All CVEs — page 538 of 631

The complete archive, 25 per page, newest first. 15775 records. Search instead.

• HIGH 7.4CVE-2026-77523public exploit available2026-09-21

  The flaw allows an authenticated user to read or overwrite another user's model parameters in MaxKB AI assistant, potentially altering default settings. This matters because it can lead to unauthorized changes affecting workflows.

• MEDIUM 4.3CVE-2026-77522public exploit available2026-09-21

  The flaw allows a low-privileged user to read cloud metadata or internal HTTP services by importing documents through MaxKB's document import feature due to insecure requests.get calls with verify=False. This matters because it can lead to unauthorized data exposure.

• CRITICAL 10CVE-2026-77521public exploit available2026-09-21

  The flaw allows untrusted chat or content to execute arbitrary shell commands, posing a significant risk to system security.

• MEDIUM 5.4CVE-2026-77520public exploit available2026-09-21

  An attacker can obtain another user's application_id by exploiting a vulnerability in MaxKB’s homepage application question-ranking endpoint, allowing them to access sensitive data and potentially execute unauthorized actions.

• MEDIUM 5.4CVE-2026-77519public exploit available2026-09-21

  The flaw allows an attacker to exploit a previously valid, non-permanent application key that remains active after expiration to access and manipulate MCP endpoint functionalities.

• MEDIUM 5CVE-2026-77518public exploit available2026-09-21

  An authorization bypass flaw allows a normal user to retrieve hidden tools by knowing another user's active MCP tool_id. This can expose sensitive configuration data.

• MEDIUM 5.4CVE-2026-77517public exploit available2026-09-21

  The flaw allows a workspace user to read or modify content in another user's knowledge base by exploiting improperly authorized document and paragraph routes. This matters because it breaches data isolation and confidentiality.

• MEDIUM 5.4CVE-2026-77516public exploit available2026-09-21

  Users with a low role can still execute tools they are denied access to by binding identifiers through various paths, leading to potential credential exposure.

• HIGH 7.5CVE-2026-73553public exploit available2026-09-21

  This flaw in Envoy allows unauthenticated clients to bypass path-based authorization by manipulating URL parameters, potentially gaining unauthorized access to protected routes.

• MEDIUM 5.3CVE-2026-73551public exploit available2026-09-21

  The flaw allows path confusion by not properly normalizing URL segments with semicolons, potentially bypassing security policies.

• MEDIUM 5.3CVE-2026-73511public exploit available2026-09-21

  This flaw allows a remote client to bypass security measures by manipulating path parameters in Envoy, potentially accessing unprotected resources. It matters because it can lead to unauthorized access to sensitive data.

• CRITICAL 9.8CVE-2026-67827public exploit available2026-09-21

  The flaw allows remote attackers to execute arbitrary shell commands via the setServerConfig API endpoint, leading to Remote Code Execution (RCE). This is critical because it can be exploited without authentication, providing full control over the system.

• UNSCOREDCVE-2026-61647public exploit available2026-09-21
• MEDIUM 4.3CVE-2026-59816public exploit available2026-09-21

  The flaw allows an authenticated user to exploit URL-encoded slashes and parent-directory segments in job IDs to access internal transcription-backend endpoints, potentially exposing sensitive data.

• MEDIUM 5.3CVE-2026-58272public exploit available2026-09-21

  The flaw in Sync-in Server allows unauthenticated attackers to measure response times and enumerate valid usernames or email addresses, enabling credential-stuffing attacks.

• MEDIUM 6.5CVE-2026-58270public exploit available2026-09-21

  The flaw allows a catastrophic-backtracking regular expression pattern to block the server, rendering it unresponsive. This matters because an attacker can exploit this to deny service to all users.

• MEDIUM 6.5CVE-2026-55179public exploit available2026-09-21

  The flaw allows authenticated users to read other users' notes if they obtain or guess another user's item ID, due to lack of proper validation.

• HIGH 7.7CVE-2026-55105public exploit available2026-09-21

  The flaw allows execution of malicious scripts in Joplin notes, posing a risk to user data integrity and confidentiality.

• HIGH 7CVE-2026-49453public exploit available2026-09-21

  Joplin allows attackers to write files outside the intended directory due to unvalidated resource metadata, posing a risk of data leakage or corruption.

• HIGH 7.1CVE-2026-49450public exploit available2026-09-21

  The flaw allows an attacker to replace update metadata and installers, leading to potential code execution with user privileges.

• LOW 2.5CVE-2026-49449public exploit available2026-09-21

  The flaw allows unfiltered URLs in notes to disclose NTLMv2 credentials via KaTeX's trust option, enabling attackers to exploit this through SMB authentication.

• UNSCOREDCVE-2026-46649public exploit available2026-09-21
• LOW 3.7CVE-2026-85219public exploit available2026-09-21

  The flaw allows an unauthenticated attacker to cause memory exhaustion in Redis, leading to a denial-of-service condition.

• HIGH 7.8CVE-2026-814692026-09-21

  The flaw in Dell Inventory Collector Client versions prior to 15.0.0 allows a low-privileged attacker with local access to execute arbitrary code and gain elevated privileges due to an unquoted search path vulnerability.

• MEDIUM 6.1CVE-2026-79320public exploit available2026-09-21