VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299385 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-26725 | redhat_vex | CVE-2026-26725 | known not affected: 1 | 2026-05-14T19:58:27+00:00 | Vulnerability · Source |
| CVE-2026-43654 | redhat_vex | CVE-2026-43654 | known not affected: 1 | 2026-05-14T19:58:26+00:00 | Vulnerability · Source |
| CVE-2026-42444 | redhat_vex | NanaZip: Unbounded resource consumption in NanaZip littlefs parser via attacker-controlled BlockCount | known not affected: 1 | 2026-05-14T19:58:26+00:00 | Vulnerability · Source |
| CVE-2026-42445 | redhat_vex | NanaZip: Uncontrolled recursion in NanaZip UFS directory traversal causes stack exhaustion | known not affected: 1 | 2026-05-14T19:58:26+00:00 | Vulnerability · Source |
| CVE-2026-42158 | redhat_vex | Flowsint: Broken Access Control allows modification of investigation metadata from any user | known not affected: 1 | 2026-05-14T19:58:24+00:00 | Vulnerability · Source |
| CVE-2026-36738 | redhat_vex | CVE-2026-36738 | known not affected: 1 | 2026-05-14T19:58:24+00:00 | Vulnerability · Source |
| CVE-2026-36742 | redhat_vex | CVE-2026-36742 | known not affected: 1 | 2026-05-14T19:58:24+00:00 | Vulnerability · Source |
| CVE-2026-36741 | redhat_vex | CVE-2026-36741 | known not affected: 1 | 2026-05-14T19:58:24+00:00 | Vulnerability · Source |
| CVE-2026-44204 | redhat_vex | Shelf: SQL Injection via sortBy Parameter | known not affected: 1 | 2026-05-14T19:58:23+00:00 | Vulnerability · Source |
| CVE-2026-20188 | redhat_vex | Cisco Crosswork Network Controller and Cisco Network Services Orchestrator Advisory | known not affected: 1 | 2026-05-14T19:58:22+00:00 | Vulnerability · Source |
| CVE-2025-28344 | redhat_vex | CVE-2025-28344 | known not affected: 1 | 2026-05-14T19:58:22+00:00 | Vulnerability · Source |
| CVE-2026-0265 | redhat_vex | PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled | known not affected: 1 | 2026-05-14T19:58:22+00:00 | Vulnerability · Source |
| CVE-2025-28343 | redhat_vex | CVE-2025-28343 | known not affected: 1 | 2026-05-14T19:58:22+00:00 | Vulnerability · Source |
| CVE-2024-55045 | redhat_vex | CVE-2024-55045 | known not affected: 1 | 2026-05-14T19:58:21+00:00 | Vulnerability · Source |
| CVE-2025-27853 | redhat_vex | CVE-2025-27853 | known not affected: 1 | 2026-05-14T19:58:21+00:00 | Vulnerability · Source |
| CVE-2026-44455 | redhat_vex | Hono: Unvalidated JSX Tag Names in hono/jsx May Allow HTML Injection | known not affected: 1 | 2026-05-14T19:58:20+00:00 | Vulnerability · Source |
| CVE-2025-27851 | redhat_vex | CVE-2025-27851 | known not affected: 1 | 2026-05-14T19:58:20+00:00 | Vulnerability · Source |
| CVE-2026-44458 | redhat_vex | Hono: CSS Declaration Injection via Style Object Values in JSX SSR | known not affected: 1 | 2026-05-14T19:58:19+00:00 | Vulnerability · Source |
| CVE-2026-44197 | redhat_vex | Wagtail: Improper permission handling when comparing revisions | known not affected: 1 | 2026-05-14T19:58:19+00:00 | Vulnerability · Source |
| CVE-2026-42545 | redhat_vex | Granian: DoS via WSGI response header panic | known not affected: 1 | 2026-05-14T19:58:18+00:00 | Vulnerability · Source |
| CVE-2026-42058 | redhat_vex | BIG-IP iControl REST vulnerability | known not affected: 1 | 2026-05-14T19:58:17+00:00 | Vulnerability · Source |
| CVE-2026-42541 | redhat_vex | Kubewarden: RBAC Reconnaissance via unchecked can_i host capability call | known not affected: 1 | 2026-05-14T19:58:17+00:00 | Vulnerability · Source |
| CVE-2026-42032 | redhat_vex | CKAN: Unauthenticated Authorization Bypass in `datastore_search_sql` | known not affected: 1 | 2026-05-14T19:58:17+00:00 | Vulnerability · Source |
| CVE-2026-44258 | redhat_vex | efw4.X: Path Traversal via Unchecked dst Parameter leads to Remote Code Execution | known not affected: 1 | 2026-05-14T19:58:17+00:00 | Vulnerability · Source |
| CVE-2026-41255 | redhat_vex | CKAN: CSRF exemption primed by anonymous requests | known not affected: 1 | 2026-05-14T19:58:16+00:00 | Vulnerability · Source |
| CVE-2026-41132 | redhat_vex | CKAN: No certificate validation on STMP connection | known not affected: 1 | 2026-05-14T19:58:16+00:00 | Vulnerability · Source |
| CVE-2026-4827 | redhat_vex | Insufficient Entropy vulnerability on Multiple Products | known not affected: 1 | 2026-05-14T19:58:15+00:00 | Vulnerability · Source |
| CVE-2025-32425 | redhat_vex | AutoGPT has missing Docker log rotation on platform containers that allows host disk-exhaustion DoS | known not affected: 1 | 2026-05-14T19:58:15+00:00 | Vulnerability · Source |
| CVE-2026-45227 | redhat_vex | Heym < 0.0.21 Sandbox Escape via Python Introspection | known not affected: 1 | 2026-05-14T19:58:15+00:00 | Vulnerability · Source |
| CVE-2026-0243 | redhat_vex | Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through IPv6 Crafted Packet | known not affected: 1 | 2026-05-14T19:58:15+00:00 | Vulnerability · Source |
| CVE-2026-44351 | redhat_vex | fast-jwt: Empty HMAC secret accepted via async key resolver - JWT auth bypass | known not affected: 1 | 2026-05-14T19:58:14+00:00 | Vulnerability · Source |
| CVE-2026-44738 | redhat_vex | Grav: Twig sandbox allows editor-role users to exfiltrate all plugin secrets via Config::toArray() | known not affected: 1 | 2026-05-14T19:58:14+00:00 | Vulnerability · Source |
| CVE-2026-44467 | redhat_vex | Claude Desktop: SSH Host Key Verification Bypass Allows Man-in-the-Middle Attack on Remote Sessions | known not affected: 1 | 2026-05-14T19:58:14+00:00 | Vulnerability · Source |
| CVE-2026-44868 | redhat_vex | Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 | known not affected: 1 | 2026-05-14T19:58:14+00:00 | Vulnerability · Source |
| CVE-2026-44867 | redhat_vex | Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 | known not affected: 1 | 2026-05-14T19:58:14+00:00 | Vulnerability · Source |
| CVE-2026-44304 | redhat_vex | Lemur: LDAP Filter Injection enables post-authentication privilege escalation | known not affected: 1 | 2026-05-14T19:58:13+00:00 | Vulnerability · Source |
| CVE-2026-42550 | redhat_vex | Flight: SQL Injection via unvalidated identifiers in SimplePdo::insert / update / delete | known not affected: 1 | 2026-05-14T19:58:13+00:00 | Vulnerability · Source |
| CVE-2026-41893 | redhat_vex | Signal K Server's WebSocket Login Endpoint Lacks Rate Limiting (Credential Brute-Force) | known not affected: 1 | 2026-05-14T19:58:13+00:00 | Vulnerability · Source |
| CVE-2026-43989 | redhat_vex | JunoClaw: upload_wasm accepted arbitrary filesystem paths without validation | known not affected: 1 | 2026-05-14T19:58:13+00:00 | Vulnerability · Source |
| CVE-2026-42349 | redhat_vex | Clerk: Authorization bypass when combining organization, billing, or reverification checks | known not affected: 1 | 2026-05-14T19:58:13+00:00 | Vulnerability · Source |
| CVE-2026-42609 | redhat_vex | Grav: Administrative Account Disruption and Privilege De-escalation via User Overwrite Logic | known not affected: 1 | 2026-05-14T19:58:13+00:00 | Vulnerability · Source |
| CVE-2026-44225 | redhat_vex | Pulpy: Incomplete filesystem sandbox in pulpy.fs bridge allows packaged web apps to read arbitrary user files | known not affected: 1 | 2026-05-14T19:58:13+00:00 | Vulnerability · Source |
| CVE-2026-42260 | redhat_vex | Open-WebSearch: SSRF in `fetchWebContent` MCP tool: bracketed IPv6 literals and non-resolving hostname check bypass `isPrivateOrLocalHostname` | known not affected: 1 | 2026-05-14T19:58:12+00:00 | Vulnerability · Source |
| CVE-2026-42289 | redhat_vex | ChurchCRM: Cross-Site Request Forgery (CSRF) Leading to Admin Privilege Escalation | known not affected: 1 | 2026-05-14T19:58:12+00:00 | Vulnerability · Source |
| CVE-2024-51395 | redhat_vex | CVE-2024-51395 | known not affected: 1 | 2026-05-14T19:58:11+00:00 | Vulnerability · Source |
| CVE-2025-62627 | redhat_vex | CVE-2025-62627 | known not affected: 1 | 2026-05-14T19:58:11+00:00 | Vulnerability · Source |
| CVE-2024-48519 | redhat_vex | CVE-2024-48519 | known not affected: 1 | 2026-05-14T19:58:11+00:00 | Vulnerability · Source |
| CVE-2026-21821 | redhat_vex | HCL BigFix SCM Reporting is affected by vulnerabilities in jQuery | known not affected: 1 | 2026-05-14T19:58:11+00:00 | Vulnerability · Source |
| CVE-2025-62623 | redhat_vex | CVE-2025-62623 | known not affected: 1 | 2026-05-14T19:58:11+00:00 | Vulnerability · Source |
| CVE-2025-62624 | redhat_vex | CVE-2025-62624 | known not affected: 1 | 2026-05-14T19:58:11+00:00 | Vulnerability · Source |