Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

High8.9Affected systems do not properly restrict access to internal APIs and paths for authenticated users.CVE-2026-44415 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.5%Oct 13, 2026
Critical10.0GitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityCVE-2026-85706 · GitLab · Community Edition and Enterprise Edition · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 93.0%Sep 11, 2026
Critical9.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2026-45495 · microsoft · edge chromium · CVE.org · FIRST EPSS · NIST NVD · chrome, microsoftEPSS 1.0%May 18, 2026
Critical9.1SGLangs multimodal generation runtime is vulnerable to an unauthenticated path traversal vulnerability, allowing an attacker to write arbitrary files anywhere the serv…CVE-2026-7302 · lmsys · sglang · CVE.org · FIRST EPSS · NIST NVDEPSS 0.6%May 18, 2026
Medium5.1A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a23d57a8cba.CVE-2025-66004 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Dec 10, 2025
High8.4RARLAB WinRAR Path Traversal VulnerabilityCVE-2025-8088 · rarlab · winrar · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 94.3%Aug 8, 2025