171247 matches found
CVE-2026-108951
LavaLite CMS through 10.1.2 contains an authorization bypass vulnerability that allows authenticated low-privileged users to modify other users' accounts by abusing the AbstractRequest isWorkflow check. Attackers can send a PATCH request to the user update route with a target identifier to change...
itscape
ITScape — Linux KVM/arm64 guest-to-host escape tracking site Source for the ITScape patch-status tracker: a single-page site recording which distributions have shipped a fix for the KVM/arm64 guest-to-host escape in the Linux kernel. Where the facts live Everything about the bug — CVE IDs, affect...
pintheft
PinTheft — RDS zerocopy double-free LPE tracking site Source for the PinTheft patch-status tracker: a single-page site recording which distributions have shipped a fix for the RDS zerocopy double-free privilege escalation in the Linux kernel. Where the facts live Everything about the bug — CVE ID...
ROOT-APP-MAVEN-AIKIDO-2026-11158 AIKIDO-2026-11158 in org.springframework:spring-core - Patched by Root
Root has patched AIKIDO-2026-11158 in the org.springframework:spring-core package for Root:Maven. Multiple fixed versions available...
cifswitch
CIFSwitch — CIFS cifs.spnego key-origin LPE tracking site Source for the CIFSwitch patch-status tracker: a single-page site recording which distributions have shipped a fix for the CIFS cifs.spnego key-origin privilege escalation in the Linux kernel. Where the facts live Everything about the bug ...
ROOT-APP-NUGET-CVE-2025-26646 CVE-2025-26646 in Microsoft.Build.Tasks.Core - Patched by Root
Root has patched CVE-2025-26646 in the Microsoft.Build.Tasks.Core package for Root:NuGet. Multiple fixed versions available...
ROOT-APP-NUGET-CVE-2025-55247 CVE-2025-55247 in Microsoft.Build.Utilities.Core - Patched by Root
Root has patched CVE-2025-55247 in the Microsoft.Build.Utilities.Core package for Root:NuGet. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-39244 CVE-2026-39244 in adm-zip - Patched by Root
Root has patched CVE-2026-39244 in the adm-zip package for Root:npm. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2022-42004 CVE-2022-42004 in com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2022-42004 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...
CVE-2026-108951 LavaLite CMS through 10.1.2 Authorization Bypass via User Update API
LavaLite CMS through 10.1.2 contains an authorization bypass vulnerability that allows authenticated low-privileged users to modify other users' accounts by abusing the AbstractRequest isWorkflow check. Attackers can send a PATCH request to the user update route with a target identifier to change...
CVE-2026-108951 LavaLite CMS through 10.1.2 Authorization Bypass via User Update API
LavaLite CMS through 10.1.2 contains an authorization bypass vulnerability that allows authenticated low-privileged users to modify other users' accounts by abusing the AbstractRequest isWorkflow check. Attackers can send a PATCH request to the user update route with a target identifier to change...
CVE-2026-108951
LavaLite CMS versions through 10.1.2 are vulnerable to an authorization bypass in the user update API. The flaw stems from an improper check within the AbstractRequest isWorkflow() function. This allows authenticated low-privileged users to send a PATCH request to the user update route, using a t...
ROOT-APP-NPM-CVE-2026-64647 CVE-2026-64647 in next - Patched by Root
Root has patched CVE-2026-64647 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2025-49128 CVE-2025-49128 in com.fasterxml.jackson.core:jackson-core - Patched by Root
Root has patched CVE-2025-49128 in the com.fasterxml.jackson.core:jackson-core package for Root:Maven. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-WXGW-QJ99-44C2 GHSA-wxgw-qj99-44c2 in node-forge - Patched by Root
Root has patched GHSA-wxgw-qj99-44c2 in the node-forge package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2022-0122 CVE-2022-0122 in node-forge - Patched by Root
Root has patched CVE-2022-0122 in the node-forge package for Root:npm. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-48379 CVE-2025-48379 in pillow - Patched by Root
Root has patched CVE-2025-48379 in the pillow package for Root:PyPI. Multiple fixed versions available...
patch-CVE-2026-04321
Patch: CVE-2026-04321 Vulnerability Details CVE : CVE-2026-04321 Product : Zyxel firewall Description : OS command injection Severity : Critical Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-01-28 Status| deployed Deployed To| Production Validated By| SecOps Team References NVD CIS...