Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Unknownhex_core's default HTTP adapter doesn't verify TLS certificates on OTP 24 and 25CVE-2026-103502 · CVE.org · FIRST EPSS · GitHub Advisory Database · HexEPSS 0.2%Oct 12, 2026
Low3.5The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.CVE-2026-45781 · CVE.org · NIST NVDMay 14, 2026
High7.6Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.CVE-2026-42246 · ruby-lang · net · CVE.org · NIST NVDMay 9, 2026
High7.7OpenClaw before 2026.4.8 contains an approval-timeout fallback mechanism that bypasses strictInlineEval explicit-approval requirements on gateway and node exec hosts.CVE-2026-42423 · openclaw · openclaw · CVE.org · NIST NVDApr 28, 2026
Medium5.1OpenClaw before 2026.3.31 contains a fail-open vulnerability in the plugin installation flow where security scan failures do not block installation.CVE-2026-41377 · openclaw · openclaw · CVE.org · NIST NVDApr 28, 2026
High7.1OpenClaw before 2026.3.31 contains a decompression bomb vulnerability in image processing that fails to properly enforce pixel-limit guards on sips.CVE-2026-41334 · openclaw · openclaw · CVE.org · NIST NVDApr 23, 2026
Critical9.1OpenViking prior to version 0.3.9 contains an authentication bypass vulnerability in the VikingBot OpenAPI HTTP route surface where the authentication check fails open…CVE-2026-40525 · volcengine · openviking · CVE.org · NIST NVDApr 17, 2026
Medium6.9free5GC is an open-source implementation of the 5G core network.CVE-2026-40249 · free5gc · free5gc · CVE.org · NIST NVDApr 16, 2026
High8.7free5GC is an open-source implementation of the 5G core network.CVE-2026-40248 · free5gc · free5gc · CVE.org · NIST NVDApr 16, 2026
High8.7free5GC is an open-source implementation of the 5G core network.CVE-2026-40247 · free5gc · free5gc · CVE.org · NIST NVDApr 16, 2026
High8.4Helm is a package manager for Charts for Kubernetes.CVE-2026-35205 · helm · helm · CVE.org · NIST NVD · KubernetesApr 9, 2026
High7.5fast-jwt provides fast JSON Web Token (JWT) implementation.CVE-2026-35042 · nearform · fast-jwt · CVE.org · NIST NVDApr 6, 2026
Low2.0OpenClaw before 2026.3.11 contains a credential fallback vulnerability where unavailable local gateway.auth.token and gateway.auth.password SecretRefs are treated as u…CVE-2026-32970 · openclaw · openclaw · CVE.org · NIST NVDMar 31, 2026
Low1.7pyOpenSSL is a Python wrapper around the OpenSSL library.CVE-2026-27448 · pyopenssl · pyopenssl · CVE.org · NIST NVD · OpenSSL, PythonMar 18, 2026
Medium4.9An administrator may attempt to block all traffic by configuring a pass filter with an empty table.CVE-2025-41760 · mbs-solutions · universal bacnet router firmware · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Mar 9, 2026
Medium4.9An administrator may attempt to block all networks by specifying "\*" or "all" as the network identifier.CVE-2025-41759 · mbs-solutions · universal bacnet router firmware · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Mar 9, 2026