Verified Advisories

Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 681 total.

Severity: All Critical High

Library: langflow_oss 22 siyuan 20 Java 19 grav 14 flowise 14 code.gitea.io/gitea 12 Dwr M961 11 SurrealDB 10 openclaw 10 lxd 9 mongodb_server 7 rsync 6 apache_fory 6 freerdp 6 avi_load_balancer 6 Docker 6 linux 6 intellij_idea 5 datacycle_core 5 Grav 5

CVE-2026-13738 CRITICAL CVSS 9.2 Verified Advisory Aug 11, 2026

Authorization bypass in Commvault CommServe command execution (CVE-2026-13738)

CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. The flaw carries a CVSS score of 9.2 (Critical) and could allow unauthorized command execution on affe...

Fixed in 11.46.10 and above; 11.44.11 and above; 11.40.63 and above; 11.36.114 and above

Authentication Bypass Commvault Commvault Cloud

CVE-2026-13737 CRITICAL CVSS 9.2 Verified Advisory Aug 11, 2026

Command restriction bypass in Commvault CommServe (CVE-2026-13737)

CommServe contained an allowlist bypass vulnerability affecting command execution authorization. The flaw is rated Critical (CVSS 9.2) and could allow unauthorized command execution by circumventing authorization cont...

Fixed in 11.46.10 and above; 11.44.11 and above; 11.40.63 and above; 11.36.114 and above

Authentication Bypass Commvault Commvault Cloud

CVE-2026-72904 CRITICAL CVSS 9.3 Verified Advisory Aug 10, 2026

Arbitrary file read via JSON Schema $ref expansion in Firecrawl (CVE-2026-72904)

Firecrawl's extraction functionality unsafely dereferences user-supplied JSON schemas using @apidevtools/json-schema-ref-parser with default resolver settings, allowing local file and remote URL references to be resol...

Fixed in 2.11.32

Command Injection SSRF Firecrawl

CVE-2026-23600 CRITICAL CVSS 10.0 Verified Advisory Aug 10, 2026

Remote authentication bypass in HPE AutoPass License Server (CVE-2026-23600)

A remote authentication bypass vulnerability exists in HPE AutoPass License Server (APLS). The vulnerability can be exploited remotely without authentication, posing a risk to the confidentiality, integrity, and avail...

Fixed in HPE AutoPass License Server (APLS) 9.19

Authentication Bypass Hpe Autopass License Server

CVE-2026-72901 CRITICAL CVSS 9.9 Verified Advisory Aug 10, 2026

OS command injection in Dokploy volume-backup feature (CVE-2026-72901)

An OS command injection vulnerability in Dokploy's volume-backup feature allows any authenticated low-privilege member to execute arbitrary commands on the control-plane host. The `volumeName` field accepted by `volum...

Fixed in v0.29.13

Command Injection Docker Dokploy

CVE-2026-10025 CRITICAL CVSS 9.8 Verified Advisory Aug 10, 2026

XML External Entity injection in IBM QRadar SIEM (CVE-2026-10025)

IBM QRadar SIEM contains an XXE injection vulnerability in the `parseXmlPayload()` function within the event processing pipeline (`q1labs_core.jar`). When XML-format property autodetection is enabled on at least one l...

Fixed in 7.6.0.2; 7.5.0 UP15 IF05 Hotfix 20260715231428

IBM XXE Qradar

CVE-2026-72864 CRITICAL CVSS 9.9 Verified Advisory Aug 10, 2026

Broken access control in Dokploy docker-container-terminal WebSocket (CVE-2026-72864)

The local branch of the `/docker-container-terminal` WebSocket endpoint in Dokploy authenticates connections using `validateRequest` but performs no authorization check against the caller's role, organization, or serv...

Fixed in v0.29.13

Authentication Bypass Docker Dokploy

CVE-2026-72899 CRITICAL CVSS 10.0 Verified Advisory Aug 10, 2026

SQL injection in Metabase via publicly shared field-filter parameter (CVE-2026-72899)

An unauthenticated attacker can inject arbitrary SQL into the Metabase application database through a publicly shared card or dashboard that exposes a field-filter (dimension) parameter. Exploiting only the public lin...

Fixed in x.58.24; x.59.21; x.60.17; x.61.11; x.62.9; x.63.5

SQLi Metabase

CVE-2026-72898 CRITICAL CVSS 10.0 Verified Advisory Aug 10, 2026

SQL injection via unauthenticated endpoint in Metabase (CVE-2026-72898)

Metabase contains a SQL injection vulnerability in the `/api/session/reset_password` endpoint that can be exploited by a remote, unauthenticated attacker. Successful exploitation allows the attacker to inject arbitrar...

Fixed in x.58.24; x.59.21; x.60.17; x.61.11; x.62.9; x.63.5

SQLi Metabase

CVE-2026-17617 CRITICAL CVSS 9.8 Verified Advisory Aug 10, 2026

Server-Side Request Forgery in IBM Application Gateway Operator (CVE-2026-17617)

IBM Application Gateway Operator is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of URLs specified in custom resources (CWE-918). An authenticated remote attacker could exploit this ...

Fixed in 26.07.01

SSRF IBM Application Gateway Operator

CVE-2026-47754 CRITICAL CVSS 9.3 Verified Advisory Aug 10, 2026

Unauthenticated path traversal in Metacat 2.x (CVE-2026-47754)

Metacat versions 2.x through 2.19.1 and all 1.x versions contain an unauthenticated path traversal vulnerability in the `archiveEntryName` parameter of the `action=read` endpoint of the legacy 1.x API. `ArchiveHandler...

Fixed in >= 3.0.0

Path Traversal Tomcat Metacat

CVE-2026-61899 HIGH CVSS 7.5 Verified Advisory Aug 10, 2026

Classpath file disclosure via URL manipulation in Apache Tapestry (CVE-2026-61899)

A vulnerability in tapestry-core allows remote attackers to download classpath assets by sending specially crafted URLs. This exposes potentially sensitive files from the application classpath without authentication.

Fixed in 5.9.1

Apache Information Disclosure Apache Software Foundation Apache Tapestry

dwr_m961 8 CVEs from one advisory advisory

CVE-2026-71956 CRITICAL CVSS 9.3 Verified Advisory Aug 08, 2026

Command injection in D-Link DWR-M961 app.cgi interface (CVE-2026-71956)

The D-Link DWR-M961 (hardware revision C1, firmware 1.1.2_C1_202602110044) contains a command injection vulnerability in the app.cgi interface. A remote attacker can inject arbitrary malicious commands via the netDig....