CVE Vulnerability Database
Search and browse 386,279 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-44191 | HIGH | 7.8 | — | Jul 22, 2026 | A flaw was found in the Visual Studio Code Ansible Lightspeed extension. This command injection vulnerability (CWE-78) a... |
| CVE-2026-16270 | MEDIUM | 6.9 | — | Jul 22, 2026 | Open Mercato does not validate regex rules. An attacker with privileges to create the regex rule can add an unsafe regex... |
| CVE-2026-65603 | HIGH | 8.8 | — | Jul 22, 2026 | The Grav Login plugin (grav-plugin-login) versions <= 3.8.11 contain a privilege escalation flaw in the authenticated pr... |
| CVE-2026-65602 | HIGH | 8.8 | 0.2% | Jul 22, 2026 | Traefik 3.6.0 through 3.6.22 and 3.7.0 through 3.7.6 fail to enforce the crossProviderNamespaces allowlist for IngressRo... |
| CVE-2026-65601 | MEDIUM | 5.3 | 0.4% | Jul 22, 2026 | Traefik versions 3.7.0 through 3.7.6 contain a namespace confusion vulnerability in the Kubernetes Gateway API provider.... |
| CVE-2026-65600 | MEDIUM | 5.3 | 0.7% | Jul 22, 2026 | Traefik versions <= v2.11.51, >= v3.6.0 <= v3.6.22, and >= v3.7.0 <= v3.7.6 contain an authentication bypass via path tr... |
| CVE-2026-65599 | MEDIUM | 6.5 | 0.2% | Jul 22, 2026 | n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a credential exposure vulnerability: when configured with a Goo... |
| CVE-2026-65598 | HIGH | 7.5 | 0.2% | Jul 22, 2026 | n8n before 1.123.64, 2.29.8, and 2.30.1 contains a TOCTOU race condition in the Git node's clone operation that allows a... |
| CVE-2026-65597 | MEDIUM | 5.4 | 0.4% | Jul 22, 2026 | n8n before 1.123.64, 2.x before 2.29.8, and before 2.30.1 contains a DOM-based cross-site scripting vulnerability in the... |
| CVE-2026-65596 | HIGH | 8.1 | 0.2% | Jul 22, 2026 | n8n before 1.123.64, 2.29.8, and 2.30.1 fails to enforce the "Allowed HTTP Request Domains" restriction on HTTP-based cr... |
| CVE-2026-65595 | HIGH | 8.8 | 0.4% | Jul 22, 2026 | n8n before 2.30.1 and 2.29.8 assigns all Public API key scopes to JWTs issued through the Token Exchange module regardle... |
| CVE-2026-65594 | MEDIUM | 6.5 | 0.3% | Jul 22, 2026 | n8n before 2.29.8 and 2.30.x before 2.30.1 (affected from 2.27.0, when the OAuth 2.1 consent and token-issuance flow was... |
| CVE-2026-65593 | MEDIUM | 5.4 | 0.2% | Jul 22, 2026 | n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a server-side request forgery vulnerability in the dynamic-node... |
| CVE-2026-65592 | MEDIUM | 5.4 | 0.3% | Jul 22, 2026 | n8n before 1.123.64, 2.29.8, and 2.30.1 contains a stored DOM cross-site scripting vulnerability in the Resource Locator... |
| CVE-2026-65591 | HIGH | 8.8 | 0.4% | Jul 22, 2026 | n8n contains a sanitizer bypass vulnerability in the legacy expression evaluator's computed-member handler. An authentic... |
| CVE-2026-65590 | CRITICAL | 9.8 | 0.3% | Jul 22, 2026 | n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/... |
| CVE-2026-65589 | MEDIUM | 6.5 | 0.4% | Jul 22, 2026 | n8n versions before 1.123.64 fail to properly mask custom HTTP header credentials in LLM sub-node execution data, writin... |
| CVE-2026-65016 | HIGH | 8.8 | 0.3% | Jul 22, 2026 | n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a privilege escalation vulnerability in Enterprise SSO instance... |
| CVE-2026-65015 | HIGH | 8.8 | 0.3% | Jul 22, 2026 | n8n versions before 2.30.1 contain a privilege escalation vulnerability in the AI Agents feature where the node-executio... |
| CVE-2026-65014 | MEDIUM | 5.3 | 0.3% | Jul 22, 2026 | n8n before 2.28.0 (and before 2.27.4 on the 2.27.x branch) registers the DELETE /${restEndpoint}/test-webhook/:id endpoi... |
| CVE-2026-61392 | MEDIUM | 5.3 | — | Jul 22, 2026 | There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain ... |
| CVE-2026-61391 | HIGH | 7.2 | — | Jul 22, 2026 | There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers ... |
| CVE-2026-61390 | HIGH | 7.7 | — | Jul 22, 2026 | There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to ca... |
| CVE-2026-57600 | HIGH | 7.5 | — | Jul 22, 2026 | Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers t... |
| CVE-2026-57599 | MEDIUM | 6.6 | — | Jul 22, 2026 | There is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect permission allocation in the d... |