Browse All CVEs
41,822 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-114637 |
high | 7.0 | 0.0028 | 2026-10-29 | Traefik from v3.2.0 before v3.7.14 contains an authentication bypass vulnerability in the | |
CVE-2026-114638 |
high | 7.0 | 0.0022 | 2026-10-29 | Traefik v3.7.0 before v3.7.14 contains an improper authentication vulnerability in the Kub | |
CVE-2026-114639 |
high | 7.0 | 0.0029 | 2026-10-29 | Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 contains an authentication bypass be | |
CVE-2026-114640 |
high | 7.0 | 0.0019 | 2026-10-29 | Traefik from v3.7.0 before v3.7.14 contains an authentication bypass vulnerability in its | |
CVE-2026-114641 |
medium | 6.3 | 0.0026 | 2026-10-29 | Traefik 2.11.x before 2.11.58 and 3.x before 3.7.14 contains a race condition in NTLM and | |
CVE-2026-114642 |
high | 7.0 | 0.0019 | 2026-10-29 | Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 stores its NTLM/Kerberos backend rou | |
CVE-2026-114656 |
medium | 6.9 | 0.0015 | 2026-10-29 | Traefik before 2.11.58 and 3.7.13 contains an authentication bypass vulnerability that all | |
CVE-2026-114657 |
medium | 6.9 | 0.0022 | 2026-10-29 | Grav from 2.0.0 before 2.2.5 contains an information disclosure vulnerability that allows | |
CVE-2026-114658 |
high | 8.7 | 0.0026 | 2026-10-29 | Grav Login plugin from 3.6.0 before 3.9.13 contains a missing authorization vulnerability | |
CVE-2026-114659 |
high | 7.1 | 0.0063 | 2026-10-29 | Grav Flex Objects plugin 1.4.0 before 1.4.17 contains an authorization bypass because its | |
CVE-2026-114660 |
high | 7.0 | 0.0021 | 2026-10-29 | Grav from 2.0.0 before 2.2.5 contains an improper access control vulnerability in FlexDire | |
CVE-2026-114661 |
critical | 9.0 | 0.0035 | 2026-10-29 | OpenRemote 1.2.0 before 1.31.0 contains a missing authorization vulnerability in GatewaySe | |
CVE-2026-114662 |
high | 8.6 | 0.0017 | 2026-10-29 | Obot before 0.26.0 contains an authentication bypass vulnerability in the CLI login flow t | |
CVE-2026-114663 |
high | 8.6 | 0.0018 | 2026-10-29 | Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default argumen | |
CVE-2026-114664 |
high | 7.1 | 0.0020 | 2026-10-29 | Frappe Framework before 16.33.0 contains a blind SQL injection vulnerability in the frappe | |
CVE-2026-114715 |
medium | 6.8 | 0.0034 | 2026-10-29 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an incorrect authori | |
CVE-2026-114716 |
high | 8.5 | 0.0044 | 2026-10-29 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header inject | |
CVE-2026-114717 |
medium | 5.8 | 0.0045 | 2026-10-29 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header inject | |
CVE-2026-114718 |
medium | 6.1 | 0.0029 | 2026-10-29 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripti | |
CVE-2026-114719 |
medium | 4.3 | 0.0022 | 2026-10-29 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation by | |
CVE-2026-114720 |
high | 7.1 | 0.0079 | 2026-10-29 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP command inje | |
CVE-2026-114721 |
low | 3.1 | 0.0030 | 2026-10-29 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the disabled_actions configu | |
CVE-2026-114722 |
medium | 6.5 | 0.0025 | 2026-10-29 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass | |
CVE-2026-114723 |
medium | 5.3 | 0.0046 | 2026-10-29 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource lim | |
CVE-2026-114724 |
high | 8.1 | 0.0041 | 2026-10-29 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primit | |
CVE-2026-114725 |
medium | 5.0 | 0.0033 | 2026-10-29 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header inject | |
CVE-2026-114726 |
medium | 5.8 | 0.0040 | 2026-10-29 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header inject | |
CVE-2026-114727 |
high | 8.3 | 0.0033 | 2026-10-29 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content i | |
CVE-2026-114728 |
medium | 5.3 | 0.0037 | 2026-10-29 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blo | |
CVE-2026-16648 |
low | 3.8 | 0.0025 | 2026-10-29 | Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log a | |
CVE-2026-81163 |
medium | 5.4 | 0.0027 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-84910 |
medium | 4.2 | 0.0019 | 2026-10-29 | Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing. Th | |
CVE-2026-84911 |
low | 3.1 | 0.0019 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-84912 |
medium | 4.6 | 0.0019 | 2026-10-29 | Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful | |
CVE-2026-84913 |
medium | 4.6 | 0.0019 | 2026-10-29 | Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This | |
CVE-2026-84914 |
medium | 5.3 | 0.0027 | 2026-10-29 | Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Brows | |
CVE-2026-84915 |
medium | 4.6 | 0.0021 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-84916 |
low | 3.7 | 0.0025 | 2026-10-29 | Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This is | |
CVE-2026-84917 |
medium | 6.5 | 0.0025 | 2026-10-29 | Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Brows | |
CVE-2026-84918 |
low | 3.7 | 0.0016 | 2026-10-29 | Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment | |
CVE-2026-84919 |
medium | 4.6 | 0.0021 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-84920 |
medium | 5.3 | 0.0029 | 2026-10-29 | Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forcef | |
CVE-2026-84921 |
medium | 5.3 | 0.0037 | 2026-10-29 | Missing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful B | |
CVE-2026-84923 |
medium | 6.5 | 0.0031 | 2026-10-29 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email Ver | |
CVE-2026-84924 |
medium | 5.4 | 0.0023 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-87936 |
medium | 6.5 | 0.0027 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-87937 |
medium | 6.5 | 0.0028 | 2026-10-29 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authen | |
CVE-2026-87938 |
medium | 6.5 | 0.0036 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-87939 |
medium | 4.2 | 0.0020 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-87940 |
medium | 5.4 | 0.0023 | 2026-10-29 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key auth |