Medium
CVE-2026-32265
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filters
High
CVE-2026-32264
Craft CMS vulnerable to behavior injection RCE ElementIndexesController and FieldsController
High
CVE-2026-32263
Craft CMS vulnerable to behavior injection RCE via EntryTypesController
Medium
CVE-2026-32262
Craft CMS has a Path Traversal Vulnerability in AssetsController
High
CVE-2026-32261
RCE via SSTI for users with permissions to access the Craft CMS Webhooks plugin
Medium
CVE-2026-4175
Aureus ERP vulnerable to cross-site scripting in the Chatter Message Handler
Medium
CVE-2026-32612
Statamic vulnerable to privilege escalation via stored cross-site scripting
High
CVE-2026-32600
simplesamlphp/xml-security: Missing AES-GCM Authentication Tag Validation on Encrypted Nodes Allows for Unauthorized Decryption
High
CVE-2026-32313
xmlseclibs: Missing AES-GCM Authentication Tag Validation on Encrypted Nodes Allows for Unauthorized Decryption
Critical
CVE-2026-27591
Winter vulnerable to privilege escalation by authenticated backend users
High
CVE-2026-31889
Shopware vulnerable to a potential take over of app credentials
Medium
CVE-2026-31888
Shopware has user enumeration via distinct error codes on Store API login endpoint
High
CVE-2026-31887
Shopware: Unauthenticated data extraction possible through store-api.order endpoint
Unrated
CVE-2026-4933
drupal/unpublished_node_permissions - SA-CONTRIB-2026-029
Unrated
CVE-2026-3573
drupal/ai - SA-CONTRIB-2026-028
Low
CVE-2026-56381
Craft CMS Vulnerable to Stored XSS via User Group Name in User Permissions Page
High
CVE-2026-31857
CraftCMS has an RCE vulnerability via relational conditionals in the control panel
High
CVE-2026-31858
CraftCMS's `ElementSearchController` Affected by Blind SQL Injection
Medium
CVE-2026-31859
CraftCMS vulnerable to reflective XSS via incomplete return URL sanitization
Medium
CVE-2026-31825
Sylius has a DQL Injection via API Order Filters
High
CVE-2026-31824
Sylius has a Promotion Usage Limit Bypass via Race Condition
Medium
CVE-2026-31823
Sylius Vulnerable to Authenticated Stored XSS
Medium
CVE-2026-31822
Sylius has a XSS vulnerability in checkout login form
Medium
CVE-2026-31821
Sylius is Missing Authorization in API v2 Add Item Endpoint
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.