CVE.report search for "CVE-2026-101806"
Listed below are 50 relevant search results for "CVE-2026-101806" based on Vendor, Software, and CVE description
These results are gathered from attempted matches with listed vendor and software data, as well as a keyword search in the description of all known CVEs.
If you notice a "Not Listed" in either the vendor or software columns, the underlying source record does not currently include normalized affected-product data.
Search Results
| CVE ID | Vendor | Software | Description |
|---|---|---|---|
| CVE-2026-129135 | picoquic before 2026.11.05.3e2e3d3 contains an integer overflow vulnerability in picoquic_decode_time_stamp_frame() that allo... | ||
| CVE-2026-128970 | Psono Server Community Edition versions 1.12.6 through 7.5.0 and Psono Server Enterprise Edition before 7.5.1 do not require ... | ||
| CVE-2026-128100 | Vault Community Edition and Vault Enterprise did not apply explicit ACL policy deny rules to letter case variants of user and... | ||
| CVE-2026-128088 | russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to version 0.65.1, tr... | ||
| CVE-2026-128085 | OpenTelemetry-Go is the Go implementation of OpenTelemetry. From SDK version 1.33.0, SDK log version 0.9.0, and trace version... | ||
| CVE-2026-128014 | FrankenPHP standalone static binaries 1.8.0 before 1.13.2 bundle the PHP brotli extension statically linked with Brotli 1.2.0... | ||
| CVE-2026-127236 | An argument injection vulnerability exists in the ad-hoc RRD graph feature of multiple versions of OpenNMS Meridian and Horiz... | ||
| CVE-2026-127235 | A reflected cross-site scripting vulnerability exists in the web user interface of multiple versions of OpenNMS Meridian and ... | ||
| CVE-2026-127207 | Sendcloud for WooCommerce through 1.0.41 contains a missing authorization vulnerability that allows authenticated low-privile... | ||
| CVE-2026-127084 | Teable before 2026-10-12T12-45-53Z.3331 contains a stored cross-site scripting vulnerability that allows authenticated users ... | ||
| CVE-2026-127083 | Huginn from 2026.09.09 before 2026.11.09 contains a server-side request forgery vulnerability because OutboundProxy.configure... | ||
| CVE-2026-127082 | Huginn before 2026.11.09 contains an information exposure vulnerability in JqAgent that allows authenticated users to read th... | ||
| CVE-2026-126793 | An untrusted search path issue in Aurora PostgreSQL dialect detection in the AWS Advanced Go Wrapper from release 2026-04-06 ... | ||
| CVE-2026-126644 | A link-following flaw was found in the authorized_key module of the ansible.posix collection, residual to the fix for CVE-202... | ||
| CVE-2026-126625 | Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.3.7 allow a local authenticated use... | ||
| CVE-2026-126624 | Unverified ownership in the Windows installer of Progressive Robot hMailServer 6.3.7 allows a local authenticated user to run... | ||
| CVE-2026-126623 | Inefficient algorithmic complexity in the JSON reader of Progressive Robot hMailServer 6.3.6 and 6.3.7 allows a remote attack... | ||
| CVE-2026-126622 | Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.3.7 allow a local authenticated use... | ||
| CVE-2026-126613 | Allocation of resources without limits in the JSON reader of Progressive Robot hMailServer 6.3.2 through 6.3.7 allows a remot... | ||
| CVE-2026-126612 | Improper link resolution in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.7 allows a local authent... | ||
| CVE-2026-126610 | Progressive Robot hMailServer 6.3.4 through 6.3.7, with a MySQL or MariaDB database and TlsMode=verify-full, does not hand th... | ||
| CVE-2026-126372 | Vvveb through 1.0.8.6 contains an incomplete fix for CVE-2026-41934 that allows authenticated editor or site_admin users to w... | ||
| CVE-2026-126347 | Tornado is a Python web framework and asynchronous networking library. In versions through 6.6.0, applications using tornad... | ||
| CVE-2026-126332 | Improper access control in the autofill vault search in Devolutions Server 2026.3.13.0 and earlier allows an authenticated us... | ||
| CVE-2026-126331 | Insertion of sensitive information into sent data in the user list endpoint in Devolutions Server 2026.3.13.0 and earlier all... | ||
| CVE-2026-126328 | Insertion of sensitive information into sent data in the user endpoints in Devolutions Server 2026.3.13.0 and earlier allows ... | ||
| CVE-2026-126327 | Improper access control in the connection history in Devolutions Server 2026.3.13.0 allows an authenticated user without the ... | ||
| CVE-2026-126326 | Improper access control in the administrative role assignment endpoint in Devolutions Server 2026.3.13.0 and earlier allows a... | ||
| CVE-2026-126293 | NocoDB before 2026.06.2 contains an attachment size limit bypass that allows authenticated Editor users to store oversized fi... | ||
| CVE-2026-126292 | NocoDB before 2026.06.1 contains an information disclosure vulnerability in the profile update handler in users.service.ts, w... | ||
| CVE-2026-126291 | NocoDB before 2026.06.2 contains an SQL injection vulnerability in base-user.cte.utils.ts, which concatenates base members' e... | ||
| CVE-2026-126290 | NocoDB before 2026.07.0 contains an information disclosure vulnerability in base-integrations.service.ts that allows authenti... | ||
| CVE-2026-126289 | NocoDB before 2026.06.1 contains a CSV formula injection vulnerability in export.service.ts that writes record values and col... | ||
| CVE-2026-126288 | NocoDB before 2026.06.2 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve fu... | ||
| CVE-2026-126287 | NocoDB before 2026.06.2 contains a race condition vulnerability in oauth-token.service.ts that allows attackers to reuse a re... | ||
| CVE-2026-126286 | NocoDB before 2026.08.0 contains a reflected cross-site scripting vulnerability in PageLeavingWarning.vue that allows unauthe... | ||
| CVE-2026-126285 | NocoDB before 2026.08.0 contains an sql injection vulnerability that allows authenticated users with read access to run arbit... | ||
| CVE-2026-126284 | NocoDB from 2026.05.2 before 2026.07.0 contains a server-side request forgery vulnerability that allows Editor-role users to ... | ||
| CVE-2026-126283 | NocoDB before 2026.08.0 contains an incorrect authorization vulnerability that lets base-scoped API tokens act as account-wid... | ||
| CVE-2026-126282 | NocoDB from 2026.04.0 before 2026.08.0 contains an improper privilege management vulnerability in org-users.service.ts where ... | ||
| CVE-2026-126281 | NocoDB before 2026.08.0 contains a missing authorization vulnerability in the copy-from branch of integration creation in int... | ||
| CVE-2026-126280 | NocoDB before 2026.08.0 contains a race condition in refresh-token rotation that allows attackers to reuse tokens because Use... | ||
| CVE-2026-126279 | NocoDB before 2026.06.2 contains a stored cross-site scripting vulnerability in PromptWithFields.vue that renders unescaped f... | ||
| CVE-2026-126278 | NocoDB before 2026.08.1 contains a race condition vulnerability in users.service.ts that allows holders of a valid reset toke... | ||
| CVE-2026-126277 | NocoDB before 2026.08.1 contains an uncontrolled resource consumption vulnerability that allows unauthenticated attackers to ... | ||
| CVE-2026-126276 | NocoDB before 2026.08.1 contains an authentication bypass vulnerability in oauth-token.service.ts that treats PKCE as a subst... | ||
| CVE-2026-126275 | NocoDB before 2026.09.0 contains an insecure direct object reference vulnerability that allows authenticated users to read cr... | ||
| CVE-2026-126274 | NocoDB before 2026.08.0 contains a stored cross-site scripting vulnerability that allows authenticated Creator users to injec... | ||
| CVE-2026-126273 | NocoDB before 2026.09.0 contains a privilege escalation vulnerability in initAdminFromEnv.ts that silently skips super-admin ... | ||
| CVE-2026-126272 | NocoDB before 2026.09.0 contains an uncontrolled resource consumption vulnerability that allows authenticated users to bypass... | ||