Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

High7.1Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared PresetsCVE-2026-110865 · renovatebot · renovate · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Oct 14, 2026
Medium5.7Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to retain access when their account has been disabled.CVE-2026-4913 · NIST NVD · IvantiApr 14, 2026
Medium6.8Improper Protection of Alternate Path exists in the no-access and workdir feature of the AWS API MCP Server versions >= 0.2.14 and < 1.3.9 on all platforms may allow t…CVE-2026-4270 · amazon · aws api mcp server · CVE.org · NIST NVD · AWSMar 16, 2026
Critical9.8Yiiframework Yii Improper Protection of Alternate Path VulnerabilityCVE-2024-58136 · yiiframework · yii · CISA KEV · CVE.org · FIRST EPSS · Craft CMSKEVEPSS 87.8%Apr 9, 2025