Global Vulns · 14d
CRITICAL
16
+3 +23.08%
HIGH
16
-42 -72.41%
MEDIUM
39
-106 -73.10%
LOW
4
-25 -86.21%
KEV · TOTAL
336
+0 +0.00%
PoC · TOTAL
12,822
-14 -77.78%
PATCHED · TODAY
32
-202 -86.32%
UNPATCHED · TODAY
21
-2 -8.70%
ACT NOW · TOTAL
4,779
+3 +23.08%
Act Now CRITICAL · 10.0 Patched
LIVE · vuln.today
CVE-2026-41679 · Authentication Bypass

Remote unauthenticated attackers achieve full code execution on Paperclip AI orchestration servers (versions prior to 2026

Remote unauthenticated attackers achieve full code execution on Paperclip AI orchestration servers (versions prior to 2026.416.0) via authentication bypass through a six-step API call chain. The attack requires no credentials, no user inter

● LIVE vuln.today · Apr 23 threat 2.0
CRITICAL · 9.3
SocialEngine versions 7.8.0 and prior contain a SQL injection vulnerability in the /activity/index/get-memberall endpoint where user-supplie
CVE-2026-41460 ·Authentication Bypass unpatched
CRITICAL · 9.1
Remote code execution in Froxlor server administration software versions prior to 2
CVE-2026-41229 ·PHP patched
CRITICAL · 9.9
Authenticated customers can achieve remote code execution in Froxlor server administration software versions prior to 2
CVE-2026-41228 ·PHP patched
CRITICAL · 9.0
Remote code execution in Luanti 5
CVE-2026-41196 ·RCE patched
CRITICAL · 9.9
In hackage-server, user-controlled metadata from .cabal files are rendered into HTML href attributes without proper sanitization, enabling s
CVE-2026-40472 ·XSS unpatched
CRITICAL · 9.6
hackage-server lacked Cross-Site Request Forgery (CSRF) protection across its endpoints. Scripts on foreign sites could trigger requests to
CVE-2026-40471 ·CSRF unpatched

A critical XSS vulnerability affected hackage-server and hackage.haskell.org. HTML and JavaScript files provided in source packages or via

vuln.today · CVE-2026-40470
CRITICAL · 9.9 Act Now unpatched

Latest

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy