Busca de CVEs
398.111 resultadosCVE-2026-65698MEDIUMVoid 1.3.4 Path Traversal via AI Agent File-Reading ToolsEPSS 0.5%CVE-2026-65697MEDIUMFathom Lite 1.3.1 Stored XSS via /collect EndpointEPSS 0.3%CVE-2026-44909HIGHProxygen lacked a generalized slow-consumer detection mechanism in its core HTTP session layer. A remote, unauthenticated attacker could expEPSS 0.6%CVE-2026-65696MEDIUMOverseerr 1.35.0 Authorization Bypass via pushSubscriptions APIEPSS 0.3%CVE-2026-65695HIGHOffice-Word-MCP-Server 1.1.11 Path Traversal via document toolsEPSS 0.5%CVE-2026-65917HIGHCyberPanel IncBackups IDOR via Sequential Backup IDEPSS 0.5%CVE-2026-65916HIGHCyberPanel Missing Authorization in cancelBackupCreation HandlerEPSS 0.5%CVE-2026-15611CRITICALUnverified email-based SSO account linkingEPSS 0.5%CVE-2026-15612CRITICALLOIDC nonce validation bypassEPSS 0.2%CVE-2026-15614HIGHIdP-initiated SAML sessions not reliably invalidated (replay)EPSS 0.3%CVE-2026-15615HIGHSAML <Conditions> element not validatedEPSS 0.2%CVE-2026-15616CRITICALLocal MFA not enforced during SSO sign-inEPSS 0.5%CVE-2026-15617CRITICALPrincipal/domain lookup without case normalizationEPSS 0.4%CVE-2026-16584HIGHAWS API MCP Server Security Policy Bypass via Startup FailureEPSS 0.2%CVE-2026-48539MEDIUMGFI Archiver < 15.13 Stored XSS via MailInsights.aspxEPSS 0.2%CVE-2026-48538MEDIUMGFI Archiver < 15.13 Stored XSS via ImportSettingsWizard.ashxEPSS 0.2%CVE-2026-48537MEDIUMGFI Archiver < 15.13 Stored XSS via FileArchiveAssistantWizard.aspxEPSS 0.2%CVE-2026-48536MEDIUMGFI Archiver < 15.13 Stored XSS via GeneralSettingsWizard.aspxEPSS 0.2%CVE-2026-48535MEDIUMGFI Archiver < 15.13 Stored XSS via CallHomeSettingsWizard.aspxEPSS 0.2%CVE-2026-48534MEDIUMGFI Archiver < 15.13 Stored XSS via ImapServerWizard.aspxEPSS 0.2%