4 CVE-2026-2625
A flaw was found in rust-rpm-sequoia. An attacker can exploit this vulnerability by providing a specially...

3.7 CVE-2026-3184
A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked...

8.1 CVE-2026-25726
Cloudreve is a self-hosted file management and sharing system. Prior to version 4.13.0, the application...

9 CVE-2026-28798
ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. Prior...

5.3 CVE-2026-5484
A weakness has been identified in BookStackApp BookStack up to 26.03. Affected is the function chapterToMarkdown...

9.8 CVE-2017-20237
Hirschmann Industrial HiVision versions prior to 06.0.07 and 07.0.03 contains an authentication bypass...

7.5 CVE-2020-37216
Hirschmann HiOS devices versions prior to 08.1.00 and 07.1.01 contain a denial of service vulnerability...

7.3 CVE-2022-4987
Hirschmann Industrial HiVision version 08.1.03 prior to 08.1.04 and 08.2.00 contains a vulnerability...

8.6 CVE-2025-10681
Storage credentials are hardcoded in the mobile app and device firmware. These credentials do not adequately...

8.1 CVE-2026-22661
prompts.chat prior to commit 0f8d4c3 contains a path traversal vulnerability in skill file handling...

4.3 CVE-2026-22662
prompts.chat prior to commit 1464475 contains a blind server-side request forgery vulnerability in the...

7.5 CVE-2026-22663
prompts.chat prior to commit 7b81836 contains multiple authorization bypass vulnerabilities due to missing...

7.7 CVE-2026-22664
prompts.chat prior to commit 30a8f04 contains a server-side request forgery vulnerability in Fal.ai...

8.1 CVE-2026-22665
prompts.chat prior to commit 1464475 contains an identity confusion vulnerability due to inconsistent...

9.1 CVE-2026-25197
A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number...

5.3 CVE-2026-25742
Zulip is an open-source team collaboration tool. Prior to version 11.6, Zulip is an open-source team...

6.1 CVE-2026-26058
Zulip is an open-source team collaboration tool. From version 1.4.0 to before version 11.6, ./manage.py...

9.3 CVE-2026-28766
A specific endpoint exposes all user account information for registered Gardyn users without requiring...

5.3 CVE-2026-28767
A specific administrative endpoint notifications is accessible without proper authentication.

7.5 CVE-2026-32646
A specific administrative endpoint is accessible without proper authentication, exposing device management...

5.3 CVE-2026-32662
Development and test API endpoints are present that mirror production functionality.