The archive.

langflow-ai1 vulnerability on this pageMax CVSS 9.9Priority 44KEV 0

CVE-2026-33873 · langflow-ai langflow

Langflow has Authenticated Code Execution in Agentic Assistant Validation

EPSS 1%CVSS 9.9

pi-hole1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2026-33765 · pi-hole web

Pi-hole Web Interface has a Command Injection Vulnerability

digitalbazaar1 vulnerability on this pageMax CVSS 9.1Priority 43KEV 0

CVE-2026-33896 · digitalbazaar forge

Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)

EPSS 0.4%public exploit CVSS 9.1

mitre6 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-30305 · mitre

Syntx's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism…

CVE-2026-30307 · mitre

Roo Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechan…

CVE-2026-30313 · mitre

DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mech…

CVE-2026-30562 · mitre

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.

EPSS 0.3%public exploit CVSS 9.3

CVE-2026-30306 · mitre

In its design for automatic terminal command execution, SakaDev offers two options: Execute safe commands and execute all commands.

EPSS 0.7%CVSS 9.8

CVE-2026-30308 · mitre

In its design for automatic terminal command execution, HAI Build Code Generator offers two options: Execute safe commands and Execute al…

WWBN1 vulnerability on this pageMax CVSS 9.1Priority 43KEV 0

CVE-2026-34374 · WWBN AVideo

AVideo has SQL Injection in Live_schedule::keyExists() via Unparameterized Stream Key

EPSS 0.4%public exploit CVSS 9.1

GIGABYTE1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-4415 · GIGABYTE Gigabyte Control Center

GIGABYTE｜Gigabyte Control Center - Arbitrary File Write

OpenClaw9 vulnerabilities on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2026-32922 · OpenClaw OpenClaw

OpenClaw < 2026.3.11 - Privilege Escalation via Unvalidated Scope in device.token.rotate

EPSS 0.7%CVSS 9.9

CVE-2026-32973 · OpenClaw OpenClaw

OpenClaw < 2026.3.11 - Exec Allowlist Pattern Overmatch via POSIX Path Normalization

EPSS 0.4%CVSS 9.8

CVE-2026-32975 · OpenClaw OpenClaw

OpenClaw < 2026.3.12 - Weak Authorization via Mutable Group Names in Zalouser Allowlist

CVE-2026-32987 · OpenClaw OpenClaw

OpenClaw < 2026.3.13 - Bootstrap Setup Code Replay via Device Pairing

EPSS 0.4%CVSS 9.8

CVE-2026-32924 · OpenClaw OpenClaw

OpenClaw < 2026.3.12 - Authorization Bypass via Misclassified Reaction Events in Feishu

CVE-2026-32974 · OpenClaw OpenClaw

OpenClaw < 2026.3.12 - Forged Event Injection via Feishu Webhook Verification Token

CVE-2026-32978 · OpenClaw OpenClaw

OpenClaw < 2026.3.11 - Approval Bypass via Unrecognized Script Runners

EPSS 0.2%CVSS 9.4

CVE-2026-32915 · OpenClaw OpenClaw

OpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Subagent Control Surface

EPSS 0.1%CVSS 9.3

CVE-2026-32918 · OpenClaw OpenClaw

OpenClaw < 2026.3.11 - Session Sandbox Escape via session_status Tool

EPSS 0.1%CVSS 9.2

SHAY1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-4176 · SHAY perl

Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib

EPSS 0.7%CVSS 9.8

KTAT1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-3256 · KTAT HTTP::Session

HTTP::Session versions before 0.54 for Perl defaults to using insecurely generated session ids

CASIANO1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-4851 · CASIANO GRID::Machine

GRID::Machine versions through 0.127 for Perl allows arbitrary code execution via unsafe deserialization

TOKUHIROM1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-15604 · TOKUHIROM Amon2

Amon2 versions before 6.17 for Perl use an insecure random_string implementation for security functions

Microchip1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2025-9497 · Microchip Time Provider 4100

Hardcoded Upgrade Decryption Passwords

londonaicentre1 vulnerability on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2026-33879 · londonaicentre FLIP

FLIP doesn't have rate limiting or brute-force protection on login