Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.4A vulnerability was detected in Tenda FH1201 1.2.0.14(408).Check if you run itEPSS 0.67%Mar 29, 2026
- High7.4A security vulnerability has been detected in Belkin F9K1122 1.00.33.Check if you run itEPSS 0.68%Mar 29, 2026
- High8.6OpenClaw before 2026.3.12 embeds long-lived shared gateway credentials directly in pairing setup codes generated by /pair endpoint and OpenClaw qr command.Check if you run itEPSS 0.25%Mar 29, 2026
- Medium5.8OpenClaw before 2026.3.8 contains a path traversal vulnerability in the skills download installer that validates the tools root lexically but reuses the mutable path d…Check if you run itEPSS 0.09%Mar 29, 2026
- High8.7OpenClaw before 2026.3.11 contains an authorization bypass vulnerability in the gateway agent RPC that allows authenticated operators with operator.write permission to…Check if you run itEPSS 0.30%Mar 29, 2026
- Medium6.8OpenClaw before 2026.2.17 creates session transcript JSONL files with overly broad default permissions, allowing local users to read transcript contents.Check if you run itEPSS 0.12%Mar 29, 2026
- Critical9.3OpenClaw before 2026.3.13 allows bootstrap setup codes to be replayed during device pairing verification in src/infra/device-bootstrap.ts.Check if you run itEPSS 0.36%Mar 29, 2026
- High8.7OpenClaw before 2026.3.13 reads and buffers Telegram webhook request bodies before validating the x-telegram-bot-api-secret-token header, allowing unauthenticated atta…Check if you run itEPSS 0.54%Mar 29, 2026
- High7.0OpenClaw before 2026.3.11 contains an approval integrity vulnerability allowing attackers to execute rewritten local code by modifying scripts between approval and exe…Check if you run itEPSS 0.13%Mar 29, 2026
- Critical9.4OpenClaw before 2026.3.11 contains an approval integrity vulnerability where system.run approvals fail to bind mutable file operands for certain script runners like tsx and jiti.Check if you run itEPSS 0.18%Mar 29, 2026
- Medium6.9OpenClaw before 2026.3.12 contains a weak authorization vulnerability in Zalouser allowlist mode that matches mutable group display names instead of stable group identifiers.Check if you run itEPSS 0.34%Mar 29, 2026
- High8.8OpenClaw before 2026.3.12 contains an authentication bypass vulnerability in Feishu webhook mode when only verificationToken is configured without encryptKey, allowing…Check if you run itEPSS 0.25%Mar 29, 2026
- High8.8OpenClaw before 2026.3.11 contains an exec allowlist bypass vulnerability where matchesExecAllowlistPattern improperly normalizes patterns with lowercasing and glob ma…Check if you run itEPSS 0.41%Mar 29, 2026
- High7.1OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing authenticated operators with only operator.write permission to access admin-only brow…Check if you run itEPSS 0.29%Mar 29, 2026
- Medium6.9OpenClaw before 2026.3.12 contains an authorization bypass vulnerability where Feishu reaction events with omitted chat_type are misclassified as p2p conversations ins…Check if you run itEPSS 0.32%Mar 29, 2026
- Medium5.3OpenClaw before 2026.3.11 contains an authorization bypass vulnerability in Discord guild reaction ingestion that fails to enforce member users and roles allowlist checks.Check if you run itEPSS 0.15%Mar 29, 2026
- Critical9.4OpenClaw before 2026.3.11 contains a privilege escalation vulnerability in device.token.rotate that allows callers with operator.pairing scope to mint tokens with broa…Check if you run itEPSS 0.73%Mar 29, 2026
- Medium6.9OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing write-scoped callers to reach admin-only session reset logic.Check if you run itEPSS 0.10%Mar 29, 2026
- Critical9.2OpenClaw before 2026.3.11 contains a session sandbox escape vulnerability in the session_status tool that allows sandboxed subagents to access parent or sibling session state.Check if you run itEPSS 0.10%Mar 29, 2026
- Critical9.3OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability allowing leaf subagents to access the subagents control surface and resolve against parent r…Check if you run itEPSS 0.14%Mar 29, 2026
- High8.7OpenClaw before 2026.3.12 contains an insufficient access control vulnerability in the /config and /debug command handlers that allows command-authorized non-owners to…Check if you run itEPSS 0.26%Mar 29, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: rust_binder: call set_notification_done() without proc lock Consider the following sequence of even…Check if you run itEPSS 0.09%Mar 29, 2026
- High7.4A weakness has been identified in Belkin F9K1122 1.00.33.Check if you run itEPSS 0.82%Mar 29, 2026
- High7.4A security flaw has been discovered in Belkin F9K1122 1.00.33.Check if you run itEPSS 0.70%Mar 29, 2026
- Low2.0A vulnerability was identified in code-projects Chamber of Commerce Membership Management System 1.0.Check if you run itEPSS 2.16%Mar 29, 2026
Sort