Export limit exceeded: 425829 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,829

Export CSV
CVE-2026-62102

WordPress Gato GraphQL plugin <= 19.2.3 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in Gato GraphQL <= 19.2.3 versions.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Gato Graphql
Products
Gato Graphql
CVE-2026-62113

WordPress Slim SEO plugin <= 4.10.0 - Insecure Direct Object References (IDOR) vulnerability

Contributor Insecure Direct Object References (IDOR) in Slim SEO <= 4.10.0 versions.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Anh Tran Wordpress
Products
Slim Seo Wordpress
CVE-2026-78547

Out-of-Bounds Write

Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.11 Current Release (CR), before 2507.1 LTSR CU3, and before LTSR 2607.

CVSS 4.0 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Citrix
Products
Citrix Workspace App For Windows
CVE-2026-78546

Out-of-Bounds Read

Out-of-bounds read vulnerability in Citirx Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.11 Current Release (CR), before 2507.1 LTSR CU3, and before LTSR 2607.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Citirx
Products
Workspace App For Windows
CVE-2026-49463

NL Portal: Missing per-user authorization on document and decision GraphQL queries in nl-portal-backend-libraries

NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations. The `nl.nl-portal:documenten-api` package through version 3.0.0 and the `nl.nl-portal:besluiten` package from version 1.5.0 through 3.0.0 lack per-user authorization in GraphQL resolvers, allowing an authenticated user to access other users’ document contents, decisions, audit trails, and decision attachments. Version 3.0.1 contains a patch. As a workaround, block the affected document-content and decision-related GraphQL operations at the API gateway or block their GraphQL types entirely.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Nl-portal
Products
Nl.nl-portal:besluiten Nl.nl-portal:documenten-api
CVE-2026-79636

Improper TLS Certificate Validation with Host Mismatch in Dell Secure Connect Gateway

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Validation of Certificate with Host Mismatch vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Secure Connect Gateway Secure Connect Gateway Appliance Secure Connect Gateway Application
CVE-2026-79967

Improper Certificate Validation in Dell Secure Connect Gateway 5.0 Allows Remote Protection Bypass

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass.

CVSS 3.1 · 5.6 Medium EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Secure Connect Gateway Secure Connect Gateway Appliance Secure Connect Gateway Application
CVE-2026-19733

SSRF in Yordam Informatics's Library Automation System

Server-Side request forgery (SSRF) vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Server Side Request Forgery. This issue affects Library Information and Document Automation Program: before v22.2.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Yordam Information Technology Consulting, Training And Electronic Systems Industry And Trade Inc.
Products
Library Information And Document Automation Program
CVE-2026-78377

Open Redirect in Yordam Informatics's Library Automation System

URL redirection to untrusted site ('open redirect') vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Phishing. This issue affects Library Information and Document Automation Program: from v22.1 before v22.2.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Yordam Information Technology Consulting, Training And Electronic Systems Industry And Trade Inc.
Products
Library Information And Document Automation Program
CVE-2026-86547

mrubyc through 4.0.0 NULL Pointer Dereference via OP_ENTER

mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the op_enter() handler in src/vm.c when processing untrusted bytecode. Attackers can craft malicious .mrb bytecode files with OP_ENTER instructions at the top level to crash the embedding application and cause denial of service.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Mruby
Products
Mruby
CVE-2026-85978

Unauthenticated Remote Code Execution in Akana API Platform

An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the authentication filter and the servlet dispatcher allows a crafted request to bypass authentication and reach an endpoint that evaluates attacker-supplied script code without sandboxing, resulting in arbitrary code execution. Exploitation requires no authentication or user interaction.

CVSS 4.0 · 10 Critical EPSS 1.4% KEV · Not listed
Vendors
Perforce
Products
Akana Api
CVE-2026-79963

Remote Code Execution via Unverified Download in Dell Secure Connect Gateway 5.0

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command execution.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Secure Connect Gateway Secure Connect Gateway Appliance Secure Connect Gateway Application
CVE-2026-78492

Improper Certificate Validation Enabling Unauthenticated Remote Access in Dell Secure Connect Gateway 5.0

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Secure Connect Gateway Secure Connect Gateway Appliance Secure Connect Gateway Application
CVE-2026-87811

SiYuan before v3.8.2 Stored XSS via notebook template paths

SiYuan before v3.8.2 inserts persisted notebook template paths into HTML input value attributes without proper attribute encoding. Attackers can craft malicious template paths that break out of the attribute context and execute JavaScript when a victim opens notebook configuration, enabling same-origin API requests and application state manipulation.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
B3log Siyuan
Products
Siyuan Siyuan
CVE-2026-79972

SQL Injection in Dell Secure Connect Gateway 5.0 Allowing Unauthorized Access

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Secure Connect Gateway Secure Connect Gateway Appliance Secure Connect Gateway Application
CVE-2026-78481

Use of Hard‑coded Cryptographic Key Allows Protection Bypass in Dell Secure Connect Gateway

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Secure Connect Gateway Secure Connect Gateway Appliance Secure Connect Gateway Application
CVE-2026-79732

Improper Certificate Validation in Dell Secure Connect Gateway 5.0 Leads to Protection Bypass

Dell Secure Connect Gateway (SCG) 5.0 Appliance, versions prior to 5.36.00.xx, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass.

CVSS 3.1 · 3.7 Low EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Secure Connect Gateway Secure Connect Gateway Appliance Secure Connect Gateway Application