|
cve-2026-77560
|
|
Tinyauth: forward-auth per-app ACL is matched case-sen…
|
tinyauthapp
|
tinyauth
|
2026-09-21T16:39:18.606Z |
2026-09-21T20:45:26.170Z |
|
cve-2026-79920
|
|
Ajenti: Privilege escalation to root via unauthenticat…
|
ajenti
|
ajenti
|
2026-09-21T16:35:03.193Z |
2026-09-21T18:57:20.885Z |
|
cve-2026-76898
|
|
draw.io: Unauthenticated SSRF via IPv6 ULA blocklist b…
|
jgraph
|
drawio
|
2026-09-21T16:31:54.813Z |
2026-09-24T22:21:52.041Z |
|
cve-2026-63373
|
|
draw.io: OAuth CSRF via missing state validation on se…
|
jgraph
|
drawio
|
2026-09-21T16:29:43.768Z |
2026-09-21T18:02:18.542Z |
|
cve-2026-63334
|
|
draw.io: SSRF via DNS rebinding in ProxyServlet bypass…
|
jgraph
|
drawio
|
2026-09-21T16:22:59.708Z |
2026-09-21T18:56:03.135Z |
|
cve-2026-63416
|
|
draw.io: Path traversal in ExportProxyServlet allows a…
|
jgraph
|
drawio
|
2026-09-21T16:18:39.198Z |
2026-09-24T22:19:57.647Z |
|
cve-2026-58504
|
|
draw.io: Stored XSS on file open via editable=0 siblin…
|
jgraph
|
drawio
|
2026-09-21T16:15:30.398Z |
2026-09-29T15:05:34.205Z |
|
cve-2026-62987
|
|
Fabio - Incomplete fix for CVE-2025-48865: operator-co…
|
fabiolb
|
fabio
|
2026-09-21T16:11:21.044Z |
2026-09-21T18:04:03.288Z |
|
cve-2026-61674
|
|
Fluent Bit: Remote stack buffer overflow in Fluent Bit…
|
fluent
|
fluent-bit
|
2026-09-21T16:10:15.276Z |
2026-09-21T18:52:25.840Z |
|
cve-2026-84990
|
|
ntopng: Missing Authorization on System Configuration …
|
ntop
|
ntopng
|
2026-09-21T16:09:20.689Z |
2026-09-29T15:08:23.975Z |
|
cve-2026-83621
|
|
ntopng: Missing Authorization Check in REST API Allows…
|
ntop
|
ntopng
|
2026-09-21T16:08:23.333Z |
2026-09-21T20:45:33.312Z |
|
cve-2026-82412
|
|
ntopng: Remote Code Execution via OS Command Injection…
|
ntop
|
ntopng
|
2026-09-21T15:56:26.703Z |
2026-09-21T20:45:40.083Z |
|
cve-2026-55563
|
|
Feast: `pull_request_target` integration tests run unt…
|
feast-dev
|
feast
|
2026-09-21T15:51:06.794Z |
2026-09-21T17:58:47.036Z |
|
cve-2026-88978
|
|
Hatchet DurableTask WorkerStatus gRPC resolves caller-…
|
hatchet-dev
|
hatchet
|
2026-09-21T15:49:12.735Z |
2026-09-24T22:18:16.195Z |
|
cve-2026-84298
|
|
Hatchet: Cross-tenant durable callback payload disclos…
|
hatchet-dev
|
hatchet
|
2026-09-21T15:47:50.252Z |
2026-09-21T18:49:20.918Z |
|
cve-2026-61687
|
|
hatchet - Unauthenticated OAuth state CSRF / login-CSR…
|
hatchet-dev
|
hatchet
|
2026-09-21T15:45:27.610Z |
2026-09-21T20:45:49.510Z |
|
cve-2026-63342
|
|
Hatchet: Cross-Tenant Durable Task Event Log Disclosur…
|
hatchet-dev
|
hatchet
|
2026-09-21T15:44:07.494Z |
2026-09-29T15:02:14.543Z |
|
cve-2026-61681
|
|
Hatchet: SSRF via Unsigned UnsubscribeURL in SNS Unsub…
|
hatchet-dev
|
hatchet
|
2026-09-21T15:42:21.803Z |
2026-09-24T22:17:06.909Z |
|
cve-2026-85751
|
|
Mailu: Authentication bypass in header-based proxy aut…
|
Mailu
|
Mailu
|
2026-09-21T15:39:24.774Z |
2026-09-21T17:56:14.484Z |
|
cve-2026-53940
|
|
Conda: Entry-point path traversal in noarch:python ins…
|
conda
|
conda
|
2026-09-21T15:35:37.770Z |
2026-09-21T18:47:14.680Z |
|
cve-2026-77165
|
|
File owners were unable to unlock TYPE_TOKEN lock…
|
Nextcloud
|
Server
|
2026-09-21T15:25:33.553Z |
2026-09-21T18:44:22.324Z |
|
cve-2026-77166
|
|
The emoji field in the page emoji update endpoint…
|
Nextcloud
|
Collectives
|
2026-09-21T15:25:33.269Z |
2026-09-21T18:43:30.904Z |
|
cve-2026-71543
|
|
OpenBao's Templated Policies Allow Privilege Escalatio…
|
openbao
|
openbao
|
2026-09-21T15:03:59.159Z |
2026-09-25T19:26:50.747Z |
|
cve-2026-52742
|
|
GoCD is vulnerable to historical server configuration …
|
gocd
|
gocd
|
2026-09-21T15:01:42.644Z |
2026-09-21T15:34:48.735Z |
|
cve-2026-55870
|
|
GoCD is vulnerable to credential exposure when admins …
|
gocd
|
gocd
|
2026-09-21T15:00:48.573Z |
2026-09-21T20:45:56.682Z |
|
cve-2026-55625
|
|
GoCD is vulnerable to authorization bypass via materia…
|
gocd
|
gocd
|
2026-09-21T15:00:03.935Z |
2026-09-24T22:15:30.401Z |
|
cve-2026-52740
|
|
GoCD is vulnerable to pipeline template view API autho…
|
gocd
|
gocd
|
2026-09-21T14:59:15.786Z |
2026-09-21T15:43:41.189Z |
|
cve-2026-55060
|
|
GoCD is vulnerable to authorization bypass via support…
|
gocd
|
gocd
|
2026-09-21T14:58:39.059Z |
2026-09-21T20:46:04.670Z |
|
cve-2026-52741
|
|
GoCD has stored XSS possible via tracking tool link hi…
|
gocd
|
gocd
|
2026-09-21T14:57:50.940Z |
2026-09-24T22:13:23.929Z |
|
cve-2026-68919
|
|
GoCD has stored XSS possible via forged package materi…
|
gocd
|
gocd
|
2026-09-21T14:56:23.341Z |
2026-09-25T19:25:37.649Z |