high8.3
Your agent Now with CVE context
Find published vulnerabilities, affected versions, and available fixes.
Bring the source evidence into your coding agent to investigate what affects your project.
Sponsored by MoxsoBuild security habits with adaptive training and phishing simulations.Opens in a new tabORIGINAL EVIDENCE. READY FOR YOUR WORKFLOW.CVE / OSV / CISA KEV
Find vulnerabilities that affect you.
Explore advisories by severity, ecosystem, and known exploitation. Take the evidence into your next agent session.
Severity
194 matching advisories · 30 shown
Follow substantive record changes →SEVERITYVULNERABILITY / AFFECTED PACKAGESPUBLISHED
medium5.3
CVE-2026-63115
ActivityPub Undo handler can unfollow or remove reposts on behalf of other accounts
TryGhost · ActivityPub
high8.2
CVE-2026-58412
Filecoin Pin: Fork bypass in the privileged GitHub Actions workflow
filecoin-project · filecoin-pin
medium6.5
critical9.2
CVE-2026-116238
pgAdmin 4: The failed login limit can be bypassed, and Flask-Security's own views skip pgAdmin's login and password checks
pgadmin.org · pgAdmin 4
high8.7
medium6.5
unknown
CVE-2026-73322
Apache Pinot: Incorrect authorization in the single-stage query engine allows reading unauthorized dimension tables via lookup()
Apache Software Foundation · Apache Pinot
medium4.4
CVE-2026-69446
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft · Microsoft Edge (Chromium-based)
medium5.0
CVE-2026-50000
SecureDrop: API session token reuse against the Journalist Interface web UI
freedomofpress · securedrop
high8.3
CVE-2026-115642
In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in possession of an access-restricted…
OpenStack · keystonemiddleware
medium6.1
CVE-2026-61789
DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation
bytebase · dbhub
medium4.3
CVE-2026-46499
Collabora Online: Read-only session authorization bypass permits live document edits
CollaboraOnline · online
high7.1
CVE-2026-119649
Orchard CMS 1.10.3 through 1.11 Improper Authorization via Media Library Folder Permission Check
OrchardCMS · Orchard
medium4.4
CVE-2026-119573
Traefik 3.7.11 before 3.7.15 Cross-Namespace Authorization Bypass via auth-tls-secret
traefik · traefik
medium5.1
medium5.3
CVE-2026-119414
Bitwarden Server before 2026.10.1 Authorization Bypass via POST /api/ciphers/create
bitwarden · server
low2.5
medium5.3
CVE-2026-119147
ProFTPD before 1.3.9e and 1.3.10rc5 mod_sftp Copy-File Authorization Bypass
ProFTPD Project · ProFTPD
medium6.5
CVE-2026-118952
Kroxylicious-authorizer-acl: kroxylicious: acl prefix matching can bypass authorization rules
Red Hat · streams for Apache Kafka 2 / Red Hat · streams for Apache Kafka 3
medium6.5
medium4.3
CVE-2026-102260
Nomad vulnerable to cross-namespace information disclosure in multiple endpoints
HashiCorp · Nomad / HashiCorp · Nomad Enterprise
high7.6
high8.5
CVE-2026-119115
Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes
AWS · aws-privateca-issuer / AWS · aws-privateca-issuer
medium5.4
CVE-2025-13050
Broken Function Level Authorization — `postcommand.php` allows execution of poller post-restart commands by non-admin users
Centreon · Centreon
medium4.3
CVE-2026-85330
Microsoft Edge for Android Security Feature Bypass Vulnerability
Microsoft · Microsoft Edge (Chromium-based)
medium4.3
CVE-2026-115712
Incorrect Authorization in Elastic Cloud Enterprise (ECE) Leading to Unauthorized Modification of Platform Settings
Elastic · Elastic Cloud Enterprise
high7.5
high8.4
high8.6
GHSA-4hm6-w6qq-w73vFix available