CVE.report search for "CVE-2026-56457"
Listed below are 50 relevant search results for "CVE-2026-56457" based on Vendor, Software, and CVE description
These results are gathered from attempted matches with listed vendor and software data, as well as a keyword search in the description of all known CVEs.
If you notice a "Not Listed" in either the vendor or software columns, the underlying source record does not currently include normalized affected-product data.
Search Results
| CVE ID | Vendor | Software | Description |
|---|---|---|---|
| CVE-2026-66373 | Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via... | ||
| CVE-2026-66053 | Apache | Thrift | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings. This issue affects Apa... |
| CVE-2026-65908 | In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was possible on untrust... | ||
| CVE-2026-65907 | In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible | ||
| CVE-2026-65906 | In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible | ||
| CVE-2026-65885 | Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 - File upload methods allows authent... | ||
| CVE-2026-65604 | Skipper contains an incomplete fix for CVE-2026-50197 in which oversized request bodies bypass Open Policy Agent (OPA) deny-o... | ||
| CVE-2026-64825 | Home Assistant Core before 2026.6.0 contains a path traversal vulnerability that allows unauthenticated attackers to write ar... | ||
| CVE-2026-64824 | Home Assistant Core before 2026.7.0 contains a path traversal vulnerability in the backup-restore function that allows attack... | ||
| CVE-2026-64823 | Home Assistant Core before 2026.5.4 contains a cross-site scripting vulnerability in the Shelly integration's async_get_media... | ||
| CVE-2026-64815 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files |
| CVE-2026-64814 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session |
| CVE-2026-64813 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session |
| CVE-2026-64812 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session |
| CVE-2026-64811 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via development ... |
| CVE-2026-64810 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tr... |
| CVE-2026-64809 | Jetbrains | Phpstorm | In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured in... |
| CVE-2026-64808 | Jetbrains | Phpstorm | In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling |
| CVE-2026-64807 | Jetbrains | Webstorm | In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configuration |
| CVE-2026-64806 | Jetbrains | Webstorm | In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured No... |
| CVE-2026-64805 | Jetbrains | Webstorm | In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local pac... |
| CVE-2026-64804 | Jetbrains | Webstorm | In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local lin... |
| CVE-2026-64803 | Jetbrains | Goland | In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go S... |
| CVE-2026-64802 | Jetbrains | Goland | In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integ... |
| CVE-2026-64800 | Jetbrains | Goland | In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default |
| CVE-2026-64625 | AVideo before 29.0 contains an incomplete fix for CVE-2026-45578 where execAsync() re-wraps escaped commands in double-quoted... | ||
| CVE-2026-64532 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordDat... | ||
| CVE-2026-64026 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix DATA decrypt vs splice() by copying data to b... | ||
| CVE-2026-63301 | In Quick.CMS, the administrative user interface restricts deletion of the primary language by omitting the corresponding opti... | ||
| CVE-2026-63077 | In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling pro... | ||
| CVE-2026-63030 | Wordpress | Wordpress | WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, com... |
| CVE-2026-62643 | Roundcube | Webmail | In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, insufficient Cascading Style Sheets (CSS) sanitization in HTML e-m... |
| CVE-2026-62436 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CV... | ||
| CVE-2026-62435 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CV... | ||
| CVE-2026-62427 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CV... | ||
| CVE-2026-62426 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CV... | ||
| CVE-2026-62425 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CV... | ||
| CVE-2026-62424 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CV... | ||
| CVE-2026-62423 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CV... | ||
| CVE-2026-62422 | In JetBrains YouTrack before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authenti... | ||
| CVE-2026-62389 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as a duplicate of CVE-2026-48779. | ||
| CVE-2026-62378 | RustFS Console is a web management console for the RustFS distributed file system. From 0.1.7 until 0.1.10, the RustFS Consol... | ||
| CVE-2026-62287 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61873. Reason: This candidate is a dupli... | ||
| CVE-2026-62248 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61438. Reason: This candidate is a dupli... | ||
| CVE-2026-62229 | OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in exec allowlist glob matching that allows lower-tru... | ||
| CVE-2026-62228 | Openclaw | Openclaw | OpenClaw before 2026.6.5 contain an authorization bypass vulnerability in node exec approvals that allows lower-trust callers... |
| CVE-2026-62227 | Openclaw | Openclaw | OpenClaw 2026.4.14 before 2026.5.26 contain a server-side request forgery vulnerability in browser snapshot routes that fail ... |
| CVE-2026-62226 | Openclaw | Openclaw | OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act route that fails to prop... |
| CVE-2026-62225 | Openclaw | Openclaw | OpenClaw versions before 2026.5.18 contain an authorization bypass vulnerability in skill command dispatch that allows lower-... |
| CVE-2026-62224 | OpenClaw MS Teams before 2026.5.12 contain an authorization bypass vulnerability where the allowFrom feature binds to mutable... | ||