Known Vulnerabilities for Abuse by Abuse
Listed below are 2 of the newest known vulnerabilities associated with "Abuse" by "Abuse".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-65603 json | The Grav Login plugin (grav-plugin-login) versions <= 3.8.11 contain a privilege escalation flaw in the authenticated profile... | Not Provided | 2026-07-22 | 2026-07-22 |
| CVE-2026-63143 json | Missing Authorization (CWE-862) in Kibana can lead to unauthorized information disclosure via Privilege Abuse (CAPEC-122). A ... | Not Provided | 2026-07-21 | 2026-07-22 |
| CVE-2026-59694 json | Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-... | Not Provided | 2026-07-17 | 2026-07-17 |
| CVE-2026-57955 json | SigNoz through 0.130.1 contains a SQL injection vulnerability that allows authenticated attackers to execute arbitrary ClickH... | Not Provided | 2026-06-29 | 2026-07-14 |
| CVE-2026-57942 json | LibreTranslate through 1.9.7, fixed in commit 397fd22, contains an IP spoofing vulnerability in the get_remote_address() func... | Not Provided | 2026-06-29 | 2026-06-29 |
| CVE-2026-57698 json | Authentication Bypass Using an Alternate Path or Channel vulnerability in VillaTheme Abandoned Cart Recovery for WooCommerce ... | Not Provided | 2026-07-13 | 2026-07-13 |
| CVE-2026-56675 json | 9Router is an AI router & token saver. Prior to 0.5.2, 9router treats loopback requests as trusted and allows /v1/* access wi... | Not Provided | 2026-07-10 | 2026-07-10 |
| CVE-2026-56423 json | MISP Core contained broken access-control checks in the bulk deletion flows for Event Reports and Sharing Groups. The affect... | Not Provided | 2026-06-22 | 2026-06-23 |
| CVE-2026-56309 json | Capgo before 12.128.2 fails to enforce plan/quota restrictions on the /files/upload/attachments endpoint, allowing plan-block... | Not Provided | 2026-07-10 | 2026-07-10 |
| CVE-2026-56277 json | Flowise before 3.1.2 sets Access-Control-Allow-Origin to a hardcoded wildcard (*) on its text-to-speech (TTS) generation endp... | Not Provided | 2026-06-30 | 2026-07-01 |