CVE-2026-60713

...

CVE-2026-60711

...

CVE-2026-60709

...

CVE-2026-60710

...

CVE-2026-60708

...

CVE-2026-60704

...

CVE-2026-60706

...

CVE-2026-60705

...

CVE-2026-60703

...

CVE-2026-60701

...

CVE-2026-60697

...

CVE-2026-60700

...

CVE-2026-60694

...

CVE-2026-60695

...

CVE-2026-60692

...

CVE-2026-60691

...

CVE-2026-60690

...

CVE-2026-60689

...

CVE-2026-60686

...

CVE-2026-60687

...

CVE-2026-60688

...

CVE-2026-60683

...

CVE-2026-60685

...

CVE-2026-60684

...

CVE-2026-60681

...

CVE-2026-60678

...

CVE-2026-60677

...

CVE-2026-60676

...

CVE-2026-60675

...

CVE-2026-60673

...

CVE-2026-60674

...

CVE-2026-60671

...

CVE-2026-60670

...

CVE-2026-60669

...

CVE-2026-60668

...

CVE-2026-60666

...

CVE-2026-60667

...

CVE-2026-60665

...

CVE-2026-60663

...

CVE-2026-60664

...

CVE-2026-60658

...

CVE-2026-60659

...

CVE-2026-60661

...

CVE-2026-60656

...

CVE-2026-60655

...

CVE-2026-60657

...

CVE-2026-60654

...

CVE-2026-60653

...

CVE-2026-65318 Verba (goldenverba) Unauthenticated Server-Side Request Forgery via WebSocket Import Endpoint HTMLReader

Verba RAG application version 2.1.3 contains an unauthenticated server-side request forgery vulnerability that allows unauthenticated attackers to cause the backend to issue arbitrary HTTP GET requests by supplying attacker-controlled URLs through the WebSocket import endpoint. Attackers can...

CVE-2026-60652

...