Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 263 total.
Path traversal in Apache Jena Fuseki via SPARQL Update requests (CVE-2026-61372)
A path traversal vulnerability in Apache Jena Fuseki allows web requests using SPARQL Update to escape file restrictions. An attacker may leverage this to access files outside of the intended restricted directory. The...
Fixed in 6.2.0
OS command execution via trigger scripts in ArcadeDB (CVE-2026-67340)
ArcadeDB's ScriptTriggerExecutor permits trigger scripts to access the java.lang.* package, enabling host-class lookups via Java.type(). An authenticated user holding UPDATE_SCHEMA permission can create a JavaScript t...
Fixed in 26.7.2
JSON hijacking in Apache JSPWiki (CVE-2026-28813)
Apache JSPWiki is vulnerable to JSON hijacking, a technique that exposes JSON responses to unauthorized cross-origin reads. This vulnerability leads to CSRF vulnerabilities, potentially allowing attackers to perform u...
Fixed in 2.12.4
Unauthenticated Wiki Markup rendering in Apache JSPWiki (CVE-2026-28814)
Apache JSPWiki up to version 2.12.3 permits arbitrary Wiki Markup rendering due to a lack of authentication. An unauthenticated attacker can exploit this flaw to obtain sensitive data stored in JSPWiki variables.
Fixed in 2.12.4
Arbitrary code execution in JetBrains PyCharm via malicious Python executable (CVE-2026-65908)
JetBrains PyCharm contains a vulnerability that allows arbitrary code execution through a malicious Python executable when an untrusted project is opened. This flaw poses a risk to users who open projects from untrust...
Fixed in 2026.1.4
Arbitrary code execution in JetBrains GoLand Go Modules integration (CVE-2026-64802)
JetBrains GoLand before version 2026.2 is vulnerable to arbitrary code execution via the Go Modules integration. The vulnerability can be triggered before a user grants project trust, meaning malicious code could exec...
Fixed in 2026.2
Arbitrary code execution in JetBrains WebStorm via linter configuration (CVE-2026-64807)
JetBrains WebStorm before version 2026.2 contains a vulnerability that allows arbitrary code execution via a project-supplied linter configuration. An attacker could exploit this by providing a malicious linter config...
Fixed in 2026.2
Arbitrary code execution in JetBrains PhpStorm before project trust (CVE-2026-64808)
JetBrains PhpStorm contains a vulnerability that allows arbitrary code execution to occur before a user has granted project trust via project tooling. This flaw could enable malicious code embedded in a project to exe...
Fixed in PhpStorm 2026.2
Arbitrary code execution in JetBrains IntelliJ IDEA via dev container configuration (CVE-2026-64811)
JetBrains IntelliJ IDEA contains a vulnerability that allows arbitrary code execution through development container configuration before the user has granted project trust. An attacker who can supply a malicious proje...
Fixed in 2026.2
Arbitrary code execution in JetBrains PhpStorm before project trust (CVE-2026-64809)
A vulnerability in JetBrains PhpStorm allows arbitrary code execution before a user has granted project trust, triggered via the configured interpreter. This bypasses the project trust security boundary, potentially a...
Fixed in 2026.2
Unauthorized file access in JetBrains IntelliJ IDEA Remote Development (CVE-2026-64814)
JetBrains IntelliJ IDEA before version 2026.2 contains a vulnerability that allows unauthorized file access during a Remote Development session. An attacker exploiting this flaw could access files without proper autho...
Fixed in 2026.2
Path traversal in SiYuan /export/temp/ short-circuit branch (CVE-2026-65607)
SiYuan's serveExport handler contains a short-circuit branch for /export/temp/ requests that joins the raw percent-decoded request path with util.TempDir and serves files without the IsSubPath or IsSensitivePath check...
Fixed in v3.7.2
Remote code execution in Grav CMS via unchecked callable in FlexDirectory (CVE-2026-65608)
A missing validation check in `FlexDirectory::dynamicDataField()` allows the method to resolve blueprint `data-*@:` directives by calling `call_user_func_array()` on attacker-influenced input, verifying only that the ...
Fixed in 2.0.9
Broken access control in Grav API Plugin configuration scopes (CVE-2026-65895)
The Grav API Plugin's ConfigController fails to restrict the `plugins/api` configuration scope to the `api.super` privilege, allowing authenticated users holding only `api.config.write` to modify the API plugin's own ...
Fixed in 1.0.10
Path traversal in Grav API Plugin POST /pages/{route}/move endpoint (CVE-2026-65896)
The Grav API Plugin fails to properly sanitize the `slug` field in the `PagesController::move()` method, stripping only leading period characters via `ltrim()` while leaving `/` and `..` path segments unfiltered. An a...
Fixed in 1.0.10
Privilege escalation via unvalidated groups field in Grav API Plugin (CVE-2026-65897)
InvitationsController::create() in the Grav API Plugin applies super-admin flag stripping to the `access` field but performs no equivalent authority check on the `groups` field, accepting it verbatim from the request ...
Fixed in 1.0.10
Broken access control in WordPress WP Booking System plugin (CVE-2026-57367)
The WP Booking System WordPress plugin contains a broken access control vulnerability exploitable by subscriber-level users. This flaw allows lower-privileged authenticated users to perform actions or access resources...
Fixed in 5.12.8.1
Path prefix check bypass allows sibling directory escape in ViewComponent (CVE-2026-44837)
The system test entrypoint in ViewComponent canonicalizes a user-supplied file path with `File.realpath` and then validates it using `String#start_with?` against the temp directory path. Because sibling directories ca...
Fixed in 4.9.0
Denial of service via mod_fastcgi in IBM HTTP Server (CVE-2026-8852)
IBM HTTP Server 8.5 and 9.0 is vulnerable to denial of service through the optional mod_fastcgi module due to a reachable assertion (CWE-617). Exploitation of this vulnerability can result in loss of availability of t...
Fixed in Fix Pack 9.0.5.29 or later; Fix Pack 8.5.5.30 or later
Denial of service in Tanium Server via file descriptor exhaustion (CVE-2026-9156)
A denial of service vulnerability exists in Tanium Server that allows an unauthenticated attacker with network access to craft messages that exhaust server file descriptors and memory. Successful exploitation could re...
Fixed in 2024H2 Release: Update 25 (Tanium Server v7.6.4.2190); 2025H1 Release: Update 19 (Tanium Server v7.7.3.8274); 2025H2 Release: Update 9 (Tanium Server v7.8.2.1176); 2026H1 Release: Update 0 (Tanium Server v7.8.4.1298)