CVE-2026-45822 vulnerabilities

Vulnerabilities for packages: vitess...

CVE-2026-67312 vulnerabilities

Vulnerabilities for packages: nextcloud-server, azurite, langfuse, semaphore, wazuh-dashboard-fips, awx, opensearch-dashboards, lerna, prism, jitsucom-jitsu, opensearch-dashboards-fips, kubeflow-centraldashboard, langfuse-fips, librechat, kibana, redisinsight, wazuh-dashboard...

CVE-2026-67316 vulnerabilities

Vulnerabilities for packages: nextcloud-server, azurite, langfuse, semaphore, wazuh-dashboard-fips, awx, opensearch-dashboards, lerna, prism, jitsucom-jitsu, opensearch-dashboards-fips, kubeflow-centraldashboard, langfuse-fips, librechat, kibana, redisinsight, wazuh-dashboard...

CVE-2026-45822 vulnerabilities

Vulnerabilities for packages: vitess...

CVE-2026-67312 vulnerabilities

Vulnerabilities for packages: nextcloud-server, langfuse, prism, lerna, jitsucom-jitsu, kubeflow-centraldashboard, opensearch-dashboards...

CVE-2026-67316 vulnerabilities

Vulnerabilities for packages: nextcloud-server, langfuse, prism, lerna, jitsucom-jitsu, kubeflow-centraldashboard, opensearch-dashboards...

CVE-2026-27878 vulnerabilities

Vulnerabilities for packages: grafana...

CVE-2026-84309

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes pypdf/generic/datastructures.py TreeObject.insertchild to follow /Next links indefinitely when a writing code path inserts a child, producing an infinite loop...

CVE-2026-78608

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Privilege Abuse CAPEC-122. An authorization control was not applied to an internal Kibana APM integration function, allowing any authenticated Kibana user to read APM server credentials that should be restricted to use...

CVE-2026-78607

Missing Authorization CWE-862 in the Elasticsearch custom inference service can lead to information disclosure via Privilege Abuse CAPEC-122. A user holding only inference execution privileges could cause outbound inference traffic to be directed to a destination of their choosing and could cause...

CVE-2026-84308

phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add and subtract. During the Montgomery ladder in...

CVE-2026-84307

Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.12.5 and 5.7.5, packages/panels/src/Auth/Pages/Login.php presents the multi-factor authentication challenge before evaluating canAccessPanel. For an account that canAccessPanel denies,...

CVE-2026-77223

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-76658

A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrative access to vulnerable AFC hosts. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on...

CVE-2026-78597

Missing Authorization CWE-862 in the Kibana Entity Store feature can lead to unauthorized credential creation via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user holding only low-privilege Security feature access could invoke an administrative operation tha...

CVE-2026-77221

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-77222

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-78592

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 in Kibana can lead to the unauthorized deletion of privileged resources via Path Traversal CAPEC-126. A low-privileged user holding tag creation privileges could cause a subsequent administrative action in the tag...

CVE-2026-78603

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding minimal Elasticsearch privileges could bypass Kibana feature authorization and space access controls, resulting ...

CVE-2026-78606

Incorrect Authorization CWE-863 in Kibana can lead to unauthorized disclosure, modification, and deletion of data via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Where two authenticated principals originating from different authentication realms share the same username value...