CVE.report search for "CVE-2026-69659"
Listed below are 50 relevant search results for "CVE-2026-69659" based on Vendor, Software, and CVE description
These results are gathered from attempted matches with listed vendor and software data, as well as a keyword search in the description of all known CVEs.
If you notice a "Not Listed" in either the vendor or software columns, the underlying source record does not currently include normalized affected-product data.
Search Results
| CVE ID | Vendor | Software | Description |
|---|---|---|---|
| CVE-2026-119715 | NocoDB before 2026.08.0 contains a clickjacking vulnerability that allows any origin to frame the authenticated interface bec... | ||
| CVE-2026-119713 | Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that allows agent API key holders to se... | ||
| CVE-2026-119658 | PowerDNS-Admin through 2026.08.1 contains an authorization bypass vulnerability that allows authenticated User-role accounts ... | ||
| CVE-2026-119421 | Juspay Hyperswitch through 1.128.0 (and builds before 2026.10.19.0) contains a missing authorization vulnerability that allow... | ||
| CVE-2026-119417 | CakePHP 4.5.12, 4.6.5, 5.1.8 through 5.1.10, 5.2.14 through 5.2.15, 5.3.7, and 5.4.0 through 5.4.3 contain an email header in... | ||
| CVE-2026-119414 | Bitwarden Server before 2026.10.1 on Entity Framework backends contains an authorization bypass vulnerability that allows org... | ||
| CVE-2026-119335 | Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. Prior to 6... | ||
| CVE-2026-119299 | gopacket provides packet processing capabilities for Go. Prior to 1.7.2, the SCTP chunk chain in layers/sctp.go passes attack... | ||
| CVE-2026-119168 | HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data migration that ma... | ||
| CVE-2026-118763 | sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.2, packages/oci/src/registry.t... | ||
| CVE-2026-118697 | In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon trusted comp... | ||
| CVE-2026-118696 | In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoL... | ||
| CVE-2026-118654 | Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Echo's static file handlers can normalize dot segments after route mat... | ||
| CVE-2026-118593 | A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix in RHEL 9.6 th... | ||
| CVE-2026-118258 | i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to... | ||
| CVE-2026-118040 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic si... | ||
| CVE-2026-118039 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulnerab... | ||
| CVE-2026-118038 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the Con... | ||
| CVE-2026-118037 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, un... | ||
| CVE-2026-118036 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, in... | ||
| CVE-2026-118035 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, inefficient algor... | ||
| CVE-2026-117174 | Rejected reason: VUL-2026-008368 為先回報之相同問題 | ||
| CVE-2026-116862 | Unauthenticated Broken Access Control in WP REST Cache <= 2026.3.1 versions. | ||
| CVE-2026-116678 | Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to version 1.37.0, the Vaultwarden icon downloader valida... | ||
| CVE-2026-116627 | Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in Devoluti... | ||
| CVE-2026-116584 | Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. From 1... | ||
| CVE-2026-116580 | Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. Prior ... | ||
| CVE-2026-116516 | Mattermost versions <=11.9 11.1.9 11.5.8 11.10.7.0 fail to validate Zoom chat line length before slicing which allows an auth... | ||
| CVE-2026-116252 | pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged. libpq treats a... | ||
| CVE-2026-116250 | In server mode pgAdmin 4 validates a path a user gives for a file in their storage directory with check_access_permission() a... | ||
| CVE-2026-116241 | pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command and checks that the query's ... | ||
| CVE-2026-116216 | MacCMS v10 through 2026.1000.4056 contains a mass assignment vulnerability in index/Comment::saveData() that allows unauthent... | ||
| CVE-2026-116215 | MacCMS v10 through 2026.1000.4056 contains a race condition vulnerability in Card::useData() that allows authenticated member... | ||
| CVE-2026-116214 | MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability that allows unauthenticated attackers to res... | ||
| CVE-2026-116123 | A weakness has been identified in NocoDB up to 2026.07.0. The affected element is the function validatePassword of the file /... | ||
| CVE-2026-116122 | A security flaw has been discovered in NocoDB up to 2026.07.0. Impacted is the function AuthService.validateUser of the compo... | ||
| CVE-2026-116121 | A vulnerability was identified in NocoDB up to 2026.08.0. This issue affects some unknown processing of the file users.servic... | ||
| CVE-2026-116120 | A vulnerability was determined in NocoDB up to 2026.07.0. This vulnerability affects the function UserRefreshToken.deleteAllU... | ||
| CVE-2026-116119 | A vulnerability was found in NocoDB up to 2026.08.0. This affects an unknown part of the file packages/nocodb/src/services/us... | ||
| CVE-2026-116054 | A security vulnerability has been detected in SH3. This affects an unknown function of the component Módulo de Gestão/Módu... | ||
| CVE-2026-116016 | yudao-cloud through 2026.09 contains an authorization bypass vulnerability that allows authenticated users to evade row-level... | ||
| CVE-2026-116015 | yudao-cloud through 2026.09 contains an insecure direct object reference vulnerability in the mall trade module that allows a... | ||
| CVE-2026-116007 | A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The impacted element is the function SmsCodeServic... | ||
| CVE-2026-116006 | A vulnerability was detected in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The affected element is an unknown function... | ||
| CVE-2026-115915 | Vllm | Vllm | vLLM is an inference and serving engine for large language models. Prior to 0.32.0, ImageMediaIO passes attacker-controlled i... |
| CVE-2026-115904 | Topluyo is a social networking platform. A vulnerability exists in Topluyo Desktop for Linux prior to version 2026.9.2410 whe... | ||
| CVE-2026-115895 | Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. From 17.0.0 until 21.0.4, pac... | ||
| CVE-2026-115804 | HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in health check registration that may allow ... | ||
| CVE-2026-115728 | @hapi/content from 6.0.1 before 6.0.3 contains a regular expression denial of service vulnerability in Content.disposition() ... | ||
| CVE-2026-115700 | Interpretation Conflict vulnerability in hackney_url in benoitc hackney allows Server Side Request Forgery via a percent-enco... | ||