All CVEs — page 133 of 242

The complete archive, 25 per page, newest first. 6034 records. Search instead.

• CRITICAL 9.1CVE-2026-819952026-09-22

  The flaw is an Improper Input Validation vulnerability in Adobe Experience Manager Forms JEE that allows high-privileged attackers to execute arbitrary code. This matters because it can lead to full system compromise without user interaction.

• HIGH 7.8CVE-2026-799062026-09-22
• HIGH 7.5CVE-2026-775582026-09-22
• HIGH 7.5CVE-2026-775562026-09-22
• HIGH 7.5CVE-2026-775552026-09-22
• HIGH 7.5CVE-2026-775442026-09-22
• MEDIUM 6.5CVE-2026-77399public exploit available2026-09-22
• MEDIUM 5.4CVE-2026-77272public exploit available2026-09-22
• MEDIUM 6.5CVE-2026-77269public exploit available2026-09-22
• MEDIUM 5.5CVE-2026-77268public exploit available2026-09-22
• MEDIUM 6.5CVE-2026-77266public exploit available2026-09-22
• HIGH 8.6CVE-2026-77262public exploit available2026-09-22

  This flaw allows an attacker to upload arbitrary files outside the workspace by manipulating the file_path parameter in confluence_upload_attachment, potentially leading to unauthorized access to server-readable files.

• HIGH 7.7CVE-2026-77259public exploit available2026-09-22
• UNSCOREDCVE-2026-77257public exploit available2026-09-22
• MEDIUM 6.5CVE-2026-77256public exploit available2026-09-22
• HIGH 8.6CVE-2026-77255public exploit available2026-09-22

  This flaw allows an attacker to read arbitrary local files and attach them to a Jira issue by exploiting the MCP Atlassian server prior to version 0.22.0, leading to potential data exfiltration.

• CRITICAL 9.1CVE-2026-77254public exploit available2026-09-22

  The flaw allows network callers to perform operations with the operator account's permissions via the HTTP MCP endpoint without proper authentication, posing a critical risk.

• HIGH 7.1CVE-2026-77253public exploit available2026-09-22
• MEDIUM 5.3CVE-2026-77249public exploit available2026-09-22
• HIGH 8.6CVE-2026-77248public exploit available2026-09-22

  The flaw allows unauthenticated network callers to read files accessible to the MCP process and upload them to Jira or Confluence, posing a significant security risk.

• MEDIUM 6.5CVE-2026-77247public exploit available2026-09-22
• HIGH 7.4CVE-2026-77246public exploit available2026-09-22
• MEDIUM 4.3CVE-2026-761942026-09-22
• MEDIUM 5.5CVE-2026-761922026-09-22
• CRITICAL 10CVE-2026-757452026-09-22

  This vulnerability allows an attacker to execute arbitrary code in the context of the current user, leading to potential full system compromise.