Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

High8.1WeGIA is a web manager for charitable institutions.CVE-2026-55682 · LabRedesCefetRJ · WeGIA · CVE.org · NIST NVDOct 14, 2026
High8.6Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack authenticated sessions by planting a known sess…CVE-2026-63161 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Oct 13, 2026
Critical9.1IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2.0 feature is enabled.CVE-2026-93909 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Oct 13, 2026
Medium6.8AsyncHttpClient: Cookies received over plaintext HTTP can plant, overwrite or delete Secure cookies set over HTTPSCVE-2026-107226 · CVE.org · FIRST EPSS · GitHub Advisory Database · mavenEPSS 0.4%Oct 8, 2026
Critical9.4Zammad GmbH Zammad Session Fixation VulnerabilityCVE-2026-102489 · Zammad GmbH · Zammad · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 1.3%Sep 30, 2026