CVE Vulnerability Database
Search and browse 390,004 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-59154 | MEDIUM | 4.3 | — | Jul 10, 2026 | Wekan is open source kanban built with Meteor. Prior to 9.64, Wekan has a cross-board authorization bypass in the direct... |
| CVE-2026-58493 | MEDIUM | 5.1 | 0.3% | Jul 10, 2026 | grav-plugin-database is the database plugin for Grav CMS. Prior to 1.2.0, Database::__call builds PDO DSN strings by dir... |
| CVE-2026-58492 | CRITICAL | 9.2 | — | Jul 10, 2026 | grav-plugin-database is the database plugin for Grav CMS. Prior to 1.2.0, the PDO::tableExists method interpolates its t... |
| CVE-2026-57167 | MEDIUM | 5.1 | — | Jul 10, 2026 | PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.2.2, server-side-rendered video watch pages em... |
| CVE-2026-56675 | HIGH | 8.3 | — | Jul 10, 2026 | 9Router is an AI router & token saver. Prior to 0.5.2, 9router treats loopback requests as trusted and allows /v1/* acce... |
| CVE-2026-55890 | MEDIUM | 4.8 | — | Jul 10, 2026 | Grav is a file-based Web platform. Prior to 2.0.0-rc.9, Grav's incomplete fix for stored XSS through the Markdown media ... |
| CVE-2026-55885 | MEDIUM | 6.8 | 0.2% | Jul 10, 2026 | Grav is a file-based Web platform. Prior to 1.7.53, an authenticated administrator with backup permissions can download ... |
| CVE-2026-55783 | LOW | 2.4 | — | Jul 10, 2026 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's seven in-hous... |
| CVE-2026-55782 | LOW | 2.4 | 0.1% | Jul 10, 2026 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's WebAssembly a... |
| CVE-2026-55781 | LOW | 2.4 | — | Jul 10, 2026 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's UFS and FFS i... |
| CVE-2026-55780 | LOW | 2.4 | 0.1% | Jul 10, 2026 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's .NET single-f... |
| CVE-2026-55687 | HIGH | 7.5 | — | Jul 10, 2026 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. Versions 6.0.1, 5.5.4, 5.4.4, 5.3.5, and possib... |
| CVE-2026-55669 | MEDIUM | 4.2 | — | Jul 10, 2026 | ZITADEL is an open source identity management platform. Prior to 3.4.12 and 4.15.2, ZITADEL's external JWT Identity Prov... |
| CVE-2026-55641 | HIGH | 8.2 | — | Jul 10, 2026 | 9Router is an AI router & token saver. Prior to 0.5.2, 9router determines whether a /v1 LLM proxy request is local by re... |
| CVE-2026-55638 | HIGH | 8.6 | — | Jul 10, 2026 | 9Router is an AI router & token saver. Prior to 0.5.2, 9router protects /v1, /v1beta, /api/v1, and /api/v1beta in src/da... |
| CVE-2026-54919 | HIGH | 7.4 | 0.3% | Jul 10, 2026 | cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In affected Mbed TLS backend versions ... |
| CVE-2026-54063 | HIGH | 7.5 | 0.6% | Jul 10, 2026 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.11.0, the checkSheet(... |
| CVE-2026-53657 | HIGH | 8.2 | 0.2% | Jul 10, 2026 | Lima launches Linux virtual machines, typically on macOS, for running containerd. Prior to 2.1.3, on an instance of Lima... |
| CVE-2026-53653 | HIGH | 8.7 | — | Jul 10, 2026 | Grav is a file-based Web platform. Prior to 1.7.53 and 2.0.0-rc.8, Grav allows an unauthenticated visitor to exhaust ser... |
| CVE-2026-51119 | CRITICAL | 9.1 | — | Jul 10, 2026 | An issue in Invixium IXM WEB v.2.3.85.25 allows an attacker to escalate privileges via the /SystemUsers/CreateAppUser co... |
| CVE-2026-3251 | MEDIUM | 6.4 | — | Jul 10, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Webremium Istanbul... |
| CVE-2026-39903 | HIGH | 7.1 | 0.3% | Jul 10, 2026 | Simple Machines Forum 2.1 prior to commit 7d048f8 and 3.0 prior to commit a7875e8 contains an authorization bypass vulne... |
| CVE-2026-39244 | HIGH | 7.5 | — | Jul 10, 2026 | adm-zip before 0.5.18 is vulnerable to denial of service via a crafted ZIP file with a manipulated uncompressed size hea... |
| CVE-2026-2398 | HIGH | 8.8 | — | Jul 10, 2026 | Authorization bypass through User-Controlled key vulnerability in Adam Retail Automation Ltd. MobilMen 20T allows Privil... |
| CVE-2026-1667 | HIGH | 7.2 | — | Jul 10, 2026 | The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Arbitrary Post Creation and Stored Cross-Site Scrip... |