13183 matches found
CVE-2026-88002
creationtimestamp| type| source ---|---|--- 2026-09-10 00:35:06+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-jqhh-cjmq-vmv6 2026-09-10 02:31:55+00:00| seen| https://gist.github.com/alon710/401536538bb41a7576b21df62b940fb2...
CVE-2026-88001
creationtimestamp| type| source ---|---|--- 2026-09-10 00:35:04+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-5x7x-4c3c-qf5w 2026-09-10 01:32:33+00:00| seen| https://gist.github.com/alon710/855b51c2ea136c7c49beab7d27d1ef40...
PT-2026-89276
Name of the Vulnerable Software and Affected Versions Apache Artemis versions 2.50.0 through 2.56.0 Apache ActiveMQ Artemis versions 1.0.0 through 2.44.0 Description An unauthenticated remote attacker using the CORE protocol can discover cluster node details by sending a SUBSCRIBE TOPOLOGY reques...
VulnCheck KEV: CVE-2026-42018
JFrog Artifactory contains an improper authentication vulnerability that could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources...
Oracle Linux 8 : ELSA-2026-65832-0: / mrtg (ELSA-2026-658320)
The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-658320 advisory. 2.17.7-1.1 - Fix CVE-2026-72694: symlink-following chown in PID file handling Resolves: RHEL-236037 Tenable has extracted the preceding description block...
PT-2026-89370
Some Wi-Fi series camera products have insufficient permission validation on certain interfaces, allowing authenticated low-privileged users to obtain device Wi-Fi configuration information through these interfaces...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 26.04 LTS : ImageMagick vulnerabilities (USN-8739-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8739-1 advisory. It was discovered that ImageMagick incorrectly handled certain images. An attacker could...
PT-2026-89432
Unauthenticated Broken Access Control in BuddyForms = 2.9.0 versions...
PT-2026-89461
šØ CVE-2026-4130 There is a storage of sensitive information in cleartext vulnerability in NI SystemLink. This vulnerability may allow an attacker with local access to obtain sensitive information stored by the system in the clear. This vulnerability affects NI SystemLink and NI SystemLink Server...
PT-2026-89433
Unauthenticated Broken Access Control in Thank You Page Customizer for WooCommerce = 1.2.2 versions...
PT-2026-89425
Unauthenticated Content Injection in Simple Cloudflare Turnstile = 1.42.1 versions...
PT-2026-89441
Name of the Vulnerable Software and Affected Versions WP Travel versions prior to 12.0.4 Description An authentication bypass issue exists via an alternate path or channel, which allows for password recovery exploitation. Recommendations Update to version 12.0.4 or later...
PT-2026-89422
Name of the Vulnerable Software and Affected Versions ExifReader versions prior to 4.41.1 Description ExifReader is susceptible to a denial-of-service issue when parsing specially crafted HEIC or AVIF ISO-BMFF files. The problem occurs in the getItems function within...
Security Updates for Microsoft Outlook Products C2R (September 2026)
The Microsoft Outlook Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. CVE-2026-69629 - Use of uninitialized resource in Microsoft...
CVE-2026-88069
creationtimestamp| type| source ---|---|--- 2026-09-09 23:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv4ofosx6i2t 2026-09-10 01:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117244154620572346 2026-09-10 01:30:27+00:00| seen|...
CVE-2026-75712
creationtimestamp| type| source ---|---|--- 2026-09-09 23:17:49+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mv4obnjb372w...
CVE-2026-87930
creationtimestamp| type| source ---|---|--- 2026-09-09 23:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv4nbz4sft24 2026-09-17 22:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102612 2026-09-18 00:00:05+00:00| published-proof-of-concept|...
lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href
A flaw was found in lxml, a library for processing XML and HTML in Python. The lxml.html.defs.linkattrs were missing xlink:href, which could allow an attacker to bypass URL filtering mechanisms. This vulnerability enables URL bypass attacks in embedded content such as Scalable Vector Graphics SVG...
CVE-2026-87017 Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 until 0.11.1, the built-in knowledge search tool passed the caller's readable knowledge identifiers through a metadata filter, but the search methods in eleven shipped vector backends ignored that...