00.681Z |
| CVE-2026-42873 |
0 (3.1)
|
WeGIA: Error Handling Upload DocDependente |
LabRedesCefetRJ |
WeGIA |
2026-05-11T18:34:05.548Z | 2026-05-12T13:39:26.848Z |
| CVE-2026-44283 |
0 (3.1)
|
etcd: Read access via PrevKv in etcd transactions may … |
etcd-io |
etcd |
2026-05-14T17:01:33.598Z | 2026-05-16T00:40:51.007Z |
| CVE-2026-44427 |
0 (4.0)
|
MCP Registry: Open Redirect |
modelcontextprotocol |
registry |
2026-05-14T21:07:34.364Z | 2026-05-15T13:33:16.949Z |
| CVE-2026-44956 |
0 (3.0)
|
Low‑privileged users could use their Full Name as… |
Revive |
Adserver |
2026-06-23T16:14:38.240Z | 2026-06-23T17:25:34.164Z |
| CVE-2026-44960 |
0 (3.0)
|
A stored XSS can be exploited by leveraging the u… |
Revive |
Adserver |
2026-06-23T16:14:38.124Z | 2026-06-23T17:46:02.076Z |
| CVE-2026-44961 |
0 (3.0)
|
The XML‑RPC API addUser method has a validation b… |
Revive |
Adserver |
2026-06-23T16:14:38.126Z | 2026-06-23T17:44:07.348Z |
| CVE-2026-45772 |
0 (4.0)
|
Turborepo: Unexpected local code execution during Yarn… |
vercel |
turborepo |
2026-05-15T15:45:45.252Z | 2026-05-15T17:54:06.401Z |
| CVE-2026-48589 |
0 (4.0)
|
Apache Shiro: Jakarta EE open redirect via untrusted R… |
Apache Software Foundation |
Apache Shiro |
2026-05-25T20:20:03.597Z | 2026-05-26T12:37:44.475Z |
| CVE-2026-49826 |
0 (4.0)
|
Concourse login flow has an open redirect issue |
concourse |
concourse |
2026-08-14T16:25:56.406Z | 2026-08-14T18:06:17.054Z |
| CVE-2026-55611 |
0 (3.1)
|
AnythingLLM: embed-parsed-file cleanup deletes any par… |
Mintplex-Labs |
anything-llm |
2026-06-24T17:17:03.479Z | 2026-06-24T18:32:39.765Z |