Find a CVE
140 CVE numbers appear in the tool pages. Each is linked to the tools that cover it. A tool covers a CVE when it checks for it, hunts for it or protects against it; a few CVEs are covered by more than one tool.
| CVE | Covered by |
|---|---|
CVE-2026-119568 | vsftpd |
CVE-2026-116019 | Grav |
CVE-2026-115560 | PHP2Shell |
CVE-2026-115506 | libexpat |
CVE-2026-115377 | Incus |
CVE-2026-115375 | Incus |
CVE-2026-115372 | Incus |
CVE-2026-114716 | Roundcube |
CVE-2026-114658 | Grav |
CVE-2026-114624 | baserCMS |
CVE-2026-114622 | baserCMS |
CVE-2026-114621 | baserCMS |
CVE-2026-114612 | LiteLLM |
CVE-2026-114509 | Laravel TokenGuard |
CVE-2026-114140 | Jupyter and nbconvert |
CVE-2026-114139 | Sentry for Next.js |
CVE-2026-114138 | Django REST framework |
CVE-2026-114137 | Django REST framework |
CVE-2026-114135 | Jupyter and nbconvert |
CVE-2026-114126 | Storybook |
CVE-2026-113500 | WordPress core and plugins |
CVE-2026-112900 | Pillow |
CVE-2026-112777 | Craft CMS |
CVE-2026-112408 | SageMaker SDK |
CVE-2026-112327 | WordPress core and plugins |
CVE-2026-112242 | WordPress core and plugins |
CVE-2026-112241 | WordPress core and plugins |
CVE-2026-112212 | GitLab |
CVE-2026-111943 | eMudhra CA compromise |
CVE-2026-111862 | WordPress core and plugins |
CVE-2026-111813 | Apache Traffic Server |
CVE-2026-111811 | Apache Traffic Server |
CVE-2026-111497 | Brotli, Node.js |
CVE-2026-110653 | WordPress core and plugins |
CVE-2026-110447 | Nextcloud Collabora |
CVE-2026-110372 | WordPress core and plugins |
CVE-2026-110353 | HAProxy |
CVE-2026-110264 | GitLab, Ruby and GitLab regexp |
CVE-2026-109619 | PHP2Shell, PHP2Shell edge guards |
CVE-2026-109618 | PHP2Shell, PHP2Shell edge guards |
CVE-2026-109553 | Gitea |
CVE-2026-109518 | APT |
CVE-2026-108551 | openapi-typescript-codegen |
CVE-2026-108099 | Drupal |
CVE-2026-108097 | Drupal |
CVE-2026-106074 | Node.js |
CVE-2026-106073 | Node.js |
CVE-2026-106072 | Node.js |
CVE-2026-106071 | Node.js |
CVE-2026-106070 | Node.js |
CVE-2026-106069 | Node.js |
CVE-2026-105944 | Apache Pulsar |
CVE-2026-105942 | Apache Pulsar |
CVE-2026-105869 | Apache Pulsar |
CVE-2026-105483 | Node.js |
CVE-2026-105482 | Node.js |
CVE-2026-105481 | Node.js |
CVE-2026-103849 | Magento and Adobe Commerce |
CVE-2026-103119 | Apache Tomcat |
CVE-2026-102785 | YOOtheme Pro |
CVE-2026-102490 | Zammad |
CVE-2026-102489 | Zammad |
CVE-2026-101356 | Apache Tomcat |
CVE-2026-101025 | nginx |
CVE-2026-101019 | nginx |
CVE-2026-98432 | Linux kernel |
CVE-2026-97629 | nginx |
CVE-2026-97229 | GitLab, Ruby and GitLab regexp |
CVE-2026-97205 | nginx |
CVE-2026-96893 | GitLab |
CVE-2026-96656 | Plex Media Server |
CVE-2026-96655 | Plex Media Server |
CVE-2026-96654 | Plex Media Server |
CVE-2026-96652 | Plex Media Server |
CVE-2026-96651 | Plex Media Server |
CVE-2026-96639 | Pillow |
CVE-2026-96355 | Drupal |
CVE-2026-95101 | nginx |
CVE-2026-94482 | Next.js Server Actions |
CVE-2026-94300 | BIND 9 |
CVE-2026-93577 | Ruby and GitLab regexp |
CVE-2026-93479 | nginx |
CVE-2026-92883 | GitLab |
CVE-2026-92709 | rsyslog |
CVE-2026-92392 | curl |
CVE-2026-92232 | Joomla |
CVE-2026-92231 | Joomla |
CVE-2026-92227 | Joomla |
CVE-2026-92226 | Joomla |
CVE-2026-92224 | Joomla |
CVE-2026-92222 | Joomla |
CVE-2026-92141 | Jenkins plugins |
CVE-2026-92140 | Jenkins plugins |
CVE-2026-92139 | Jenkins plugins |
CVE-2026-92138 | Jenkins plugins |
CVE-2026-92137 | Jenkins plugins |
CVE-2026-92136 | Jenkins plugins |
CVE-2026-92135 | Jenkins plugins |
CVE-2026-92134 | Jenkins plugins |
CVE-2026-92133 | Jenkins plugins |
CVE-2026-92132 | Jenkins plugins |
CVE-2026-92131 | Jenkins plugins |
CVE-2026-92130 | Jenkins plugins |
CVE-2026-92129 | Jenkins plugins |
CVE-2026-92128 | Jenkins plugins |
CVE-2026-92127 | Jenkins plugins |
CVE-2026-92126 | Jenkins plugins |
CVE-2026-92125 | Jenkins plugins |
CVE-2026-92124 | Jenkins plugins |
CVE-2026-92123 | Jenkins plugins |
CVE-2026-92122 | Jenkins plugins |
CVE-2026-90917 | Joomla |
CVE-2026-90916 | Joomla |
CVE-2026-90915 | Joomla |
CVE-2026-90913 | Joomla |
CVE-2026-90906 | Joomla |
CVE-2026-89078 | Ruby and GitLab regexp |
CVE-2026-87902 | WordPress path traversal |
CVE-2026-86471 | CouchDB |
CVE-2026-85097 | WordPress core and plugins |
CVE-2026-84782 | OpenSSL |
CVE-2026-84319 | nginx-ui |
CVE-2026-84318 | nginx-ui |
CVE-2026-84317 | nginx-ui |
CVE-2026-84316 | nginx-ui |
CVE-2026-81839 | GitLab |
CVE-2026-81000 | Linux kernel |
CVE-2026-80844 | Linux kernel |
CVE-2026-74469 | Linux kernel |
CVE-2026-68121 | Linux kernel |
CVE-2026-64638 | WordPress core and plugins |
CVE-2026-63030 | WordPress core and plugins |
CVE-2026-60137 | WordPress core and plugins |
CVE-2026-53266 | Linux kernel |
CVE-2026-42533 | nginx |
CVE-2026-16301 | GitLab |
CVE-2026-15723 | GitLab |
CVE-2026-15176 | nginx |
CVE-2026-14814 | GitLab |
CVE-2025-14242 | vsftpd |
The Security Patches software and this documentation are dedicated to the public domain under CC0 1.0 Universal. Other pages on privacysafe.app/docs are CC BY-SA 4.0 unless the page says otherwise.
