CVE-2026-116020Published
BookStack before 26.09.2 Incorrect Authorization via AttachmentController on Draft Pages
cve-program ·
Vendor product: BookStack
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
677602 source statements · aliases may refer to the same vulnerabilityCVE-2026-116019Published
Grav 2.0.15 before 2.2.13 Allowlist Bypass via Flex Form Override Directives
cve-program ·
Vendor product: grav
CVE-2026-116018Published
ONEARMY community-platform before 2.165.2 IDOR via notification read endpoint
cve-program ·
Vendor product: community-platform
CVE-2026-116017Published
Xiaozhi-esp32-server before 0.9.8 IDOR via device address-book endpoint
cve-program ·
Vendor product: xiaozhi-esp32-server
CVE-2026-116016Published
yudao-cloud through 2026.09 Data Permission Bypass via data-permission-enable Header
cve-program ·
Vendor product: yudao-cloud
CVE-2026-116015Published
yudao-cloud through 2026.09 IDOR via after-sale-log list endpoint
cve-program ·
Vendor product: yudao-cloud
CVE-2026-116014Published
open62541 1.5.0 before 1.5.7 Integer Overflow Heap Buffer Overflow via Custom DataType
cve-program ·
Vendor product: open62541
CVE-2026-116013Published
OpenResty lua-resty-dns before 0.24 Denial of Service via DNS Response Parsing
cve-program ·
Vendor product: lua-resty-dns
CVE-2026-116012Published
Ghidra before 12.2 Integer Truncation in PackedDecode::skipAttribute Decompiler Parser
cve-program ·
Vendor product: ghidra
CVE-2026-116011Published
Crow before 1.3.4 Denial of Service via Deeply Nested JSON in crow::json::load()
cve-program ·
Vendor product: Crow
CVE-2026-116010Published
RosarioSIS before 12.9.1 Missing Authorization in Teacher Save Handlers
cve-program ·
Vendor product: RosarioSIS
CVE-2026-116009Published
Camaleon CMS before 2.9.3 Path Traversal RCE via Media crop_url Action
cve-program ·
Vendor product: camaleon-cms
CVE-2026-116008Published
DaybydayCRM through 2.2.1 Missing Authorization via ProjectsController updateAssign
cve-program ·
Vendor product: DaybydayCRM
CVE-2026-110018Published
aBlocks <= 2.17.0 - Authenticated (Contributor+) Privilege Escalation to 'roleSlug' Block Attribute
cve-program ·
Vendor product: aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder
CVE-2026-115998Published
IDOR: User reads and modifies findings from other people's projects
cve-program ·
Vendor product: cervantes
CVE-2026-115994Published
BOLA Allows Cross-Project Target Tampering
cve-program ·
Vendor product: cervantes
CVE-2026-115993Published
Stored XSS in the “Notes” field of project checklists
cve-program ·
Vendor product: cervantes
RUSTSEC-2026-0384Published
Race condition in `tokio::time::Interval` on Tokio v1.54.0
osv · CVE-2026-115567 · GHSA-5wjr-9356-4wc8
crates.io: tokio
CVE-2026-115975Published
Broken access control in JiraController
cve-program ·
Vendor product: cervantes
CVE-2026-112067Published
Captcha Bypass in extension "Accessible Form Captcha" (bw_captcha)
cve-program ·
https://packagist.org/: blueways/bw-captcha
CVE-2026-112064Published
SQL Injection in extension "sgalinski Cookie Consent" (sg_cookie_optin)
cve-program ·
https://packagist.org/: sgalinski/sg-cookie-optin
CVE-2026-115803Published
Scada-LTS AmCharts Data API AmChartValuesAPI.java HttpServletRequest.getParameter authorization
cve-program ·
Vendor product: Scada-LTS
RUSTSEC-2026-0379Published
Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction
osv · CVE-2026-115893 · GHSA-mghf-wjfp-p5xm
crates.io: wasmtime
CVE-2026-115802Published
InternScience InternAgent LoRA Loading experiment.py train inclusion of functionality from untrusted control sphere
cve-program ·
Vendor product: InternAgent
RUSTSEC-2026-0222Published
Stores can mix up type indices between engines
osv · CVE-2026-115393 · GHSA-hgjw-h833-99q9
crates.io: wasmtime
RUSTSEC-2026-0268Published
Guest controlled-size host heap allocation through WASIp3 streams
osv · CVE-2026-115391 · GHSA-x84v-gj2h-g759
crates.io: wasmtime
RUSTSEC-2026-0269Published
Filesystem sandbox escape when paths or symlinks contain trailing slashes
osv · CVE-2026-115392 · GHSA-vqjp-4c8c-hfgg
crates.io: wasmtime
RUSTSEC-2026-0313Published
Outgoing HTTP body write allows guest-driven host memory exhaustion
osv · CVE-2026-115388 · GHSA-c9gc-w9vx-w86p
crates.io: wasmtime-wasi-http
RUSTSEC-2026-0314Published
Guest can panic host through filesystem datetime overflow
osv · CVE-2026-115387 · GHSA-j2g9-4prp-pf6h
crates.io: wasmtime-wasi
RUSTSEC-2026-0315Published
`call_ref` and exception `catch` can drop some fuel accounting, leading to exponential fuel amplification
osv · CVE-2026-115390 · GHSA-m63x-6p34-q65x
crates.io: wasmtime
RUSTSEC-2026-0316Published
Dynamic record lifting can allocate beyond the hostcall fuel limit
osv · CVE-2026-115389 · GHSA-jqpg-j7w6-42pr
crates.io: wasmtime
RUSTSEC-2026-0320Published
Wasmtime wasi:http implementation panics with a zero timeout supplied
osv · CVE-2026-115382 · GHSA-w4qr-p94g-mjhv
crates.io: wasmtime-wasi-http
RUSTSEC-2026-0321Published
WASI preview 0 implementation of `poll_oneoff` circumvents fuel consumption
osv · CVE-2026-115380 · GHSA-j366-h8gg-77pm
crates.io: wasmtime-wasi
RUSTSEC-2026-0322Published
Excessive allocated memory on the host when guests don't have stdio
osv · CVE-2026-115381 · GHSA-gqmc-89g8-p25r
crates.io: wasmtime-wasi
RUSTSEC-2026-0323Published
fd_readdir copies uninitialized struct padding into guest memory
osv · CVE-2026-115386 · GHSA-96f6-r43r-8c24
crates.io: wasmtime-wasi
RUSTSEC-2026-0324Published
Guest can panic host through filesystem timestamp before the epoch on wasip3
osv · CVE-2026-115385 · GHSA-mr2v-56j5-cmfc
crates.io: wasmtime-wasi
RUSTSEC-2026-0325Published
Mis-typed WebAssembly tag imports can lead to GC heap corruption
osv · CVE-2026-115383 · GHSA-cfhf-m2cr-62wj
crates.io: wasmtime
RUSTSEC-2026-0326Published
Rooting for GC values live across `try_call` may be missing, causing GC heap corruption
osv · CVE-2026-115379 · GHSA-hw8m-q44c-ggrf
crates.io: wasmtime
RUSTSEC-2026-0327Published
Wasmtime component async-lifted callback result count is unvalidated, causing a native stack buffer overflow
osv · CVE-2026-115384 · GHSA-32h6-97mm-8q3c
crates.io: wasmtime
RUSTSEC-2026-0378Published
Panic lowering a host-created component model stream into a guest that expects a different payload type
osv · CVE-2026-115892 · GHSA-9pvw-hwfg-92h5
crates.io: wasmtime
RUSTSEC-2026-0380Published
Bit-packing in Cranelift compiler causes silent overflow and miscompilation
osv · CVE-2026-115889 · GHSA-897f-g5gm-fmxm
crates.io: wasmtime
CVE-2026-108013Published
HCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID)
cve-program ·
Vendor product: BigFix Platform
MAL-2026-18248Published
Malicious code in overarch-windows-x64-yr (npm)
osv · GHSA-v5v8-j5gm-pq8v
npm: overarch-windows-x64-yr
CVE-2026-115806Published
Prime Mover <= 2.2.1 - Unauthenticated PHP Object Injection via Base64-Encoded Comment during Migration Search-and-Replace
cve-program ·
Vendor product: Prime Mover – Backup and Migration
CVE-2026-115807Published
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 4.0.3 - Authenticated (Author+) Limited Privilege Escalation via Gutenberg Block 'Assigned Role' Attribute
cve-program ·
Vendor product: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
CVE-2026-79858Published
Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-79857Published
Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-79856Published
Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-79855Published
Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-79854Published
Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10
cve-program ·
Vendor product: ArubaOS (AOS)
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.