Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

UnknownGitea resolves local reusable workflow files from a fork's head commit when a trusted base-branch workflow runs for a pull_request_target event.CVE-2026-73800 · CVE.org · NIST NVDOct 14, 2026
High7.2Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2026-70267 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · microsoftEPSS 0.9%Oct 13, 2026
High7.1omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files placed into ~/.local/state/omarchy/current/theme may includ…CVE-2026-108913 · CVE.org · NIST NVDOct 11, 2026
Critical9.8Langflow Inclusion of Functionality from Untrusted Control Sphere VulnerabilityCVE-2026-0770 · Langflow · Langflow · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 63.0%Jan 22, 2026
Critical9.4n8n is an open source workflow automation platform.CVE-2025-65964 · n8n · n8n · CVE.org · FIRST EPSS · NIST NVDEPSS 0.7%Dec 9, 2025
High7.8Sudo Inclusion of Functionality from Untrusted Control Sphere VulnerabilityCVE-2025-32463 · Sudo · Sudo · CISA KEV · CVE.org · FIRST EPSS · debian, linuxKEVEPSS 55.5%Jun 30, 2025