Known Vulnerabilities for X Server by X.org
Listed below are 10 of the newest known vulnerabilities associated with "X Server" by "X.org".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-115752 json | Signal K Server from 2.28.0-beta.2 before 2.34.0 contains a server-side request forgery vulnerability in the App Store icon f... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2026-115751 json | Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerability that allows attacker... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2026-115729 json | @pdfme/common from 5.5.10 before 6.2.6 contains a server-side request forgery vulnerability that allows attackers to bypass t... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2026-115727 json | AgenticSeek before commit 409840c contains a remote code execution vulnerability because llm_server/app.py hardcodes Flask de... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2026-115657 json | When used as an executor in either KNIME Server or KNIME Business Hub, KNIME Analytics Platform LTS versions before 5.8.4 log... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2026-115508 json | Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server that... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-115505 json | libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerpc.c that allow heap out-o... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-115497 json | The Music Store – WordPress eCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and ... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2026-115479 json | baserCMS is a website development framework. In versions 5.2.5 before 5.3.2 and 5.4.0 before 5.4.2, an unauthenticated visito... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2026-115478 json | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.0.1 until 1.31.4, `create_en... | Not Provided | 2026-10-23 | 2026-10-23 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | X.org | X Server | 1.9.99.903 | |||
| Application | X.org | X Server | 1.9.99.902 | |||
| Application | X.org | X Server | 1.9.99.901 | |||
| Application | X.org | X Server | 1.9.5 | |||
| Application | X.org | X Server | 1.9.4.901 | |||
| Application | X.org | X Server | 1.9.4 | |||
| Application | X.org | X Server | 1.9.3.902 | |||
| Application | X.org | X Server | 1.9.3.901 | |||
| Application | X.org | X Server | 1.9.3 | |||
| Application | X.org | X Server | 1.9.2.902 | |||
| Application | X.org | X Server | 1.9.2.901 | |||
| Application | X.org | X Server | 1.9.2 | |||
| Application | X.org | X Server | 1.9.1 | |||
| Application | X.org | X Server | 1.9.0.902 | |||
| Application | X.org | X Server | 1.9.0.901 | |||
| Application | X.org | X Server | 1.9.0 | |||
| Application | X.org | X Server | 1.8.99.906 | |||
| Application | X.org | X Server | 1.8.99.905 | |||
| Application | X.org | X Server | 1.8.99.904 | |||
| Application | X.org | X Server | 1.8.99.903 |