Browse CVEs

HIGH 7.5 CVE-2026-55524 PraisonAI is a multi-agent teams system. In versions prior to 1.6.58, the web_crawl tool performs its SSRF check only on the initially supplied URL, … No fix yet Fix from $1,9502026-08-05 HIGH 7.7 CVE-2026-55523 PraisonAI is a multi-agent teams system. In versions 1.5.128 through 1.6.57, the praisonaiagents.tools.web_crawl_tools.web_crawl() function is vulner… No fix yet Fix from $1,9502026-08-05 HIGH 7.8 CVE-2026-55522 PraisonAI is a multi-agent teams system. In versions 3.9.26 through 4.6.57 of praiseonai and 0.12.12 through 1.6.57 of praiseonaiagents, the workflow… No fix yet Fix from $1,9502026-08-05 MEDIUM 5.4 CVE-2026-21766 The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects credentials.  Under certain very specific … No fix yet Fix from $1,6002026-08-05 HIGH 7.3 CVE-2026-18958 A vulnerability was detected in imranrisal-dev Student-Management-System 18ea7904c339e0c7b0234724a79c939ce6191def/a8d43a29aaf267e7ca97171d6dbb44057bc… No fix yet Fix from $1,9502026-08-05 HIGH 7.8 CVE-2026-18485 There is a local privilege escalation vulnerability recently discovered in the NI-PAL kernel driver.  This may allow a local, authenticated user to e… No fix yet Fix from $1,9502026-08-05 HIGH 7.1 CVE-2026-70448 Jenkins Ivy Report Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks when processing Ivy report f… No fix yet Fix from $1,9502026-08-05 MEDIUM 5.4 CVE-2026-70441 Jenkins Summary Display Plugin 1.15 and earlier does not escape the job name in a JavaScript context in build report pages, resulting in a stored cro… No fix yet Fix from $1,6002026-08-05 MEDIUM 5.4 CVE-2026-70440 Jenkins Qualys Container Scanning Connector Plugin 1.8.0.5 and earlier does not escape user-controlled field values in a JavaScript context, resultin… No fix yet Fix from $1,6002026-08-05 MEDIUM 6.5 CVE-2026-70439 Jenkins XML Job to Job DSL Plugin 0.1.13 and earlier does not perform permission checks, allowing attackers lacking appropriate permissions to invoke… No fix yet Fix from $1,6002026-08-05 HIGH 8.1 CVE-2026-70429 Jenkins 2.575 and earlier, LTS 2.568.1 and earlier handles case-insensitivity in user names and group names inconsistently, allowing attackers able t… No fix yet Fix from $1,9502026-08-05 HIGH 8.8 CVE-2026-70432 A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier allows attackers to execute arbitrary co… No fix yet Fix from $1,9502026-08-05 HIGH 8.8 CVE-2026-70431 Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowin… No fix yet Fix from $1,9502026-08-05 CRITICAL 9.0 CVE-2026-70426 In Remoting 3384.v60d89463d9e0 and earlier, except 3355.3357.v931d3c992987, included in Jenkins 2.575 and earlier, LTS 2.568.1 and earlier, the JEP-2… No fix yet Fix from $2,3002026-08-05 MEDIUM 5.5 CVE-2026-44605 A flaw was found in the RPM Package Manager (RPM). A local user could be affected by a heap buffer overflow vulnerability when processing a specially… No fix yet Fix from $1,6002026-08-05 HIGH 7.5 CVE-2026-10716 Directus contains an authenticated SQL injection vulnerability in the collection creation flow when the instance uses PostgreSQL with PostGIS enabled… No fix yet Fix from $1,9502026-08-05 HIGH 7.7 CVE-2026-20313 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehen… No fix yet Fix from $1,9502026-08-05 HIGH 8.8 CVE-2026-20312 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehen… No fix yet Fix from $1,9502026-08-05 MEDIUM 6.3 CVE-2026-20311 A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to c… No fix yet Fix from $1,6002026-08-05 CRITICAL 9.1 CVE-2026-20310 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehen… No fix yet Fix from $2,3002026-08-05 CRITICAL 9.9 CVE-2026-20304 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehen… No fix yet Fix from $2,3002026-08-05 CRITICAL 9.9 CVE-2026-20303 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehen… No fix yet Fix from $2,3002026-08-05 HIGH 8.6 CVE-2026-20301 A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of Cisco IOS Software and Cisco… No fix yet Fix from $1,9502026-08-05 MEDIUM 6.5 CVE-2026-20294 A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to view sensitiv… No fix yet Fix from $1,6002026-08-05 MEDIUM 6.5 CVE-2026-20288 A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with Admin privileges to execut… No fix yet Fix from $1,6002026-08-05 HIGH 8.6 CVE-2026-20273 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehen… Ios Xe No fix yet Fix from $1,9502026-08-05 CRITICAL 9.8 CVE-2026-20272 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehen… Ios Xe No fix yet Fix from $2,3002026-08-05 HIGH 8.6 CVE-2026-20271 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehen… Ios Xe No fix yet Fix from $1,9502026-08-05 HIGH 8.6 CVE-2026-20270 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehen… Ios Xe No fix yet Fix from $1,9502026-08-05 HIGH 8.6 CVE-2026-20269 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehen… Ios Xe No fix yet Fix from $1,9502026-08-05