high7.4
Your agent Now with CVE context
Find published vulnerabilities, affected versions, and available fixes.
Bring the source evidence into your coding agent to investigate what affects your project.
Sponsored by MoxsoBuild security habits with adaptive training and phishing simulations.Opens in a new tabORIGINAL EVIDENCE. READY FOR YOUR WORKFLOW.CVE / OSV / CISA KEV
Find vulnerabilities that affect you.
Explore advisories by severity, ecosystem, and known exploitation. Take the evidence into your next agent session.
Severity
100 matching advisories · 30 shown
Follow substantive record changes →SEVERITYVULNERABILITY / AFFECTED PACKAGESPUBLISHED
high8.9
CVE-2026-116239
pgAdmin 4: An LDAP or Kerberos login is logged in to another account with the same username
pgadmin.org · pgAdmin 4
high7.5
CVE-2026-61739
SOCFortress CoPilot: Authentication Bypass and Missing Authorization on Velociraptor Sigma Exclusion Rules (Detection Suppression)
socfortress · CoPilot
critical9.8
CVE-2026-110799
Vvveb: Authentication Bypass via PHP Array Injection leading to full Account Takeover
givanz · Vvveb
high8.7
CVE-2026-119572
Traefik 3.7.0-ea.1 before 3.7.15 mTLS Bypass via Ingress NGINX Provider
traefik · traefik
high7.5
CVE-2026-114443
Security by CleanTalk < 2.191 - Unauthenticated Authentication Bypass via Authenticator App Code
Unknown · Security Plugin, Firewall & Malware Scanner with Auto Removal
medium6.5
CVE-2026-118194
Page and Post Restriction <= 1.6.1 - Unauthenticated Authentication Bypass via REST API Nonce Bypass via Cookie Re-Authentication
cyberlord92 · Page and Post Restriction
medium5.4
CVE-2026-118959
Keycloak-services: keycloak-services: required actions bypassed via kc_action parameter
Red Hat · Red Hat Build of Keycloak / Red Hat · Red Hat Build of Keycloak
high7.5
medium4.3
CVE-2026-90862
Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP Server
Progress Software · WS_FTP Server
medium6.8
CVE-2026-84296
SSH Multi-Factor Authentication Bypass in Progress WS_FTP Server
Progress Software · WS_FTP Server
critical10.0
critical9.8
high7.5
high7.5
CVE-2026-111739
Two Factor Authentication < 1.17.0 and All-In-One Security (AIOS) < 5.5.0 - Subscriber+ 2FA Bypass via 'creds_user_id' Parameter
Unknown · Two Factor Authentication / Unknown · All-In-One Security (AIOS)
medium6.5
CVE-2026-88928
PAYCOMET for WooCommerce 5.36 - 5.45 - Unauthenticated Stored Payment Token Overwrite via Signature Verification Bypass
Unknown · PAYCOMET for WooCommerce
high7.5
CVE-2026-93757
Wild Apricot Login <= 1.0.18 - Authentication Bypass via SSO Email-Collision Account Binding on Multisite
wild-apricot · Wild Apricot Login
high8.1
CVE-2026-96228
SSL Wireless SMS Notification <= 3.8.1 - Unauthenticated Authentication Bypass to Account Takeover
sslplugins · SSL Wireless SMS Notification
critical9.8
CVE-2026-109516
Bot for Telegram on WooCommerce <= 1.3.0 - Unauthenticated Authentication Bypass to Account Takeover via Fake Telegram Webhook + Brute-Forced Login Token
guruteam · Bot for Telegram on WooCommerce
critical9.8
medium6.5
CVE-2026-55369Fix available
Waline login accepts a non-string email as a match-all MongoDB query
high8.3
CVE-2026-103779
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…
Dell · PowerProtect Data Domain
critical9.8
CVE-2026-86400
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…
Dell · PowerProtect Data Domain
medium5.3
CVE-2026-103331
UniPAY Payment Gateway For WooCommerce <= 2.3 - Unauthenticated Order Payment Forgery via Empty IPN Secret
Unknown · UniPAY Payment Gateway For WooCommerce
medium4.8
CVE-2026-109236
Customer Email Verification for WooCommerce <= 2.8.2 - Unauthenticated Authentication Bypass via Predictable Email-Verification Token to 'cusomer_email_verify' Parameter
zorem · Customer Email Verification for WooCommerce
critical9.8
CVE-2026-106013
Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameter
artbees · Jupiter X Core
high7.5
CVE-2026-118129
jeremyckahn Chitchatter PostMessage Bootstrap.tsx isConfigMessageEvent improper authentication
jeremyckahn · Chitchatter
medium5.6
CVE-2026-82332
Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking
WatchGuard · Fireware OS
high7.8
CVE-2026-92376
Local Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management Monitoring for Windows
TeamViewer · Remote Management - Monitoring
critical9.8
CVE-2026-117532
REDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History Plugin
redaxo · core