2026

OpenClaw before 2026.3.31 contains an exec allowlist bypass vulnerability allowing attackers to inherit allowlist trust

OpenClaw before 2026.3.31 fails to properly sanitize PIP_INDEX_URL and UV_INDEX_URL environment variables in host execut

OpenClaw before 2026.3.28 contains an exec allowlist bypass vulnerability where allow-always persistence fails to unwrap

OpenClaw before 2026.3.31 contains a configuration management vulnerability where startup migration treats empty-array s

OpenClaw before 2026.3.22 contains an incomplete host environment variable sanitization vulnerability in host-env-securi

OpenClaw before 2026.3.22 contains a privilege escalation vulnerability where bootstrap setup codes are not bound to int

OpenClaw before 2026.3.31 stores Nostr privateKey as plaintext in configuration, allowing exposure through config.get me

OpenClaw before 2026.3.24 contains an environment variable injection vulnerability in the CLI backend runner that allows

OpenClaw before 2026.4.2 contains an arbitrary directory deletion vulnerability in mirror mode that allows attackers to

OpenClaw before 2026.3.31 contains an authorization bypass vulnerability in Discord voice ingress that allows attackers

OpenClaw before 2026.3.31 contains an access control bypass vulnerability in the Discord voice manager that allows attac

OpenClaw before 2026.3.28 contains an execution approval vulnerability in exec-approvals-allowlist.ts that allows allow-

OpenClaw before 2026.3.28 contains a privilege escalation vulnerability allowing authenticated operators with write perm

OpenClaw before 2026.3.31 contains a privilege escalation vulnerability allowing paired nodes with role=node to dispatch

OpenClaw before 2026.3.31 contains a fail-open vulnerability in the plugin installation flow where security scan failure

OpenClaw before 2026.3.31 contains an allowlist bypass vulnerability in Matrix thread root and reply context handling th

OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in the /phone arm and /phone disarm endpoints t

OpenClaw before 2026.3.31 performs Discord audio preflight transcription before validating member authorization, allowin

OpenClaw before 2026.3.31 contains an incomplete host-env-security-policy.json that fails to restrict compiler binary en

The Carlson VASCO-B GNSS Receiver lacks an authentication mechanism, allowing an attacker with network access to direct

Cross-Site Scripting (XSS) vulnerability exists in HTMLy version 3.1.1 in the content creation functionality at the /add

NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection component, where an attacker could

NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker co

NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Validation by path traversing. A

NVIDIA FLARE SDK contains a vulnerability in FOBS, where an attacker may cause deserialization of untrusted data by sen

NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthentica

** UNSUPPORTED WHEN ASSIGNED ** Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnera

Cross-Site Scripting (XSS) vulnerability exists in FUEL CMS v1.5.2 and before within the asset upload functionality. The

Authentication Bypass vulnerability exists in Netmaker versions prior to 1.5.0. The VerifyHostToken function in logic/jw

Insecure deserialization of untrusted input in StellarGroup HPX 1.11.0 under certain conditions may allow attackers to e

An issue was discovered in Cista v0.15 and below. Insecure deserialization of untrusted input under certain conditions m

Memory safety bugs present in Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presum

Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of me

Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of me

Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in

Information disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed i

A vulnerability was found in D-Link DIR-825M 1.1.12. This issue affects the function sub_414BA8 of the file /boafrm/form

A vulnerability has been found in D-Link DIR-825M 1.1.12. This vulnerability affects the function sub_4151FC of the file

A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts the function

A vulnerability was identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function dele

The raw message of every server-side AuthenticationException is returned to the unauthenticated remote caller in the gRP

When an authenticated user is denied access to a gRPC method, their authenticated identity remains bound to the gRPC wor

OpenCATS prior to commit 3002a29 contains a PHP code injection vulnerability in the installer AJAX endpoint that allows

The Aranda File Server (AFS) component in Aranda Software Aranda Service Desk before 8.3.12 stores daily activity logs w

A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System 1.0. The impacted element is the fu

A flaw has been found in WilliamCloudQi matlab-mcp-server up to ab88f6b9bf5f36f725e8628029f7f6dd0d9913ca. The affected e

Improper access control in the vault documentation feature in Devolutions Server allows an authenticated attacker to r

An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix Prism Central. The

Multiple BinSoft products are vulnerable to Remote Command Execution. An authorized user with access to the application

Multiple BinSoft products perform client-side authentication. An attacker with access to any application instance connec