Known Vulnerabilities for Exchange by Ithemes
Listed below are 1 of the newest known vulnerabilities associated with "Exchange" by "Ithemes".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-49323 json | Weak authentication between the Wireless Control Module (WCM) and the Engine Control Module (ECM) of the Indian Motorcycle Sc... | Not Provided | 2026-05-29 | 2026-05-29 |
| CVE-2026-49322 json | Weak authentication in the Wireless Control Module (WCM) of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows ... | Not Provided | 2026-05-29 | 2026-05-29 |
| CVE-2026-46048 json | In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: fix usb_dev refcount leak on probe failure ... | Not Provided | 2026-05-27 | 2026-06-01 |
| CVE-2026-44428 json | The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.6, the clie... | Not Provided | 2026-05-14 | 2026-05-15 |
| CVE-2026-43365 json | In the Linux kernel, the following vulnerability has been resolved: xfs: fix undersized l_iclog_roundoff values If the supe... | Not Provided | 2026-05-08 | 2026-05-11 |
| CVE-2026-43001 json | An issue was discovered in OpenStack Keystone before 29.0.2. POST /v3/credentials did not validate that the caller-supplied p... | Not Provided | 2026-05-01 | 2026-05-28 |
| CVE-2026-42897 json | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an u... | Not Provided | 2026-05-14 | 2026-05-15 |
| CVE-2026-41213 json | @node-oauth/oauth2-server is a module for implementing an OAuth2 server in Node.js. The token exchange path accepts RFC7636-i... | Not Provided | 2026-04-23 | 2026-04-25 |
| CVE-2026-40453 json | The fix for CVE-2025-27636 added setLowerCase(true) to HttpHeaderFilterStrategy so that case-variant header names such as 'CA... | Not Provided | 2026-04-27 | 2026-04-28 |
| CVE-2026-39912 json | V2Board 1.6.1 through 1.7.4 and Xboard through 0.1.9 expose authentication tokens in HTTP response bodies of the loginWithMai... | Not Provided | 2026-04-09 | 2026-04-09 |