Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

1166470 matches found

NVD
NVD•added 2026/09/22 5:17 p.m.•17 views

CVE-2026-85725

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, verifypassword in lightrag/api/passwords.py compares plaintext AUTHACCOUNTS password values with Python's == operator. The comparison can return after the first mismatching byte, creating response-time differences...

5.9CVSS0.00359EPSS
SaveExploits0References4
osv_debian
osv_debian•added 2026/09/22 5:17 p.m.•23 views

DEBIAN-CVE-2026-83602

Netdata is an open source observability tool. From 2.0.0 until 2.11.0, Netdata registers /api/v3/settings in src/web/api/v3/webapiv3.c with HTTPACLNOCHECK and HTTPACCESSANONYMOUSDATA, causing unauthenticated PUT requests handled by src/web/api/v3/apiv3settings.c to bypass operator-configured allo...

6.5CVSS5.8AI score0.00357EPSS
SaveExploits0References1
NVD
NVD•added 2026/09/22 5:17 p.m.•21 views

CVE-2026-83602

Netdata is an open source observability tool. From 2.0.0 until 2.11.0, Netdata registers /api/v3/settings in src/web/api/v3/webapiv3.c with HTTPACLNOCHECK and HTTPACCESSANONYMOUSDATA, causing unauthenticated PUT requests handled by src/web/api/v3/apiv3settings.c to bypass operator-configured allo...

6.5CVSS0.00357EPSS
SaveExploits0References4
NVD
NVD•added 2026/09/22 5:17 p.m.•20 views

CVE-2026-76802

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST template loading branch does not apply the unsigned code-template signature check before accepting a template that contains both a fuzzing: block and an unsigned code: block. When an operator...

4.7CVSS0.00181EPSS
SaveExploits0References4
NVD
NVD•added 2026/09/22 5:17 p.m.•14 views

CVE-2026-76804

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the workflow template loading path does not enforce the -file capability gate when resolving file: protocol templates referenced by a workflow. An untrusted unsigned workflow can therefore load a...

5.5CVSS0.00166EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve•added 2026/09/22 5:17 p.m.•26 views

CVE-2026-83602

Netdata is an open source observability tool. From 2.0.0 until 2.11.0, Netdata registers /api/v3/settings in src/web/api/v3/webapiv3.c with HTTPACLNOCHECK and HTTPACCESSANONYMOUSDATA, causing unauthenticated PUT requests handled by src/web/api/v3/apiv3settings.c to bypass operator-configured allo...

6.5CVSS5.8AI score0.00357EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu•added 2026/09/22 5:17 p.m.•17 views

UBUNTU-CVE-2026-83602

Netdata is an open source observability tool. From 2.0.0 until 2.11.0, Netdata registers /api/v3/settings in src/web/api/v3/webapiv3.c with HTTPACLNOCHECK and HTTPACCESSANONYMOUSDATA, causing unauthenticated PUT requests handled by src/web/api/v3/apiv3settings.c to bypass operator-configured allo...

6.5CVSS5.8AI score0.00357EPSS
SaveExploits0References6
Debian CVE
Debian CVE•added 2026/09/22 4:56 p.m.•22 views

CVE-2026-83602

Netdata is an open source observability tool. From 2.0.0 until 2.11.0, Netdata registers /api/v3/settings in src/web/api/v3/webapiv3.c with HTTPACLNOCHECK and HTTPACCESSANONYMOUSDATA, causing unauthenticated PUT requests handled by src/web/api/v3/apiv3settings.c to bypass operator-configured allo...

6.5CVSS5.8AI score0.00357EPSS
SaveExploits0
Mend
Mend•added 2026/09/22 4:56 p.m.•8 views

CVE-2026-83602

Netdata is an open source observability tool. From 2.0.0 until 2.11.0, Netdata registers /api/v3/settings in src/web/api/v3/webapiv3.c with HTTPACLNOCHECK and HTTPACCESSANONYMOUSDATA, causing unauthenticated PUT requests handled by src/web/api/v3/apiv3settings.c to bypass operator-configured allo...

6.9CVSS5.8AI score0.00357EPSS
SaveExploits0References6
EUVD
EUVD•added 2026/09/22 4:56 p.m.•19 views

EUVD-2026-84562

Netdata is an open source observability tool. From 2.0.0 until 2.11.0, Netdata registers /api/v3/settings in src/web/api/v3/webapiv3.c with HTTPACLNOCHECK and HTTPACCESSANONYMOUSDATA, causing unauthenticated PUT requests handled by src/web/api/v3/apiv3settings.c to bypass operator-configured allo...

6.5CVSS5.9AI score0.00357EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment•added 2026/09/22 4:56 p.m.•13 views

CVE-2026-83602 Netdata: Unauthenticated remote PUT to /api/v3/settings bypasses IP allowlist controls via HTTP_ACL_NOCHECK

Netdata is an open source observability tool. From 2.0.0 until 2.11.0, Netdata registers /api/v3/settings in src/web/api/v3/webapiv3.c with HTTPACLNOCHECK and HTTPACCESSANONYMOUSDATA, causing unauthenticated PUT requests handled by src/web/api/v3/apiv3settings.c to bypass operator-configured allo...

6.5CVSS5.8AI score0.00357EPSS
SaveExploits0References4
CVE
CVE•added 2026/09/22 4:56 p.m.•27 views

CVE-2026-83602

The open-source observability tool Netdata (versions 2.0.0 through 2.11.0 ) is vulnerable to an unauthenticated remote bypass of IP restrictions. The root cause is the registration of the /api/v3/settings endpoint in src/web/api/v3/web_api_v3.c with HTTP_ACL_NOCHECK and HTTP_ACCESS_ANONYMOUS_DATA...

6.5CVSS5.8AI score0.00357EPSS
SaveExploits0References4
Cvelist
Cvelist•added 2026/09/22 4:56 p.m.•46 views

CVE-2026-83602 Netdata: Unauthenticated remote PUT to /api/v3/settings bypasses IP allowlist controls via HTTP_ACL_NOCHECK

Netdata is an open source observability tool. From 2.0.0 until 2.11.0, Netdata registers /api/v3/settings in src/web/api/v3/webapiv3.c with HTTPACLNOCHECK and HTTPACCESSANONYMOUSDATA, causing unauthenticated PUT requests handled by src/web/api/v3/apiv3settings.c to bypass operator-configured allo...

6.5CVSS0.00357EPSS
SaveExploits0References4
osv_cve
osv_cve•added 2026/09/22 4:56 p.m.•22 views

CVE-2026-83602 Netdata: Unauthenticated remote PUT to /api/v3/settings bypasses IP allowlist controls via HTTP_ACL_NOCHECK

Netdata is an open source observability tool. From 2.0.0 until 2.11.0, Netdata registers /api/v3/settings in src/web/api/v3/webapiv3.c with HTTPACLNOCHECK and HTTPACCESSANONYMOUSDATA, causing unauthenticated PUT requests handled by src/web/api/v3/apiv3settings.c to bypass operator-configured allo...

6.5CVSS5.9AI score
SaveExploits0References6
EUVD
EUVD•added 2026/09/22 4:47 p.m.•19 views

EUVD-2026-84556

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST template loading branch does not apply the unsigned code-template signature check before accepting a template that contains both a fuzzing: block and an unsigned code: block. When an operator...

4.7CVSS6.1AI score0.00181EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment•added 2026/09/22 4:47 p.m.•16 views

CVE-2026-76802 Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST template loading branch does not apply the unsigned code-template signature check before accepting a template that contains both a fuzzing: block and an unsigned code: block. When an operator...

4.7CVSS6.1AI score0.00181EPSS
SaveExploits0References4
CVE
CVE•added 2026/09/22 4:47 p.m.•23 views

CVE-2026-76802

The Nuclei vulnerability scanner (versions 3.0.0 through 3.10.0 ) contains a flaw in its DAST template loading branch. When the -dast flag is enabled, the loader fails to enforce cryptographic signature checks on templates containing both a fuzzing: block and an unsigned code: block. This allows ...

4.7CVSS6.1AI score0.00181EPSS
SaveExploits0References4
Cvelist
Cvelist•added 2026/09/22 4:47 p.m.•47 views

CVE-2026-76802 Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST template loading branch does not apply the unsigned code-template signature check before accepting a template that contains both a fuzzing: block and an unsigned code: block. When an operator...

4.7CVSS0.00181EPSS
SaveExploits0References4
Mend
Mend•added 2026/09/22 4:47 p.m.•9 views

CVE-2026-76802

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST template loading branch does not apply the unsigned code-template signature check before accepting a template that contains both a fuzzing: block and an unsigned code: block. When an operator...

5.7CVSS6.1AI score0.00181EPSS
SaveExploits0References7
osv_cve
osv_cve•added 2026/09/22 4:47 p.m.•26 views

CVE-2026-76802 Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST template loading branch does not apply the unsigned code-template signature check before accepting a template that contains both a fuzzing: block and an unsigned code: block. When an operator...

4.7CVSS6AI score
SaveExploits0References6
Rows per page
Query Builder