|
cve-2026-56734
|
|
Zammad: Avatar Image URL Server-Side Request Forwarding
|
zammad
|
zammad
|
2026-09-25T17:01:46.738Z |
2026-09-29T19:34:59.004Z |
|
cve-2026-56726
|
|
Zammad: Missing authorization check in GitHub + GitLab…
|
zammad
|
zammad
|
2026-09-25T17:01:00.957Z |
2026-09-25T19:44:08.495Z |
|
cve-2026-93366
|
5.3 (v4.0)
5.4 (v3.1)
|
Bludit CMS 3.22.0 Authorization Bypass via list-images…
|
Bludit
|
Bludit CMS
|
2026-09-25T17:00:44.083Z |
2026-10-01T15:22:02.193Z |
|
cve-2026-97882
|
|
mathurvishal CloudClassroom-PHP-Project Faculty Authen…
|
mathurvishal
|
CloudClassroom-PHP-Project
|
2026-09-25T17:00:14.463Z |
2026-09-29T19:33:32.236Z |
|
cve-2026-93365
|
7.1 (v4.0)
6.5 (v3.1)
|
Bludit CMS 3.22.0 Missing Authorization via content-ge…
|
Bludit
|
Bludit CMS
|
2026-09-25T16:58:40.834Z |
2026-10-01T15:22:01.597Z |
|
cve-2026-56729
|
|
Zammad: Titles of knowledge base answers will be shown…
|
zammad
|
zammad
|
2026-09-25T16:58:05.257Z |
2026-09-25T17:09:29.330Z |
|
cve-2026-93364
|
5.3 (v4.0)
4.3 (v3.1)
|
Bludit CMS 3.22.0 Mass Assignment Privilege Escalation…
|
Bludit
|
Bludit CMS
|
2026-09-25T16:57:38.544Z |
2026-10-01T15:22:00.961Z |
|
cve-2026-93363
|
5.3 (v4.0)
4.3 (v3.1)
|
Payload CMS storage-vercel-blob Adapter Improper Acces…
|
payloadcms
|
payload
|
2026-09-25T16:53:12.583Z |
2026-10-01T15:22:00.369Z |
|
cve-2026-56723
|
|
Zammad: Missing authorization on ticket attachment download
|
zammad
|
zammad
|
2026-09-25T16:48:34.242Z |
2026-09-25T17:44:24.357Z |
|
cve-2026-100237
|
N/A
|
Stored i18n XSS in the Flow integration of Thanks
|
The Wikimedia Foundation
|
Mediawiki - Thanks Extension
|
2026-09-25T16:47:40.595Z |
2026-09-25T17:06:21.602Z |
|
cve-2026-56724
|
|
Zammad: Incorrect implementation of permission checks …
|
zammad
|
zammad
|
2026-09-25T16:46:50.420Z |
2026-09-25T17:45:13.696Z |
|
cve-2026-97879
|
|
zhistaredu StarTraining api-docs Endpoint SecurityConf…
|
zhistaredu
|
StarTraining
|
2026-09-25T16:45:14.557Z |
2026-09-25T17:02:21.977Z |
|
cve-2026-94445
|
N/A
|
Malicious user input may lead to RCE in golang.org/x/p…
|
golang.org/x/playground
|
golang.org/x/playground
|
2026-09-25T16:43:06.941Z |
2026-09-25T17:08:14.767Z |
|
cve-2026-67420
|
|
RabbitMQ OAuth credential refresh retains revoked runt…
|
rabbitmq
|
rabbitmq-server
|
2026-09-25T16:42:49.000Z |
2026-09-29T19:32:12.337Z |
|
cve-2026-67419
|
|
RabbitMQ: Consecutive topic wildcards cause combinator…
|
rabbitmq
|
rabbitmq-server
|
2026-09-25T16:41:08.104Z |
2026-09-25T17:01:50.884Z |
|
cve-2026-67421
|
|
RabbitMQ: Stored HTML Injection in RabbitMQ Management…
|
rabbitmq
|
rabbitmq-server
|
2026-09-25T16:39:02.323Z |
2026-09-25T19:58:22.877Z |
|
cve-2026-67408
|
|
RabbitMQ: Stream Management Super-Stream Binding Keys …
|
rabbitmq
|
rabbitmq-server
|
2026-09-25T16:35:22.829Z |
2026-09-25T19:09:53.750Z |
|
cve-2026-67406
|
|
RabbitMQ: Federation and Shovel Gen-Servers Lack forma…
|
rabbitmq
|
rabbitmq-server
|
2026-09-25T16:34:06.122Z |
2026-09-25T17:00:54.175Z |
|
cve-2026-95835
|
5.6 (v4.0)
|
Missing ownership check on the shared memory object na…
|
Kovid Goyal
|
kitty
|
2026-09-25T16:33:30.323Z |
2026-09-25T17:00:02.889Z |
|
cve-2026-67410
|
|
RabbitMQ: OAuth2 Client Secret Exposed via Unauthentic…
|
rabbitmq
|
rabbitmq-server
|
2026-09-25T16:32:51.225Z |
2026-09-25T17:46:42.745Z |
|
cve-2026-67227
|
|
RabbitMQ: Atom exhaustion: to_atom on global-parameter :name
|
rabbitmq
|
rabbitmq-server
|
2026-09-25T16:31:45.840Z |
2026-09-25T17:48:04.204Z |
|
cve-2026-67407
|
|
RabbitMQ: Incomplete fix for CVE-2026-44838: `escape_r…
|
rabbitmq
|
rabbitmq-server
|
2026-09-25T16:30:35.252Z |
2026-09-25T17:20:31.333Z |
|
cve-2026-97878
|
|
zhistaredu StarTraining Druid Console index.html anony…
|
zhistaredu
|
StarTraining
|
2026-09-25T16:30:07.246Z |
2026-09-25T17:48:41.038Z |
|
cve-2026-67226
|
|
RabbitMQ: Admin-only atom exhaustion: PUT /api/users t…
|
rabbitmq
|
rabbitmq-server
|
2026-09-25T16:29:13.662Z |
2026-09-25T19:55:13.807Z |
|
cve-2026-95834
|
4.6 (v4.0)
|
Use after free in the kitty drag and drop protocol whe…
|
Kovid Goyal
|
kitty
|
2026-09-25T16:28:09.295Z |
2026-09-25T16:59:26.692Z |
|
cve-2026-18311
|
N/A
|
CVE-2026-18311
|
Readwise
|
Reader
|
2026-09-25T16:27:54.187Z |
2026-09-25T16:58:34.254Z |
|
cve-2026-18320
|
N/A
|
CVE-2026-18320
|
Readwise
|
Reader
|
2026-09-25T16:27:37.419Z |
2026-09-25T16:57:42.082Z |
|
cve-2026-18312
|
N/A
|
CVE-2026-18312
|
Readwise
|
Reader
|
2026-09-25T16:27:28.079Z |
2026-09-25T16:56:33.452Z |
|
cve-2026-67411
|
|
RabbitMQ: Web MQTT with PROXY Protocol enabled: a loop…
|
rabbitmq
|
rabbitmq-server
|
2026-09-25T16:26:33.880Z |
2026-09-25T16:55:42.722Z |
|
cve-2026-67413
|
|
RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Us…
|
rabbitmq
|
rabbitmq-server
|
2026-09-25T16:25:26.115Z |
2026-09-29T19:30:15.380Z |