Vulnerabilities
NovDecJanFebMarAprMayJunJulAugSepOct
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
CyStack continuously tracks the latest global threats and develops solutions that help identify new vulnerabilities across your websites and systems.
Data is updated in the system
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Data is updated in the CyStack VulnScan system.Learn more
CVE-2026-112252Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System ws.asmx xp_cmdshell sql injectionCVE-2026-112259Gimp: gimp: null pointer dereference in swatchbooker (sbz) palette importCVE-2026-112251antoinersx clawhost Reverse Proxy reverseProxy.ts handleRequest redirectCVE-2026-109437Cognition < 0.13.0 Unauthenticated RCE via Local Shell BackendCVE-2026-112249grandnode grandnode2 Product Description Product.Layout.Simple.cshtml Html.Raw cross site scripting| Vulnerability | Exploitation status | Fix | Provider | Affected product | Published | Severity |
|---|---|---|---|---|---|---|
CVE-2026-112252Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System ws.asmx xp_cmdshell sql injection | Exploitation statusActively exploited | FixNo |
| ProviderWuxi Wubang Security Software |
| Affected productWubang Five-in-One Safety Production Management Information System |
| Published10/19/2026 |
| SeverityMedium |
CVE-2026-112259Gimp: gimp: null pointer dereference in swatchbooker (sbz) palette import | Exploitation statusNot confirmed | FixNo | Provider- | Affected product- | Published10/19/2026 | SeverityMedium |
|---|
CVE-2026-112251antoinersx clawhost Reverse Proxy reverseProxy.ts handleRequest redirect | Exploitation statusActively exploited | FixNo | Providerantoinersx | Affected productclawhost | Published10/19/2026 | SeverityMedium |
|---|
CVE-2026-109437Cognition < 0.13.0 Unauthenticated RCE via Local Shell Backend | Exploitation statusActively exploited | FixYes | ProviderCognicellAI | Affected productCognition | Published10/19/2026 | SeverityCritical |
|---|
CVE-2026-112249grandnode grandnode2 Product Description Product.Layout.Simple.cshtml Html.Raw cross site scripting | Exploitation statusNot confirmed | FixYes | Providergrandnode | Affected productgrandnode2 | Published10/19/2026 | SeverityMedium |
|---|
CVE-2026-109434Sleipnir Browser < 3.9.0 Fullscreen Address Bar Spoofing | Exploitation statusNot exploited | FixYes | ProviderFenrir | Affected productSleipnir Mobile for Android | Published10/19/2026 | SeverityMedium |
|---|
CVE-2026-110688Cpanel::JSON::XS versions from 4.51 before 4.80 for Perl allow quadratic CPU use by revalidating the remaining buffer per value in incr_parse | Exploitation statusNot confirmed | FixYes | Provider- | Affected productCpanel-JSON-XS | Published10/19/2026 | SeverityUnknown |
|---|
CVE-2026-110687Cpanel::JSON::XS versions from 4.43 before 4.80 for Perl misorder byte-string keys during canonical encoding in utf16_cmp | Exploitation statusNot confirmed | FixYes | Provider- | Affected productCpanel-JSON-XS | Published10/19/2026 | SeverityUnknown |
|---|
CVE-2026-110686Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter removes itself during decoding in decode_hv | Exploitation statusNot confirmed | FixYes | Provider- | Affected productCpanel-JSON-XS | Published10/19/2026 | SeverityUnknown |
|---|
CVE-2026-110685Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its THAW method dies in decode_tag | Exploitation statusNot confirmed | FixYes | Provider- | Affected productCpanel-JSON-XS | Published10/19/2026 | SeverityUnknown |
|---|
410,182 Results | Page 1 of 41,019