VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298247 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-0241 | redhat_vex | Trust Protection Foundation: Multiple Authorization Bypass Vulnerabilities | known not affected: 1 | 2026-06-05T19:25:42+00:00 | Vulnerability · Source |
| CVE-2026-0232 | redhat_vex | Cortex XDR Agent: Local Administrator can disable the agent on Windows | known not affected: 1 | 2026-06-05T19:25:42+00:00 | Vulnerability · Source |
| CVE-2026-0246 | redhat_vex | Prisma Access Agent: Local Privilege Escalation Vulnerability | known not affected: 1 | 2026-06-05T19:25:41+00:00 | Vulnerability · Source |
| CVE-2026-0857 | redhat_vex | CVE-2026-0857 | known not affected: 1 | 2026-06-05T19:25:41+00:00 | Vulnerability · Source |
| CVE-2026-0264 | redhat_vex | PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution | known not affected: 1 | 2026-06-05T19:25:41+00:00 | Vulnerability · Source |
| CVE-2026-0502 | redhat_vex | Cross Site Request Forgery (CSRF) in SAP BusinessObjects Business Intelligence Platform | known not affected: 1 | 2026-06-05T19:25:41+00:00 | Vulnerability · Source |
| CVE-2026-0259 | redhat_vex | WildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B) | known not affected: 1 | 2026-06-05T19:25:40+00:00 | Vulnerability · Source |
| CVE-2026-0718 | redhat_vex | Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX <= 5.0.5 - Missing Authorization to Limited Post Meta Modification | known not affected: 1 | 2026-06-05T19:25:40+00:00 | Vulnerability · Source |
| CVE-2026-0512 | redhat_vex | Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog) | known not affected: 1 | 2026-06-05T19:25:39+00:00 | Vulnerability · Source |
| CVE-2026-0251 | redhat_vex | GlobalProtect App: Local Privilege Escalation Vulnerabilities | known not affected: 1 | 2026-06-05T19:25:39+00:00 | Vulnerability · Source |
| CVE-2026-0244 | redhat_vex | Prisma SD-WAN: Improper Certificate Validation Vulnerability | known not affected: 1 | 2026-06-05T19:25:38+00:00 | Vulnerability · Source |
| CVE-2026-0262 | redhat_vex | PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing | known not affected: 1 | 2026-06-05T19:25:38+00:00 | Vulnerability · Source |
| CVE-2026-26204 | redhat_vex | Wazuh: Heap-based NULL WRITE Buffer Underflow in GetAlertData | known not affected: 1 | 2026-06-05T19:25:38+00:00 | Vulnerability · Source |
| CVE-2026-0811 | redhat_vex | Advanced CF7 DB <= 2.0.9 - Cross-Site Request Forgery to Form Entry Deletion | known not affected: 1 | 2026-06-05T19:25:37+00:00 | Vulnerability · Source |
| CVE-2026-26067 | redhat_vex | October: Safe Mode Bypass via CSS Preprocessor Compilers | known not affected: 1 | 2026-06-05T19:25:36+00:00 | Vulnerability · Source |
| CVE-2026-0248 | redhat_vex | Prisma Access Agent: Improper Certificate Validation Vulnerability | known not affected: 1 | 2026-06-05T19:25:36+00:00 | Vulnerability · Source |
| CVE-2026-0239 | redhat_vex | Chronosphere Chronocollector Information Disclosure Vulnerability | known not affected: 1 | 2026-06-05T19:25:36+00:00 | Vulnerability · Source |
| CVE-2026-26274 | redhat_vex | October: Safe Mode Bypass via Twig Database Write Operations | known not affected: 1 | 2026-06-05T19:25:35+00:00 | Vulnerability · Source |
| CVE-2026-26291 | redhat_vex | CVE-2026-26291 | known not affected: 1 | 2026-06-05T19:25:34+00:00 | Vulnerability · Source |
| CVE-2026-26206 | redhat_vex | Wazuh: API brute-force protection bypass via race condition in login attempt tracking | known not affected: 1 | 2026-06-05T19:25:34+00:00 | Vulnerability · Source |
| CVE-2026-26946 | redhat_vex | CVE-2026-26946 | known not affected: 1 | 2026-06-05T19:25:34+00:00 | Vulnerability · Source |
| CVE-2026-26028 | redhat_vex | CryptPad: Sanitizer Bypass in Diffmarked.js Allows Arbitrary HTML Injection and Potential XSS | known not affected: 1 | 2026-06-05T19:25:33+00:00 | Vulnerability · Source |
| CVE-2026-44661 | redhat_vex | python-utcp: SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocol | known not affected: 1 | 2026-06-05T19:25:32+00:00 | Vulnerability · Source |
| CVE-2026-44562 | redhat_vex | Open WebUI: Model Import Overwrites Any Model Without Ownership Check | known not affected: 1 | 2026-06-05T19:25:31+00:00 | Vulnerability · Source |
| CVE-2026-44409 | redhat_vex | Information disclosure vulnerability in ZTE MU5250 | known not affected: 1 | 2026-06-05T19:25:31+00:00 | Vulnerability · Source |
| CVE-2026-44445 | redhat_vex | ERPNext: XML External Entity (XEE) Reference Vulnerability in the EDI Module | known not affected: 1 | 2026-06-05T19:25:31+00:00 | Vulnerability · Source |
| CVE-2026-44166 | redhat_vex | Pocketbase: Account pre-hijacking via OAuth2 unverfied->verified autolinking upgrade | known not affected: 1 | 2026-06-05T19:25:31+00:00 | Vulnerability · Source |
| CVE-2026-44571 | redhat_vex | Open WebUI: Improper Authorization in Standard Channels Allows Message Updates with Read Permission | known not affected: 1 | 2026-06-05T19:25:30+00:00 | Vulnerability · Source |
| CVE-2026-44337 | redhat_vex | PraisonAI knowledge-store backends interpolate unvalidated collection names into SQL and CQL queries | known not affected: 1 | 2026-06-05T19:25:30+00:00 | Vulnerability · Source |
| CVE-2026-44500 | redhat_vex | ZEBRA: Allocation Amplification in Inbound Network Deserializers | known not affected: 1 | 2026-06-05T19:25:30+00:00 | Vulnerability · Source |
| CVE-2026-44652 | redhat_vex | SillyTavern: SSRF vulnerability in the CORS proxy middleware | known not affected: 1 | 2026-06-05T19:25:29+00:00 | Vulnerability · Source |
| CVE-2026-44373 | redhat_vex | Nitro: Proxy scope bypass via percent-encoded path traversal in `routeRules` | known not affected: 1 | 2026-06-05T19:25:29+00:00 | Vulnerability · Source |
| CVE-2026-44885 | redhat_vex | Portainer: Path traversal in backup archive extraction allows arbitrary file write | known not affected: 1 | 2026-06-05T19:25:27+00:00 | Vulnerability · Source |
| CVE-2026-44306 | redhat_vex | Statamic: Email enumeration via forgot password endpoint | known not affected: 1 | 2026-06-05T19:25:26+00:00 | Vulnerability · Source |
| CVE-2026-44423 | redhat_vex | ShellHub: Cross-tenant IDOR in `GET /api/sessions/:uid` discloses SSH session data | known not affected: 1 | 2026-06-05T19:25:26+00:00 | Vulnerability · Source |
| CVE-2026-44836 | redhat_vex | view_component: Preview Route Can Dispatch Inherited Helper Methods | known not affected: 1 | 2026-06-05T19:25:26+00:00 | Vulnerability · Source |
| CVE-2026-44441 | redhat_vex | ERPNext: Possible SSRF by any authenticated user | known not affected: 1 | 2026-06-05T19:25:25+00:00 | Vulnerability · Source |
| CVE-2026-44737 | redhat_vex | grav-plugin-admin: Stored Cross-Site Scripting (XSS) Reflected endpoint /admin/pages/[page], parameter data[header][title] | known not affected: 1 | 2026-06-05T19:25:24+00:00 | Vulnerability · Source |
| CVE-2026-44117 | redhat_vex | OpenClaw < 2026.4.20 - Server-Side Request Forgery in QQBot Direct Media Upload | known not affected: 1 | 2026-06-05T19:25:24+00:00 | Vulnerability · Source |
| CVE-2026-44999 | redhat_vex | OpenClaw < 2026.4.20 - Improper Trust Labeling in Isolated Cron Awareness Events | known not affected: 1 | 2026-06-05T19:25:23+00:00 | Vulnerability · Source |
| CVE-2026-44719 | redhat_vex | Mathesar: Missing collaborator checks allowed access to database-scoped Mathesar metadata | known not affected: 1 | 2026-06-05T19:25:23+00:00 | Vulnerability · Source |
| CVE-2026-44245 | redhat_vex | Kyverno: [policy-reporter-ui] XSS via Stored Property Values in PropertyCard Component | known not affected: 1 | 2026-06-05T19:25:22+00:00 | Vulnerability · Source |
| CVE-2026-44407 | redhat_vex | Remote Denial of Service Vulnerability Exists in ZTE Cloud PC Client uSmartview | known not affected: 1 | 2026-06-05T19:25:22+00:00 | Vulnerability · Source |
| CVE-2026-44560 | redhat_vex | Open WebUI: Unauthorized File and Knowledge Base Content Access via RAG Vector Search | known not affected: 1 | 2026-06-05T19:25:22+00:00 | Vulnerability · Source |
| CVE-2026-44263 | redhat_vex | Weblate: Private Translation Enumeration via Screenshot API | known not affected: 1 | 2026-06-05T19:25:21+00:00 | Vulnerability · Source |
| CVE-2026-44308 | redhat_vex | Spring Cloud AWS: Missing SNS message signature verification allows spoofing of HTTP/HTTPS endpoint notifications | known not affected: 1 | 2026-06-05T19:25:21+00:00 | Vulnerability · Source |
| CVE-2026-44371 | redhat_vex | Open OnDemand: Specially crafted filenames can execute javascript in the file browser | known not affected: 1 | 2026-06-05T19:25:21+00:00 | Vulnerability · Source |
| CVE-2026-44199 | redhat_vex | Wagtail: Improper permission handling when deleting form submissions | known not affected: 1 | 2026-06-05T19:25:20+00:00 | Vulnerability · Source |
| CVE-2026-44919 | redhat_vex | CVE-2026-44919 | known not affected: 1 | 2026-06-05T19:25:20+00:00 | Vulnerability · Source |
| CVE-2026-44201 | redhat_vex | Wagtail: Improper restriction handling on Documents and Images API | known not affected: 1 | 2026-06-05T19:25:20+00:00 | Vulnerability · Source |