|
cve-2026-79917
|
|
MaxKB: Chat share-link endpoint missing owner check: a…
|
1Panel-dev
|
MaxKB
|
2026-09-21T20:43:27.292Z |
2026-09-22T15:39:11.594Z |
|
cve-2026-77516
|
|
MaxKB: Missing per-tool authorization in the agent and…
|
1Panel-dev
|
MaxKB
|
2026-09-21T20:40:44.213Z |
2026-09-28T20:13:03.315Z |
|
cve-2026-77523
|
|
MaxKB: Cross-workspace model parameter form write
|
1Panel-dev
|
MaxKB
|
2026-09-21T20:39:36.806Z |
2026-09-22T13:33:00.363Z |
|
cve-2026-77525
|
|
MaxKB: Management chat-record routes trust path applic…
|
1Panel-dev
|
MaxKB
|
2026-09-21T20:37:49.415Z |
2026-09-24T22:43:08.986Z |
|
cve-2026-77518
|
|
MaxKB: Known MCP tool IDs expose owner Tool.code and c…
|
1Panel-dev
|
MaxKB
|
2026-09-21T20:36:26.835Z |
2026-09-22T13:19:07.350Z |
|
cve-2026-79916
|
|
MaxKB AWS Bedrock model credential injection leads to …
|
1Panel-dev
|
MaxKB
|
2026-09-21T20:34:47.530Z |
2026-09-22T15:39:19.409Z |
|
cve-2026-58272
|
|
Sync-in Server has Username/Login Enumeration via Timi…
|
Sync-in
|
server
|
2026-09-21T20:31:46.272Z |
2026-09-23T19:42:05.134Z |
|
cve-2026-58270
|
|
Sync-in Server has a ReDoS via Unsanitized Regex in Sy…
|
Sync-in
|
server
|
2026-09-21T20:28:53.535Z |
2026-09-22T14:06:46.587Z |
|
cve-2026-77520
|
|
MaxKB: Homepage ranking leaks application IDs that wor…
|
1Panel-dev
|
MaxKB
|
2026-09-21T20:28:08.442Z |
2026-09-22T15:39:25.576Z |
|
cve-2026-77519
|
|
MaxKB: Expired application API keys remain usable on `…
|
1Panel-dev
|
MaxKB
|
2026-09-21T20:26:27.820Z |
2026-09-24T22:42:13.590Z |
|
cve-2026-73511
|
|
Envoy: Potential path-matching/authentication bypass w…
|
envoyproxy
|
envoy
|
2026-09-21T20:20:26.487Z |
2026-09-22T15:39:37.554Z |
|
cve-2026-73553
|
|
Envoy: RBAC Authorization Bypass via Path Parameters
|
envoyproxy
|
envoy
|
2026-09-21T20:18:47.650Z |
2026-09-22T13:21:23.657Z |
|
cve-2026-73551
|
|
Envoy: Path normalization does not handle dot and dotd…
|
envoyproxy
|
envoy
|
2026-09-21T20:17:02.620Z |
2026-09-28T20:41:32.313Z |
|
cve-2026-94572
|
9.4 (v4.0)
|
In OpenStack Octavia before 18.0.1, the Amphora p…
|
OpenStack
|
Octavia
|
2026-09-21T20:13:35.557Z |
2026-09-24T22:41:15.736Z |
|
cve-2026-93433
|
5.5 (v3.1)
|
Libstoragemgmt: libstoragemgmt: denial of service via …
|
Red Hat
|
Red Hat Enterprise Linux 10
|
2026-09-21T20:10:59.436Z |
2026-11-06T02:07:25.316Z |
|
cve-2026-94571
|
9.4 (v4.0)
|
In OpenStack Octavia before 18.0.1, the Amphora p…
|
OpenStack
|
Octavia
|
2026-09-21T20:09:16.848Z |
2026-09-22T13:36:39.179Z |
|
cve-2026-58269
|
|
Sync-in Server has a complete 2FA Bypass via `POST /ap…
|
Sync-in
|
server
|
2026-09-21T20:01:56.322Z |
2026-09-24T22:38:27.013Z |
|
cve-2026-73546
|
|
Envoy: Stored XSS in Admin Stats Interface (/stats?for…
|
envoyproxy
|
envoy
|
2026-09-21T19:53:21.443Z |
2026-09-21T20:07:34.119Z |
|
cve-2026-73512
|
|
Envoy: use-after-free in QUIC on internal redirects
|
envoyproxy
|
envoy
|
2026-09-21T19:51:23.229Z |
2026-09-22T13:27:46.213Z |
|
cve-2026-58271
|
|
@sync-in/server vulnerable to TOTP Brute-Force via `PO…
|
Sync-in
|
server
|
2026-09-21T19:50:14.539Z |
2026-09-24T22:36:41.527Z |
|
cve-2026-73550
|
|
Envoy: HTTP/2 Discarded Host Header 200 GB Header-Copy…
|
envoyproxy
|
envoy
|
2026-09-21T19:49:28.641Z |
2026-09-28T20:37:02.865Z |
|
cve-2026-73547
|
|
Envoy ext_authz: request `:path` pseudoheader derefere…
|
envoyproxy
|
envoy
|
2026-09-21T19:47:54.720Z |
2026-09-22T15:39:45.625Z |
|
cve-2026-48521
|
|
Envoy: HTTP/3 connection pool selection null-derefs in…
|
envoyproxy
|
envoy
|
2026-09-21T19:44:15.389Z |
2026-09-21T20:04:16.440Z |
|
cve-2026-73549
|
|
Envoy - Incomplete fix for CVE-2026-26310: copyInterne…
|
envoyproxy
|
envoy
|
2026-09-21T19:42:48.561Z |
2026-09-22T13:29:31.824Z |
|
cve-2026-73513
|
|
Envoy: oghttp2 upstream trailers incorrect handling
|
envoyproxy
|
envoy
|
2026-09-21T19:40:49.119Z |
2026-09-28T20:38:56.917Z |
|
cve-2026-85219
|
3.7 (v3.1)
|
Denial-of-Service in the OpenCanary Redis service
|
Thinkst Applied Research
|
OpenCanary
|
2026-09-21T19:39:43.314Z |
2026-09-22T13:42:40.389Z |
|
cve-2026-49811
|
8.4 (v3.1)
|
Dell Command | Monitor (DCM), versions prior to 1…
|
Dell
|
Command | Monitor (DCM)
|
2026-09-21T19:38:20.015Z |
2026-09-22T13:02:04.861Z |
|
cve-2026-73552
|
|
Envoy: HTTP RBAC safe_regex can fail open on RFC-valid…
|
envoyproxy
|
envoy
|
2026-09-21T19:37:20.546Z |
2026-09-22T15:39:58.488Z |
|
cve-2026-73548
|
|
Envoy: Cross-user response poisoning via a generic (no…
|
envoyproxy
|
envoy
|
2026-09-21T19:35:15.275Z |
2026-09-24T22:35:14.446Z |
|
cve-2026-50572
|
|
Envoy: ext_authz - RawHttpClientImpl onSuccess 0x0 segfault
|
envoyproxy
|
envoy
|
2026-09-21T19:32:00.008Z |
2026-09-22T13:30:59.295Z |