@clerk Express vulnerabilities

• @clerk express, ubiquiti inc cloud gateways, dream machines +5 more +7 more A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability... CVE-2026-95862 7.5 HighSeptember 22, 2026
• @clerk express, ubiquiti inc cloud gateways, dream machines +5 more +7 more A malicious actor with access to the network could exploit an Uncontrolled Recursion... CVE-2026-95861 7.5 HighSeptember 22, 2026
• @clerk express, ubiquiti inc cloud gateways, dream machines +5 more +7 more A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability... CVE-2026-77558 7.5 HighSeptember 22, 2026
• @clerk express, ubiquiti inc cloud gateways, dream machines +5 more +7 more A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability... CVE-2026-77556 7.5 HighSeptember 22, 2026
• @clerk express, ubiquiti inc cloud gateways, dream machines +5 more +7 more A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability... CVE-2026-77555 7.5 HighSeptember 22, 2026
• @clerk express, ubiquiti inc cloud gateways, dream machines +5 more +7 more A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability... CVE-2026-77544 7.5 HighSeptember 22, 2026
• @clerk express, ubiquiti inc cloud gateways, cloud keys +11 more +13 more A malicious actor with access to the network could exploit an Improper Neutralization of CRLF... CVE-2026-77550 10.0 CriticalAugust 26, 2026
• @clerk express, ubiquiti inc cloud gateways, cloud keys +11 more +13 more A malicious actor with access to the network and under certain conditions could exploit an... CVE-2026-77549 9.0 CriticalAugust 26, 2026
• @clerk express, free5gc udm, udr +29 more +31 more A malicious actor with access to the network and low privileges could exploit an Improper Input... CVE-2026-47370 9.9 CriticalJune 12, 2026
• @clerk express, free5gc udm, udr +29 more +31 more A malicious actor with access to the network and low privileges could exploit an Improper Input... CVE-2026-47369 9.9 CriticalJune 12, 2026
• @clerk express, free5gc udm, udr +29 more +31 more A malicious actor with access to the network could exploit a Path Traversal vulnerability found... CVE-2026-47368 8.6 HighJune 12, 2026
• ubiquiti unifi os, @clerk express, free5gc udm +61 more +63 more A malicious actor with access to the network could exploit a Path Traversal vulnerability found... CVE-2026-34909 In KEV EPSS 68.0% 10.0 CriticalMay 22, 2026
• @clerk backend, nextjs, shared +31 more +33 more Clerk: Authorization bypass when combining organization, billing, or reverification checks CVE-2026-42349 Fix available 7.6 HighApril 30, 2026
• @clerk express Smoothwall Express < 3.1 Update 13 Reflected XSS in redirect.cgi via url Parameter CVE-2026-27508 5.1 MediumMarch 30, 2026
• @clerk express Smoothwall Express < 3.1 Update 13 Stored XSS in vpnmain.cgi via VPN_IP Parameter CVE-2026-26352 5.1 MediumMarch 30, 2026
• @clerk express Preload arbitrary resources by injecting additional `Link` headers CVE-2024-10491 Fix available 4.0 MediumOctober 29, 2024
• @clerk express Open Redirect CVE-2024-9266 Fix available 4.7 MediumOctober 3, 2024
• @clerk express express vulnerable to XSS via response.redirect() CVE-2024-43796 Fix available 5.0 MediumSeptember 10, 2024
• @clerk express Express.js Open Redirect in malformed URLs CVE-2024-29041 Fix available 6.1 MediumMarch 25, 2024