2026

OpenClaw iOS before 2026.8.11 logs complete agent deep-link URLs including persistent bearer keys to unified logs as pub

Vaultwarden through 1.37.3 omits organization membership status validation from three cipher access-restriction queries,

e621ng versions before 26.09.16 pass untrusted request parameters directly to Rails url_for in PaginatorComponent and co

ClipBucket v5 before 5.5.3-#182 contains a reflected cross-site scripting vulnerability in the sort_link() helper functi

Improper validation of the Destination Connection ID length in s2n-quic 1.88.0 and earlier may allow an unauthenticated

lwIP (Lightweight IP) has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or

Autonomy Logic OpenPLC 3 is susceptible to an improper neutralization of input during web page generation vulnerability

A server-side request forgery (SSRF) vulnerability was identified in the notebook viewer of GitHub Enterprise Server. Th

A stored cross-site scripting (XSS) vulnerability was identified in GitHub Enterprise Server that allowed an authenticat

Unleash is an open-source feature management platform. Prior to 8.0.3, the Unleash admin API contains five authorization

Unleash is an open-source feature management platform. Prior to 8.0.3, POST /api/admin/projects/:projectId/features/:fea

Unleash is an open-source feature management platform. Prior to 8.0.3, cloneFeatureToggle and POST /api/admin/projects/:

Unleash is an open-source feature management platform. Prior to 8.0.3, the change-request approval email template at src

An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed any authenticated user of

openEQUELLA before 2026.1.0 contains an authenticated remote code execution vulnerability that allows any authenticated

wlc is a Weblate command-line client using Weblate's REST API. Prior to 2.0.1, automatically discovered configuration fr

A local cross-user code execution vulnerability exists in GNU wget (Windows builds from eternallybored.org) due to a har

The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissio

The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability

Missing path validation in the Worktree.remove component of openCode v1.18.26 allows attackers to execute arbitrary recu

An unrestricted upload of files with a dangerous type in the thumbnail-upload endpoint (/index.php?m=member&f=article&v=

CMSimple 5.24 ships with CSRF protection disabled by default, which turns csrfProtection() into a no-op on every state-c

MCMS 6.1.1 through 6.2.1 has a SQL injection vulnerability in the custom model/form import feature.

An integer overflow vulnerability exists in MPack 1.1.1 in mpack_node_cstr_alloc() and mpack_node_utf8_cstr_alloc().

An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-length FlatBuffers sche

An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-length FlatBuffers sche

A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule files. An attacker can

An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vu

A NULL pointer dereference vulnerability exists in the gf_sg_vrml_field_clone() function of GPAC 2d7da22e (26.08-DEV). T

lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain full code execution

Nautobot is a Network Source of Truth and Network Automation Platform. From 3.0.0 until 3.1.8, the generic ApprovalWorkf

Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.37 and 3.1.8, a user with extras.add

Gardener implements the automated management and operation of Kubernetes clusters as a service. Prior to 1.142.6, 1.143.

SIPGO is a library for writing SIP services in the GO language. Prior to 1.4.3, WSConnection.Read in sip/transport_ws.go

A vulnerability exists in the Analytics and Location Engine (ALE) API that may allow for the disclosure of sensitive inf

Multiple vulnerabilities exist in the Analytics and Location Engine (ALE) that may allow for unauthorized access or deni

A vulnerability in an administrative component of Analytics and Location Engine (ALE) is vulnerable to a man-in-the-midd

Vulnerabilities in the Analytics and Location Engine web interface allows remote authenticated users to run arbitrary co

A vulnerability exists in the maintenance restore functionality of Analytics and Location Engine (ALE). Successful explo

A vulnerability exists in the Analytics and Location Engine (ALE) that may allow for unauthorized access, information di

A vulnerability exists in an Analytics and Location Engine (ALE) component where the impacted process improperly process

A vulnerability exists in the Analytics and Location Engine (ALE) management interface that may allow for the disclosure

A vulnerability exists in the internal administrative component of Analytics and Location Engine (ALE). Successful explo

A vulnerability exists in the Analytics and Location Engine (ALE) where the application and underlying operating system

An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information via the src/scanner.cpp, Scanner::Po

MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 7.3.0

mppx is a TypeScript interface for machine payments protocol. Prior to 0.8.2, the fee-payer cosigning path in src/tempo/

mppx is a TypeScript interface for machine payments protocol. Prior to 0.8.2, FeePayerPolicy in src/tempo/internal/fee-p

Kaneo versions 2.3.12 before 2.12.2 contain a missing authorization vulnerability that allows authenticated workspace me

request-filtering-agent is an http(s).Agent implementation that blocks requests to Private/Reserved IP addresses. Prior