Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-75171

Remote Privilege Escalation via Session Cookie Manipulation in HubCore v.14.1.1

An issue in HubCore v.14.1.1 allows a remote attacker to escalate privileges via the HUBCOREID session cookie handling component.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Hubcore
Products
Hubcore
CVE-2026-75170

Remote XSS via Unchecked language Parameter in HubCore 14.1.1 Login Endpoint

Cross-site scripting (XSS) vulnerability in the /loginController/doLogin endpoint of the HubCore platform (version 14.1.1) allows a remote unauthenticated attacker to inject arbitrary JavaScript into the application's response via the language POST parameter.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Hubcore
Products
Hubcore