CVE Vulnerability Database

Search and browse 420,595 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-114663HIGH8.4Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default arguments from imported modules, beca...
CVE-2026-114662HIGH8.1Obot before 0.26.0 contains an authentication bypass vulnerability in the CLI login flow that allows unauthenticated att...
CVE-2026-114661HIGH8.5OpenRemote 1.2.0 before 1.31.0 contains a missing authorization vulnerability in GatewayServiceResource that allows any ...
CVE-2026-114660MEDIUM6.3Grav from 2.0.0 before 2.2.5 contains an improper access control vulnerability in FlexDirectory::dynamicFlexField() that...
CVE-2026-114659MEDIUM6.5Grav Flex Objects plugin 1.4.0 before 1.4.17 contains an authorization bypass because its generic /api/v1/flex-objects/p...
CVE-2026-114658HIGH8.8Grav Login plugin from 3.6.0 before 3.9.13 contains a missing authorization vulnerability in the login.invite task that ...
CVE-2026-114657MEDIUM5.7Grav from 2.0.0 before 2.2.5 contains an information disclosure vulnerability that allows page authors to capture visito...
CVE-2026-114656CRITICAL9.3Traefik before 2.11.58 and 3.7.13 contains an authentication bypass vulnerability that allows unauthenticated clients to...
CVE-2026-114642HIGH8.7Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 stores its NTLM/Kerberos backend round tripper in a client-connect...
CVE-2026-114641LOW3.7Traefik 2.11.x before 2.11.58 and 3.x before 3.7.14 contains a race condition in NTLM and Kerberos (Negotiate) backend a...
CVE-2026-114640HIGH8.7Traefik from v3.7.0 before v3.7.14 contains an authentication bypass vulnerability in its Kubernetes Ingress-NGINX provi...
CVE-2026-114639HIGH8.7Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 contains an authentication bypass because a first request preauthe...
CVE-2026-114638HIGH8.7Traefik v3.7.0 before v3.7.14 contains an improper authentication vulnerability in the Kubernetes Ingress NGINX provider...
CVE-2026-114637HIGH8.7Traefik from v3.2.0 before v3.7.14 contains an authentication bypass vulnerability in the experimental FastProxy connect...
CVE-2026-114636HIGH8.7Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTT...
CVE-2026-114635HIGH8.7Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check, which is skipped w...
CVE-2026-114634MEDIUM4.3WWBN AVideo before 29.4.0 contains a blind server-side request forgery vulnerability in getHeaderContentTypeFromURL() be...
CVE-2026-114633MEDIUM6.5WWBN AVideo before 29.4.0 contains an incorrect authorization vulnerability that allows delegated Users Admin accounts t...
CVE-2026-114577HIGH7.3A vulnerability was found in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file adm...
CVE-2026-114576LOW3.7A vulnerability has been found in Linksys RE6250 1.0.04.001. This affects the function strcmp of the component Web Manag...
CVE-2026-16255HIGH7.1GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.3.6, 19.4 before 19.4.3, and 19.5...
CVE-2026-15723HIGH8.2GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before 19.4.3, and 1...
CVE-2026-14288LOW3.1GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5...
CVE-2026-13319MEDIUM6.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before 19.4.3, and ...
CVE-2026-12664MEDIUM6.8GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.3.6, 19.4 before 19.4.3, and 1...