Lucene search
K

18 matches found

ATTACKERKB
ATTACKERKB
added 2026/02/11 4:30 a.m.2 views

CVE-2026-26041

Not used...

5.4AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/11 12:0 a.m.3 views

PT-2026-7979

CVE-2026-26041 - Apache HTTP Server XML Entity Injection CVE ID : CVE-2026-26041 Published : Feb. 11, 2026, 5:16 a.m. | 2 hours, 4 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

5.5AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:43 a.m.5 views

CVE-2022-26041

Directory traversal vulnerability in RCCMD 4.26 and earlier allows a remote authenticated attacker with an administrative privilege to read or alter an arbitrary file on the server via unspecified vectors...

6.5CVSS6.8AI score0.00342EPSS
Exploits0References1
Circl
Circl
added 2024/03/18 7:27 p.m.0 views

CVE-2024-26041

creationtimestamp| type| source ---|---|--- 2024-03-18 19:27:22+00:00| seen| https://t.me/ctinow/210879...

5.4CVSS4.8AI score0.01156EPSS
Exploits0References1
CVE
CVE
added 2024/03/18 5:54 p.m.69 views

CVE-2024-26041

CVE-2024-26041 concerns Adobe Experience Manager (AEM) before version 6.5.20, reporting a stored XSS vulnerability in vulnerable form fields. The underlying issue is stored cross-site scripting that allows injected JavaScript to run when users visit pages containing the affected fields. Public so...

5.4CVSS5.3AI score0.01156EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/03/18 5:54 p.m.15 views

CVE-2024-26041 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

5.4CVSS5.2AI score0.01156EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/04/01 2:6 a.m.2 views

SUSE CVE-2023-26041

Nextcloud Talk is a fully on-premises audio/video and chat communication service. When cron jobs were misconfigured and therefore messages are not expired, the API would still return them while they were then hidden by the frontend code. It is recommended that the Nextcloud Talk is upgraded to...

4.3CVSS7AI score0.0019EPSS
Exploits1References3
Circl
Circl
added 2023/02/28 12:28 a.m.1 views

CVE-2023-26041

creationtimestamp| type| source ---|---|--- 2023-02-28 00:28:04+00:00| seen| https://t.me/cibsecurity/59073 2025-03-10 19:38:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7045...

4.3CVSS4.6AI score0.0019EPSS
Exploits1References2
CVE
CVE
added 2023/02/27 8:16 p.m.65 views

CVE-2023-26041

The CVE-2023-26041 issue affects Nextcloud Talk: when cron jobs are misconfigured, expired messages are not actually expired and the API still returns them, with frontend hiding not applied. This results in conversations showing messages that should have expired. Affected product: Nextcloud Talk ...

4.3CVSS4.3AI score0.0019EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/27 8:16 p.m.5 views

CVE-2023-26041 Nextcloud Talk messages can still be seen on conversation after expiring when cron is misconfigured

Nextcloud Talk is a fully on-premises audio/video and chat communication service. When cron jobs were misconfigured and therefore messages are not expired, the API would still return them while they were then hidden by the frontend code. It is recommended that the Nextcloud Talk is upgraded to...

2.6CVSS4.7AI score0.0019EPSS
Exploits1References3
Circl
Circl
added 2022/06/13 12:17 p.m.0 views

CVE-2022-26041

creationtimestamp| type| source ---|---|--- 2022-06-13 12:17:39+00:00| seen| https://t.me/cibsecurity/44247...

6.5CVSS6.6AI score0.00342EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/06/13 4:50 a.m.13 views

CVE-2022-26041

Directory traversal vulnerability in RCCMD 4.26 and earlier allows a remote authenticated attacker with an administrative privilege to read or alter an arbitrary file on the server via unspecified vectors...

6.4AI score0.00342EPSS
Exploits0References2
CVE
CVE
added 2022/06/13 4:50 a.m.55 views

CVE-2022-26041

CVE-2022-26041 affects RCCMD 4.26 and earlier. A directory traversal vulnerability allows a remote authenticated attacker with administrative privileges to read or alter arbitrary files on the server via unspecified vectors. Red Hat and JVN entries corroborate the affected version range and confi...

6.5CVSS6.1AI score0.00342EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/01/19 3:26 a.m.7 views

CVE-2021-26041

...

Exploits0
CVE
CVE
added 2022/01/19 3:26 a.m.28 views

CVE-2021-26041

CVE-2021-26041 is rejected/not used; it does not represent an active vulnerability entry.

7.3AI score
Exploits0
CVE
CVE
added 2020/09/29 1:40 p.m.40 views

CVE-2020-26041

CVE-2020-26041 concerns Hoosk CMS v1.8.0, with a reported remote code execution in install/index.php. Public sources in the connected documents describe the vulnerability as an RCE in the installer, enabling execution of arbitrary code on affected systems. The CVSS metrics shown (CVSSv3.1 base sc...

9.8CVSS9.7AI score0.02647EPSS
Exploits1References1Affected Software1
CVE
CVE
added 1976/01/01 12:0 a.m.4 views

CVE-2026-26041

CVE-2026-26041 is rejected/not used and does not represent an active vulnerability entry.

5.4AI score
Exploits0
Cvelist
Cvelist
added 1976/01/01 12:0 a.m.26 views

CVE-2026-26041

...

Exploits0
Rows per page
Query Builder