All CVEs — page 50 of 242

The complete archive, 25 per page, newest first. 6034 records. Search instead.

• MEDIUM 5.9CVE-2026-100689public exploit available2026-09-26
• MEDIUM 6.5CVE-2026-100688public exploit available2026-09-26
• MEDIUM 5.5CVE-2026-100687public exploit available2026-09-26
• HIGH 8.1CVE-2026-100686public exploit available2026-09-26
• HIGH 7.7CVE-2026-100685public exploit available2026-09-26
• HIGH 8.1CVE-2026-100684public exploit available2026-09-26
• HIGH 8CVE-2026-100683public exploit available2026-09-26
• HIGH 8.8CVE-2026-100682public exploit available2026-09-26

  This vulnerability allows attackers with BUILDER role to write arbitrary files as root via a malicious ZIP archive, enabling remote code execution.

• MEDIUM 5.4CVE-2026-100681public exploit available2026-09-26
• HIGH 8.1CVE-2026-100680public exploit available2026-09-26
• HIGH 8.8CVE-2026-100679public exploit available2026-09-26

  stoatchat before 0.15.5 allows attackers to bypass multi-factor authentication (MFA) by using their own valid MFA ticket with another user's session token, enabling unauthorized access to sensitive operations.

• MEDIUM 6.5CVE-2026-100678public exploit available2026-09-26
• MEDIUM 5.3CVE-2026-100677public exploit available2026-09-26
• HIGH 8.2CVE-2026-100676public exploit available2026-09-26
• MEDIUM 6.5CVE-2026-100675public exploit available2026-09-26
• MEDIUM 4.3CVE-2026-100674public exploit available2026-09-26
• HIGH 8.2CVE-2026-100673public exploit available2026-09-26
• HIGH 7.5CVE-2026-100672public exploit available2026-09-26
• HIGH 8CVE-2026-100671public exploit available2026-09-26
• HIGH 8.8CVE-2026-100670public exploit available2026-09-26

  This vulnerability allows an authenticated backend operator to escalate their privileges to full super-admin by manipulating the access map, leading to control over critical system components.

• HIGH 7.5CVE-2026-100669public exploit available2026-09-26
• MEDIUM 6.5CVE-2026-100668public exploit available2026-09-26
• MEDIUM 5.3CVE-2026-100667public exploit available2026-09-26
• HIGH 7.3CVE-2026-100666public exploit available2026-09-26
• HIGH 7.5CVE-2026-100665public exploit available2026-09-26