CVE Vulnerability Database
Search and browse 381,206 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-48499 | CRITICAL | 9.3 | — | Jul 30, 2026 | Activepieces is an open source AI workflow automation platform. Prior to 0.84.0, an unsanitized path segment in the Code... |
| CVE-2026-18245 | HIGH | 8.8 | 0.5% | Jul 30, 2026 | Improper control of code generation in Amazon @aws-amplify/codegen-ui-react before 2.20.6 might allow a remote authentic... |
| CVE-2026-18140 | HIGH | 8.7 | 0.4% | Jul 30, 2026 | Uncontrolled recursion in the unknown-key skip path of the aws-smithy-json runtime crate before 0.62.7, which the smithy... |
| CVE-2026-15978 | HIGH | 7.5 | 0.3% | Jul 30, 2026 | SGLang contains a model weight exfiltration vulnerability when no API keys are configured, as SGLang will expose two end... |
| CVE-2026-15977 | HIGH | 7.5 | 0.2% | Jul 30, 2026 | SGLang contains a credential leakage vulnerability in the /server_info endpoint, which will return API keys and SSL keyf... |
| CVE-2026-15976 | CRITICAL | 9.8 | 0.3% | Jul 30, 2026 | SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically wi... |
| CVE-2026-15974 | MEDIUM | 6.5 | 0.2% | Jul 30, 2026 | SGLang contains an SSRF and local file read in the multimodal generation endpoint /v1/chat/completions due to unsanitize... |
| CVE-2026-15971 | CRITICAL | 9.8 | 0.4% | Jul 30, 2026 | SGLang contains an RCE vulnerability when the optional dumper subsystem is enabled, allowing for a sandbox escape when D... |
| CVE-2026-15969 | CRITICAL | 9.8 | 1.0% | Jul 30, 2026 | SGLang contains an unauthenticated RCE in /load_lora_adapter_from_tensors via bypass of SafeUnpickler’s incomplete denyl... |
| CVE-2026-14227 | MEDIUM | 6.9 | — | Jul 30, 2026 | An API session‑management flaw in products with the MikroTik RouterOS API enabled are vulnerable to a Insufficient Sessi... |
| CVE-2026-13444 | HIGH | 8.1 | 0.2% | Jul 30, 2026 | IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to access another user's private vector documents by creatin... |
| CVE-2026-13435 | CRITICAL | 9.9 | 0.3% | Jul 30, 2026 | IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the PythonREPL sandbox impl... |
| CVE-2026-12943 | CRITICAL | 9.8 | 0.9% | Jul 30, 2026 | IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power en... |
| CVE-2026-12942 | HIGH | 7.5 | 0.4% | Jul 30, 2026 | IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system. An attacker c... |
| CVE-2026-12733 | HIGH | 7.5 | 0.3% | Jul 30, 2026 | IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations. |
| CVE-2026-12118 | CRITICAL | 9.8 | 0.5% | Jul 30, 2026 | IBM webMethods Integration (on prem) 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary co... |
| CVE-2026-11904 | MEDIUM | 5.3 | 0.3% | Jul 30, 2026 | IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Ident... |
| CVE-2026-10700 | MEDIUM | 6.5 | 0.4% | Jul 30, 2026 | IBM Langflow OSS 1.0.0 through 1.8.4 contains multiple broken access control vulnerabilities in its file handling API th... |
| CVE-2026-10695 | MEDIUM | 5.5 | 0.1% | Jul 30, 2026 | IBM Db2 12.1.0 through 12.1.4 federated server is vulnerable to a denial of service when running non fenced federated qu... |
| CVE-2026-10545 | HIGH | 7.5 | 0.2% | Jul 30, 2026 | IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect ... |
| CVE-2026-10535 | HIGH | 7.8 | 0.1% | Jul 30, 2026 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc. |
| CVE-2025-36374 | MEDIUM | 5.5 | — | Jul 30, 2026 | IBM DataPower Gateway is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A privile... |
| CVE-2025-0152 | MEDIUM | 6.1 | 0.2% | Jul 30, 2026 | IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.1... |
| CVE-2024-40683 | MEDIUM | 6.3 | 0.2% | Jul 30, 2026 | IBM Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3.7.0, 1.3.7.1, 1.3.7.2,... |
| CVE-2024-25039 | HIGH | 7.5 | 0.3% | Jul 30, 2026 | IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.1... |