CVEs
Browse the synced catalog, newest first.
- CVE-2026-89324Basel Post Types <= 1.18 - Unauthenticated Authentication Bypass via Forged Opauth Callback Signature with Hardcoded Fallback SaltXTemos Basel Post Types
- CVE-2026-92442The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise omits the caller's identity from the cache key, allowing a response…Kong Gateway Enterprise · Kong AI Gateway
- CVE-2026-125880Stored XSS via MMS3 patch metadata (admin context)N-able N-central
- CVE-2026-125882RCE via file repository upload path traversalN-able N-central
- CVE-2026-118483Dimension | Improper Input Validation (CWE-20)Adobe Dimension
- CVE-2026-125881Schema-hint SSRF via service import schema validationN-able N-central
- CVE-2026-92545The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway omit the request hostname from the cache…Kong Gateway Enterprise · Kong AI Gateway
- CVE-2026-125879Local privilege escalation to root via nable-writable syslog-ng configN-able N-central
- CVE-2026-125878Multiple OGNL Injection vulnerabilitiesN-able N-central
- CVE-2026-125958Root RCE via unsigned NSP upgrade package uploadN-able N-central
- CVE-2026-91000Insecure IPC Channels lead to local privilege escalationN-able N-central
- CVE-2026-122100CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)Adobe Content Credentials Rust SDK · Adobe C2PA Tool
- CVE-2026-118484CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Rust SDK · Adobe C2PA Tool
- CVE-2026-113573CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Rust SDK · Adobe C2PA Tool
- CVE-2026-122097CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)Adobe Content Credentials Rust SDK · Adobe C2PA Tool
- CVE-2026-113572CAI Content Credentials | Use of a Broken or Risky Cryptographic Algorithm (CWE-327)Adobe Content Credentials Rust SDK · Adobe C2PA Tool
- CVE-2026-122098CAI Content Credentials | Improper Certificate Validation (CWE-295)Adobe Content Credentials Rust SDK · Adobe C2PA Tool
- CVE-2026-123262CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)Adobe Content Credentials Rust SDK · Adobe C2PA Tool
- CVE-2026-123261CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)Adobe Content Credentials Rust SDK · Adobe C2PA Tool
- CVE-2026-123267CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe Content Credentials Rust SDK · Adobe C2PA Tool
- CVE-2026-113574CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)Adobe Content Credentials Rust SDK · Adobe C2PA Tool
- CVE-2026-123260CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Rust SDK · Adobe C2PA Tool
- CVE-2026-122101CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Rust SDK · Adobe C2PA Tool
- CVE-2026-122099CAI Content Credentials | Incorrect Authorization (CWE-863)Adobe Content Credentials Rust SDK · Adobe C2PA Tool
- CVE-2026-125883Multiple XXE VulnerabilitiesN-able N-central
- CVE-2026-126186Active Storage: Possible arbitrary file read and remote code execution in Active Storage video previews, analysis and image processingrails · activestorage
- CVE-2026-126129The Auth0 ASP.NET Core Authentication SDK incorrectly determines a session's OIDC Back-Channel Logout status, which may result in a…Auth0 ASP.NET Core Authentication
- CVE-2026-126085Active Storage: Possible circumvention of file size limits in Active Storage direct uploads to Google Cloud Storagerails · activestorage
- CVE-2026-92544SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow a client to execute arbitrary SQL against…Kong Gateway Enterprise · Kong AI Gateway
- CVE-2026-126084Active Storage: Unsigned Content-Type in Active Storage GCS direct uploads with cache_controlrails