Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
cve-2026-61837 RabbitMQ: AMQP 1.0 management `GET /bindings` exposes … rabbitmq
rabbitmq-server
2026-09-25T16:22:43.927Z 2026-09-29T19:27:59.221Z
cve-2026-80432 6 (v4.0) Missing authorization in the kitty drag and drop proto… Kovid Goyal
kitty
2026-09-25T16:22:09.394Z 2026-09-25T16:54:41.750Z
cve-2026-67415 RabbitMQ: Shovel Management Atom Exhaustion Allows Per… rabbitmq
rabbitmq-server
2026-09-25T16:21:04.828Z 2026-09-25T19:59:36.518Z
cve-2026-67412 RabbitMQ: Federation upstream skips vhost authorizatio… rabbitmq
rabbitmq-server
2026-09-25T16:20:13.605Z 2026-09-25T16:45:00.348Z
cve-2026-67409 RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code… rabbitmq
rabbitmq-server
2026-09-25T16:18:25.611Z 2026-09-25T17:49:48.064Z
cve-2026-67242 RabbitMQ: OAuth2 is_integer(Exp) guard skips token-exp… rabbitmq
rabbitmq-server
2026-09-25T16:16:14.558Z 2026-09-25T20:01:12.537Z
cve-2026-97877 zhistaredu StarTraining JWT Token application.yml User… zhistaredu
StarTraining
2026-09-25T16:15:10.564Z 2026-09-25T17:21:34.774Z
cve-2026-67223 RabbitMQ: LDAP DN injection via unescaped substitution rabbitmq
rabbitmq-server
2026-09-25T16:15:08.185Z 2026-09-25T17:51:08.133Z
cve-2026-91837 7.8 (v3.1) Networkmanager-iodine: networkmanager-iodine: local pr… GNOME
NetworkManager-iodine
2026-09-25T16:14:39.038Z 2026-09-25T16:39:39.543Z
cve-2026-67239 RabbitMQ: Stored XSS via TLS peer-certificate DN in st… rabbitmq
rabbitmq-server
2026-09-25T16:13:29.231Z 2026-09-25T16:44:11.438Z
cve-2026-67241 RabbitMQ: AMQP 1.0 management exchange.declare skips a… rabbitmq
rabbitmq-server
2026-09-25T16:12:14.689Z 2026-09-29T19:26:15.432Z
cve-2026-100248 8.4 (v4.0) The Rattadan Cosmowarp smart contract before 56c6… Rattadan
Cosmowarp Contract
2026-09-25T16:11:54.884Z 2026-09-25T17:52:46.572Z
cve-2026-66071 RabbitMQ: Atom exhaustion: OAuth2 JWT tag: scope values rabbitmq
rabbitmq-server
2026-09-25T16:11:07.278Z 2026-09-25T17:53:13.500Z
cve-2026-66078 RabbitMQ: protected tag bypass via bulk-delete rabbitmq
rabbitmq-server
2026-09-25T16:09:46.197Z 2026-09-29T19:24:14.403Z
cve-2026-66073 RabbitMQ: Atom table exhaustion via management API nod… rabbitmq
rabbitmq-server
2026-09-25T16:06:20.501Z 2026-09-25T16:43:12.504Z
cve-2026-67237 RabbitMQ: Reflected XSS via the OAuth bootstrap JS endpoint rabbitmq
rabbitmq-server
2026-09-25T16:05:16.417Z 2026-09-25T17:53:59.829Z
cve-2026-89032 8.7 (v4.0) 7.7 (v3.1) BerriAI LiteLLM < 1.101.0-rc.1 Tenant Isolation Bypass… BerriAI
litellm
2026-09-25T16:04:47.964Z 2026-10-01T15:21:54.281Z
cve-2026-67234 RabbitMQ: Non-RFC-conformant cookie name when clearing… rabbitmq
rabbitmq-server
2026-09-25T16:03:38.161Z 2026-09-25T19:53:58.560Z
cve-2026-67225 RabbitMQ: Stream-protocol frame length never validated… rabbitmq
rabbitmq-server
2026-09-25T16:02:37.222Z 2026-09-25T16:42:34.568Z
cve-2026-67230 RabbitMQ: Web-STOMP unbounded pre-auth accumulation rabbitmq
rabbitmq-server
2026-09-25T16:01:40.340Z 2026-09-29T19:22:26.179Z
cve-2026-67222 RabbitMQ: list_to_atom on auth_mechanism URI tokens in… rabbitmq
rabbitmq-server
2026-09-25T16:00:16.437Z 2026-09-28T13:46:28.381Z
cve-2026-97871 Zhonglun CloudPos JSBridge JSBridge.cs OpenLocalBrowse… Zhonglun
CloudPos
2026-09-25T16:00:11.507Z 2026-09-25T16:41:56.883Z
cve-2026-67236 RabbitMQ: Plaintext username:password stored in an ins… rabbitmq
rabbitmq-server
2026-09-25T15:59:10.275Z 2026-09-28T13:41:39.055Z
cve-2026-92161 FriendsOfFlarum OAuth: Unauthenticated account takeove… FriendsOfFlarum
oauth
2026-09-25T15:53:34.825Z 2026-09-29T19:21:01.907Z
cve-2026-42322 Piwigo: Authenticated RCE via File Upload in Logo Uplo… Piwigo
Piwigo
2026-09-25T15:50:34.662Z 2026-09-28T14:34:50.653Z
cve-2026-42324 Piwigo: Second-Order SQL Injection Piwigo
Piwigo
2026-09-25T15:48:55.894Z 2026-09-25T16:15:01.123Z
cve-2026-44642 Piwigo: SQL injection in upgrade authentication allows… Piwigo
Piwigo
2026-09-25T15:47:59.389Z 2026-09-25T16:41:02.238Z
cve-2026-62262 Piwigo: Unauthenticated SQL injection in `pwg.images.f… Piwigo
Piwigo
2026-09-25T15:46:04.598Z 2026-09-29T19:19:31.528Z
cve-2026-42323 Piwigo: SQL Injection in Batch Manager Piwigo
Piwigo
2026-09-25T15:42:01.688Z 2026-09-28T14:29:29.756Z
cve-2026-97469 4.3 (v3.1) PostgreSQL Anonymizer: RESTRICTED functions are reacha… DALIBO
PostgreSQL Anonymizer
2026-09-25T15:40:45.207Z 2026-09-25T16:06:42.100Z
ID CVSS Description Vendor Product Published Updated
ID Description Package Published Updated
ID Description Type
ID Description Updated
ID Description Updated
ID Description Updated
ID Description