|
cve-2026-100628
|
8.7 (v4.0)
4.3 (v3.1)
|
capgo.app before 12.128.12 Authentication Bypass via apikey
|
Cap-go
|
capgo.app
|
2026-09-26T13:23:05.038Z |
2026-09-28T16:57:24.802Z |
|
cve-2026-100627
|
7.2 (v4.0)
8.1 (v3.1)
|
Capgo bundle promotion API channel RBAC deny override bypass
|
Cap-go
|
capgo.app
|
2026-09-26T13:23:04.377Z |
2026-09-30T17:20:12.880Z |
|
cve-2026-100625
|
8.7 (v4.0)
7.1 (v3.1)
|
Capgo Build Upload Proxy Authorization Bypass via TUS …
|
Cap-go
|
capgo.app
|
2026-09-26T13:23:03.030Z |
2026-09-30T17:20:12.129Z |
|
cve-2026-100624
|
5.3 (v4.0)
5.4 (v3.1)
|
Capgo.app before 12.264.5 Upload Expiry Bypass via bui…
|
Cap-go
|
capgo.app
|
2026-09-26T13:23:02.328Z |
2026-10-05T15:09:27.899Z |
|
cve-2026-100623
|
8.7 (v4.0)
8.8 (v3.1)
|
Capgo Authentication Bypass via Direct PostgREST org_u…
|
Cap-go
|
capgo.app
|
2026-09-26T13:23:01.631Z |
2026-09-30T17:20:11.439Z |
|
cve-2026-100622
|
8.7 (v4.0)
7.5 (v3.1)
|
capgo.app through 12.129.0 Cache Restoration of Delete…
|
Cap-go
|
capgo.app
|
2026-09-26T13:23:00.943Z |
2026-09-28T18:58:31.793Z |
|
cve-2026-100621
|
5.3 (v4.0)
4.3 (v3.1)
|
capgo.app Content-Lock Bypass via r2-direct Bundle Mutation
|
Cap-go
|
capgo.app
|
2026-09-26T13:23:00.259Z |
2026-09-30T17:20:10.724Z |
|
cve-2026-100620
|
5.1 (v4.0)
3.8 (v3.1)
|
Capgo CLI through 7.98.2 Excessive Permissions via Ove…
|
Cap-go
|
@capgo/cli
|
2026-09-26T13:22:59.577Z |
2026-10-05T16:01:42.492Z |
|
cve-2026-100619
|
8.7 (v4.0)
8.8 (v3.1)
|
Capgo OTA Manifest Poisoning via app_versions.manifest…
|
Cap-go
|
capgo.app
|
2026-09-26T13:22:58.881Z |
2026-09-30T17:20:09.972Z |
|
cve-2026-100618
|
8.7 (v4.0)
8.5 (v3.1)
|
Capgo App Icon Update Privilege Escalation via Service…
|
Cap-go
|
capgo.app
|
2026-09-26T13:22:58.212Z |
2026-09-30T17:20:09.244Z |
|
cve-2026-100617
|
8.7 (v4.0)
8.8 (v3.1)
|
Cap-go capgo.app Authorization Bypass via channel_perm…
|
Cap-go
|
capgo.app
|
2026-09-26T13:22:57.529Z |
2026-09-30T17:20:08.539Z |
|
cve-2026-100616
|
7 (v4.0)
5.5 (v3.1)
|
capgo.app Authentication Bypass via PostgREST customer…
|
Cap-go
|
capgo.app
|
2026-09-26T13:22:56.806Z |
2026-10-05T16:03:57.612Z |
|
cve-2026-100615
|
8.7 (v4.0)
8.8 (v3.1)
|
Cap-go capgo.app before 12.267.1 Privilege Escalation …
|
Cap-go
|
capgo.app
|
2026-09-26T13:22:56.128Z |
2026-09-28T17:11:42.579Z |
|
cve-2026-100614
|
8.7 (v4.0)
8.8 (v3.1)
|
Capgo before 12.244.1 Cross-Tenant Image Overwrite via…
|
Cap-go
|
capgo.app
|
2026-09-26T13:22:55.404Z |
2026-09-28T19:04:52.158Z |
|
cve-2026-100613
|
6 (v4.0)
5.3 (v3.1)
|
capgo.app Authorization Bypass via Stale Channel Permi…
|
Cap-go
|
capgo.app
|
2026-09-26T13:22:54.681Z |
2026-09-30T17:20:07.148Z |
|
cve-2026-100612
|
8.6 (v4.0)
7.2 (v3.1)
|
Capgo SSO Provider ID Authentication Bypass via Incomp…
|
Cap-go
|
capgo.app
|
2026-09-26T13:22:53.997Z |
2026-09-30T20:11:12.994Z |
|
cve-2026-100611
|
7.1 (v4.0)
6.5 (v3.1)
|
Capgo apikey_manager Role Privilege Escalation via Inc…
|
Cap-go
|
capgo.app
|
2026-09-26T13:22:53.315Z |
2026-09-30T17:20:05.706Z |
|
cve-2026-100610
|
7.7 (v4.0)
7.5 (v3.1)
|
Flowise through 3.1.4 Missing Authorization via upsert…
|
FlowiseAI
|
Flowise
|
2026-09-26T13:22:52.636Z |
2026-09-28T19:07:04.058Z |
|
cve-2026-100609
|
7.6 (v4.0)
6.8 (v3.1)
|
Flowise through 3.1.4 Insecure Direct Object Reference…
|
FlowiseAI
|
Flowise
|
2026-09-26T13:22:51.940Z |
2026-09-30T12:50:05.029Z |
|
cve-2026-100608
|
8.7 (v4.0)
8.3 (v3.1)
|
Flowise through 3.1.4 Authorization Bypass via BullMQ …
|
FlowiseAI
|
Flowise
|
2026-09-26T13:22:51.224Z |
2026-10-05T15:57:31.978Z |
|
cve-2026-100607
|
9.2 (v4.0)
7.7 (v3.1)
|
Flowise through 3.1.4 Authentication Bypass via Email-…
|
FlowiseAI
|
Flowise
|
2026-09-26T13:22:50.537Z |
2026-09-28T17:07:58.552Z |
|
cve-2026-100606
|
9.2 (v4.0)
7.7 (v3.1)
|
Flowise through 3.1.4 Authentication Bypass via SSO Em…
|
FlowiseAI
|
Flowise
|
2026-09-26T13:22:49.835Z |
2026-09-28T19:10:36.679Z |
|
cve-2026-100605
|
7.5 (v4.0)
7.1 (v3.1)
|
Flowise through 3.1.4 Missing Authorization via Chat M…
|
FlowiseAI
|
Flowise
|
2026-09-26T13:22:49.124Z |
2026-09-30T12:48:59.289Z |
|
cve-2026-100604
|
5.3 (v4.0)
5.4 (v3.1)
|
ClawHub Authentication Bypass via Former Publisher Ski…
|
openclaw
|
clawhub
|
2026-09-26T13:22:48.436Z |
2026-10-05T15:56:06.276Z |
|
cve-2026-100603
|
8.7 (v4.0)
5.4 (v3.1)
|
ClawHub before 8c2de6c506 Skill Hiding via Coordinated…
|
openclaw
|
clawhub
|
2026-09-26T13:22:47.730Z |
2026-09-28T17:05:43.542Z |
|
cve-2026-100602
|
7.1 (v4.0)
6.5 (v3.1)
|
ClawHub Changelog Preview Information Disclosure via A…
|
openclaw
|
clawhub
|
2026-09-26T13:22:47.020Z |
2026-09-28T19:13:23.012Z |
|
cve-2026-100601
|
6.9 (v4.0)
5.3 (v3.1)
|
ClawHub SSRF via Unchecked DNS Resolution in Profile Image
|
openclaw
|
clawhub
|
2026-09-26T13:22:46.283Z |
2026-09-30T12:47:18.560Z |
|
cve-2026-100600
|
6.9 (v4.0)
5.3 (v3.1)
|
ClawHub before 8c2de6c506 Quota Exhaustion via Anonymous API
|
openclaw
|
clawhub
|
2026-09-26T13:22:45.578Z |
2026-10-05T16:06:18.571Z |
|
cve-2026-100315
|
|
mathurvishal CloudClassroom-PHP-Project mydetailsfacul…
|
mathurvishal
|
CloudClassroom-PHP-Project
|
2026-09-26T12:45:07.953Z |
2026-09-30T00:35:13.609Z |
|
cve-2026-100314
|
|
mathurvishal CloudClassroom-PHP-Project updatedetailsf…
|
mathurvishal
|
CloudClassroom-PHP-Project
|
2026-09-26T11:30:09.269Z |
2026-09-28T17:03:16.657Z |