CVE.report search for "CVE-2026-4600"
Listed below are 50 relevant search results for "CVE-2026-4600" based on Vendor, Software, and CVE description
These results are gathered from attempted matches with listed vendor and software data, as well as a keyword search in the description of all known CVEs.
If you notice a "Not Listed" in either the vendor or software columns, the underlying source record does not currently include normalized affected-product data.
Search Results
| CVE ID | Vendor | Software | Description |
|---|---|---|---|
| CVE-2026-126625 | Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.3.7 allow a local authenticated use... | ||
| CVE-2026-126624 | Unverified ownership in the Windows installer of Progressive Robot hMailServer 6.3.7 allows a local authenticated user to run... | ||
| CVE-2026-126623 | Inefficient algorithmic complexity in the JSON reader of Progressive Robot hMailServer 6.3.6 and 6.3.7 allows a remote attack... | ||
| CVE-2026-126622 | Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.3.7 allow a local authenticated use... | ||
| CVE-2026-126613 | Allocation of resources without limits in the JSON reader of Progressive Robot hMailServer 6.3.2 through 6.3.7 allows a remot... | ||
| CVE-2026-126612 | Improper link resolution in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.7 allows a local authent... | ||
| CVE-2026-126610 | Progressive Robot hMailServer 6.3.4 through 6.3.7, with a MySQL or MariaDB database and TlsMode=verify-full, does not hand th... | ||
| CVE-2026-126123 | BeeS Software Solutions ERP before 04 September 2026 allows any low-privileged user to navigate directly to the administrativ... | ||
| CVE-2026-126069 | Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML. Prior... | ||
| CVE-2026-125757 | mailcow: dockerized before 2026-11 contains a server-side template injection vulnerability that allows domain administrators ... | ||
| CVE-2026-125378 | PowerDNS-Admin before 2026.11.0 contains a missing authorization vulnerability in the apply_records handler for /admin/templa... | ||
| CVE-2026-125359 | Mediary Scout before 2026.11.05 contains a server-side request forgery vulnerability that allows any authenticated user, incl... | ||
| CVE-2026-124610 | Rejected reason: 依 VUL-2026-008441 判定為主 | ||
| CVE-2026-124037 | An information exposure flaw in the public access-list sign-up feature of the Flock Safety Platform, present from 2026-06-23 ... | ||
| CVE-2026-124036 | Missing authorization checks in the visual alert feature of FlockOS, Flock's hosted public safety platform, prior to 2026-09-... | ||
| CVE-2026-123973 | SharePoint Products CopyMove before 2026-11-06 allows traversal. An authenticated SharePoint user with the necessary permissi... | ||
| CVE-2026-123858 | In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted proje... | ||
| CVE-2026-123857 | In JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD ruleset autodetection | ||
| CVE-2026-123854 | In JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget module | ||
| CVE-2026-123853 | In JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mode via project-controlled JVM optio... | ||
| CVE-2026-123850 | In JetBrains YouTrack before 2026.2.19422 cSS injection was possible in Mermaid diagrams via configuration directives | ||
| CVE-2026-123849 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watchers |
| CVE-2026-123848 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS certificates |
| CVE-2026-123847 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 command execution was possible via control characters in terminal command completion |
| CVE-2026-123846 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 blind SSRF was possible via remote references in JSON Schema validation |
| CVE-2026-123845 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references in untrusted projects |
| CVE-2026-123844 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 sSRF was possible via custom plugin repositories |
| CVE-2026-123843 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration |
| CVE-2026-123842 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives |
| CVE-2026-123841 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via symlinks in an imported settings archive |
| CVE-2026-123840 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 hTML injection was possible in Remote Development editor tabs |
| CVE-2026-123839 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was possible via the Remote Development ... |
| CVE-2026-123838 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer form file |
| CVE-2026-123837 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3, 2026.2.1 command injection was possible in untrusted projects via Tomcat run confi... |
| CVE-2026-123836 | In JetBrains Datalore before 2026.4 workspace collaborators could obtain the owner's SSH private key via Git backup | ||
| CVE-2026-123835 | In JetBrains Datalore before 2026.4 code execution was possible in another user's computation via an init script upload race ... | ||
| CVE-2026-123834 | In JetBrains Datalore before 2026.4 improper scope validation in database tasks allowed using another workspace's service acc... | ||
| CVE-2026-123833 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 database connections could be established in untrusted projects |
| CVE-2026-123832 | In JetBrains CLion before 2026.2 code execution was possible in Safe Mode via JSON compilation database | ||
| CVE-2026-123831 | In JetBrains CLion before 2026.2, 2026.1.4 code execution was possible in Safe Mode via Meson project settings | ||
| CVE-2026-123824 | The Symfony Config component XmlUtils::parse() enables DTD validation before rejecting documents that carry a doctype, allo... | ||
| CVE-2026-123337 | In JetBrains YouTrack before 2026.2.19656 users without update permission could change issue visibility | ||
| CVE-2026-123336 | In JetBrains YouTrack before 2026.2.19728 the attachment size limit could be bypassed via AI assistant thread conversion | ||
| CVE-2026-123335 | In JetBrains YouTrack before 2026.2.19562, 2026.1.14137, 2025.3.169041 missing authorization allowed attaching tags to any... | ||
| CVE-2026-123334 | In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another ... | ||
| CVE-2026-123333 | In JetBrains YouTrack before 2026.2.19562 sprint creation allowed moving issues from inaccessible projects between sprints | ||
| CVE-2026-123332 | In JetBrains YouTrack before 2026.2.19562 missing authorization allowed Project Admin to manage VCS hosting server configurat... | ||
| CVE-2026-123331 | In JetBrains YouTrack before 2026.2.19197 article editors could change visibility of restricted child articles | ||
| CVE-2026-123330 | In JetBrains YouTrack before 2026.2.19562 missing authorization allowed users with read-only access to change issue visibilit... | ||
| CVE-2026-123329 | In JetBrains YouTrack before 2026.2.19562 missing authorization in TeamCity integration allowed disclosure of other projects'... | ||