|
cve-2026-100688
|
7.1 (v4.0)
6.5 (v3.1)
|
Budibase server before 3.45.0 Cross-Tenant Information…
|
budibase
|
server
|
2026-09-26T13:23:48.061Z |
2026-10-08T15:21:58.977Z |
|
cve-2026-100687
|
7 (v4.0)
5.5 (v3.1)
|
Budibase Server before 3.45.0 Credential Exposure via …
|
budibase
|
server
|
2026-09-26T13:23:47.369Z |
2026-10-08T15:21:58.454Z |
|
cve-2026-100686
|
8.6 (v4.0)
8.1 (v3.1)
|
Budibase before 3.45.0 Cross-Workspace Privilege Escal…
|
budibase
|
server
|
2026-09-26T13:23:46.674Z |
2026-10-08T15:21:57.721Z |
|
cve-2026-100685
|
8.3 (v4.0)
7.7 (v3.1)
|
Budibase before 3.45.0 Information Disclosure via Chat Links
|
budibase
|
server
|
2026-09-26T13:23:45.934Z |
2026-10-08T15:21:56.885Z |
|
cve-2026-100684
|
9.2 (v4.0)
8.1 (v3.1)
|
Budibase Server 3.41.0 before 3.45.0 Authentication By…
|
budibase
|
server
|
2026-09-26T13:23:45.225Z |
2026-10-08T15:21:56.292Z |
|
cve-2026-100683
|
8.9 (v4.0)
8 (v3.1)
|
Budibase before 3.45.0 SQL Injection via column-rename DDL
|
budibase
|
server
|
2026-09-26T13:23:44.523Z |
2026-10-08T15:21:55.694Z |
|
cve-2026-100682
|
8.7 (v4.0)
8.8 (v3.1)
|
Budibase Server before 3.45.0 Arbitrary File Write via…
|
budibase
|
server
|
2026-09-26T13:23:43.846Z |
2026-10-08T15:21:55.126Z |
|
cve-2026-100681
|
6.3 (v4.0)
5.4 (v3.1)
|
Budibase before 3.45.0 SSRF and OAuth Token Exfiltrati…
|
budibase
|
server
|
2026-09-26T13:23:43.143Z |
2026-10-08T15:21:54.188Z |
|
cve-2026-100680
|
8.6 (v4.0)
8.1 (v3.1)
|
Budibase before 3.45.0 Arbitrary Local File Read via O…
|
budibase
|
server
|
2026-09-26T13:23:42.415Z |
2026-10-08T15:21:53.575Z |
|
cve-2026-100679
|
7.1 (v4.0)
8.8 (v3.1)
|
stoatchat before 0.15.5 MFA Bypass via Cross-Account Ticket
|
stoatchat
|
stoatchat
|
2026-09-26T13:23:41.637Z |
2026-09-28T18:03:01.169Z |
|
cve-2026-100678
|
8.3 (v4.0)
6.5 (v3.1)
|
stoatchat before 0.15.5 MFA Brute Force via Insufficie…
|
stoatchat
|
stoatchat
|
2026-09-26T13:23:40.935Z |
2026-09-30T15:00:30.440Z |
|
cve-2026-100677
|
6.9 (v4.0)
5.3 (v3.1)
|
stoatchat before 0.15.5 Account Enumeration via Error …
|
stoatchat
|
stoatchat
|
2026-09-26T13:23:39.733Z |
2026-09-30T17:38:09.594Z |
|
cve-2026-100676
|
8.8 (v4.0)
8.2 (v3.1)
|
stoatchat before 0.15.5 Local Filesystem Read via SVG
|
stoatchat
|
stoatchat
|
2026-09-26T13:23:39.014Z |
2026-09-28T16:33:08.727Z |
|
cve-2026-100675
|
7.1 (v4.0)
6.5 (v3.1)
|
stoatchat before 0.15.5 Denial of Service via mass mentions
|
stoatchat
|
stoatchat
|
2026-09-26T13:23:38.319Z |
2026-09-28T18:07:41.284Z |
|
cve-2026-100674
|
5.3 (v4.0)
4.3 (v3.1)
|
stoatchat before 0.15.5 Username Validation Bypass via…
|
stoatchat
|
stoatchat
|
2026-09-26T13:23:37.620Z |
2026-09-30T14:58:59.656Z |
|
cve-2026-100673
|
8.4 (v4.0)
8.2 (v3.1)
|
Grav Data Manager before 1.4.5 Stored XSS via item-det…
|
getgrav
|
grav-plugin-datamanager
|
2026-09-26T13:23:36.898Z |
2026-09-30T20:11:12.708Z |
|
cve-2026-100672
|
8.7 (v4.0)
7.5 (v3.1)
|
grav-plugin-comments before 1.2.11 Unauthenticated Inf…
|
getgrav
|
grav-plugin-comments
|
2026-09-26T13:23:36.168Z |
2026-09-28T16:32:14.948Z |
|
cve-2026-100671
|
8.6 (v4.0)
8 (v3.1)
|
Grav before 2.0.25 Session Cookie Theft via Twig Sandbox
|
getgrav
|
grav
|
2026-09-26T13:23:35.451Z |
2026-09-28T18:12:07.848Z |
|
cve-2026-100670
|
8.7 (v4.0)
8.8 (v3.1)
|
Grav CMS 2.0.14 through 2.0.24 Privilege Escalation vi…
|
getgrav
|
grav
|
2026-09-26T13:23:34.756Z |
2026-09-30T14:57:47.995Z |
|
cve-2026-100669
|
8.7 (v4.0)
7.5 (v3.1)
|
Grav before 2.0.25 Sensitive File Disclosure via Case-…
|
getgrav
|
grav
|
2026-09-26T13:23:34.082Z |
2026-09-30T20:11:12.856Z |
|
cve-2026-100668
|
7.1 (v4.0)
6.5 (v3.1)
|
Grav before 2.0.25 Sandbox Escape via array Filter
|
getgrav
|
grav
|
2026-09-26T13:23:33.382Z |
2026-09-28T16:31:25.182Z |
|
cve-2026-100667
|
6.9 (v4.0)
5.3 (v3.1)
|
grav-plugin-login 3.8.7 through 3.9.6 Two-Factor Authe…
|
getgrav
|
grav
|
2026-09-26T13:23:32.685Z |
2026-09-28T18:14:51.902Z |
|
cve-2026-100666
|
6.9 (v4.0)
7.3 (v3.1)
|
Netty 4.2.0 through 4.2.16 Response Desynchronization …
|
netty
|
netty
|
2026-09-26T13:23:31.961Z |
2026-09-30T14:54:46.509Z |
|
cve-2026-100665
|
8.7 (v4.0)
7.5 (v3.1)
|
Netty 4.2.11 through 4.2.17 QUIC Hostname Verification…
|
netty
|
netty
|
2026-09-26T13:23:31.242Z |
2026-10-02T15:46:37.467Z |
|
cve-2026-100664
|
8.7 (v4.0)
7.5 (v3.1)
|
Netty 4.2.2 through 4.2.17 HTTP/1 Host Header Authorit…
|
netty
|
netty
|
2026-09-26T13:23:30.478Z |
2026-09-28T16:47:05.471Z |
|
cve-2026-100663
|
8.7 (v4.0)
7.5 (v3.1)
|
Netty HTTP/1 CONNECT authority-form mistranslated to m…
|
netty
|
netty
|
2026-09-26T13:23:29.751Z |
2026-09-28T18:48:51.788Z |
|
cve-2026-100662
|
8.7 (v4.0)
7.5 (v3.1)
|
Netty HTTP/3 QPACK encoder-stream unbounded memory exh…
|
netty
|
netty
|
2026-09-26T13:23:28.990Z |
2026-09-30T14:53:30.335Z |
|
cve-2026-100661
|
8.7 (v4.0)
7.5 (v3.1)
|
Netty HTTP/3 QPACK Prefixed Integer DoS via Unbounded …
|
netty
|
netty
|
2026-09-26T13:23:28.303Z |
2026-10-02T20:46:26.627Z |
|
cve-2026-100660
|
8.7 (v4.0)
7.5 (v3.1)
|
Netty before 4.2.18.Final QpackEncoder Unbounded Memor…
|
netty
|
netty
|
2026-09-26T13:23:27.554Z |
2026-09-28T16:45:45.821Z |
|
cve-2026-100659
|
6.9 (v4.0)
6.5 (v3.1)
|
Netty 4.2.0 through 4.2.17 HTTP/3 Request Routing Bypass
|
netty
|
netty
|
2026-09-26T13:23:26.859Z |
2026-09-28T18:17:29.170Z |