Archive
13 September 2026
Vulnerabilities first published on this day (UTC), newest first.
44 results · Clear filters · Feed
-
High 7.5
The webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the number of HTTP request headers, which a…
-
High 7.7
CyberPanel before 2.4.4 attempts to detect an "alais" domain (i.e., a second domain that serves the same content as a p…
-
High 7.4
Rhymix before 2.1.31 allows insecure direct object reference, aka RVE-2026-1. Arbitrary files can be accessed via extra…
-
High 8.1
CrewAI before fb2323b offers a Python blocklist approach that operates at the wrong level of abstraction, a different v…