Medium
CVE-2026-26991
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filters
Medium
CVE-2026-26987
LibreNMS affected by reflected xss via email field
Critical
CVE-2026-26016
Pterodactyl Panel Allows Cross-Node Server Configuration Disclosure via Remote API Missing Authorization
High
ghsa-hr7j-63v7-vj7g
Pterodactyl Panel's SFTP sessions remain active after user account deletion or password change
Medium
CVE-2026-2469
ImapEngine affected by command injection via the ID command parameters
Critical
CVE-2026-26273
Known affected by Account Takeover via Password Reset Token Leakage
High
CVE-2026-61701
MagicLink: Insecure Deserialization of MagicLink Actions Leads to Remote Code Execution
High
CVE-2026-25759
Statamic CMS vulnerable to privilege escalation via stored cross-site scripting
Unrated
CVE-2026-2349
drupal/ui_icons - SA-CONTRIB-2026-010
Medium
CVE-2026-25633
Statamic CMS's missing authorization allows access to assets
Unrated
CVE-2026-2348
drupal/quickedit - SA-CONTRIB-2026-009
Medium
CVE-2018-25157
Phraseanet vulnerable to stored cross-site scripting through crafted file names
Medium
CVE-2019-25317
Kimai 2 vulnerable to persistent cross-site scripting in the timesheet descriptions
Medium
ghsa-8grv-jq2g-cfhw
amphp/http-server affected by HTTP/2 DDoS vulnerability
High
CVE-2026-25892
Adminer has an Unauthenticated Persistent DoS via Array Injection in ?script=version Endpoint
Medium
CVE-2026-25878
FroshAdminer Adminer UI is accessible without admin session
High
CVE-2026-25498
Craft CMS Vulnerable to potential authenticated Remote Code Execution via malicious attached Behavior
High
CVE-2026-25497
Craft CMS: GraphQL Asset Mutation Privilege Escalation
Medium
CVE-2026-25496
Craft CMS Vulnerable to Stored XSS in Number Prefix & Suffix Fields
High
CVE-2026-25495
Craft CMS Vulnerable to SQL Injection in Element Indexes via `criteria[orderBy]`
Medium
CVE-2026-25494
Craft CMS Vulnerable to SSRF in GraphQL Asset Mutation via Alternative IP Notation
Medium
CVE-2026-25493
Craft CMS Vulnerable to SSRF in GraphQL Asset Mutation via HTTP Redirect
Medium
CVE-2026-25492
Craft CMS: save_images_Asset graphql mutation can be abused to exfiltrate AWS credentials of underlying host
Low
CVE-2026-25491
Craft CMS Vulnerable to Stored XSS in Entry Types Name
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.