by Kastro CVE-2026-72898 · Metabase Metabase
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,893 matching vulnerabilities · Page 104 of 778
Metabase
Dokploy
CVE-2026-72867 · Dokploy dokploy
Dokploy: Incomplete fix of CVE-2026-45628: Command Injection via Unvalidated Branch Fields in Compose Deployment Pipeline (server-side regex missing in compose.ts)
CVE-2026-72735 · Dokploy dokploy
Dokploy: Command injection in writeTraefikConfigRemote via shell interpolation of unescaped YAML in SSH remote execution
CVE-2026-72901 · Dokploy dokploy
Dokploy: Remote Code Execution via volume-backup
CVE-2026-72733 · Dokploy dokploy
Dokploy: OS Command Injection via `databaseName` / `backupFile` in database restore
CVE-2026-72738 · Dokploy dokploy
Dokploy: Authenticated RCE via Command Injection in backup.listBackupFiles search Parameter
CVE-2026-72740 · Dokploy dokploy
Dokploy: OS Command Injection via SSH-form `customGitUrl` domain in `ssh-keyscan`
CVE-2026-72862 · Dokploy dokploy
Dokploy: OS Command Injection via dockerImage field in database service deployment functions → HOST RCE
CVE-2026-72865 · Dokploy dokploy
Dokploy: OS Command Injection via compose `composePath`
CVE-2026-72869 · Dokploy dokploy
Dokploy: Authenticated OS command injection in backup.restoreBackupWithLogs (databaseName) leading to host RCE
CVE-2026-72872 · Dokploy dokploy
Dokploy: OS Command Injection via Bitbucket `owner`/`repository` in `git clone`
CVE-2026-72876 · Dokploy dokploy
Dokploy: Cross-organization IDOR leads to root RCE on another tenant's server via swarm.*
CVE-2026-72863 · Dokploy dokploy
Dokploy: Missing authorization in WebSocket handlers allows a low-privilege member to gain root on the Docker host
CVE-2026-72882 · Dokploy dokploy
Dokploy: Authenticated blind command injection via file mounts leads to direct remote host RCE on managed servers
CVE-2026-72886 · Dokploy dokploy
Dokploy: Non-admin member gains root on the host by bypassing the owner/admin check on server-level schedules (incomplete fix of CVE-2026-45632)
CVE-2026-72864 · Dokploy dokploy
Dokploy Broken Access Control on docker-container-terminal WebSocket (Member -> Root in Arbitrary Containers)
CVE-2026-72877 · Dokploy dokploy
Dokploy: Command Injection via dockerImage in buildRemoteDocker
CVE-2026-72879 · Dokploy dokploy
Dokploy: Command Injection via Registry Credentials in Swarm Upload
CVE-2026-72880 · Dokploy dokploy
Dokploy: Arbitrary File Write + Remote OS Command Injection via `certificatePath`
CVE-2026-72737 · Dokploy dokploy
Dokploy: Cross-organization IDOR in Dokploy backup destinations exposes another tenant's S3 credentials and backups
CVE-2026-72902 · Dokploy dokploy
Dokploy: Authenticated RCE via Command Injection in registry.testRegistry / registry.testRegistryById
CVE-2026-72736 · Dokploy dokploy
Dokploy: OS Command Injection in registry credential testing and Swarm cluster management → HOST RCE
CVE-2026-72868 · Dokploy dokploy
Dokploy: Member-role RCE as host root via destination.testConnection rclone shell injection
CVE-2026-72878 · Dokploy dokploy
Dokploy: OS Command Injection in backup/restore pipeline via unescaped user-controlled shell arguments
Red Hat
CVE-2026-59090 · Red Hat Red Hat Enterprise Linux 9
Gimp: gimp: arbitrary code execution in psd plugin due to unsigned underflow
CVE-2026-18948 · Red Hat Red Hat OpenShift AI 2.25
Feast: feast: unsafe dill deserialization of registry-stored udfs — rce on feature server and registry server
CVE-2026-14450 · Red Hat Red Hat OpenShift AI 3.4
Maas-billing: maas api: privilege escalation via forged http headers due to missing authentication
Zyxel Networks
CVE-2026-13206 · Zyxel Networks WAH7601
Multiple Vulnerabilities in Zyxel's WAH7601 - OS Command Injection
frappe
SAP_SE
CVE-2026-34265 · SAP_SE SAP NetWeaver and ABAP Platform
Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform
CVE-2026-44758 · SAP_SE SAP Manufacturing Integration and Intelligence
Code Injection vulnerability in Manufacturing Integration and Intelligence
Win Men Intermational
CVE-2026-19425 · Win Men Intermational Travel Agency Management System
Win Men Intermational｜Travel Agency Management System - SQL Injection
mitre
dai-shi
CVE-2026-48158 · dai-shi use-context-selector
use-context-selector was vulnerable to malicious code execution via compromised commits
CVE-2026-48159 · dai-shi use-reducer-async
use-reducer-async was vulnerable to malicious code execution via compromised commits
CVE-2026-48160 · dai-shi react-tracked
react-tracked was vulnerable to malicious code execution via compromised commits
CVE-2026-48161 · dai-shi react18-use
react18-use was vulnerable to malicious code execution via compromised commits
Linux
CVE-2026-68381 · Linux Linux
ksmbd: pin conn during async oplock break notification
CVE-2026-68385 · Linux Linux
s390/checksum: Fix csum_partial() without vector facility
CVE-2026-68388 · Linux Linux
smb/client: handle overlapping allocated ranges in fallocate
CVE-2026-68426 · Linux Linux
xfrm: fix stale skb->prev after async crypto steals a GSO segment
Razinsoft
CVE-2026-63106 · Razinsoft Ready eCommerce
ReadyEcommerce < 4.5.2 Unauthenticated SQL Injection via ProductController.php
TBEA
CVE-2025-15681 · TBEA TBEA TLogger (TBEA Communication Box 3rd Generation)
Insufficient Webserver Authentication
CVE-2025-13293 · TBEA TBEA TLogger (TBEA Communication Box 3rd Generation)
Backdoor / default root credentials
CVE-2025-13294 · TBEA TBEA TLogger (TBEA Communication Box 3rd Generation)
Unauthenticated SQL Injection
firecrawl
Jaspersoft
CVE-2026-16626 · Jaspersoft JasperReports Server