|
cve-2026-92795
|
7.1 (v4.0)
6.5 (v3.1)
|
Coze Studio through 0.5.1 Server-Side Request Forgery …
|
coze-dev
|
coze-studio
|
2026-09-16T20:32:49.712Z |
2026-09-17T15:04:55.507Z |
|
cve-2026-92794
|
8.7 (v4.0)
7.5 (v3.1)
|
OpenSign through 2.41.3 Information Disclosure via get…
|
OpenSignLabs
|
OpenSign
|
2026-09-16T20:32:48.996Z |
2026-09-17T19:24:36.703Z |
|
cve-2026-92793
|
8.6 (v4.0)
8.1 (v3.1)
|
GoAdmin through 1.2.26 Authorization Bypass via Query …
|
GoAdminGroup
|
go-admin
|
2026-09-16T20:32:48.293Z |
2026-09-17T13:46:48.048Z |
|
cve-2026-92792
|
8.7 (v4.0)
7.5 (v3.1)
|
OpenNHP through 1.0.2 Authentication Bypass via Fallba…
|
OpenNHP
|
opennhp
|
2026-09-16T20:32:47.538Z |
2026-09-19T01:44:37.436Z |
|
cve-2026-92791
|
8.7 (v4.0)
7.5 (v3.1)
|
Uber Kraken through 0.1.29 Path Traversal via tag parameter
|
uber
|
kraken
|
2026-09-16T20:32:46.839Z |
2026-09-21T15:41:40.643Z |
|
cve-2026-92790
|
6.9 (v4.0)
6.5 (v3.1)
|
Higress before 2.2.4 Rate Limit Bypass via Malformed C…
|
higress-group
|
higress
|
2026-09-16T20:32:46.062Z |
2026-09-17T15:04:18.836Z |
|
cve-2026-92789
|
7.1 (v4.0)
6.5 (v3.1)
|
Graylog through 7.1.4 Server-Side Request Forgery via …
|
Graylog2
|
graylog2-server
|
2026-09-16T20:32:45.370Z |
2026-09-17T19:24:45.903Z |
|
cve-2026-92788
|
8.7 (v4.0)
8.8 (v3.1)
|
Coze Studio through 0.5.1 Cross-Tenant Database Access…
|
coze-dev
|
coze-studio
|
2026-09-16T20:32:44.626Z |
2026-09-17T13:47:34.949Z |
|
cve-2026-92787
|
9.3 (v4.0)
9.8 (v3.1)
|
Feast through 0.66.0 Authentication Bypass via Unverif…
|
feast-dev
|
feast
|
2026-09-16T20:32:43.913Z |
2026-09-19T01:42:30.616Z |
|
cve-2026-92786
|
8.5 (v4.0)
7.8 (v3.1)
|
LightGBM through 4.7.0 Out-of-Bounds Write via Crafted Model
|
lightgbm-org
|
LightGBM
|
2026-09-16T20:32:43.282Z |
2026-09-21T15:44:46.726Z |
|
cve-2026-92785
|
9.2 (v4.0)
8.1 (v3.1)
|
Angel through 3.3.0 Unauthenticated Kryo Deserializati…
|
Angel-ML
|
angel
|
2026-09-16T20:32:41.742Z |
2026-09-17T15:03:38.116Z |
|
cve-2026-92784
|
7.7 (v4.0)
7.5 (v3.1)
|
@refinedev/inferencer through 7.0.0 Code Injection via…
|
refinedev
|
@refinedev/inferencer
|
2026-09-16T20:32:41.037Z |
2026-09-17T19:24:55.589Z |
|
cve-2026-92783
|
7.2 (v4.0)
8.1 (v3.1)
|
Yeti through 2.11.0 Missing Authorization on RBAC Rela…
|
yeti-platform
|
yeti
|
2026-09-16T20:32:40.330Z |
2026-09-17T13:48:45.094Z |
|
cve-2026-92782
|
8.6 (v4.0)
8.1 (v3.1)
|
Chroma through 1.5.9 Authorization Bypass via Collecti…
|
chroma-core
|
chroma
|
2026-09-16T20:32:39.647Z |
2026-09-19T01:40:22.908Z |
|
cve-2026-92781
|
5.3 (v4.0)
6.3 (v3.1)
|
Builder.io Gen2 SDKs through 5.2.11 Prototype Pollutio…
|
BuilderIO
|
@builder.io/sdk-react
|
2026-09-16T20:32:38.923Z |
2026-09-21T15:50:13.299Z |
|
cve-2026-92780
|
8.7 (v4.0)
8.8 (v3.1)
|
KnowStreaming through 3.4.1 Missing Authorization on t…
|
didi
|
KnowStreaming
|
2026-09-16T20:32:38.224Z |
2026-09-17T15:03:02.465Z |
|
cve-2026-92779
|
7.2 (v4.0)
7.6 (v3.1)
|
Builder.io Gen2 SDKs through 5.2.11 Prototype Pollutio…
|
BuilderIO
|
@builder.io/sdk-react
|
2026-09-16T20:32:37.544Z |
2026-09-17T19:25:04.694Z |
|
cve-2026-92778
|
5.3 (v4.0)
5.4 (v3.1)
|
CMAK through 3.0.0.6 Feature Gate Bypass via HTML Form…
|
yahoo
|
CMAK
|
2026-09-16T20:32:36.822Z |
2026-09-17T13:56:26.186Z |
|
cve-2026-92776
|
8.6 (v4.0)
8.1 (v3.1)
|
Wiki.js through 2.5.314 Path Prefix Matching Authoriza…
|
requarks
|
Wiki.js
|
2026-09-16T20:32:36.130Z |
2026-09-18T18:32:42.162Z |
|
cve-2026-92775
|
7.1 (v4.0)
6.5 (v3.1)
|
Wiki.js through 2.5.314 Server-Side Request Forgery vi…
|
requarks
|
Wiki.js
|
2026-09-16T20:32:35.431Z |
2026-09-21T15:48:56.182Z |
|
cve-2026-92774
|
5.3 (v4.0)
4.3 (v3.1)
|
Wiki.js through 2.5.314 Authorization Bypass via Graph…
|
requarks
|
Wiki.js
|
2026-09-16T20:32:34.741Z |
2026-09-17T15:02:15.325Z |
|
cve-2026-92773
|
7.1 (v4.0)
7.1 (v3.1)
|
Trigger.dev before 4.6.0 GitHub App Installation Takeover
|
triggerdotdev
|
trigger.dev
|
2026-09-16T20:32:34.037Z |
2026-09-17T19:25:13.643Z |
|
cve-2026-92772
|
7.1 (v4.0)
7.1 (v3.1)
|
Leantime before 3.9.6 Unauthorized Plugin Installation…
|
Leantime
|
leantime
|
2026-09-16T20:32:33.373Z |
2026-09-17T14:52:22.912Z |
|
cve-2026-92771
|
7.1 (v4.0)
6.5 (v3.1)
|
Twenty before 2.35.0 Permission Bypass via groupBy-wit…
|
twentyhq
|
twenty
|
2026-09-16T20:32:32.661Z |
2026-09-18T18:31:26.228Z |
|
cve-2026-92770
|
7.1 (v4.0)
6.5 (v3.1)
|
Harbor through 2.15.2 Scanner Credential Disclosure vi…
|
goharbor
|
harbor
|
2026-09-16T20:32:31.968Z |
2026-09-21T15:46:22.699Z |
|
cve-2026-92765
|
7.1 (v4.0)
6.5 (v3.1)
|
ArcherySec through 2.0.6 Information Disclosure via We…
|
archerysec
|
archerysec
|
2026-09-16T20:32:31.272Z |
2026-09-17T15:01:46.321Z |
|
cve-2026-92764
|
5.3 (v4.0)
4.3 (v3.1)
|
OpenCVE 2.4.0 < 3.1.0 Organization API Ignores Token Scope
|
opencve
|
opencve
|
2026-09-16T20:32:30.536Z |
2026-09-26T13:30:00.117Z |
|
cve-2026-92763
|
8.6 (v4.0)
8.1 (v3.1)
|
Rundeck through 6.2.1 Authorization Bypass via Project…
|
rundeck
|
rundeck
|
2026-09-16T20:32:29.826Z |
2026-09-17T13:57:18.983Z |
|
cve-2026-92762
|
8.7 (v4.0)
8.8 (v3.1)
|
Pelican Panel before 1.0.0-beta35 Authorization Bypass…
|
pelican
|
panel
|
2026-09-16T20:32:29.092Z |
2026-09-18T18:29:21.120Z |
|
cve-2026-92761
|
8.7 (v4.0)
8.8 (v3.1)
|
WebVirtCloud Missing Authorization on Instance Control…
|
retspen
|
webvirtcloud
|
2026-09-16T20:32:28.410Z |
2026-09-21T17:48:40.749Z |