CVE.report search for "CVE-2026-58115"
Listed below are 50 relevant search results for "CVE-2026-58115" based on Vendor, Software, and CVE description
These results are gathered from attempted matches with listed vendor and software data, as well as a keyword search in the description of all known CVEs.
If you notice a "Not Listed" in either the vendor or software columns, the underlying source record does not currently include normalized affected-product data.
Search Results
| CVE ID | Vendor | Software | Description |
|---|---|---|---|
| CVE-2026-103497 | Jetbrains | Youtrack | In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration |
| CVE-2026-103496 | Jetbrains | Youtrack | In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notifications |
| CVE-2026-103495 | Jetbrains | Youtrack | In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs |
| CVE-2026-103494 | Jetbrains | Youtrack | In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes |
| CVE-2026-103493 | Jetbrains | Youtrack | In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possible |
| CVE-2026-103492 | Jetbrains | Youtrack | In JetBrains YouTrack before 2026.2.19422 doS attack was possible via crafted PSD attachments |
| CVE-2026-103491 | Jetbrains | Youtrack | In JetBrains YouTrack before 2026.2.19422 iDOR in the issue activities API allowed reading restricted issues |
| CVE-2026-103490 | In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group links | ||
| CVE-2026-103489 | In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible | ||
| CVE-2026-103488 | In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project team... | ||
| CVE-2026-103432 | apcupsd through 3.14.14 has an sscanf stack-based buffer overflow in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi,... | ||
| CVE-2026-103275 | Ghost 5.42.2 before 6.58.0 contains an information disclosure vulnerability in the Admin API bulk post and page edit and dele... | ||
| CVE-2026-103088 | Handlebars.java before 4.5.5 allows directory traversal. In handlebars-springmvc 4.5.3 and 4.5.4, the path-containment fix fo... | ||
| CVE-2026-102807 | OpenClaw before 2026.9.4 contains an incorrect authorization vulnerability in the mcp.app.view method that allows read-scoped... | ||
| CVE-2026-102806 | OpenClaw before 2026.9.5 contains an incorrect authorization vulnerability in the Gateway's local media root allowlist that b... | ||
| CVE-2026-102675 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.... | ||
| CVE-2026-102628 | The Cadmos LTI application hosted at cadmos.eummena.io had Laravel debug mode enabled (APP_DEBUG=true, APP_ENV=local) in a pu... | ||
| CVE-2026-102510 | Integer Overflow, Improper Validation of Array Index, Uncontrolled Recursion and Memory Allocation with Excessive Size Value ... | ||
| CVE-2026-102509 | Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the Java i... | ||
| CVE-2026-102422 | shell-quote's `quote()` function emits a `{ comment }` token as `#` followed by its text, which comments out the rest of the ... | ||
| CVE-2026-101894 | The decompress package for Node.js extracts archives. Prior to 10.2.2 and 11.1.4, the default decompress(input, output) API r... | ||
| CVE-2026-101884 | OpenClaw Windows Node before 2026.7.1 contains an incomplete environment-variable sanitizer in system.run that fails to block... | ||
| CVE-2026-101883 | OpenClaw Windows Node through 2026.9.4 contains a server-side request forgery vulnerability in the canvas.present capability ... | ||
| CVE-2026-101882 | OpenClaw Windows Node before 2026.7.1 contains an incomplete validation vulnerability in system.execApprovals.set that accept... | ||
| CVE-2026-101881 | OpenClaw Windows Node before 2026.7.1 contains an allocation of resources without limits vulnerability in the gateway WebSock... | ||
| CVE-2026-101880 | OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval polic... | ||
| CVE-2026-101879 | OpenClaw Windows Node before 2026.7.1-3 contains a missing authorization vulnerability in NodeService capture handlers that a... | ||
| CVE-2026-101878 | Bitwarden Server 2025.6.0 before 2026.5.0 declares the @ExternalId parameter of the User_ReadBySsoUserOrganizationIdExternalI... | ||
| CVE-2026-101101 | A vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-07. This issue affects the function JSON.parse of the fi... | ||
| CVE-2026-101100 | A flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07. This vulnerability affects the function FilterToolCallsMiddle... | ||
| CVE-2026-101099 | A vulnerability was detected in ag-ui-protocol ag-ui up to 2026-09-23. This affects an unknown part of the file SseParser.kt ... | ||
| CVE-2026-101098 | A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the function r... | ||
| CVE-2026-101088 | Nezha is a server and website monitoring tool. In versions >= 2.2.11 and < 2.3.1, the service sentinel worker (service/single... | ||
| CVE-2026-101061 | utcp-gql before 1.1.1 and utcp-websocket before 1.1.1 contain server-side request forgery vulnerabilities due to incomplete a... | ||
| CVE-2026-101045 | Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata. In manifests generate... | ||
| CVE-2026-100903 | A vulnerability was identified in ООО НПО Ритм GEOritm up to 2.45.1. This affects an unknown part of the file /rest... | ||
| CVE-2026-100881 | A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1. This issue affects some unknown processing... | ||
| CVE-2026-100848 | AzuraCast (Composer package azuracast/azuracast) before 0.23.8 validates a station's "Remote Relay" URL only for URL syntax a... | ||
| CVE-2026-100653 | vLLM is an inference and serving engine for large language models. In versions from 0.22.1 through 0.28.0, the operator-suppl... | ||
| CVE-2026-100604 | ClawHub (openclaw/clawhub) contains an incorrect authorization vulnerability in the ClawHub application/backend: an organizat... | ||
| CVE-2026-100602 | ClawHub (openclaw/clawhub application/backend) contains a missing authorization check in the changelog preview feature. A sig... | ||
| CVE-2026-100601 | ClawHub (openclaw/clawhub) application/backend contains a server-side request forgery vulnerability in the public profile pre... | ||
| CVE-2026-100599 | OpenClaw versions 2026.5.1 through 2026.7.0 fail to apply the configured exec approval path to Google Meet node commands. The... | ||
| CVE-2026-100598 | OpenClaw (npm package openclaw) before 2026.7.1 incorrectly binds Signal approval reactions. In affected versions, a reaction... | ||
| CVE-2026-100597 | OpenClaw (npm package 'openclaw') before 2026.7.1 is vulnerable to a time-of-check time-of-use race condition in OpenShell lo... | ||
| CVE-2026-100596 | OpenClaw versions before 2026.7.1 fail to properly authorize non-owner users executing MCP configuration changes through /mcp... | ||
| CVE-2026-100595 | OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the diagnostics export command that allows... | ||
| CVE-2026-100594 | OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the /export-trajectory endpoint that allow... | ||
| CVE-2026-100593 | OpenClaw (npm package `openclaw`) before 2026.7.1 does not enforce the documented owner-only requirement for persistent `/act... | ||
| CVE-2026-100592 | OpenClaw is an agent gateway distributed via npm. In versions >= 2026.4.10 and < 2026.7.1, persistent memory dreaming mutatio... | ||