CVE Vulnerability Database

Search and browse 425,060 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-105764HIGH7.7Immich is a high-performance self-hosted photo and video management solution. Prior to 3.2.4, an authenticated non-admin...
CVE-2026-105763CRITICAL9.6Twenty is an open-source CRM (customer relationship management) platform. From 1.20.10 until 2.7.0, the /metadata GraphQ...
CVE-2026-105762HIGH8.3Dify is an open-source LLM app development platform. Prior to 1.13.0, the /console/api/remote-files/upload endpoint in a...
CVE-2026-105471HIGH7.3A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87b...
CVE-2026-105761HIGH7.1Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/<app_id>/server en...
CVE-2026-105760MEDIUM5.3vLLM is an inference and serving engine for large language models. Prior to 0.30.0, a caller can use the request-level m...
CVE-2026-105759HIGH7.5vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the Rust frontend's track_http_metri...
CVE-2026-105758MEDIUM5.3vLLM is an inference and serving engine for large language models. From 0.24.0 until 0.30.0, the Qwen2VLVideoBackend and...
CVE-2026-105757MEDIUM6.5vLLM is an inference and serving engine for large language models. Prior to 0.30.0, structured-output request failures c...
CVE-2026-105756MEDIUM6.5vLLM is an inference and serving engine for large language models. Prior to 0.30.0, OpenAI-compatible request models acc...
CVE-2026-105755MEDIUM4.2vLLM is an inference and serving engine for large language models. Prior to 0.30.0, flash late-interaction scoring at th...
CVE-2026-105754MEDIUM6.5vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the /inference/v1/generate endpoint ...
CVE-2026-105753MEDIUM6.5vLLM is an inference and serving engine for large language models. Prior to 0.28.0, the default mirrored multimodal LRU ...
CVE-2026-105752LOW3.1vLLM is an inference and serving engine for large language models. Prior to 0.30.0, Harmony tool continuations submitted...
CVE-2026-105470HIGH7.3A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9...
CVE-2026-105469HIGH7.3A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9...
CVE-2026-104852HIGH8.2GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 12.0.1, the GraphQL Tool...
CVE-2026-93321MEDIUM6.9A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds ...
CVE-2026-93315MEDIUM5.8When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause clea...
CVE-2026-91107CRITICAL9.3openSIS Classic 9.3 allows an authenticated user with the built-in teacher role can select an arbitrary staff record thr...
CVE-2026-21589HIGH7.5This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft...
CVE-2026-105751HIGH7.5Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos...
CVE-2026-105750HIGH7.5Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos...
CVE-2026-105749MEDIUM6.5Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos...
CVE-2026-105748MEDIUM4.3Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos...