|
cve-2026-55489
|
|
BigBlueButton: IDOR on BBB through /api/graphql via PO…
|
bigbluebutton
|
bigbluebutton
|
2026-08-20T21:36:35.127Z |
2026-08-21T11:23:38.257Z |
|
cve-2026-77085
|
6.3 (v4.0)
|
n8n before 2.34.1 SSRF Protection Bypass via SearXNG Tool
|
n8n-io
|
n8n
|
2026-08-20T11:21:15.741Z |
2026-08-21T11:21:24.116Z |
|
cve-2026-77083
|
6 (v4.0)
|
n8n before 1.123.69 Code Node Sandbox Escape via Funct…
|
n8n-io
|
n8n
|
2026-08-20T11:21:14.377Z |
2026-08-21T11:21:22.795Z |
|
cve-2026-77081
|
5.1 (v4.0)
|
n8n before 1.123.69 Allowed-Domains Bypass via GraphQL Node
|
n8n-io
|
n8n
|
2026-08-20T11:21:13.006Z |
2026-08-21T11:21:21.502Z |
|
cve-2026-77080
|
8.7 (v4.0)
|
n8n before 1.123.69 Arbitrary File Read and Write via …
|
n8n-io
|
n8n
|
2026-08-20T11:21:12.357Z |
2026-08-21T11:21:20.831Z |
|
cve-2026-77077
|
7.2 (v4.0)
|
n8n before 1.123.69 Remote Code Execution via EventEmi…
|
n8n-io
|
n8n
|
2026-08-20T11:21:10.939Z |
2026-08-21T11:21:19.488Z |
|
cve-2026-77075
|
8.4 (v4.0)
|
n8n before 1.123.69 Expression Injection via Resource …
|
n8n-io
|
n8n
|
2026-08-20T11:21:09.583Z |
2026-08-21T11:21:18.192Z |
|
cve-2026-77074
|
6 (v4.0)
|
n8n before 1.123.69 SSRF via Edit Image Node
|
n8n-io
|
n8n
|
2026-08-20T11:21:08.910Z |
2026-08-21T11:21:17.551Z |
|
cve-2026-77072
|
8.4 (v4.0)
|
n8n before 1.123.69 Stored XSS via Form Completion Page
|
n8n-io
|
n8n
|
2026-08-20T11:21:07.588Z |
2026-08-21T11:21:16.263Z |
|
cve-2026-77070
|
7.1 (v4.0)
|
n8n before 1.123.69 NoSQL Injection via MongoDB Node
|
n8n-io
|
n8n
|
2026-08-20T11:21:06.262Z |
2026-08-21T11:21:14.972Z |
|
cve-2026-77069
|
2.3 (v4.0)
|
n8n before 1.123.69 SSRF Protection Bypass via OAuth2
|
n8n-io
|
n8n
|
2026-08-20T11:21:05.599Z |
2026-08-21T11:21:14.301Z |
|
cve-2026-76850
|
9.3 (v4.0)
9.8 (v3.1)
|
LMDeploy Remote Code Execution via Unsafe Pickle Deser…
|
InternLM
|
lmdeploy
|
2026-08-19T21:41:28.068Z |
2026-08-21T11:21:12.965Z |
|
cve-2026-76641
|
8.7 (v4.0)
7.5 (v3.1)
|
Expat Out-of-Bounds Read via dtdCopy
|
libexpat
|
libexpat
|
2026-08-20T17:31:10.610Z |
2026-08-21T11:21:12.314Z |
|
cve-2026-76239
|
5.3 (v4.0)
6.3 (v3.1)
|
Stigmem before 0.9.0a11 SSRF via unvalidated webhook d…
|
eidetic-labs
|
stigmem-node
|
2026-08-19T14:02:17.336Z |
2026-08-21T11:21:10.397Z |
|
cve-2026-76237
|
8.6 (v4.0)
|
stigmem before 0.9.0a12 Cross-Tenant BOLA via quarantine
|
eidetic-labs
|
stigmem-node
|
2026-08-19T14:02:15.899Z |
2026-08-21T11:21:09.073Z |
|
cve-2026-76234
|
8.7 (v4.0)
7.5 (v3.1)
|
libcrux before 0.0.6 Cryptographic Implementation Bug Fixes
|
celabshq
|
libcrux-ecdh
|
2026-08-19T14:02:14.481Z |
2026-08-21T11:21:07.741Z |
|
cve-2026-76226
|
6.8 (v4.0)
6.3 (v3.1)
|
Renovate 43.65.0 through 43.102.11 Remote Code Executi…
|
renovatebot
|
renovate
|
2026-08-19T14:02:08.689Z |
2026-08-21T11:21:07.057Z |
|
cve-2026-76214
|
9.1 (v4.0)
7.4 (v3.1)
|
phpMyFAQ before 4.1.7 WebAuthn Replay Attack via Challenge
|
thorsten
|
phpMyFAQ
|
2026-08-19T14:01:59.917Z |
2026-08-21T11:21:06.337Z |
|
cve-2026-75898
|
8.4 (v4.0)
8.5 (v3.1)
|
RAGFlow < 0.26.3 - Server-Side Request Forgery via Age…
|
infiniflow
|
ragflow
|
2026-08-18T14:24:06.089Z |
2026-08-21T11:21:04.965Z |
|
cve-2026-75583
|
2.3 (v4.0)
3.5 (v3.1)
|
keeper.sh Calendar version prior to 2.18.14 SSRF Guard…
|
ridafkih
|
keeper.sh
|
2026-08-19T16:35:53.999Z |
2026-08-21T11:21:04.300Z |
|
cve-2026-75148
|
6.9 (v4.0)
6.1 (v3.1)
|
cgltf 1.15 Integer Overflow via cgltf_validate() Acces…
|
jkuhlmann
|
cgltf
|
2026-08-19T13:37:42.321Z |
2026-08-21T11:21:02.923Z |
|
cve-2026-75140
|
8.7 (v4.0)
7.5 (v3.1)
|
jsoup Uncontrolled Resource Consumption in XmlTreeBuilder
|
jhy
|
soup
|
2026-08-20T15:56:50.377Z |
2026-08-21T11:21:02.259Z |
|
cve-2026-75106
|
9.3 (v4.0)
9.1 (v3.1)
|
OpnForm Editable Submission Secret Derivation via Empt…
|
OpnForm
|
OpnForm
|
2026-08-17T20:36:02.092Z |
2026-08-21T11:21:01.592Z |
|
cve-2026-75105
|
8.7 (v4.0)
7.5 (v3.1)
|
phpIPAM Temporary Subnet Share Information Disclosure …
|
phpipam
|
phpipam
|
2026-08-17T20:36:01.403Z |
2026-08-21T11:21:00.953Z |
|
cve-2026-72818
|
8.7 (v4.0)
7.5 (v3.1)
|
NLTK TweetTokenizer URL Pattern Backtracks Catastrophi…
|
nltk
|
nltk
|
2026-08-20T21:57:34.230Z |
2026-08-21T11:20:57.674Z |
|
cve-2026-71518
|
8.7 (v4.0)
7.5 (v3.1)
|
Typemill < 2.26.0 Authorization Bypass via Media File …
|
typemill
|
typemill
|
2026-08-17T21:05:10.836Z |
2026-08-21T11:20:57.023Z |
|
cve-2026-68765
|
5.2 (v4.0)
6.1 (v3.1)
|
hashcat KeePass KDBX v4 Module Heap Buffer Overflow vi…
|
hashcat
|
hashcat
|
2026-08-17T20:48:17.215Z |
2026-08-21T11:20:56.382Z |
|
cve-2026-66046
|
8.7 (v4.0)
7.5 (v3.1)
|
Expat Denial of Service via storeAtts() Quadratic Complexity
|
libexpat project
|
libexpat
|
2026-08-18T14:10:05.176Z |
2026-08-21T11:20:55.742Z |
|
cve-2026-63722
|
8.7 (v4.0)
9.8 (v3.1)
|
ICEcoder 8.1 Unauthenticated RCE via terminal-xhr.php
|
ICEcoder
|
ICEcoder
|
2026-08-19T19:13:45.090Z |
2026-08-21T11:20:55.075Z |
|
cve-2026-40509
|
5.3 (v4.0)
4.3 (v3.1)
|
OpenEMR < 8.3.0 CSRF via DICOM Viewer web_path Parameter
|
openemr
|
openemr
|
2026-08-19T14:53:21.612Z |
2026-08-21T11:20:53.071Z |