CVEs.

Matching CVEs

1. 4.3Med

   CVE-2025-14103 ↗ (opens in a new tab)

   GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.7 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthorized user with Developer-role permissions to set pipeline variables for manually triggered jobs under certain conditions.

   GIGitLab· Feb 25, 2026

2. 6.8Med

   CVE-2026-2664 ↗ (opens in a new tab)

   An out of bounds read vulnerability in the grpcfuse kernel module present in the Linux VM in Docker Desktop for Windows, Linux and macOS up to version 4.61.0 could allow a local attacker to cause an unspecified impact by writing to /proc/docker entries. The issue has been fixed in Docker Desktop 4.62.0 .

   DODocker· Feb 24, 2026

3. 5.7Med

   CVE-2026-2698 ↗ (opens in a new tab)

   An improper access control vulnerability exists where an authenticated user could access areas outside of their authorized scope.

   TETenable· Feb 23, 2026

4. 6.5Med

   CVE-2026-27482 ↗ (opens in a new tab)

   Ray is an AI compute engine. In versions 2.53.0 and below, thedashboard HTTP server blocks browser-origin POST/PUT but does not cover DELETE, and key DELETE endpoints are unauthenticated by default. If the dashboard/agent is reachable (e.g., --dashboard-host=0.0.0.0), a web page via DNS rebinding or same-network access can issue DELETE requests that shut down Serve or delete jobs without user interaction. This is a drive-by availability impact. The fix for this vulnerability is to update to Ray 2.54.0 or higher.

   ANAnyscale· Feb 21, 2026

5. 6.5Med

   CVE-2026-27464 ↗ (opens in a new tab)

   Metabase is an open-source data analytics platform. In versions prior to 0.57.13 and versions 0.58.x through 0.58.6, authenticated users are able to retrieve sensitive information from a Metabase instance, including database access credentials. During testing, it was confirmed that a low-privileged user can extract sensitive information including database credentials, into the email body via template evaluation. This issue has been fixed in versions 0.57.13 and 0.58.7. To workaround this issue, users can disable notifications in their Metabase instance to disallow access to the vulnerable endp

   MCMetabase Cloud· Feb 21, 2026

6. 6.0Med

   CVE-2026-1355 ↗ (opens in a new tab)

   A Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to upload unauthorized content to another user’s repository migration export due to a missing authorization check in the repository migration upload endpoint. By supplying the migration identifier, an attacker could overwrite or replace a victim’s migration archive, potentially causing victims to download attacker-controlled repository data during migration restores or automated imports. An attacker would require authentication to the victim's GitHub Enterprise Server instance. This vulner

   GIGitHub· Feb 18, 2026

7. 6.5Med

   CVE-2026-1046 ↗ (opens in a new tab)

   Mattermost Desktop App versions <=6.0 6.2.0 5.2.13.0 fail to validate help links which allows a malicious Mattermost server to execute arbitrary executables on a user’s system via the user clicking on certain items in the Help menu Mattermost Advisory ID: MMSA-2026-00577

   MCMattermost Cloud· Feb 16, 2026

8. 4.3Med

   CVE-2025-14350 ↗ (opens in a new tab)

   Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 fail to properly validate team membership when processing channel mentions which allows authenticated users to determine the existence of teams and their URL names via posting channel shortlinks and observing the channel_mentions property in the API response. Mattermost Advisory ID: MMSA-2025-00563

   MCMattermost Cloud· Feb 16, 2026

9. 5.7Med

   CVE-2025-13821 ↗ (opens in a new tab)

   Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 fail to sanitize sensitive data in WebSocket messages which allows authenticated users to exfiltrate password hashes and MFA secrets via profile nickname updates or email verification events. Mattermost Advisory ID: MMSA-2025-00560

   MCMattermost Cloud· Feb 16, 2026

10. 4.3Med

    CVE-2026-0999 ↗ (opens in a new tab)

    Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 fail to properly validate login method restrictions which allows an authenticated user to bypass SSO-only login requirements via userID-based authentication. Mattermost Advisory ID: MMSA-2025-00548

    MCMattermost Cloud· Feb 16, 2026

11. 4.3Med

    CVE-2026-0998 ↗ (opens in a new tab)

    Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 and Mattermost Plugin Zoom versions <=1.11.0 fail to validate user identity and post ownership in the {{/api/v1/askPMI}} endpoint which allows unauthorized users to start Zoom meetings as any user and overwrite arbitrary posts via direct API calls with manipulated user IDs and post data.. Mattermost Advisory ID: MMSA-2025-00534

    MCMattermost Cloud· Feb 16, 2026

12. 4.3Med

    CVE-2026-0997 ↗ (opens in a new tab)

    Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 and Mattermost Plugin Zoom versions <=1.11.0 fail to validate the authenticated user when processing {{/plugins/zoom/api/v1/channel-preference}}, which allows any logged-in user to change Zoom meeting restrictions for arbitrary channels via crafted API requests.. Mattermost Advisory ID: MMSA-2025-00558

    MCMattermost Cloud· Feb 16, 2026

13. 5.4Med

    CVE-2026-2026 ↗ (opens in a new tab)

    A vulnerability has been identified where weak file permissions in the Nessus Agent directory on Windows hosts could allow unauthorized access, potentially permitting Denial of Service (DoS) attacks.

    TETenable· Feb 13, 2026

14. 4.3Med

    CVE-2026-22892 ↗ (opens in a new tab)

    Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 fail to validate user permissions when creating Jira issues from Mattermost posts, which allows an authenticated attacker with access to the Jira plugin to read post content and attachments from channels they do not have access to via the /create-issue API endpoint by providing the post ID of an inaccessible post.. Mattermost Advisory ID: MMSA-2025-00550

    MCMattermost Cloud· Feb 13, 2026

15. 6.2Med

    CVE-2026-1721 ↗ (opens in a new tab)

    Summary A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the AI Playground's OAuth callback handler. The `error_description` query parameter was directly interpolated into an HTML script tag without proper escaping, allowing attackers to execute arbitrary JavaScript in the context of the victim's session. Root cause The OAuth callback handler in `site/ai-playground/src/server.ts` directly interpolated the `authError` value, sourced from the `error_description` query parameter, into an inline `<script>` tag. Impact An attacker could craft a malicious link that, when clicke

    CLCloudflare· Feb 13, 2026

16. 5.3Med

    CVE-2026-21722 ↗ (opens in a new tab)

    Public dashboards with annotations enabled did not limit their annotation timerange to the locked timerange of the public dashboard. This means one could read the entire history of annotations visible on the specific dashboard, even those outside the locked timerange. This did not leak any annotations that would not otherwise be visible on the public dashboard.

    GCGrafana Cloud· Feb 12, 2026

17. 6.1Med

    CVE-2025-41117 ↗ (opens in a new tab)

    Stack traces in Grafana's Explore Traces view can be rendered as raw HTML, and thus inject malicious JavaScript in the browser. This would require malicious JavaScript to be entered into the stack trace field. Only datasources with the Jaeger HTTP API appear to be affected; Jaeger gRPC and Tempo do not appear affected whatsoever.

    GCGrafana Cloud· Feb 12, 2026

18. 4.1Med

    CVE-2026-26019 ↗ (opens in a new tab)

    LangChain is a framework for building LLM-powered applications. Prior to 1.1.14, the RecursiveUrlLoader class in @langchain/community is a web crawler that recursively follows links from a starting URL. Its preventOutside option (enabled by default) is intended to restrict crawling to the same site as the base URL. The implementation used String.startsWith() to compare URLs, which does not perform semantic URL validation. An attacker who controls content on a crawled page could include links to domains that share a string prefix with the target, causing the crawler to follow links to attacker-

    L/LangChain / LangSmith· Feb 11, 2026

19. 4.3Med

    CVE-2026-25999 ↗ (opens in a new tab)

    Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to 2.10.2, there is an improper access control vulnerability that allows unauthorized users to trigger a reset or deletion of metadata for any tenant. By sending a crafted request to the /resetMemoryCache endpoint, an attacker can clear cached configurations, environments, and cluster data. This vulnerability is fixed in 2.10.2.

    AIAiven· Feb 11, 2026

20. 6.6Med

    CVE-2026-0229 ↗ (opens in a new tab)

    A denial-of-service (DoS) vulnerability in the Advanced DNS Security (ADNS) feature of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to initiate system reboots using a maliciously crafted packet. Repeated attempts to initiate a reboot causes the firewall to enter maintenance mode. Cloud NGFW and Prisma Access® are not impacted by this vulnerability.

    PAPalo Alto Networks· Feb 11, 2026

21. 6.5Med

    CVE-2026-1387 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab EE affecting all versions from 15.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an authenticated user to cause Denial of Service by uploading a malicious file and repeatedly querying it through GraphQl.

    GIGitLab· Feb 11, 2026

22. 5.4Med

    CVE-2026-1282 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an authenticated user to inject malicious content into project labels titles.

    GIGitLab· Feb 11, 2026

23. 4.6Med

    CVE-2026-1094 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 18.8.4 that could have allowed an authenticated developer to hide specially crafted file changes from the WebUI.

    GIGitLab· Feb 11, 2026

24. 4.3Med

    CVE-2026-1080 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab EE affecting all versions from 16.7 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to access iteration data from private descendant groups by querying the iterations API endpoint.

    GIGitLab· Feb 11, 2026

25. 5.4Med

    CVE-2026-0595 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.9 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to add unauthorized email addresses to victim accounts through HTML injection in test case titles.

    GIGitLab· Feb 11, 2026

26. 5.3Med

    CVE-2025-14592 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to perform unauthorized operations by submitting GraphQL mutations through the GLQL API endpoint.

    GIGitLab· Feb 11, 2026

27. 5.4Med

    CVE-2025-14560 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to perform unauthorized actions on behalf of another user by injecting malicious content into vulnerability code flow.

    GIGitLab· Feb 11, 2026

28. 5.4Med

    CVE-2025-12575 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab EE affecting all versions from 18.0 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user with certain permissions to make unauthorized requests to internal network services through the GitLab server.

    GIGitLab· Feb 11, 2026

29. 4.3Med

    CVE-2025-12073 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions, could have allowed an authenticated user to perform server-side request forgery against internal services by bypassing protections in the Git repository import functionality.

    GIGitLab· Feb 11, 2026

30. 6.9Med

    CVE-2026-2303 ↗ (opens in a new tab)

    The mongo-go-driver repository contains CGo bindings for GSSAPI (Kerberos) authentication on Linux and macOS. The C wrapper implementation contains a heap out-of-bounds read vulnerability due to incorrect assumptions about string termination in the GSSAPI standard. Since GSSAPI buffers are not guaranteed to be null-terminated or have extra padding, this results in reading one byte past the allocated heap buffer.

    MAMongoDB Atlas· Feb 10, 2026

31. 6.9Med

    CVE-2026-2302 ↗ (opens in a new tab)

    Under specific conditions when processing a maliciously crafted value of type Hash r, Mongoid::Criteria.from_hash may allow for executing arbitrary Ruby code.

    MAMongoDB Atlas· Feb 10, 2026

32. 5.3Med

    CVE-2026-25609 ↗ (opens in a new tab)

    Incorrect validation of the profile command may result in the determination that a request altering the 'filter' is read-only.

    MAMongoDB Atlas· Feb 10, 2026

33. 5.4Med

    CVE-2026-21529 ↗ (opens in a new tab)

    Improper neutralization of input during web page generation ('cross-site scripting') in Azure HDInsights allows an authorized attacker to perform spoofing over a network.

    MAMicrosoft Azure· Feb 10, 2026

34. 6.5Med

    CVE-2026-21528 ↗ (opens in a new tab)

    Binding to an unrestricted ip address in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.

    MAMicrosoft Azure· Feb 10, 2026

35. 6.5Med

    CVE-2026-21527 ↗ (opens in a new tab)

    User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

    M3Microsoft 365· Feb 10, 2026

36. 6.5Med

    CVE-2026-21512 ↗ (opens in a new tab)

    Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized attacker to perform spoofing over a network.

    ADAzure DevOps· Feb 10, 2026

37. 5.5Med

    CVE-2026-21261 ↗ (opens in a new tab)

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

    M3Microsoft 365· Feb 10, 2026

38. 5.5Med

    CVE-2026-21258 ↗ (opens in a new tab)

    Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

    M3Microsoft 365· Feb 10, 2026

39. 5.8Med

    CVE-2026-25905 ↗ (opens in a new tab)

    The Python code being run by 'runPython' or 'runPythonAsync' is not isolated from the rest of the JS code, allowing any Python code to use the Pyodide APIs to modify the JS environment. This may result in an attacker hijacking the MCP server - for malicious purposes including MCP tool shadowing. Note - the "mcp-run-python" project is archived and unlikely to receive a fix.

    JFJFrog· Feb 9, 2026

40. 5.8Med

    CVE-2026-25904 ↗ (opens in a new tab)

    The Pydantic-AI MCP Run Python tool configures the Deno sandbox with an overly permissive configuration that allows the underlying Python code to access the localhost interface of the host to perform SSRF attacks. Note - the "mcp-run-python" project is archived and unlikely to receive a fix.

    JFJFrog· Feb 9, 2026

41. 5.4Med

    CVE-2025-13523 ↗ (opens in a new tab)

    Mattermost Confluence plugin version <1.7.0 fails to properly escape user-controlled display names in HTML template rendering which allows authenticated Confluence users with malicious display names to execute arbitrary JavaScript in victim browsers via sending a specially crafted OAuth2 connection link that, when visited, renders the attacker's display name without proper sanitization. Mattermost Advisory ID: MMSA-2025-00557

    MCMattermost Cloud· Feb 6, 2026

42. 6.7Med

    CVE-2025-14740 ↗ (opens in a new tab)

    Docker Desktop for Windows contains multiple incorrect permission assignment vulnerabilities in the installer's handling of the C:\ProgramData\DockerDesktop directory. The installer creates this directory without proper ownership verification, creating two exploitation scenarios: Scenario 1 (Persistent Attack): If a low-privileged attacker pre-creates C:\ProgramData\DockerDesktop before Docker Desktop installation, the attacker retains ownership of the directory even after the installer applies restrictive ACLs. At any time after installation completes, the attacker can modify the directory AC

    DODocker· Feb 4, 2026

43. 6.9Med

    CVE-2026-1664 ↗ (opens in a new tab)

    Summary An Insecure Direct Object Reference has been found to exist in `createHeaderBasedEmailResolver()` function within the Cloudflare Agents SDK. The issue occurs because the `Message-ID` and `References` headers are parsed to derive the target agentName and agentId without proper validation or origin checks, allowing an external attacker with control of these headers to route inbound mail to arbitrary Durable Object instances and namespaces . Root cause The `createHeaderBasedEmailResolver()` function lacks cryptographic verification or origin validation for the headers used in the routing

    CLCloudflare· Feb 3, 2026

44. 6.8Med

    CVE-2026-23571 ↗ (opens in a new tab)

    A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-RunPkgStatusRequest instruction. Improper input validation allows authenticated attackers with actioner privilege to run elevated arbitrary commands on connected hosts via malicious commands injected into the instruction’s input field. Users of 1E Client version 24.5 or higher are not affected.

    TETeamViewer· Jan 29, 2026

45. 6.5Med

    CVE-2026-23570 ↗ (opens in a new tab)

    A missing validation of a user-controlled value in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an adjacent network attacker to tamper with log timestamps via crafted UDP Sync command. This could result in forged or nonsensical datetime prefixes and compromising log integrity and forensic correlation.

    TETeamViewer· Jan 29, 2026

46. 6.5Med

    CVE-2026-23567 ↗ (opens in a new tab)

    An integer underflow in the UDP command handler of the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an adjacent network attacker to trigger a heap-based buffer overflow and cause a denial-of-service (service crash) via specially crafted UDP packets.

    TETeamViewer· Jan 29, 2026

47. 6.5Med

    CVE-2026-23566 ↗ (opens in a new tab)

    A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to inject, tamper with, or forge log entries in \Nomad Branch.log via crafted data sent to the UDP network handler. This can impact log integrity and nonrepudiation.

    TETeamViewer· Jan 29, 2026

48. 6.5Med

    CVE-2026-23565 ↗ (opens in a new tab)

    A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause the NomadBranch.exe process to terminate via crafted requests. This can result in a denial-of-service condition of the Content Distribution Service.

    TETeamViewer· Jan 29, 2026

49. 6.5Med

    CVE-2026-23564 ↗ (opens in a new tab)

    A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause normally encrypted UDP traffic to be sent in cleartext. This can result in disclosure of sensitive information.

    TETeamViewer· Jan 29, 2026

50. 5.5Med

    CVE-2025-33237 ↗ (opens in a new tab)

    NVIDIA HD Audio Driver for Windows contains a vulnerability where an attacker could exploit a NULL pointer dereference issue. A successful exploit of this vulnerability might lead to a denial of service.

    NVNVIDIA· Jan 28, 2026