CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to authorization bypass in Calendar Block since action_get_events does not check canView on the calendar6.3 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to Authorization Bypass in the Calendar Event Frontend Dialog6.3 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete 9.5.0 and below has file usage disclosure via missing permission check in Usage controller6.9 Medium
- hulumi policies@hulumi/policies before 1.3.2 Evidence Validation Bypass9.3 Critical
- hulumi policies@hulumi/policies before 1.3.2 OIDC Trust Policy Bypass9.3 Critical
- hulumi policies@hulumi/policies before 1.3.2 Admin Policy Bypass9.3 Critical
- hulumi policies@hulumi/policies before 1.3.2 SecureBucket Parent Spoof Bypass8.7 High
- hulumi drift@hulumi/drift before 1.3.2 Unsafe Execute Plan Acceptance9.3 Critical
- hulumi baseline@hulumi/baseline before 1.3.2 CloudTrail Selector Tampering Detection8.7 High
- umbraco cms, umbraco-cms +1 moreUmbraco.Cms: XSS/HTML Injection in Umbraco Backoffice confirmation dialog4.6 Medium
- flaskbbFlaskBB: SSRF in get_image_info() via unrestricted avatar URL6.5 Medium
- nocodbNocoDB: Stale Auth Cache After API Token Deletion2.3 Low
- nocodbNocoDB: Attachment Size Limit Bypass via Upload-by-URL2.1 Low
- nocodbNocoDB: Shared-base link access can invite arbitrary users as persistent base members5.8 Medium
- nocodbNocoDB: Missing File Size Enforcement in Upload-by-URL Allows Denial of Service via Disk Exhaustion6.5 Medium
- nocodbNocoDB: Refresh Token Cookie Set Without `Secure` and `SameSite` Flags5.4 Medium
- nocodbNocoDB: OAuth Token Scope Not Enforced at ACL Layer Allows Scope Escalation2.0 Low
- berriai litellm, red hat exploit intelligence, ansible automation platform 2 +1 more +3 moreLiteLLM < 1.83.10 Privilege Escalation via User Update8.7 High
- nocodbNocoDB: SSRF Protection Bypass in Notification Webhook Plugins (Slack, Discord, Mattermost, Teams)4.3 Medium
- nocodbNocoDB: Reflected Cross-Site Scripting via Page Leaving Redirect URL6.1 Medium
- flux159 mcp-server-kubernetesmcp-server-kubernetes Affected By Tool Access Control Bypass: Presentation-Layer Filtering Without Execution-Layer Enforcement8.8 High
- berriai litellm, red hat exploit intelligence, ansible automation platform 2 +1 more +3 moreLiteLLM < 1.83.14 Privilege Escalation via API Key Generation8.7 High
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below has Stored XSS on the height parameter7.3 High
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to Stored XSS via OAuth integration name7.3 High
- authzed spicedbSpiceDB: Caveat structures with nested lists can result in improper cache reuse2.3 Low
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to missing authorization in the bulk_user_assignment.php which can lead to privilege escalation to Administrative Group7.5 High
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to CSRF on install_package() with conditional token bypass leading to RCE7.5 High
- plonky3Plonky3 MultiField32Challenger: transcript malleability and challenge entropy loss8.9 High
- concrete cms cms, concretecms concrete cms +1 moreCSRF token is not validated in the core CMS update controller for Concrete CMS 9.5.0 and below7.5 High
- knplabs snappySnappy: Binary path is never shell-escaped due to an inverted is_executable check7.5 High
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to CSRF on prepare_remote_upgrade() leading to one-request RCE via package overwrite7.5 High
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to CSRF on download() in the package install controller7.5 High
- knplabs snappySnappy: SSRF and local file read via the xsl-style-sheet option6.9 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to CSRF in do_update() in the package update controller7.5 High
- fissionFission builder accepts arbitrary buildcmd strings from Environment.spec.builder.command, allowing the builder pod to invoke arbitrary executables6.9 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to RCE due to insecure deserialization occurring in the ExpressEntryList block controller.8.9 High
- fissionFission runtime pods automount the fission-fetcher service-account token into the user function container, granting function code namespace-wide secret / configmap read8.7 High
- fissionFission router exposes /fission-function/<ns>/<name> on its public listener, allowing invocation of any function without an HTTPTrigger9.8 Critical
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to Authenticated RCE via Composer customTemplate Path Traversal leading to PHP File Inclusion9.4 Critical
- fissionFission StorageSvc /v1/archive endpoint exposes unauthenticated CRUD over all function archives8.8 High
- umbraco cms, umbraco-cms +1 moreUmbraco.Cms: Open Redirect Vulnerability in Surface Controllers5.4 Medium
- pyloadpyLoad: SSRF via HTTP Redirect Bypass in parse_urls API5.0 Medium
- nimiq core-rs-albatrossnimiq-primitives: Panic DoS in trie chunk processing via ROOT-keyed item7.5 High
- nimiq core-rs-albatrossnimiq-blockchain: Genesis batch set request5.3 Medium
- nimiq core-rs-albatrossnimiq-keys: Denial of service in Ed25519 multisig delinearization via invalid curve points4.3 Medium
- nimiq core-rs-albatrossnimiq-primitives: BlockInclusionProof interlink issue when hops are empty5.9 Medium
- iinaIINA < 1.4.3 Command Execution via iina://open URL Scheme8.6 High
- internlm lmdeployLMDeploy: Hardcoded trust_remote_code=True is an implicit unsafe remote-code load path with no user opt-out7.8 High
- mrdollar4444 gsheet for woo importerGSheet For Woo Importer <= 2.3.1 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Reset4.3 Medium
- apify crawlee-pythonSSRF via sitemap-derived URLs in Crawlee for Python2.3 Low
- Show moreLoading…