Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-74021 | 7.5 (v3.1) | WordPress Chaplin theme <= 2.6.8 - Broken Access Contr… |
Anders Norén |
Chaplin |
2026-08-20T12:06:52.666Z | 2026-08-20T15:43:14.059Z |
| cve-2026-77085 | 6.3 (v4.0) | n8n before 2.34.1 SSRF Protection Bypass via SearXNG Tool |
n8n-io |
n8n |
2026-08-20T11:21:15.741Z | 2026-08-21T11:21:24.116Z |
| cve-2026-77084 | 7.7 (v4.0) | n8n before 1.123.69 Remote Code Execution via Git Node… |
n8n-io |
n8n |
2026-08-20T11:21:15.048Z | 2026-08-25T14:35:31.060Z |
| cve-2026-77083 | 6 (v4.0) | n8n before 1.123.69 Code Node Sandbox Escape via Funct… |
n8n-io |
n8n |
2026-08-20T11:21:14.377Z | 2026-08-21T11:21:22.795Z |
| cve-2026-77082 | 5.3 (v4.0) | n8n before 1.123.69 ReDoS via Filter and Switch Node |
n8n-io |
n8n |
2026-08-20T11:21:13.700Z | 2026-08-21T16:42:34.601Z |
| cve-2026-77081 | 5.1 (v4.0) | n8n before 1.123.69 Allowed-Domains Bypass via GraphQL Node |
n8n-io |
n8n |
2026-08-20T11:21:13.006Z | 2026-08-21T11:21:21.502Z |
| cve-2026-77080 | 8.7 (v4.0) | n8n before 1.123.69 Arbitrary File Read and Write via … |
n8n-io |
n8n |
2026-08-20T11:21:12.357Z | 2026-08-21T11:21:20.831Z |
| cve-2026-77079 | 7.4 (v4.0) | n8n before 2.34.1 Authorization Bypass via Custom Role… |
n8n-io |
n8n |
2026-08-20T11:21:11.692Z | 2026-08-25T14:30:49.241Z |
| cve-2026-77077 | 7.2 (v4.0) | n8n before 1.123.69 Remote Code Execution via EventEmi… |
n8n-io |
n8n |
2026-08-20T11:21:10.939Z | 2026-08-21T11:21:19.488Z |
| cve-2026-77076 | 7.1 (v4.0) | n8n before 1.123.69 Credential Leak via GraphQL Node Error |
n8n-io |
n8n |
2026-08-20T11:21:10.251Z | 2026-08-21T16:43:12.650Z |
| cve-2026-77075 | 8.4 (v4.0) | n8n before 1.123.69 Expression Injection via Resource … |
n8n-io |
n8n |
2026-08-20T11:21:09.583Z | 2026-08-21T11:21:18.192Z |
| cve-2026-77074 | 6 (v4.0) | n8n before 1.123.69 SSRF via Edit Image Node |
n8n-io |
n8n |
2026-08-20T11:21:08.910Z | 2026-08-21T11:21:17.551Z |
| cve-2026-77073 | 5.3 (v4.0) | n8n before 2.34.1 Cross-Project Credential Access via MCP |
n8n-io |
n8n |
2026-08-20T11:21:08.265Z | 2026-08-25T14:27:51.234Z |
| cve-2026-77072 | 8.4 (v4.0) | n8n before 1.123.69 Stored XSS via Form Completion Page |
n8n-io |
n8n |
2026-08-20T11:21:07.588Z | 2026-08-21T11:21:16.263Z |
| cve-2026-77071 | 7.1 (v4.0) | n8n before 1.123.69 PostgREST Filter Injection via Supabase |
n8n-io |
n8n |
2026-08-20T11:21:06.912Z | 2026-08-21T16:43:50.851Z |
| cve-2026-77070 | 7.1 (v4.0) | n8n before 1.123.69 NoSQL Injection via MongoDB Node |
n8n-io |
n8n |
2026-08-20T11:21:06.262Z | 2026-08-21T11:21:14.972Z |
| cve-2026-77069 | 2.3 (v4.0) | n8n before 1.123.69 SSRF Protection Bypass via OAuth2 |
n8n-io |
n8n |
2026-08-20T11:21:05.599Z | 2026-08-21T11:21:14.301Z |
| cve-2026-77068 | 8.7 (v4.0) | n8n before 2.34.1 Remote Code Execution via Path Traversal |
n8n-io |
n8n |
2026-08-20T11:21:04.945Z | 2026-08-25T14:26:48.904Z |
| cve-2026-77067 | 5.3 (v4.0) 5 (v3.1) | Omnivore Stored Server-Side Request Forgery via the se… |
omnivore-app |
omnivore |
2026-08-20T11:05:51.482Z | 2026-08-20T14:48:13.117Z |
| cve-2026-77066 | 5.3 (v4.0) 5 (v3.1) | Omnivore Server-Side Request Forgery via the scanFeeds… |
omnivore-app |
omnivore |
2026-08-20T11:05:50.791Z | 2026-08-21T16:44:51.826Z |
| cve-2026-73199 | 6.5 (v3.1) | Ipa: freeipa: null pointer dereference in `ipa-enrollm… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-20T10:39:13.688Z | 2026-08-20T13:50:10.301Z |
| cve-2026-11861 | 9.6 (v3.1) | Freeipa: idm: ipa: freeipa: obtaining tgs with imperso… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-20T10:39:08.025Z | 2026-08-20T13:48:25.096Z |
| cve-2026-73198 | 7.5 (v3.1) | Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messag… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-20T10:39:00.713Z | 2026-08-20T15:38:29.582Z |
| cve-2026-13097 | 8.7 (v3.1) | Ipa: privilege escalation via krbcanonicalname manipul… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-20T10:37:55.464Z | 2026-09-08T10:49:24.191Z |
| cve-2026-77026 | 6.9 (v4.0) | Joomla Extension - tassos.gr - Client-controlled valid… |
tassos.gr |
Convert Forms extension for Joomla |
2026-08-20T10:35:55.185Z | 2026-08-21T04:45:53.362Z |
| cve-2026-73196 | 4.3 (v3.1) | Ipa: freeipa: authenticated dos in `otptoken-add` via … |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-20T10:31:58.189Z | 2026-08-20T15:19:53.186Z |
| cve-2026-73197 | 7.5 (v3.1) | Ipa: freeipa: unauthenticated dos in `/ipa/migration/m… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-20T10:31:31.674Z | 2026-08-25T14:25:16.305Z |
| cve-2026-18917 | 7.8 (v3.1) | Libvirt: integer overflow in nodegetfreepages rpc hand… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-20T09:54:50.958Z | 2026-08-20T15:36:10.363Z |
| cve-2026-76610 | 6.9 (v4.0) | Joomla Extension - yootheme.com - Unauthenticated tag … |
yootheme.com |
Zoo extension for Joomla |
2026-08-20T08:54:46.853Z | 2026-08-21T04:51:12.935Z |
| cve-2026-77014 | 5.3 (v3.1) | Libsoup: libsoup: integer truncation in sort_ranges() … |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-20T08:21:22.225Z | 2026-08-25T14:23:53.450Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2018-avi-446 | Multiples vulnérabilités dans Cisco Webex Network Recording Player | 2018-09-20T00:00:00.000000 | 2018-09-20T00:00:00.000000 |
| certfr-2018-avi-445 | Multiples vulnérabilités dans Citrix ShareFile StorageZones Controller | 2018-09-20T00:00:00.000000 | 2018-09-20T00:00:00.000000 |
| certfr-2018-avi-444 | Multiples vulnérabilités dans Google Chrome OS | 2018-09-19T00:00:00.000000 | 2018-09-19T00:00:00.000000 |
| certfr-2018-avi-443 | Multiples vulnérabilités dans les produits Apple | 2018-09-18T00:00:00.000000 | 2018-09-19T00:00:00.000000 |
| certfr-2018-avi-442 | Vulnérabilité dans Google Chrome | 2018-09-18T00:00:00.000000 | 2018-09-18T00:00:00.000000 |
| certfr-2018-avi-441 | Multiples vulnérabilités dans Moodle | 2018-09-17T00:00:00.000000 | 2018-09-17T00:00:00.000000 |
| certfr-2018-avi-440 | Vulnérabilité dans Prim'X Zed! | 2018-09-17T00:00:00.000000 | 2018-09-17T00:00:00.000000 |
| certfr-2018-avi-439 | Multiples vulnérabilités dans PHP | 2018-09-14T00:00:00.000000 | 2018-09-14T00:00:00.000000 |
| certfr-2018-avi-438 | Multiples vulnérabilités dans les produits Microsoft | 2018-09-12T00:00:00.000000 | 2018-09-12T00:00:00.000000 |
| certfr-2018-avi-437 | Multiples vulnérabilités dans Microsoft .Net | 2018-09-12T00:00:00.000000 | 2018-09-12T00:00:00.000000 |
| certfr-2018-avi-436 | Multiples vulnérabilités dans Microsoft Windows | 2018-09-12T00:00:00.000000 | 2018-09-12T00:00:00.000000 |
| certfr-2018-avi-435 | Multiples vulnérabilités dans Microsoft Office | 2018-09-12T00:00:00.000000 | 2018-09-12T00:00:00.000000 |
| certfr-2018-avi-434 | Multiples vulnérabilités dans Microsoft Edge | 2018-09-12T00:00:00.000000 | 2018-09-12T00:00:00.000000 |
| certfr-2018-avi-433 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2018-09-12T00:00:00.000000 | 2018-09-12T00:00:00.000000 |
| certfr-2018-avi-432 | Multiples vulnérabilités dans les produits Intel | 2018-09-12T00:00:00.000000 | 2018-09-12T00:00:00.000000 |
| certfr-2018-avi-431 | Multiples vulnérabilités dans Google Chrome | 2018-09-12T00:00:00.000000 | 2018-09-12T00:00:00.000000 |
| certfr-2018-avi-430 | Multiples vulnérabilités dans Adobe Flash Player et Cold Fusion | 2018-09-12T00:00:00.000000 | 2018-09-12T00:00:00.000000 |
| certfr-2018-avi-429 | Multiples vulnérabilités dans SCADA les produits Siemens | 2018-09-11T00:00:00.000000 | 2018-09-11T00:00:00.000000 |
| certfr-2018-avi-428 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2018-09-11T00:00:00.000000 | 2018-09-11T00:00:00.000000 |
| certfr-2018-avi-427 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-09-11T00:00:00.000000 | 2018-09-11T00:00:00.000000 |
| certfr-2018-avi-426 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-09-07T00:00:00.000000 | 2018-09-07T00:00:00.000000 |
| certfr-2018-avi-425 | Multiples vulnérabilités dans VMware Content Locker et AirWatch Agent | 2018-09-06T00:00:00.000000 | 2018-09-06T00:00:00.000000 |
| certfr-2018-avi-424 | Multiples vulnérabilités dans Mozilla Firefox | 2018-09-06T00:00:00.000000 | 2018-09-06T00:00:00.000000 |
| certfr-2018-avi-423 | Multiples vulnérabilités dans les produits Cisco | 2018-09-06T00:00:00.000000 | 2018-09-06T00:00:00.000000 |
| certfr-2018-avi-422 | Multiples vulnérabilités dans Google Chrome | 2018-09-05T00:00:00.000000 | 2018-09-05T00:00:00.000000 |
| certfr-2018-avi-421 | Multiples vulnérabilités dans Google Android | 2018-09-05T00:00:00.000000 | 2018-09-05T00:00:00.000000 |
| certfr-2018-avi-420 | Vulnérabilité dans le noyau linux de RedHat | 2018-09-05T00:00:00.000000 | 2018-09-05T00:00:00.000000 |
| certfr-2018-avi-419 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-09-05T00:00:00.000000 | 2018-09-05T00:00:00.000000 |
| certfr-2018-avi-418 | Multiples vulnérabilités dans SCADA les produits Schneider Electric | 2018-08-31T00:00:00.000000 | 2018-08-31T00:00:00.000000 |
| certfr-2018-avi-417 | Multiples vulnérabilités dans Wireshark | 2018-08-30T00:00:00.000000 | 2018-08-30T00:00:00.000000 |