Vulnerabilities (CVE)

Yack CVE helps teams search and track vulnerabilities.

TOTAL
414,005 CVE
Clear
More filters
Type at least 2 characters, then select a match.
Type at least 2 characters, then select a match.
Type at least 2 characters, then select a match.

Dates include the whole day in UTC. All selected filters apply together.

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-27657
-
-
Oct 25, 2026
Jul 3, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Gitea versions before 1.25.5 allow a user to change another user's primary email address.
CVE-2026-26307
-
-
Oct 25, 2026
Jul 3, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Gitea versions before 1.25.5 do not enforce a timeout on git grep searches, allowing expensive searches to consume server resources.
CVE-2026-26292
-
-
Oct 25, 2026
Jul 3, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Gitea versions before 1.25.5 do not use the migration HTTP transport for LFS push and sync mirror operations, bypassing the configured migration transport protections for those LFS requests.
CVE-2026-26247
-
-
Oct 25, 2026
Jul 3, 2026
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctly during authorization, allowing token exchange without the expected verifier check.
CVE-2026-26232
-
-
Oct 25, 2026
Jul 3, 2026
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Gitea versions before 1.25.5 do not consistently enforce OAuth2 authorization code expiry and single-use behavior during token exchange.
CVE-2026-26231
-
-
Oct 25, 2026
Jul 3, 2026
N/A· v4
8.5 HIGH· v3
N/A· v2
Gitea versions up to and including 1.26.1 allow the Allow edits from maintainers permission path to authorize commits to repositories that the user can read but should not be able to write.
CVE-2026-25782
-
-
Oct 25, 2026
Jul 3, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Gitea versions before 1.25.5 look up tracked-time entries by time ID without scoping the lookup to the issue in the request URL, allowing deletion attempts to target entries from another issue.
CVE-2026-25779
-
-
Oct 25, 2026
Jul 3, 2026
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Gitea versions up to and including 1.25.4 allow redirect bypasses through raw or percent-encoded backslashes in redirect_to values.
CVE-2026-25718
-
-
Oct 25, 2026
Jul 3, 2026
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowing template processing to read or write through symlinked or otherwise non-regular paths.
CVE-2026-25714
-
-
Oct 25, 2026
Jul 3, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Gitea versions up to and including 1.26.1 do not apply public-only token filtering consistently to the user organization API, leaving an incomplete fix for CVE-2025-68941.
CVE-2026-25712
-
-
Oct 25, 2026
Jul 3, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Gitea versions before 1.25.5 have insufficient visibility checks in organization permission APIs for hidden members and private organizations.
CVE-2026-25038
-
-
Oct 25, 2026
Jul 3, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Gitea 1.26.2 allows unauthorized users to access labels of private organizations.
CVE-2026-24690
-
-
Oct 25, 2026
Jul 3, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Gitea versions before 1.25.5 have insufficient permission checks for updating or rebasing pull request branches.
CVE-2026-24451
-
-
Oct 25, 2026
Jul 3, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Gitea 1.26.2 allows fork synchronization to continue after a parent repository changes from public to private, exposing data to a fork that should no longer be authorized.
CVE-2026-24014
1Apache
1Iotdb
Oct 25, 2026
Jul 6, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Apache IoTDB DataNode’s internal RPC interface for creating Trigger instances uses the uploaded Trigger JAR name to build a file path without sufficient validation. If the internal DataNode RPC port is exposed to an untr...Show more
Apache IoTDB DataNode’s internal RPC interface for creating Trigger instances uses the uploaded Trigger JAR name to build a file path without sufficient validation. If the internal DataNode RPC port is exposed to an untrusted network, an attacker may use path traversal sequences in the JAR name to write files outside the intended Trigger installation directory. This could allow arbitrary file write with the permissions of the IoTDB process. This issue affects Apache IoTDB: from 1.3.3 before 2.0.8. Users are recommended to upgrade to version 2.0.8, which fixes the issue.Show less
CVE-2026-24013
1Apache
1Iotdb
Oct 25, 2026
Jul 6, 2026
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Authentication Bypass by Spoofing vulnerability in Apache IoTDB. Certain Thrift RPC query handlers lack strict validation of the sessionId parameter. An attacker can construct requests with a forged sessionId and, withou...Show more
Authentication Bypass by Spoofing vulnerability in Apache IoTDB. Certain Thrift RPC query handlers lack strict validation of the sessionId parameter. An attacker can construct requests with a forged sessionId and, without performing openSession authentication, receive valid query results. This allows authentication bypass and unauthorized reading of time-series data. This issue affects Apache IoTDB: from 1.3.3 before 2.0.8. Users are recommended to upgrade to version 2.0.8, which fixes the issue.Show less
CVE-2026-24012
1Apache
1Iotdb
Oct 25, 2026
Jul 6, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Uncontrolled Resource Consumption vulnerability in Apache IoTDB.  Some interface fails to impose reasonable limits on the time span and aggregation interval of the query. An attacker can construct a request with extreme...Show more
Uncontrolled Resource Consumption vulnerability in Apache IoTDB.  Some interface fails to impose reasonable limits on the time span and aggregation interval of the query. An attacker can construct a request with extreme parameters (e.g., a very large time range combined with a minimal interval). This forces the DataNode to build an enormous result set in memory, which exhausts the Java heap and causes the DataNode process to crash. This issue affects Apache IoTDB: from 1.3.3 before 2.0.8. Users are recommended to upgrade to version 2.0.8, which fixes the issue.Show less
CVE-2026-2398
-
-
Oct 25, 2026
Jul 10, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Authorization bypass through User-Controlled key vulnerability in Adam Retail Automation Ltd. MobilMen 20T allows Privilege Escalation. This issue affects MobilMen 20T: from v3 through 10072026. NOTE: The vendor was con...Show more
Authorization bypass through User-Controlled key vulnerability in Adam Retail Automation Ltd. MobilMen 20T allows Privilege Escalation. This issue affects MobilMen 20T: from v3 through 10072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.Show less
CVE-2026-2397
-
-
Oct 25, 2026
Jul 10, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Adam Retail Automation Ltd. MobilMen 20T allows SQL Injection. This issue affects MobilMen 20T: from v3 through 10072...Show more
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Adam Retail Automation Ltd. MobilMen 20T allows SQL Injection. This issue affects MobilMen 20T: from v3 through 10072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.Show less
CVE-2026-22874
-
-
Oct 25, 2026
Jul 3, 2026
N/A· v4
9.6 CRITICAL· v3
N/A· v2
Gitea versions up to and including 1.26.2 have incomplete SSRF protection in webhook and migration allow-list filtering.
CVE-2026-22555
-
-
Oct 25, 2026
Jul 3, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Gitea versions before 1.26.0 allow API users to fork a repository into an organization without first passing the CanCreateOrgRepo check, which can expose organization secrets.
CVE-2026-22547
-
-
Oct 25, 2026
Jul 3, 2026
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Gitea versions before 1.25.5 lack validation constraints for repository creation fields, including length-limited template fields and trust model or object format values.
CVE-2026-21057
-
-
Oct 25, 2026
Jul 10, 2026
6.8 MEDIUM· v4
N/A· v3
N/A· v2
Improper input validation in Samsung Pass prior to version 5.2.10.3 allows local privileged attackers to write out-of-bounds memory.
CVE-2026-21056
-
-
Oct 25, 2026
Jul 10, 2026
4.8 MEDIUM· v4
N/A· v3
N/A· v2
Improper authorization in Samsung Health prior to version 7.00.0.107 allows local attackers to access connected device information.
CVE-2026-21055
-
-
Oct 25, 2026
Jul 10, 2026
8.5 HIGH· v4
N/A· v3
N/A· v2
Improper export of android application components in Bixby prior to version 4.0.70.8 allows local attackers to execute arbitrary commands with Bixby privilege.