WaratekVRT Sign in
Reset
More filters
Columns
Including CVEs outside Waratek scope✕
Overview 174,867 matches · 7,881 in Waratek scope · 529 protected · 978 exploited · 183 CISA KEV · 11,832 public PoC · 703 EPSS ≥ 0.5
174,867matches 7,881in Waratek scope4.5% 529protected0.3% 978exploited0.6% 183CISA KEV0.1% 11,832public PoC6.8% 703EPSS ≥ 0.50.4%
Protected by Waratek 530 0.3% Rule in development 2 0.0% Mitigation candidate 197 0.1% No exploit published 7,152 4.1% Outside Waratek scope 2,567 1.5% Not applicable 164,419 94.0% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 0 0.0% Medium 174,867 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 529 0.3% partly blocked 1 0.0% not blocked 174,334 99.7% not established 3 0.0% unrecorded 0 0.0%
Exploited 978 0.6% Working exploit published 11,060 6.3% Proof of concept only 19,181 11.0% Forecast only 248 0.1% No public exploit 143,400 82.0%
split by peak 36,113 / year
Not applicable: 164,419Outside Waratek scope: 2,567No exploit published: 7,152Mitigation candidate: 197Rule in development: 2Protected by Waratek: 530 Medium: 174,867 not established: 3not blocked: 174,334partly blocked: 1blocked by ARMR today: 529 No public exploit: 143,400Forecast only: 248Proof of concept only: 19,181Working exploit published: 11,060Exploited: 978
19891 Not applicable1 Medium1 not blocked1 No public exploit1 19902 Not applicable2 Medium2 not blocked2 Working exploit published1 No public exploit1 19914 Not applicable4 Medium4 not blocked4 No public exploit4 19920 19933 Not applicable3 Medium3 not blocked3 No public exploit3 199410 Not applicable10 Medium10 not blocked10 Working exploit published2 No public exploit8 19956 Not applicable6 Medium6 not blocked6 Working exploit published2 No public exploit4 199621 Not applicable21 Medium21 not blocked21 Working exploit published5 No public exploit16 199789 Not applicable89 Medium89 not blocked89 Working exploit published18 No public exploit71 199885 Not applicable85 Medium85 not blocked85 Working exploit published11 No public exploit74 1999357 Outside Waratek scope1 Not applicable356 Medium357 not blocked357 Working exploit published119 No public exploit238 2000467 Mitigation candidate4 No exploit published3 Not applicable460 Medium467 not blocked467 Exploited2 Working exploit published195 No public exploit270 2001706 Mitigation candidate2 No exploit published4 Outside Waratek scope7 Not applicable693 Medium706 not blocked706 Exploited3 Working exploit published219 Forecast only2 No public exploit482 2002980 Protected by Waratek2 Mitigation candidate6 No exploit published15 Outside Waratek scope4 Not applicable953 Medium980 blocked by ARMR today2 not blocked978 Exploited3 Working exploit published246 Forecast only3 No public exploit728 2003747 Protected by Waratek2 Mitigation candidate4 No exploit published18 Outside Waratek scope1 Not applicable722 Medium747 blocked by ARMR today2 not blocked745 Working exploit published243 No public exploit504 20041,265 Protected by Waratek1 Mitigation candidate1 No exploit published16 Outside Waratek scope4 Not applicable1,243 Medium1,265 blocked by ARMR today1 not blocked1,264 Exploited10 Working exploit published414 Forecast only1 No public exploit840 20052,430 Protected by Waratek3 Mitigation candidate4 No exploit published39 Outside Waratek scope6 Not applicable2,378 Medium2,430 blocked by ARMR today3 not blocked2,427 Exploited8 Working exploit published622 Forecast only6 No public exploit1,794 20063,324 Protected by Waratek4 Mitigation candidate4 No exploit published48 Outside Waratek scope3 Not applicable3,265 Medium3,324 blocked by ARMR today4 not blocked3,320 Exploited10 Working exploit published1,137 Forecast only2 No public exploit2,175 20073,101 Protected by Waratek2 Mitigation candidate9 No exploit published60 Outside Waratek scope53 Not applicable2,977 Medium3,101 blocked by ARMR today2 not blocked3,099 Exploited14 Working exploit published1,052 Forecast only1 No public exploit2,034 20082,582 Protected by Waratek4 Mitigation candidate8 No exploit published71 Outside Waratek scope26 Not applicable2,473 Medium2,582 blocked by ARMR today4 not blocked2,578 Exploited7 Working exploit published987 Proof of concept only2 Forecast only1 No public exploit1,585 20092,786 Protected by Waratek5 Mitigation candidate9 No exploit published115 Outside Waratek scope31 Not applicable2,626 Medium2,786 blocked by ARMR today5 not blocked2,781 Exploited16 Working exploit published1,123 Proof of concept only2 Forecast only3 No public exploit1,642 20102,241 Protected by Waratek6 Mitigation candidate9 No exploit published118 Outside Waratek scope34 Not applicable2,074 Medium2,241 blocked by ARMR today6 not blocked2,235 Exploited14 Working exploit published547 Proof of concept only1 Forecast only2 No public exploit1,677 20112,101 Protected by Waratek4 Mitigation candidate3 No exploit published132 Outside Waratek scope58 Not applicable1,904 Medium2,101 blocked by ARMR today4 not blocked2,097 Exploited9 Working exploit published294 Proof of concept only3 Forecast only1 No public exploit1,794 20123,035 Protected by Waratek5 Mitigation candidate17 No exploit published177 Outside Waratek scope50 Not applicable2,786 Medium3,035 blocked by ARMR today5 not blocked3,029 not established1 Exploited20 Working exploit published475 Proof of concept only2 Forecast only42 No public exploit2,496 20132,914 Protected by Waratek12 Mitigation candidate12 No exploit published225 Outside Waratek scope155 Not applicable2,510 Medium2,914 blocked by ARMR today12 not blocked2,901 not established1 Exploited23 Working exploit published237 Proof of concept only1 Forecast only6 No public exploit2,647 20145,314 Protected by Waratek32 Mitigation candidate9 No exploit published215 Outside Waratek scope165 Not applicable4,893 Medium5,314 blocked by ARMR today32 not blocked5,282 Exploited24 Working exploit published415 Proof of concept only7 Forecast only12 No public exploit4,856 20153,501 Protected by Waratek20 Mitigation candidate1 No exploit published205 Outside Waratek scope126 Not applicable3,149 Medium3,501 blocked by ARMR today20 not blocked3,481 Exploited23 Working exploit published254 Proof of concept only7 Forecast only8 No public exploit3,209 20162,446 Protected by Waratek25 Mitigation candidate4 No exploit published292 Outside Waratek scope51 Not applicable2,074 Medium2,446 blocked by ARMR today25 not blocked2,420 not established1 Exploited16 Working exploit published122 Proof of concept only6 Forecast only9 No public exploit2,293 20175,687 Protected by Waratek24 Mitigation candidate5 No exploit published326 Outside Waratek scope124 Not applicable5,208 Medium5,687 blocked by ARMR today24 not blocked5,663 Exploited18 Working exploit published332 Proof of concept only21 Forecast only2 No public exploit5,314 20186,163 Protected by Waratek51 Mitigation candidate8 No exploit published428 Outside Waratek scope177 Not applicable5,499 Medium6,163 blocked by ARMR today51 not blocked6,112 Exploited38 Working exploit published348 Proof of concept only27 Forecast only7 No public exploit5,743 20197,117 Protected by Waratek35 Mitigation candidate14 No exploit published405 Outside Waratek scope263 Not applicable6,400 Medium7,117 blocked by ARMR today34 partly blocked1 not blocked7,082 Exploited47 Working exploit published297 Proof of concept only30 Forecast only9 No public exploit6,734 20207,359 Protected by Waratek35 Mitigation candidate15 No exploit published496 Outside Waratek scope286 Not applicable6,527 Medium7,359 blocked by ARMR today35 not blocked7,324 Exploited58 Working exploit published197 Proof of concept only37 Forecast only10 No public exploit7,057 20218,137 Protected by Waratek29 Mitigation candidate11 No exploit published291 Outside Waratek scope259 Not applicable7,547 Medium8,137 blocked by ARMR today29 not blocked8,108 Exploited86 Working exploit published240 Proof of concept only90 Forecast only44 No public exploit7,677 20229,908 Protected by Waratek58 Mitigation candidate3 No exploit published570 Outside Waratek scope211 Not applicable9,066 Medium9,908 blocked by ARMR today58 not blocked9,850 Exploited73 Working exploit published270 Proof of concept only953 Forecast only34 No public exploit8,578 202311,824 Protected by Waratek29 Mitigation candidate10 No exploit published440 Outside Waratek scope144 Not applicable11,201 Medium11,824 blocked by ARMR today29 not blocked11,795 Exploited97 Working exploit published237 Proof of concept only2,408 Forecast only28 No public exploit9,054 202418,998 Protected by Waratek19 Mitigation candidate5 No exploit published320 Outside Waratek scope149 Not applicable18,505 Medium18,998 blocked by ARMR today19 not blocked18,979 Exploited129 Working exploit published114 Proof of concept only3,597 Forecast only10 No public exploit15,148 202523,043 Protected by Waratek37 Rule in development2 Mitigation candidate14 No exploit published471 Outside Waratek scope83 Not applicable22,436 Medium23,043 blocked by ARMR today37 not blocked23,006 Exploited127 Working exploit published170 Proof of concept only5,244 Forecast only5 No public exploit17,497 202636,113 Protected by Waratek86 Mitigation candidate6 No exploit published1,652 Outside Waratek scope96 Not applicable34,273 Medium36,113 blocked by ARMR today86 not blocked36,027 Exploited103 Working exploit published115 Proof of concept only6,743 No public exploit29,152
1990199319961999200220052008201120142017202020232026
174,867 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 1,749 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-126385 Medium 2026-11-13 Not applicable No public exploit n8n before 2.45.5, 2.46.x before 2.46.1, and 3.x before 3.0.1 contains a flaw in the OAuth2 credential callback of the dynamic-credential connect flow, which does not verify that the completing browser belongs to the user who started the flow. Members with access to a resolvable OAuth2 credential can send the provider authorization URL to a victim; if the victim consents without an active n8n session, the victim's tokens are stored under the member's identity, letting the member's workflows act as the victim.
CVE-2026-126383 Medium 2026-11-13 Not applicable No public exploit n8n before 1.123.89, 2.x before 2.45.5, 2.46.x before 2.46.1, and 3.x before 3.0.1 contains a NoSQL injection vulnerability in the MongoDB node's Update and Find And Replace operations due to insufficient validation of the update key value taken from incoming items. Attackers who can supply untrusted input, such as a webhook body, to a workflow using these operations can make the node match and overwrite unintended documents or insert new documents in the MongoDB database.
CVE-2026-126382 Medium 2026-11-13 Not applicable No public exploit n8n before 2.38.0 and 3.x before 3.0.1 contains a missing authentication vulnerability in the Asana Trigger that accepts a new webhook verification secret from any request carrying an X-Hook-Secret header. Unauthenticated attackers who know the webhook URL can replace the secret, send forged Asana events that pass signature verification, and trigger workflows with attacker-controlled data while genuine deliveries are rejected.
CVE-2026-126381 Medium 2026-11-13 Not applicable No public exploit n8n before 2.43.5, 2.44.x before 2.44.1, and 3.x before 3.0.1 contains an SQL injection vulnerability in the Vector Store (OracleDB) node, which does not validate Metadata Filter keys used in vector search queries. Attackers can supply crafted filter keys through untrusted workflow input such as webhooks to read data accessible to the configured Oracle credential.
CVE-2026-126376 Medium 2026-11-13 Not applicable Proof of concept only Vvveb 1.0.8.4 through 1.0.8.6 contains an incomplete authorization fix that allows low-privilege authors and vendors to access other users' records by bypassing admin_id owner scoping. Attackers can supply filter[admin_id] to list drafts, invoke duplicate() on posts or products, or enumerate every vendor's digital-asset metadata.
CVE-2026-126374 Medium 2026-11-13 Not applicable No public exploit Vvveb through 1.0.8.6 contains an SQL injection vulnerability because the @KEYS(:each) macro emits PHP array keys as backtick-quoted INSERT column names without escaping, and several procedures in admin/sql/mysqli/product.sql and admin_auth_token.sql omit the @FILTER guard. Authenticated back-office users able to save products can submit product_<feature> POST array keys containing backticks to redirect bound values into unexposed columns or break SQL statements.
CVE-2026-126373 Medium 2026-11-13 Not applicable No public exploit Vvveb 1.0.8.4 through 1.0.8.6 contains an authorization bypass vulnerability in the content/revisions revision action that lets low-privileged Authors read other authors' revisions. Attackers can supply a post_id, language_id, and created_at timestamp to retrieve private unpublished drafts, because the revision() action lacks the admin_id ownership restriction.
CVE-2026-126371 Medium 2026-11-13 Not applicable No public exploit Vvveb through 1.0.8.6 contains an SQL injection vulnerability in Admin_Auth_TokenSQL::update(), which interpolates admin_auth_token array keys into an INSERT column list without a column whitelist or backtick escaping. Authenticated admin-panel users can submit backtick-containing keys to the admin/auth-token save action to inject comments and column identifiers into the SQL statement.
CVE-2026-126369 Medium 2026-11-13 Not applicable No public exploit Vvveb through 1.0.8.6 contains a stored cross-site scripting vulnerability that allows low-privilege author or vendor users to inject script by bypassing the regex blacklist in sanitizeHTML(). Attackers can save post or product content with unclosed event-handler tags or javascript&colon; entities to execute script for anonymous visitors and admins, enabling session or CSRF-token theft.
CVE-2026-126367 Medium 2026-11-13 Not applicable No public exploit @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Before 1.13.2, and from 1.14.0 through 1.14.1, the @grpc/grpc-js-xds SafeRegexValueMatcher and PathSafeRegexValueMatcher add start and end anchors without grouping a supplied top-level alternation. An expression intended to match one of several complete values can therefore match a prefix, substring, or suffix. The affected matchers are used for route selection, xDS credential identity matching, and RBAC URL path, principal name, server name, and header rules. An ALLOW policy using an alternation can consequently accept a method, certificate identity, or header value outside the intended set, while a DENY policy becomes broader rather than permissive. This issue is fixed in versions 1.13.2 and 1.14.2.
CVE-2026-126365 Medium 2026-11-13 Not applicable No public exploit Astro is a web framework for content-driven websites. Prior to @astrojs/prism 4.1.2, and from @astrojs/markdoc 0.3.0 until 2.1.2, runHighlighterWithAstro() returned code unchanged when Prism had no grammar for the requested language, and callers inserted that result as raw HTML. A code block labeled with an unsupported language could therefore render embedded HTML and script instead of displaying it as text. The Prism component was affected when applications supplied untrusted code with an unsupported or attacker-controlled lang, and the @astrojs/markdoc prism() extension was affected for less-trusted content authors even when Markdoc's ordinary HTML rendering was disabled. This issue is fixed in @astrojs/prism 4.1.2 and @astrojs/markdoc 2.1.2.
CVE-2026-126364 Medium 2026-11-13 Not applicable No public exploit Astro is a web framework for content-driven websites. From 5.14.3 until 7.4.7, Astro's /_image endpoint compared the requested local-image path with the build output directory without preserving case on case-sensitive filesystems. A sibling directory whose path differed from the output directory only by letter case could therefore pass the containment check, allowing an unauthenticated requester to read image files accepted by the image service from outside the output directory. Exploitation required on-demand rendering with the @astrojs/node adapter, a case-sensitive filesystem, and a preexisting case-variant sibling directory; ordinary traversal to unrelated paths was already rejected. This issue is fixed in Astro version 7.4.7.
CVE-2026-126360 Medium 2026-11-13 Not applicable No public exploit OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.2, TraceContextTextMapPropagator.extract() in opentelemetry-api can perform quadratic-time regular-expression backtracking on a malformed traceparent value containing a trace-context prefix, a long whitespace sequence, and an embedded newline. Exploitation requires an attacker-controlled carrier that preserves embedded newlines and permits a sufficiently large value, because conforming HTTP header values cannot contain embedded newlines. JSON-based carriers, including applicable MCP request metadata integrations, can preserve the required newline depending on the SDK, instrumentation, and message-size limits. Parsing on an asynchronous server's event-loop thread can consume excessive CPU and delay unrelated requests, while the advisory does not establish disclosure, modification, or code execution. This issue is fixed in version 1.45.2.
CVE-2026-126358 Medium 2026-11-13 Not applicable No public exploit Hono is a Web application framework that provides support for any JavaScript runtime. From 4.1.4 until 4.13.16, RegExpRouter can omit wildcard middleware in three version-specific cases: since 4.13.0, middleware using the explicit default parameter pattern in /api/:tenant{[^/]+}/admin/* is not applied to a route written as /api/:tenant/admin/:id; since 4.1.4, middleware on /admin/* is not applied to a route registered as /admin* for paths under /admin/; and since 4.4.0, a request path containing an encoded line terminator can reach the not-found handler without wildcard middleware. The default SmartRouter selects RegExpRouter for most applications, and the router's registration-time coverage calculation treated the first two matching pattern pairs as different while its compiled wildcard did not match line terminators in the third case. An unauthenticated client can reach a route handler or the not-found handler without authentication or authorization middleware registered on the wildcard path. TrieRouter, LinearRouter, and PatternRouter apply the middleware in the three described cases. This issue is fixed in version 4.13.16.
CVE-2026-126357 Medium 2026-11-13 Not applicable No public exploit Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.13.16, mount() and app.mount() can remove a dynamic mount prefix using the route-pattern length rather than the matched-prefix length, allowing a crafted path to be forwarded as a protected inner route while the outer application routes the original path. Since 4.12.21, rebuilding the forwarded URL from the decoded pathname can also convert a decoded backslash to a slash and collapse parent-directory segments, again causing the mounted application to receive a protected path. An unauthenticated client can use either applicable path transformation to reach a mounted route without authentication or authorization middleware scoped to a subpath inside the mount prefix. This issue is fixed in version 4.13.16.
CVE-2026-126356 Medium 2026-11-13 Not applicable No public exploit Hono is a Web application framework that provides support for any JavaScript runtime. From 4.5.1 until 4.13.16, validator('form') uses a strict whole-header pattern that fails to recognize multipart/form-data when its Content-Type includes another legal parameter or extra whitespace after a semicolon. The validation callback receives an empty object even though c.req.parseBody() or c.req.formData() can still parse and expose all submitted fields to the handler. An unauthenticated client can therefore bypass allow-list or required-field checks when the application relies on the form validator and its callback accepts an empty object. application/x-www-form-urlencoded requests are not affected. This issue is fixed in version 4.13.16.
CVE-2026-126355 Medium 2026-11-13 Not applicable No public exploit Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.13.16, csrf() limits origin validation to the content types normally sent by HTML forms and therefore does not validate text/ping requests generated by Chromium hyperlink auditing. Chrome and Edge can send a cross-origin credentialed POST without a CORS preflight through an &lt;a ping&gt; action, and the middleware then skips both Origin and Sec-Fetch-Site checks. The fixed request body limits exploitation to state-changing endpoints whose effect is selected by the path or query string and does not depend on submitted body data. The user's cookie must accompany the request, which generally requires a same-site origin or a cookie configured with SameSite=None, and Firefox does not send hyperlink-auditing pings by default. This issue is fixed in version 4.13.16.
CVE-2026-126323 Medium 2026-11-13 Not applicable Proof of concept only Vvveb through 1.0.8.6 contains a cross-site request forgery vulnerability that allows attackers to perform admin state-changing actions because checkCsrf() in admin/controller/base.php only validates tokens for POST requests. Attackers can lure a logged-in admin into loading a forged cross-site GET request to delete admin/user accounts, sites, orders, and menus or change comment status.
CVE-2026-126318 Medium 2026-11-13 Not applicable No public exploit REDAXO before 5.21.6 contains an authorization bypass vulnerability that allows editors without the version[live_version] permission to modify live article versions by bypassing working version enforcement. Authenticated editors can add, edit, delete, toggle, or reorder live slices via content/functions, slice ids, content_slice_status, content_move_slice, history restore, or content_copy, bypassing approval workflows.
CVE-2026-126313 Medium 2026-11-13 Not applicable No public exploit Frappe HRMS 16.0.0 before 16.20.1 contains an authorization bypass because an ownership check is missing on a record type that employees can create. Authenticated users holding only the Employee role can create or change draft records for another employee, or for a company they do not belong to.
CVE-2026-126311 Medium 2026-11-13 Not applicable No public exploit OpenBao before 2.6.5 and 2.7.x before 2.7.2 does not neutralize wildcard characters in SSH certificate principals rendered from unvalidated external token metadata via identity templates in the SSH secrets engine. Attackers controlling that metadata, typically through a compromised identity provider, can inject '*' to obtain SSH certificates valid for multiple hosts or users.
CVE-2026-126302 Medium 2026-11-13 Not applicable No public exploit NLTK from 3.9.4 before 3.10.4 contains a symlink following vulnerability in nltk.sem.chat80.sql_query() that bypasses the pathsec data-root sandbox containment check. Attackers who can write into a trusted NLTK data root can plant a symbolic link to read SQLite databases outside the sandbox.
CVE-2026-126301 Medium 2026-11-13 Not applicable No public exploit NLTK from 3.6 before 3.10.4 contains an algorithmic complexity vulnerability in LegalitySyllableTokenizer.tokenize that allows remote attackers to exhaust CPU by supplying long all-vowel tokens. Attackers can submit a token such as a long run of vowels, causing the unguarded onset reversal loop to perform quadratic work and deny service to syllabification components.
CVE-2026-126300 Medium 2026-11-13 Not applicable No public exploit NLTK from 3.2.5 before 3.10.4 contains an algorithmic complexity vulnerability in TreebankWordTokenizer.span_tokenize that allows remote attackers to cause quadratic CPU consumption through repeated list.pop(0) calls. Attackers can submit long runs of double-quote characters to services span-tokenizing untrusted text, exhausting a CPU core and degrading availability.
CVE-2026-126296 Medium 2026-11-13 Not applicable No public exploit NLTK before 3.10.4 contains a path traversal vulnerability in save_maxent_params() and load_maxent_params() that bypasses the pathsec filesystem restriction mechanism. Attackers who control the tab_dir argument can read or overwrite model parameter files outside permitted data roots, because the functions call Python's built-in open() directly.
CVE-2026-126292 Medium 2026-11-13 Not applicable No public exploit NocoDB before 2026.06.1 contains an information disclosure vulnerability in the profile update handler in users.service.ts, which returns the stored user record without passing it through the user-serialization filter, exposing the bcrypt password hash, salt, and session token counter. Attackers holding a stolen or hijacked session can update the profile to retrieve that account's password hash and salt for offline cracking.
CVE-2026-126289 Medium 2026-11-13 Not applicable No public exploit NocoDB before 2026.06.1 contains a CSV formula injection vulnerability in export.service.ts that writes record values and column titles beginning with formula characters into CSV exports without neutralization. Low-privileged collaborators, or unauthenticated users submitting a public form, can plant formulas that execute when a user opens the export in a spreadsheet application, potentially exfiltrating cell contents or invoking external commands.
CVE-2026-126288 Medium 2026-11-13 Not applicable No public exploit NocoDB before 2026.06.2 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve full OAuth client records by querying the public client lookup route in oauth.controller.ts. Attackers who know or guess a client identifier can obtain the registration access token to modify or delete registrations, plus the bcrypt client secret hash and owner's internal identifier.
CVE-2026-126287 Medium 2026-11-13 Not applicable No public exploit NocoDB before 2026.06.2 contains a race condition vulnerability in oauth-token.service.ts that allows attackers to reuse a refresh token by presenting it concurrently during non-atomic rotation. Attackers holding a captured refresh token can race the legitimate client to obtain their own access and refresh tokens, retaining scoped access without triggering reuse detection.
CVE-2026-126270 Medium 2026-11-13 Not applicable No public exploit NocoDB before 2026.09.1 contains a missing authentication vulnerability in the aggregated meta info route of utils.controller.ts that exposes instance-wide metadata to anonymous callers. Unauthenticated attackers can request the endpoint to enumerate bases, user counts, shared and password-protected view counts, webhook counts, and live per-base row counts, while repeated requests amplify database query load.
CVE-2026-126268 Medium 2026-11-13 Not applicable No public exploit NocoDB before 2026.08.0 contains an IP address spoofing vulnerability that allows unauthenticated attackers to forge their recorded source IP by supplying X-Forwarded-For headers, because Express trust proxy is enabled unconditionally. Attackers can write arbitrary source addresses into audit and request logs to mislead investigations and evade the per-address public API rate limiter.
CVE-2026-126029 Medium 2026-11-13 Not applicable No public exploit The WPZOOM Addons for Elementor – Starter Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'actions[save_builder][data][elements][...][settings][regions][i][link][url] / [pins][i][link][url]' parameter in all versions up to, and including, 1.4.20 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2026-125948 Medium 2026-11-13 Not applicable No public exploit The Recipe Card Blocks Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'steps[].text' parameter in all versions up to, and including, 3.7.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Because wp_kses_post() preserves block-delimiter HTML comments verbatim on save, a Contributor can embed event-handler payloads inside the block's steps[].text attribute in a draft or pending post without the unfiltered_html capability, and the payload executes for any visitor — including privileged editors and administrators who preview or publish the post — as well as through the public print endpoint.
CVE-2026-125858 Medium 2026-11-13 Not applicable No public exploit Missing Authorization vulnerability in CleverReach CleverReach® WP cleverreach-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CleverReach® WP: from n/a through 1.5.26.
CVE-2026-125853 Medium 2026-11-13 Not applicable No public exploit Missing Authorization vulnerability in Everestthemes Everest Backup everest-backup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Everest Backup: from n/a through 2.3.15.
CVE-2026-125835 Medium 2026-11-13 Not applicable No public exploit Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetTabs jet-tabs allows Stored XSS.This issue affects JetTabs: from n/a through 2.3.5.
CVE-2026-125834 Medium 2026-11-13 Not applicable No public exploit Missing Authorization vulnerability in WP Media Imagify imagify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Imagify: from n/a through 2.3.4.
CVE-2026-125833 Medium 2026-11-13 Not applicable No public exploit Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITH YITH WooCommerce Ajax Product Filter yith-woocommerce-ajax-navigation allows Stored XSS.This issue affects YITH WooCommerce Ajax Product Filter: from n/a through 5.24.0.
CVE-2026-125831 Medium 2026-11-13 Not applicable No public exploit Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack Lite for Beaver Builder powerpack-addon-for-beaver-builder allows Stored XSS.This issue affects PowerPack Lite for Beaver Builder: from n/a through 1.3.2.
CVE-2026-125827 Medium 2026-11-13 Not applicable No public exploit Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.31.0.
CVE-2026-125825 Medium 2026-11-13 Not applicable No public exploit Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RepairBuddy: from n/a through 4.1236.
CVE-2026-125824 Medium 2026-11-13 Not applicable No public exploit Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Go Maps WP Go Maps wp-google-maps allows Stored XSS.This issue affects WP Go Maps: from n/a through 10.1.10.
CVE-2026-125821 Medium 2026-11-13 Not applicable No public exploit Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Code Injection.This issue affects MapSVG: from n/a through 9.0.4.
CVE-2026-125819 Medium 2026-11-13 Not applicable No public exploit Missing Authorization vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenberg Blocks: from n/a through 3.7.6.
CVE-2026-125816 Medium 2026-11-13 Not applicable No public exploit Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Stored XSS.This issue affects MapSVG: from n/a through 9.0.4.
CVE-2026-125815 Medium 2026-11-13 Not applicable No public exploit Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Noah Hearle We’re Open! opening-hours allows Code Injection.This issue affects We’re Open!: from n/a through 2.8.
CVE-2026-125814 Medium 2026-11-13 Not applicable No public exploit Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Rymera Web Co Product Feed PRO for WooCommerce woo-product-feed-pro allows Code Injection.This issue affects Product Feed PRO for WooCommerce: from n/a through 13.5.8.
CVE-2026-125810 Medium 2026-11-13 Not applicable No public exploit Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2.
CVE-2026-125809 Medium 2026-11-13 Not applicable No public exploit Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in myCred myCred mycred allows Stored XSS.This issue affects myCred: from n/a through 4.0.2.
CVE-2026-125808 Medium 2026-11-13 Not applicable No public exploit Missing Authorization vulnerability in HTMega HT Mega ht-mega-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HT Mega: from n/a through 3.2.8.
CVE-2026-125807 Medium 2026-11-13 Not applicable No public exploit Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HTMega HT Mega ht-mega-for-elementor allows Stored XSS.This issue affects HT Mega: from n/a through 3.2.8.
CVE-2026-125802 Medium 2026-11-13 Not applicable No public exploit Insertion of Sensitive Information Into Sent Data vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Retrieve Embedded Sensitive Data.This issue affects Spectra: from n/a through 2.20.5.
CVE-2026-125801 Medium 2026-11-13 Not applicable No public exploit Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Automattic WooCommerce woocommerce allows Leveraging Race Conditions.This issue affects WooCommerce: from 11.0.0 through 11.2.2.
CVE-2026-125800 Medium 2026-11-13 Not applicable No public exploit Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Stored XSS.This issue affects Spectra: from n/a through 2.20.5.
CVE-2026-125794 Medium 2026-11-13 Not applicable No public exploit Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hupe13 Extension for Leaflet Map extensions-leaflet-map allows Stored XSS.This issue affects Extension for Leaflet Map: from n/a through 6.1.1.
CVE-2026-125792 Medium 2026-11-13 Not applicable No public exploit Missing Authorization vulnerability in Andy Moyle Church Admin church-admin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Church Admin: from n/a through 5.1.8.
CVE-2026-125440 Medium 2026-11-13 Not applicable No public exploit Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Cristián Lávaque s2Member s2member allows Code Injection.This issue affects s2Member: from n/a through 261106.
CVE-2026-125432 Medium 2026-11-13 Not applicable No public exploit Weak Password Recovery Mechanism for Forgotten Password vulnerability in RelyWP reCAPTCHA for WooCommerce recaptcha-woo allows Password Recovery Exploitation.This issue affects reCAPTCHA for WooCommerce: from n/a through 1.4.7.
CVE-2026-125409 Medium 2026-11-13 Not applicable No public exploit The Passster – Password Protect Pages and Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'metavalue (metakeyinput=passster_id | passster_headline)' parameter in all versions up to, and including, 4.3.21 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. A Contributor can break out of the shortcode attribute context by embedding a ] character in the passster_id or passster_headline meta value to prematurely close the opening shortcode tag, then append a [/passster] closing tag so that the trailing HTML payload is emitted verbatim by do_shortcode() — bypassing the per-attribute escaping present inside render_shortcode() — and the script will also execute in an editor's or administrator's browser when they preview the Contributor's pending post, since filter_the_content() has no edit-permission capability gate.
CVE-2026-124965 Medium 2026-11-13 Not applicable No public exploit Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Stored XSS.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.7.16.
CVE-2026-124762 Medium 2026-11-13 Not applicable No public exploit P-Net before 1.0.4 finds the RPC session of a received PDU by its activity UUID only, and a reject, fault or cancel PDU for the session aborts the Application Relationship, without checking that the PDU is the answer to a call of the device or where it comes from. A host with ADJACENT network access that has observed the activity UUID of the connection, which is sent in clear in every RPC request, can abort the Application Relationship with one PDU. It also allocates a session for an unknown activity UUID and changes the address stored for an existing session.
CVE-2026-124726 Medium 2026-11-13 Not applicable No public exploit Relative Path Traversal, with Unintended Proxy vulnerability in Apache APISIX. A caller of the MCP endpoint can invoke endpoints the OpenAPI document never declared, under the declared tool's HTTP method, using the credentials the Route adds. This issue affects Apache APISIX: from 3.19.0 before 3.20.0. Users are recommended to upgrade to version 3.20.0, which fixes the issue.
CVE-2026-124723 Medium 2026-11-13 Not applicable No public exploit Interpretation Conflict, leading to Incorrect Authorization vulnerability in Apache APISIX. With match_uri_encoded_slash enabled and skip_mtls_uri_regex configured, a client without a certificate can reach an upstream behind a route that requires one, limited to request paths that decode to an exempted URI. This issue affects Apache APISIX: from 3.18.0 through 3.19.0. Users are recommended to upgrade to version 3.20.0, which fixes the issue.
CVE-2026-124716 Medium 2026-11-13 Not applicable No public exploit Incorrect Authorization vulnerability in Apache APISIX. An authenticated user who holds any one of a route's required permissions or scopes can reach the protected upstream without the others, including HTTP methods the authorization server denied. This issue affects Apache APISIX: from 1.4.0 through 3.19.0. Users are recommended to upgrade to version 3.20.0, which fixes the issue.
CVE-2026-124666 Medium 2026-11-13 Not applicable No public exploit Authentication bypass by spoofing vulnerability in Apache APISIX. On a route where multi-auth falls back from wolf-rbac to another successful authenticator, client-supplied Wolf identity headers can remain in the request. A downstream service that relies on those documented headers may therefore receive an identity that was not established by the successful authenticator. This issue affects Apache APISIX: from 3.8.0 through 3.19.0. Users are recommended to upgrade to version 3.20.0, which fixes the issue.
CVE-2026-124418 Medium 2026-11-13 Not applicable No public exploit Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ahmad WP Job Portal wp-job-portal allows Stored XSS.This issue affects WP Job Portal: from n/a through 2.7.2.
CVE-2026-124414 Medium 2026-11-13 Not applicable No public exploit Weak Authentication vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Authentication Abuse.This issue affects Broadcast Live Video: from n/a through 7.3.15.
CVE-2026-124412 Medium 2026-11-13 Not applicable No public exploit Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in eLightUp Slim SEO slim-seo allows Code Injection.This issue affects Slim SEO: from n/a through 4.11.5.
CVE-2026-124409 Medium 2026-11-13 Not applicable No public exploit Missing Authorization vulnerability in VillaTheme CURCY woo-multi-currency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CURCY: from n/a through 2.2.21.
CVE-2026-124041 Medium 2026-11-13 Not applicable No public exploit Catalis/Patriot Properties WebPro 5.0 allows a remote unauthenticated attacker to execute arbitrary SQL queries against the underlying MSSQL database, enabling exfiltration of sensitive property and taxpayer information.
CVE-2026-123635 Medium 2026-11-13 Not applicable No public exploit Missing Release of Resource after Effective Lifetime vulnerability in elixir-grpc grpc_server allows a client to stall all later calls on a shared HTTP/2 connection via calls that the server refuses while their DATA frames are in flight. The stream handler grpc_stream_h (grpc_server/src/grpc_stream_h.erl) requests flow from Cowboy only for request data that has arrived. When the server refuses a call early, for example because the body exceeds max_body_size or the method is not implemented, Cowboy drops the DATA frames still in flight for that stream. Their bytes are not returned to the connection flow-control window. After enough refused calls the window is empty. No call on that connection can then send a request body, and each call waits until its deadline. Other connections are not affected. This issue affects grpc_server: from 1.0.0 before 1.1.0.
CVE-2026-122227 Medium 2026-11-13 Not applicable No public exploit The Easy Property Listings plugin for WordPress is vulnerable to generic SQL Injection via the 'post_type' parameter in all versions up to, and including, 3.5.28 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The sanitize_text_field() function is applied to the attribute value but does not escape single quotes, providing no mitigation against breaking out of the SQL IN('...') literal.
CVE-2026-122063 Medium 2026-11-13 Not applicable No public exploit The Newsletters plugin for WordPress is vulnerable to blind SQL Injection via the 'user_email' parameter in all versions up to, and including, 4.18.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Exploitation requires the admin-controlled 'currentusersubscribed' option to be enabled and at least one page rendering the Newsletters subscribe shortcode or widget to exist; a Subscriber-level attacker can self-serve the attack by updating their own profile email to a crafted payload and loading such a page.
CVE-2026-121776 Medium 2026-11-13 Not applicable No public exploit Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.20.
CVE-2026-121771 Medium 2026-11-13 Not applicable No public exploit Insertion of Sensitive Information Into Sent Data vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows Retrieve Embedded Sensitive Data.This issue affects Gutenberg Blocks: from n/a through 3.7.6.
CVE-2026-121721 Medium 2026-11-13 Not applicable No public exploit Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows Stored XSS.This issue affects Gutenberg Blocks: from n/a through 3.7.6.
CVE-2026-121518 Medium 2026-11-13 Not applicable No public exploit The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 5.127.0 via the 'search' parameter of the cr_show_more_all_reviews and cr_show_more_reviews AJAX actions. This is due to the handlers being hooked on wp_ajax_nopriv_* without a capability check (and, in the product-page handler, with a nonce check that is behind a filter defaulting to false) while passing the visitor-supplied search string straight into get_comments() as the 'search' argument, which core expands into LIKE conditions over comment_author, comment_author_email, comment_author_url, comment_author_IP and comment_content. This makes it possible for unauthenticated attackers to extract review author email addresses and IP addresses — fields WordPress and WooCommerce never expose to the public — one character at a time by observing whether the returned result set matches a probed substring.
CVE-2026-120658 Medium 2026-11-13 Not applicable No public exploit The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'file[additional_previews][]' parameter in all versions up to, and including, 7.6.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The wpdm_sanitize_array() function strips HTML tags via wp_kses but leaves bare single quotes intact and calls stripslashes_deep() which defeats WordPress magic quotes protection, allowing a single-quote-based attribute breakout payload to be stored verbatim and later rendered without escaping.
CVE-2026-120573 Medium 2026-11-13 Not applicable No public exploit The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_category' parameter in all versions up to, and including, 2.9.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injected payload is persisted in post meta as campaign_data, bypassing wp_kses sanitization, and executes in the browser session of any user with edit_posts — including Administrators — who opens the WPeMatico campaigns list screen.
CVE-2026-120547 Medium 2026-11-13 Not applicable No public exploit The CF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpcf7-form (CF7 form body; the [honeypot ...] tag value)' parameter in all versions up to, and including, 3.8.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with custom-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is only a meaningful privilege escalation on multisite installations or those with DISALLOW_UNFILTERED_HTML enabled, as Editor-level users on default single-site installs already possess the unfiltered_html capability.
CVE-2026-119518 Medium 2026-11-13 Not applicable No public exploit Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows Stored XSS.This issue affects Royal Elementor Addons: from n/a through 1.7.1070.
CVE-2026-119102 Medium 2026-11-13 Not applicable No public exploit In Telerik UI for Blazor, versions v12.0.0 through 15.2.0, an improper input validation vulnerability exists, where the Grid, TreeList and Gantt's AI command filters on any model property, bypassing the declared column allowlist.
CVE-2026-118587 Medium 2026-11-13 Not applicable No public exploit The PowerPress Podcasting plugin by Blubrry plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' parameter in all versions up to, and including, 11.18.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This vulnerability is only exploitable when the site's configured video player is set to html5video, or when the media URL uses a .webm or .ogv extension, as these conditions are required to route the shortcode attributes through the vulnerable powerpressplayer_build_html5video() builder. Successful exploitation additionally requires an action by an editor — the attacker cannot trigger the vulnerability on their own.
CVE-2026-116614 Medium 2026-11-13 Not applicable No public exploit The WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping plugin for WordPress is vulnerable to generic SQL Injection via the 'sourceId' parameter in all versions up to, and including, 2.24.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with editor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The plugin grants the edit_feeds capability to the Editor role on activation, meaning any Editor-level user satisfies the authorization checks and can exploit this vulnerability.
CVE-2026-116509 Medium 2026-11-13 Not applicable No public exploit The Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker plugin for WordPress is vulnerable to generic SQL Injection via the 'qpages' parameter in all versions up to, and including, 11.2.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The injected payload survives storage and a published-status check in display_shortcode() because a non-numeric ID causes the isPublished lookup to return an empty string, after which the payload is imploded directly into a WHERE question_id IN() clause via plain string interpolation with no wpdb->prepare() or esc_sql() call.
CVE-2026-116453 Medium 2026-11-13 Not applicable No public exploit Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Unauthorized access.
CVE-2026-116438 Medium 2026-11-13 Not applicable No public exploit Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0 , contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.
CVE-2026-116436 Medium 2026-11-13 Not applicable No public exploit Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-116433 Medium 2026-11-13 Not applicable No public exploit Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-116432 Medium 2026-11-13 Not applicable No public exploit Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
CVE-2026-116431 Medium 2026-11-13 Not applicable No public exploit Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Cleartext Storage of Sensitive Information vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
CVE-2026-116430 Medium 2026-11-13 Not applicable No public exploit Dell PowerScale InsightIQ, Version 6.4.0, contain an Insufficient Verification of Data Authenticity vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.
CVE-2026-116427 Medium 2026-11-13 Not applicable No public exploit Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-116426 Medium 2026-11-13 Not applicable No public exploit Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
CVE-2026-116425 Medium 2026-11-13 Not applicable No public exploit Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains unauthorized access vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Unauthorized access.
CVE-2026-116424 Medium 2026-11-13 Not applicable No public exploit Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains Unauthorized access vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Unauthorized access.
CVE-2026-116423 Medium 2026-11-13 Not applicable No public exploit Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains an Improper Verification of Cryptographic Signature vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Information tampering.
CVE-2026-116422 Medium 2026-11-13 Not applicable No public exploit Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Information exposure.
CVE-2026-116421 Medium 2026-11-13 Not applicable No public exploit Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
CVE-2026-116420 Medium 2026-11-13 Not applicable No public exploit Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, containsan Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
‹ prev page 3 of 1,749 next ›