Critical
CVE-2026-62815
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 524
Reset filters
Medium
CVE-2026-62900
Microsoft Security Advisory CVE-2026-62900 – .NET Information Disclosure Vulnerability
High
ghsa-pfvm-w89x-94jw
SIPSorcery: Malformed UDP datagram crashes TurnServer receive loop with no restart, disabling TURN UDP relay for all clients (DoS)
High
ghsa-jwjp-4649-v8jp
SIPSorcery vulnerable to Denial of Service via out-of-bounds read in SCTP SACK chunk parsing
High
CVE-2026-48798
SSH.NET: ScpClient Recursive Download Allows Arbitrary File Write via Server-Controlled SCP Filenames
Medium
CVE-2026-62902
Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability
High
CVE-2026-62871
Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability
High
CVE-2026-62897
Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability
High
CVE-2026-70354
Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution Vulnerability
Medium
CVE-2026-62909
Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability
High
CVE-2026-62886
Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability
High
CVE-2026-62901
Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability
Medium
CVE-2026-62899
Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability
High
CVE-2026-62898
Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure Vulnerability
High
CVE-2026-32203
Microsoft Security Advisory CVE-2026-32203 – .NET and Visual Studio Denial of Service Vulnerability
High
CVE-2026-54632
SIPSorcery: Malformed UDP packet on the RTP/ICE socket can remotely terminate a media session (DoS)
Low
ghsa-464c-974j-9xm6
AWS CDK CodeBuild S3 Log Encryption Boolean Inversion
Medium
CVE-2026-73851
Microsoft Kiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass)
High
CVE-2026-59866
Microsoft Kiota: Arbitrary file write + code-injection via x-ms-kiota-info clientClassName and clientNamespaceName
Critical
CVE-2026-59865
Microsoft Kiota: Command injection via x-ms-kiota-info dependencyInstallCommand surfaced by `kiota info`
High
CVE-2026-59863
Microsoft Kiota Workspace-config poisoning: out-of-repo file write + generation-time SSRF
High
CVE-2026-59867
Microsoft Kiota: Generation-time SSRF + remote/local file inclusion via unrestricted $ref
Critical
CVE-2026-59864
Microsoft Kiota: Path/URL injection into generated Copilot plugin manifest via x-ai-* extensions
High
CVE-2026-59859
Microsoft Kiota: Code Generation Literal Injection in Kiota PHP Generator
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.