Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

54 matches found

RedhatCVE
RedhatCVE•added 2026/11/04 8:43 a.m.•5 views

CVE-2026-121388

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can trigger excessive memory allocation on the connecting client by specifying an arbitrarily large length in dynamic virtual channel messages. Because the application reserves memory before validating incoming message...

7.1CVSS5.9AI score0.0031EPSS
SaveExploits0References5
Kitploit
Kitploit•added 2026/10/30 8:13 p.m.•36 views

CVE-2026-70481

CVE-2026-70481 Open WebUI, affected 0.5.0 through 0.10.2, patched in 0.11.0. Moderate, CVSS 5.4, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L, CWE-284 and CWE-862. In backend/openwebui/routers/channels.py the message update and delete handlers branch on the channel type, and the two branches ask...

5.4CVSS6.3AI score0.00427EPSS
SaveExploits1References2
OPENSUSE Linux
OPENSUSE Linux•added 2026/09/21 12:00 a.m.•16 views

Security update for gh (important)

openSUSE Security Update: Security update for gh Announcement ID: openSUSE-SU-2026:0333-1 Rating: important References: 1278604 Cross-References: CVE-2026-56854 CVE-2026-56855 CVE-2026-78662 CVSS scores: CVE-2026-56854 SUSE: 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N...

8.7CVSS6.1AI score0.005EPSS
SaveExploits0References1
OPENSUSE Linux
OPENSUSE Linux•added 2026/09/17 12:00 a.m.•15 views

Security update for gh (important)

openSUSE security update: security update for gh ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21861-1 Rating: important References: bsc1278604 Cross-References: CVE-2026-56854 CVE-2026-56855 CVE-2026-78662 CVSS scores: CVE-2026-56854 SUSE : 8.1...

8.7CVSS6AI score0.005EPSS
SaveExploits0References1
osv_opensuse
osv_opensuse•added 2026/09/15 4:45 p.m.•17 views

OPENSUSE-SU-2026:21861-1 Security update for gh

This update for gh fixes the following issues: Changes in gh: Update to version 2.100.0, fixing two deadlock issues in the vendored golang.org/x/crypto/ssh library reachable via crafted SSH channel messages CVE-2026-56854, CVE-2026-56855, CVE-2026-78662, bsc1278604: Fix gh api telemetry disableme...

7.5CVSS6.1AI score0.005EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog•added 2026/09/10 3:10 p.m.•25 views

Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint

Summary Any member of a channel who can post to it could also replace the text of a message written by a different member. The channel branch of the chat completions endpoint checked that the caller may write to the channel, and that the targeted message belongs to that channel, but never checked...

4.3CVSS5.6AI score0.00372EPSS
SaveExploits1References6Affected Software1
osv_azl
osv_azl•added 2026/09/02 8:17 p.m.•23 views

AZL-99135 CVE-2026-56855 affecting package cri-o 1.30.1-1

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

7.5CVSS7.2AI score0.005EPSS
SaveExploits0References1
osv_azl
osv_azl•added 2026/09/02 8:17 p.m.•21 views

AZL-99222 CVE-2026-56855 affecting package gh for versions less than 2.101.0-1

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

7.5CVSS5.8AI score0.005EPSS
SaveExploits0References1
osv_azl
osv_azl•added 2026/09/02 8:17 p.m.•27 views

AZL-99309 CVE-2026-56855 affecting package nvidia-container-toolkit 1.17.8-4

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

7.5CVSS5.8AI score0.005EPSS
SaveExploits0References1
NVD
NVD•added 2026/09/02 8:17 p.m.•48 views

CVE-2026-56855

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

7.5CVSS0.005EPSS
SaveExploits0References4
osv_azl
osv_azl•added 2026/09/02 8:17 p.m.•27 views

AZL-99123 CVE-2026-56855 affecting package buildah 1.43.1-3

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

7.5CVSS7.2AI score0.005EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu•added 2026/09/02 8:17 p.m.•27 views

UBUNTU-CVE-2026-56855

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

7.5CVSS5.8AI score0.005EPSS
SaveExploits0References6
EUVD
EUVD•added 2026/09/02 7:37 p.m.•27 views

EUVD-2026-70267

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

5.8AI score0.005EPSS
SaveExploits0References4
osv_cve
osv_cve•added 2026/09/02 7:37 p.m.•23 views

CVE-2026-56855 Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

7.5CVSS5.8AI score
SaveExploits0References7
Positive Technologies
Positive Technologies•added 2026/09/02 12:00 a.m.•7 views

PT-2026-90736

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

7.5CVSS5.8AI score0.005EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies•added 2026/09/02 12:00 a.m.•7 views

PT-2026-90733

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

7.5CVSS5.8AI score0.005EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies•added 2026/09/02 12:00 a.m.•5 views

PT-2026-134957

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

7.5CVSS7.2AI score0.005EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies•added 2026/09/02 12:00 a.m.•6 views

PT-2026-90742

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

7.5CVSS5.8AI score0.005EPSS
SaveExploits0References2
attackerkb
attackerkb•added 2026/08/04 7:45 p.m.•29 views

CVE-2026-70481

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.0, the standard channel message update and delete handlers accepted any caller holding write access on the channel without checking that the caller wrote the message. Because write access i...

5.4CVSS6AI score0.00427EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD•added 2026/08/04 7:45 p.m.•34 views

EUVD-2026-52882

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.0, the standard channel message update and delete handlers accepted any caller holding write access on the channel without checking that the caller wrote the message. Because write access i...

5.4CVSS6AI score0.00427EPSS
SaveExploits1References4
Rows per page
Query Builder