CVE.report search for "CVE-2026-77638"
Listed below are 50 relevant search results for "CVE-2026-77638" based on Vendor, Software, and CVE description
These results are gathered from attempted matches with listed vendor and software data, as well as a keyword search in the description of all known CVEs.
If you notice a "Not Listed" in either the vendor or software columns, the underlying source record does not currently include normalized affected-product data.
Search Results
| CVE ID | Vendor | Software | Description |
|---|---|---|---|
| CVE-2026-110769 | holaOS through 2026.822.1 contains a missing authorization vulnerability in channel-gateway connectors that allows any messag... | ||
| CVE-2026-110768 | holaOS through 2026.822.1 contains an authorization bypass vulnerability in the channel-gateway Telegram connector that autho... | ||
| CVE-2026-110628 | Kan 0.5.5 through 0.6.0 contains an unauthenticated server-side request forgery vulnerability in the /api/download/attatchmen... | ||
| CVE-2026-110616 | NullHub through 2026.5.29 contains a missing authentication vulnerability that allows unauthenticated attackers to access the... | ||
| CVE-2026-110610 | ruoyi-vue-pro through 2026.09 contains a server-side request forgery vulnerability in the yudao-module-ai image service that ... | ||
| CVE-2026-110447 | Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as ... | ||
| CVE-2026-109758 | Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to u... | ||
| CVE-2026-109399 | SWUpdate through 2026.05.1 contains an improper certificate validation vulnerability in crypto/swupdate_cms_verify_openssl.c ... | ||
| CVE-2026-109392 | Pimcore through 2026.3.1 contains a stored cross-site scripting vulnerability that allows authenticated backend users to inje... | ||
| CVE-2026-109080 | SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to read ... | ||
| CVE-2026-108976 | GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an i... | ||
| CVE-2026-108925 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Cohesity NetBackup Administrat... | ||
| CVE-2026-108782 | A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this issue is the function CommonServic... | ||
| CVE-2026-108781 | A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the function... | ||
| CVE-2026-108779 | A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected is the function WmSttInGoodsController.lis... | ||
| CVE-2026-108778 | A vulnerability was determined in erzhongxmu JEEWMS up to 2026.09.27-W39. This impacts the function WmInQmIController.list of... | ||
| CVE-2026-108777 | A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. This affects the function WvGiController.list of the fil... | ||
| CVE-2026-108775 | A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeContro... | ||
| CVE-2026-108774 | A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv ... | ||
| CVE-2026-108773 | A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. Impacted is the function docheck of the file src/main... | ||
| CVE-2026-108697 | CoreShop through 2026.2.2 contains a missing authorization vulnerability that allows low-privileged backend users to list per... | ||
| CVE-2026-108390 | Hestia Control Panel is a lightweight and powerful control panel for the modern web. From version 1.9.7 through 1.10.4, updat... | ||
| CVE-2026-108264 | Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby, and other media servers. Prior to 2026.... | ||
| CVE-2026-108156 | LobsterAI 2026.5.27 through 2026.9.23 contains an external control of file path vulnerability in the skills:delete IPC handle... | ||
| CVE-2026-107914 | Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration exports when delivering a c... | ||
| CVE-2026-107913 | Rejected reason: This CVE ID is a duplicate of CVE-2026-39749 and was never published. Both IDs were assigned to the same Bro... | ||
| CVE-2026-107838 | RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. F... | ||
| CVE-2026-107837 | RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. I... | ||
| CVE-2026-107836 | RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. I... | ||
| CVE-2026-107813 | Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the api/cluster router exposes node and na... | ||
| CVE-2026-107803 | ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the `GET /api/1.0/tasks` endpoint in P... | ||
| CVE-2026-107460 | Server-Side Request Forgery (SSRF) protection in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet 2.0... | ||
| CVE-2026-107448 | Magic: The Gathering Arena (Windows/Steam client; 2026.59.30.12801.127931.6 and certain later 2026.60.x builds) passes a serv... | ||
| CVE-2026-107394 | Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior to 3.3... | ||
| CVE-2026-107352 | Missing authorization checks in Amazon Athena engine version 3 request handling could have allowed an authenticated user to r... | ||
| CVE-2026-107320 | The GamiPress WordPress plugin before 8.0.6 does not properly authorize access to private activity log entries, allowing una... | ||
| CVE-2026-107194 | Sungrow iSolarCloud before 2026 allows authentication bypass and account takeover via "login_type":"5" in a login request, po... | ||
| CVE-2026-106586 | Openbsd | Openssh | In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding ... |
| CVE-2026-106505 | Linuxfoundation | Backstage Plugin-techdocs-node | Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-nod... |
| CVE-2026-106446 | Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.compile() ... | ||
| CVE-2026-106442 | Hydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.6 and 1.4.0.dev9, the instantiate()... | ||
| CVE-2026-106219 | Jetbrains | Teamcity | In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the serv... |
| CVE-2026-106218 | Jetbrains | Teamcity | In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible |
| CVE-2026-106164 | In Progress® Telerik® Document Processing SpreadProcessing library, versions prior to 2026.3.1006, an infinite loop vulnera... | ||
| CVE-2026-106047 | A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote... | ||
| CVE-2026-106043 | A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote unauth... | ||
| CVE-2026-106042 | An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticate... | ||
| CVE-2026-106035 | An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote ... | ||
| CVE-2026-106034 | A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, mo... | ||
| CVE-2026-105820 | Vault's ACL policy cache allowed namespace traversal when policy names contained path traversal constructs. This may allow a ... | ||