CVEs published April 20, 2026
180 CVEs were published on April 20, 2026: 18 critical, 49 high.
- Published
- 180
- Critical
- 18
- High
- 49
- Medium
- 105
- Low
- 6
- Unrated
- 2
- Now in CISA KEV
- 0
- Fix available
- 81
Most affected products
- OpenClaw
- 15
- silex technology SD-330AC · silex technology AMC Manager
- 11
- Dell PowerProtect Data Domain
- 9
- ComfyUI
- 5
- GFI Software HelpDesk
- 5
- TransformerOptimus SuperAGI
- 5
- givanz Vvveb
- 4
- langgenius dify
- 4
- modelscope agentscope · agentscope
- 4
- OpenMage magento-lts · openmage/magento-lts
- 4
Critical 18
- CVE-2026-41329OpenClaw < 2026.3.31 - Sandbox Bypass via Heartbeat Context Inheritance and senderIsOwner EscalationOpenClaw
- CVE-2026-5450scanf %mc off-by-one heap buffer overflowThe GNU C Library glibc
- CVE-2026-32613Spinnaker vulnerable to RCE via expression parsing due to unrestricted context handlingspinnaker · io.spinnaker.echo:echo-pipelinetriggers
- CVE-2026-32604Spinnaker vulnerable to RCE when using gitrepo artifact types due to improper sanitization of user input on branch and pathsspinnaker · io.spinnaker.clouddriver:clouddriver-artifacts-…
- CVE-2026-32311Command Injection and Docker container escape allows root on host machinereconurge flowsint
- CVE-2026-6257Vvveb CMS < v1.0.8.2 Remote Code Execution via Media ManagementVvveb CMS
- CVE-2026-24467OpenAEV's Improper Password Reset Token Management Leads to Unauthenticated Account Takeover and Platform CompromiseOpenAEV-Platform openaev
- CVE-2026-39918Vvveb < 1.0.8.1 Code Injection via Installation Endpointgivanz Vvveb
- CVE-2026-5760CVE-2026-5760SGLang
- CVE-2026-33557Apache Kafka: Missing JWT token validation in OAUTHBEARER authenticationApache Software Foundation Apache Kafka · org.apache.kafka:…
- CVE-2026-5964Digiwin｜EasyFlow .NET - SQL InjectionDigiwin EasyFlow .NET
- CVE-2026-5963Digiwin｜EasyFlow .NET - SQL InjectionDigiwin EasyFlow .NET
- CVE-2026-6644A command injection vulnerability was found in the PPTP VPN Clients on the ADMASUSTOR ADM
- CVE-2026-32956SD-330AC and AMC Manager provided by silex technology, Inc.silex technology SD-330AC · silex technology AMC Manager
- CVE-2026-29646In OpenXiangShan NEMU prior to 55295c4, when running with RVH (Hypervisor extension) enabled, a VS-mode guest write to the supervisor interr
- CVE-2026-29649NEMU contains an implementation flaw in its RISC-V Hypervisor CSR handling where henvcfg[7:4] (CBIE/CBCFE/CBZE-related fields) is incorrectl
- CVE-2026-30269Improper access control in Doorman v0.1.0 and v1.0.2 allows any authenticated user to update their own account role to a non-admin privilege
- CVE-2026-39109SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 within the username parameter
High 49
- CVE-2026-35570OpenClaude has Sandbox Bypass via Early-Exit Logic Flaw that Allows Path TraversalGitlawb openclaude · @gitlawb/openclaude
- CVE-2026-35587Glances IP Plugin has SSRF via public_api that leads to credential leakagenicolargo glances · glances
- CVE-2026-34839Glances Vulnerable to Cross-Origin Information Disclosure via Unauthenticated REST API (/api/4) due to Permissive CORSnicolargo glances · glances
- CVE-2026-41303OpenClaw < 2026.3.28 - Authorization Bypass in Discord Text Approval CommandsOpenClaw
- CVE-2026-41299OpenClaw < 2026.3.28 - Client Identity Spoofing in chat.send Gateway Provenance GuardOpenClaw
- CVE-2026-41296OpenClaw < 2026.3.31 - Sandbox Escape via TOCTOU Race in Remote FS Bridge readFileOpenClaw
- CVE-2026-41295OpenClaw < 2026.4.2 - Untrusted Workspace Channel Shadow Code Execution during Built-in Channel SetupOpenClaw
- CVE-2026-41294OpenClaw < 2026.3.28 - Environment Variable Injection via CWD .env FileOpenClaw
- CVE-2026-5928Potential buffer under-read in ungetwcThe GNU C Library glibc
- CVE-2026-33626LMDeploy Vulnerable to Server-Side Request Forgery (SSRF) via Vision-Language Image LoadingInternLM lmdeploy · lmdeploy
- CVE-2026-33432Roxy-WI has Pre-Authentication LDAP Injection that Leads to Authentication Bypassroxy-wi
- CVE-2026-33031Nginx-UI: Disabled users retain full API access through previously issued bearer tokens0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-6249Vvveb CMS 1.0.8.2 Remote Code Execution via Media UploadVvveb CMS
- CVE-2026-5478Everest Forms <= 3.4.4 - Unauthenticated Arbitrary File Read and Deletion via Upload Field 'old_files' Parameterwpeverest Everest Forms – Contact Form, Payment Form, Quiz,…
- CVE-2026-32135NanoMQ has Heap Buffer Overflow in URI Parameter Parsingnanomq
- CVE-2026-6248wpForo Forum <= 3.0.5 - Authenticated (Subscriber+) Arbitrary File Deletion via Custom Profile Field File Pathtomdever wpForo Forum
- CVE-2026-26943Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13Dell PowerProtect Data Domain
- CVE-2026-40488OpenMage LTS has Customer File Upload Extension Blocklist Bypass that Leads to Remote Code ExecutionOpenMage magento-lts · openmage/magento-lts
- CVE-2026-24506Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13Dell PowerProtect Data Domain
- CVE-2026-41445KissFFT Integer Overflow Heap Buffer Overflow via kiss_fftndr_alloc()mborgerding kissfft
- CVE-2026-24505Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain an improper input validation vulnerability.Dell PowerProtect Data Domain
- CVE-2026-25524OpenMage LTS's Phar Deserialization leads to Remote Code ExecutionOpenMage magento-lts · openmage/magento-lts
- CVE-2026-24504Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13Dell PowerProtect Data Domain
- CVE-2026-25058Vexa's unauthenticated internal transcript endpoint exposed by defaultVexa-ai vexa
- CVE-2026-23774Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release verDell PowerProtect Data Domain
- CVE-2026-26944Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13Dell PowerProtect Data Domain
- CVE-2026-6066Unencrypted Client‑Server Communication in ConnectWise Automate™ Solution CenterConnectWise Automate
- CVE-2026-34428Vvveb < 1.0.8.1 SSRF via oEmbedProxygivanz Vvveb
- CVE-2026-34427Vvveb < 1.0.8.1 Privilege Escalation via admin/user/savegivanz Vvveb
- CVE-2026-4048OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFProgress Software LoadMaster · Progress Software ECS Con… +2
- CVE-2026-3519OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFProgress Software LoadMaster · Progress Software ECS Con… +2
- CVE-2026-3518OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFProgress Software LoadMaster · Progress Software ECS Con… +2
- CVE-2026-3517OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFProgress Software LoadMaster · Progress Software ECS Con… +2
- CVE-2026-6632Tenda F451 httpd SafeClientFilter fromSafeClientFilter buffer overflowTenda F451
- CVE-2026-6631Tenda F451 httpd webExcptypemanFilter fromwebExcptypemanFilter buffer overflowTenda F451
- CVE-2026-6630Tenda F451 httpd GstDhcpSetSer fromGstDhcpSetSer buffer overflowTenda F451
- CVE-2026-39454SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD.Sky Co. SKYSEA Client View · Sky Co. SKYMEC IT Manager
- CVE-2026-5967TeamT5｜ThreatSonar Anti-Ransomware - Privilege EscalationTeamT5 ThreatSonar Anti-Ransomware
- CVE-2026-5966TeamT5｜ThreatSonar Anti-Ransomware - Arbitrary File DeletionTeamT5 ThreatSonar Anti-Ransomware
- CVE-2026-6643A stack-based buffer overflow vulnerability in the VPN Clients on the ADMASUSTOR ADM
- CVE-2026-32955SD-330AC and AMC Manager provided by silex technology, Inc.silex technology SD-330AC · silex technology AMC Manager
- CVE-2026-32965Initialization of a resource with an insecure default vulnerability exists in SD-330AC and AMC Manager provided by silex technology, Inc.silex technology SD-330AC · silex technology AMC Manager
- CVE-2026-29642A local attacker who can execute privileged CSR operations (or can induce firmware to do so) performs carefully crafted reads/writes to menv
- CVE-2026-29643XiangShan (Open-source high-performance RISC-V processor) commit edb1dfaf7d290ae99724594507dc46c2c2125384 (2024-11-28) contains an improper
- CVE-2026-29645NEMU (OpenXiangShan/NEMU) before v2025.12.r2 contains an improper instruction-validation flaw in its RISC-V Vector (RVV) decoder.
- CVE-2026-29648In OpenXiangShan NEMU, when Smstateen is enabled, clearing mstateen0.ENVCFG does not correctly restrict access to henvcfg and senvcfg.
- CVE-2026-30266Insecure Permissions vulnerability in DeepCool DeepCreative v.1.2.12 and before allows a local attacker to execute arbitrary code via a craf
- CVE-2026-39110SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the contactno parameter of
- CVE-2026-39111SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the email parameter of the
Medium, low and unrated 113
- CVE-2026-35588Glances has CQL Injection in its Cassandra Export Module via Unsanitized Config Valuesnicolargo glances · glances
- CVE-2026-41331OpenClaw < 2026.3.31 - Resource Consumption via Unauthorized Telegram Audio Preflight TranscriptionOpenClaw
- CVE-2026-41330OpenClaw < 2026.3.31 - Environment Variable Override via Host Exec PolicyOpenClaw
- CVE-2026-41302OpenClaw < 2026.3.31 - Server-Side Request Forgery via Unguarded fetch() in Marketplace Plugin DownloadOpenClaw
- CVE-2026-41301OpenClaw 2026.3.22 < 2026.3.31 - Forged Nostr DM Pairing State Creation via Signature Verification BypassOpenClaw
- CVE-2026-41300OpenClaw < 2026.3.31 - Preservation of Attacker-Discovered Endpoints in Remote OnboardingOpenClaw
- CVE-2026-41298OpenClaw < 2026.4.2 - Authorization Bypass in Session Termination EndpointOpenClaw
- CVE-2026-41297OpenClaw < 2026.3.31 - Server-Side Request Forgery via Marketplace Plugin Download RedirectOpenClaw
- CVE-2026-40045OpenClaw < 2026.4.2 - Cleartext Credential Transmission via Unencrypted WebSocket Gateway EndpointsOpenClaw
- CVE-2026-34082Dify has IDOR in deleting someone else's chat conversationlanggenius dify
- CVE-2026-5721wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 6.5.0.4 - Unauthenticated Stored Cross-Site Scripting via CSV/Excel Data ImportwpDataTables – WordPress Data Table, Dynamic Tables & Table…
- CVE-2026-6729HKUDS OpenHarness Session Key Collision Privilege EscalationHKUDS OpenHarness
- CVE-2026-0930Potential wolfSSHd Buffer out-of-bounds Read on Windows Handling Terminal ResizewolfSSL wolfSSH
- CVE-2026-22051StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerabiliNETAPP StorageGRID
- CVE-2026-4852Image Source Control Lite – Show Image Credits and Captions <= 3.9.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'Image Source' Fieldwebzunft Image Source Control Lite – Show Image Credits and…
- CVE-2026-33431Roxy-WI Vulnerable to Authenticated Arbitrary File Read via Path Traversal in Config Version Viewerroxy-wi
- CVE-2026-34403Nginx-UI vulnerable to Cross-Site WebSocket Hijacking (CSWSH) via missing origin validation on all WebSocket endpoints0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-6550Key commitment policy bypass via shared key cache in AWS Encryption SDK for PythonAWS Encryption SDK for Python · aws-encryption-sdk
- CVE-2026-6060Possible DoS via SQL BoxOTRS AG OTRS
- CVE-2026-41389OpenClaw 2026.4.7 < 2026.4.15 - Arbitrary File Read via Unvalidated Tool-Result Media PathsOpenClaw
- CVE-2026-23753GFI HelpDesk < 4.99.9 Stored XSS via charset ParameterGFI Software HelpDesk
- CVE-2026-23752GFI HelpDesk < 4.99.9 Stored XSS via companyname ParameterGFI Software HelpDesk
- CVE-2026-23756GFI HelpDesk < 4.99.9 Stored XSS via Troubleshooter Step SubjectGFI Software HelpDesk
- CVE-2026-23758GFI HelpDesk < 4.99.9 Stored XSS via editsubject ParameterGFI Software HelpDesk
- CVE-2026-23757GFI HelpDesk < 4.99.10 Stored XSS via Reports ModuleGFI Software HelpDesk
- CVE-2026-6662ericc-ch copilot-api Token Endpoint server.ts cors cross-domain policyericc-ch copilot-api
- CVE-2026-35154Dell PowerProtect Data Domain appliances, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3Dell PowerProtect Data Domain appliances
- CVE-2026-26951Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13Dell PowerProtect Data Domain
- CVE-2026-22761Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain a command injection vulnerability.Dell PowerProtect Data Domain
- CVE-2026-26942Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OSDell PowerProtect Data Domain
- CVE-2026-28684python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallbacktheskumar python-dotenv · python-dotenv
- CVE-2026-40098OpenMage LTS imports cross-user wishlist item via shared wishlist code, leading to private option disclosure and file-disclosure variantOpenMage magento-lts · openmage/magento-lts
- CVE-2026-25525OpenMage LTS has Path Traversal Filter Bypass in Dataflow ModuleOpenMage magento-lts · openmage/magento-lts
- CVE-2026-25883Vexa Webhook Feature has a SSRF VulnerabilityVexa-ai vexa
- CVE-2026-24468OpenAEV Vulnerable to Username/Email Enumeration Through Differential HTTP Responses in Password Reset APIOpenAEV-Platform openaev
- CVE-2026-41245Junrar: Path Traversal (Zip-Slip) via Sibling Directory Name Prefixjunrar · com.github.junrar:junrar
- CVE-2026-40896OpenProject has Cross-Project Meeting Agenda Item Injection via Unscoped Section Lookupopf openproject
- CVE-2026-6652Pagekit CMS StringStorage Template PhpEngine.php evaluate eval injectionPagekit CMS
- CVE-2026-3219pip doesn't reject concatenated ZIP and tar archivesPython Packaging Authority pip · pip
- CVE-2026-6651erponline.xyz ERP Online Inventory Edit Item cross site scriptingerponline.xyz ERP Online
- CVE-2026-6650Z-BlogPHP ZBA File app_upload.php UnPack unrestricted uploadZ-BlogPHP
- CVE-2026-34429Vvveb < 1.0.8.1 Stored XSS via Media Upload and Renamegivanz Vvveb
- CVE-2026-6369Exposed Session Token in canonical-livepatch client snapcanonical-livepatch
- CVE-2026-6649Qibo CMS headers server-side request forgeryQibo CMS
- CVE-2025-66335Apache Doris MCP Server: MCP SQL injectApache Software Foundation Apache Doris MCP Server · doris-…
- CVE-2026-33558Apache Kafka, Apache Kafka Clients: Information Exposure Through Network Client Log OutputApache Software Foundation Apache Kafka · org.apache.kafka:…
- CVE-2026-6648Qibo CMS Internal Message cross site scriptingQibo CMS
- CVE-2026-6636p2r3 convert API buildCache.js Bun.serve path traversalp2r3 convert
- CVE-2026-5958Race Condition in GNU SedGNU Sed
- CVE-2026-6635rowboatlabs rowboat tools_webhook app.py tool_call improper authenticationrowboatlabs rowboat
- CVE-2026-6634usememos UpdateInstanceSetting App.tsx memos_access_token improper authorizationusememos memos · github.com/usememos/memos
- CVE-2026-6633Yifang CMS Extended Management L_rbac_admin.php store cross site scriptingYifang CMS
- CVE-2026-6629Metasoft 美特软件 MetaCRM Interface sql.jsp Statement.executeUpdate sql injectionMetasoft 美特软件 MetaCRM
- CVE-2026-6654Use-After-Free and Double-Free in IntoIter::drop when element drop panicsMozilla thin-vec · thin-vec
- CVE-2026-6628phili67 Ecclesia CRM Query Viewer view ValidateInput sql injectionphili67 Ecclesia CRM
- CVE-2026-6626Cockpit-HQ Cockpit Asset Handler/Aggregate data query logic injectionCockpit-HQ Cockpit · cockpit-hq/cockpit
- CVE-2026-31430X.509: Fix out-of-bounds access when parsing extensionsLinux
- CVE-2026-31429net: skb: fix cross-cache free of KFENCE-allocated skb headLinux
- CVE-2026-6625moxi624 Mogu Blog v2 Picture Storage Service LocalFileServiceImpl.java LocalFileServiceImpl.uploadPictureByUrl server-side request forgerymoxi624 Mogu Blog
- CVE-2026-6624BichitroGan ISP Billing Software Pool List add cross site scriptingBichitroGan ISP Billing Software
- CVE-2026-6623BichitroGan ISP Billing Software Profile users-view cross site scriptingBichitroGan ISP Billing Software
- CVE-2025-13480Incorrect authorization in Fudo EnterpriseFudo Security Fudo Enterprise
- CVE-2026-6622BichitroGan ISP Billing Software Customer edit cross site scriptingBichitroGan ISP Billing Software
- CVE-2026-66211024bit extend-deep index.js prototype pollution1024bit extend-deep
- CVE-2026-6620SonicCloudOrg sonic-server File Upload Endpoint FileTool.java upload path traversalSonicCloudOrg sonic-server
- CVE-2026-6619langgenius dify ImagePreview image-preview.tsx openInNewTab cross site scriptinglanggenius dify
- CVE-2026-6618langgenius dify ApiBasedToolSchemaParser parser.py parse_openai_plugin_json_to_tool_bundle server-side request forgerylanggenius dify
- CVE-2026-6617langgenius dify ApiToolManageService api_tools_manage_service.py get_api_tool_provider_remote_schema server-side request forgerylanggenius dify
- CVE-2026-6616TransformerOptimus SuperAGI WebScraperTool webpage_extractor.py extract_with_lxml server-side request forgeryTransformerOptimus SuperAGI
- CVE-2026-41282ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection.ProjectDiscovery Nuclei · github.com/projectdiscovery/nu… +2
- CVE-2026-6615TransformerOptimus SuperAGI Multipart Upload resources.py upload path traversalTransformerOptimus SuperAGI
- CVE-2026-6614TransformerOptimus SuperAGI project.py get_projects_organisation authorizationTransformerOptimus SuperAGI
- CVE-2026-6613TransformerOptimus SuperAGI agent.py get_schedule_data authorizationTransformerOptimus SuperAGI
- CVE-2026-6612TransformerOptimus SuperAGI Agent Execution Endpoint agent_execution.py update_agent_execution authorizationTransformerOptimus SuperAGI
- CVE-2026-6611liangliangyy DjangoBlog File Upload Endpoint settings.py hard-coded keyliangliangyy DjangoBlog
- CVE-2024-7083Email Encoder < 2.3.4 - Admin+ Stored XSSEmail Encoder
- CVE-2026-6610liangliangyy DjangoBlog Setting settings.py hard-coded credentialsliangliangyy DjangoBlog
- CVE-2026-6609liangliangyy DjangoBlog views.py form_valid improper authorizationliangliangyy DjangoBlog
- CVE-2026-6608lm-sys fastchat Arena Side-by-Side View add_text control flowlm-sys fastchat · fschat
- CVE-2026-6607lm-sys fastchat Worker API Endpoint api_generate resource consumptionlm-sys fastchat · fschat
- CVE-2026-6606modelscope agentscope _agent_base.py _process_audio_block server-side request forgerymodelscope agentscope · agentscope
- CVE-2026-6605modelscope agentscope Internal Service _common.py _get_bytes_from_web_url server-side request forgerymodelscope agentscope · agentscope
- CVE-2026-6604modelscope agentscope Cloud Metadata Endpoint _openai_tools.py openai_audio_to_text server-side request forgerymodelscope agentscope · agentscope
- CVE-2026-6603modelscope agentscope _python.py execute_shell_command code injectionmodelscope agentscope · agentscope
- CVE-2026-6602rickxy Hospital Management System his_admin_account.php unrestricted uploadrickxy Hospital Management System
- CVE-2026-6601Lagom WHMCS Template Datatables resource consumptionLagom WHMCS Template
- CVE-2026-32957SD-330AC and AMC Manager provided by silex technology, Inc.silex technology SD-330AC · silex technology AMC Manager
- CVE-2026-32958SD-330AC and AMC Manager provided by silex technology, Inc.silex technology SD-330AC · silex technology AMC Manager
- CVE-2026-32959SD-330AC and AMC Manager provided by silex technology, Inc.silex technology SD-330AC · silex technology AMC Manager
- CVE-2026-32960SD-330AC and AMC Manager provided by silex technology, Inc.silex technology SD-330AC · silex technology AMC Manager
- CVE-2026-32961SD-330AC and AMC Manager provided by silex technology, Inc.silex technology SD-330AC · silex technology AMC Manager
- CVE-2026-32962SD-330AC and AMC Manager provided by silex technology, Inc.silex technology SD-330AC · silex technology AMC Manager
- CVE-2026-32963SD-330AC and AMC Manager provided by silex technology, Inc.silex technology SD-330AC · silex technology AMC Manager
- CVE-2026-32964SD-330AC and AMC Manager provided by silex technology, Inc.silex technology SD-330AC · silex technology AMC Manager
- CVE-2026-6600langflow-ai langflow Frontend React Component Rendering edit-message.tsx cross site scriptinglangflow-ai langflow
- CVE-2026-6599langflow-ai langflow Model Context Protocol Configuration API mcp_projects.py install_mcp_config injectionlangflow-ai langflow · langflow
- CVE-2026-6598langflow-ai langflow Project Creation Endpoint projects.py encrypt_auth_settings cleartext storage in filelangflow-ai langflow · langflow
- CVE-2026-6597langflow-ai langflow Flow Using API core.py has_api_terms credentials storagelangflow-ai langflow · langflow
- CVE-2026-6596langflow-ai langflow API Endpoint endpoints.py create_upload_file unrestricted uploadlangflow-ai langflow · langflow-base
- CVE-2026-6595ProjectsAndPrograms School Management System HTTP GET Parameter buslocation.php sql injectionProjectsAndPrograms School Management System
- CVE-2026-6594brikcss merge prototype pollutionbrikcss merge · @brikcss/merge
- CVE-2026-6593ComfyUI View Endpoint server.py cross site scriptingComfyUI
- CVE-2026-6592ComfyUI userdata Endpoint user_manager.py getuserdata cross site scriptingComfyUI
- CVE-2026-6591ComfyUI LoadImage Node folder_paths.py folder_paths.get_annotated_filepath path traversalComfyUI
- CVE-2026-6590ComfyUI Model Preview Endpoint model_manager.py get_model_preview path traversalComfyUI
- CVE-2026-6589ComfyUI server.py create_origin_only_middleware cross-site request forgeryComfyUI
- CVE-2026-6588serge-chat serge Model API Endpoint model.py delete_model missing authenticationserge-chat serge
- CVE-2026-6587vibrantlabsai RAGAS Collections util.py _try_process_url server-side request forgeryvibrantlabsai RAGAS · ragas
- CVE-2025-66954A vulnerability exists in the Buffalo Link Station version 1.85-0.01 that allows unauthenticated or guest-level users to enumerate valid use
- CVE-2026-26399A stack-use-after-return issue exists in the Arduino_Core_STM32 library prior to version 1.7.0.
- CVE-2026-29647In OpenXiangShan NEMU, insufficient Smstateen permission enforcement allows lower-privileged code to access IMSIC state via stopei/vstopei C
- CVE-2026-39112Cross Site Scripting vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the visname paramete
- CVE-2026-41285In OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a crafted ICMPv6 Neighbor Discovery (ND) option (OpenBSD