CVE-2026-100722 - vm2 before 3.12.2 does not apply host-side Promise rejection handling in the sandbox-to-host constru

CVE-2026-100721 - vm2 before 3.12.2 contains an authorization bypass in the NodeVM external-module resolver. When an e

CVE-2025-71426 - Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.4.1, a recovering

CVE-2025-71425 - Contrast (Edgeless Systems) before 1.8.1 logs the workload secret to stderr, and thus to Kubernetes

CVE-2025-71424 - Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes, is affected in versio

CVE-2025-71423 - Edgelesssys Contrast is a confidential-computing runtime for Kubernetes. In versions 1.9.0 before 1.

CVE-2025-71422 - Contrast is a Kubernetes runtime for confidential containers. In versions before 1.12.1, the secure

CVE-2026-100740 - A vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function tunnel_set_param

CVE-2026-100739 - A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c

CVE-2026-94408 - Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessiv

CVE-2026-94400 - Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive Alloc

CVE-2026-94399 - Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessiv

CVE-2026-94398 - Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessiv

CVE-2026-94397 - Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessiv

CVE-2026-94396 - Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessiv

CVE-2026-82300 - Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exces

CVE-2026-82294 - Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exces

CVE-2026-78582 - Missing Authorization (CWE-862) in Kibana can lead to unauthorized deletion of data via Exploiting I

CVE-2026-72668 - Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana Agent Builder can lead to p

CVE-2026-72662 - Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized disclo

CVE-2026-82901 - The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due

CVE-2026-85984 - The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to A

CVE-2026-77203 - The Groups – Memberships and Access Control plugin for WordPress is vulnerable to Privilege Escalati

CVE-2026-97163 - Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0

CVE-2026-97162 - Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0

CVE-2026-97161 - Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5

CVE-2026-97160 - Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extensio

CVE-2026-94132 - Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in

CVE-2026-94131 - Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise

CVE-2026-94130 - Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7

CVE-2026-100720 - Froxlor 2.0.0 through 2.3.10 is vulnerable to stored cross-site scripting. When a customer (the lowe

CVE-2026-100719 - Froxlor versions before 2.3.12 contain a credential disclosure vulnerability in the DirProtections.l

CVE-2026-100718 - Froxlor through 2.3.10 does not enforce the mail.allow_external_domains policy in the EmailSender.ad

CVE-2026-100717 - froxlor is a server administration panel. In versions 2.3.10 and earlier, Validate::validateUrl reje

CVE-2026-100716 - Froxlor is a server administration panel. In versions 2.3.10 and earlier, the customer data-export (

CVE-2026-100715 - Froxlor through 2.3.10 is vulnerable to arbitrary file deletion via symlink following in the FTP dat

CVE-2026-100714 - Froxlor before 2.3.12 does not restrict or escape the system.letsencryptchallengepath setting: unlik

CVE-2026-100713 - Froxlor 2.3.10 and earlier contain a time-of-check time-of-use (TOCTOU) race condition in the SSH ke

CVE-2026-100712 - froxlor through 2.3.10 disables a user's two-factor authentication immediately upon an unauthenticat

CVE-2026-100711 - froxlor versions before 2.3.12 fail to invalidate existing panel sessions, API keys, and 2FA trust c

CVE-2026-100710 - Froxlor through 2.3.10 does not filter sensitive columns from API responses: Domains::get(), Domains

CVE-2026-100709 - Froxlor through 2.3.10 stores only a numeric user ID in remembered-2FA tokens (panel_2fa_tokens) wit

CVE-2026-100708 - Froxlor before 2.3.13 returns the ssl_key_file column — which stores the raw PEM TLS private-key con

CVE-2026-100707 - Kyverno before 1.19.1 contains a namespace isolation bypass in the apiCall context entry of namespac

CVE-2026-100706 - kyverno before 1.19.1 fails to properly validate URL-encoded path segments in Policy apiCall urlPath

CVE-2026-100705 - Kyverno before 1.19.1 is vulnerable to server-side request forgery. The default egress blocklist (16

CVE-2026-100704 - Kyverno is a policy engine for Kubernetes. In versions 1.14.0 through 1.19.0, the ImageValidatingPol

CVE-2026-100703 - Kyverno 1.16.0 through 1.19.0 registers the globalcontext.Lib CEL library in its policy environment

CVE-2026-100702 - Nodemailer before 10.0.2 fails to properly flatten deeply nested arrays in recipient fields such as

CVE-2026-100701 - Nodemailer versions 5.0.0 through 10.0.1 use a process-global DNS cache that is keyed only by the DN

CVE-2026-100700 - nodemailer before 10.0.6 contains a denial of service vulnerability in the addressparser free-text f

CVE-2026-100699 - Nodemailer is a Node.js email-sending library. In versions >= 9.1.0 and < 10.0.9, the address parser

CVE-2026-100698 - Adminer 5.5.1 through 6.0.1 improperly parses the login 'server' string in the host_port() function

CVE-2026-100697 - Adminer 6.0.0 through 6.0.1, when the official ClickHouse driver plugin (plugins/drivers/clickhouse.

CVE-2026-100696 - Adminer 4.16.0 through 6.0.1 contain a pre-authentication Server-Side Request Forgery (SSRF) vulnera

CVE-2026-100695 - Adminer before 6.0.2 contains a cross-site scripting vulnerability where the CONNECTION_ID() databas

CVE-2026-100694 - Hugo is a static site generator. In versions from v0.56.0 through v0.165.x, content files mapped to

CVE-2026-100693 - Hugo versions from v0.162.0 before v0.166.0 contain a case-sensitive validation flaw in the security

CVE-2026-100692 - Hugo is a static site generator. In versions after v0.123.0 and before v0.166.0, Hugo's symlink conf

CVE-2026-100691 - Hugo versions 0.75.0 through 0.165.x contain a stored cross-site scripting vulnerability: the syntax

CVE-2026-100690 - Hugo versions from v0.161.0 through v0.165.0 run Node.js tools (css.PostCSS, css.TailwindCSS, js.Bab

CVE-2026-100689 - GitPython before 3.1.62 does not validate the `path` field read from an untrusted .gitmodules file w

CVE-2026-100688 - Budibase server before 3.45.0 contains a cross-tenant information disclosure vulnerability in the GE

CVE-2026-100687 - Budibase Server before 3.45.0 fails to redact plaintext datasource credentials before broadcasting e

CVE-2026-100686 - Budibase versions before 3.45.0 fail to validate per-app authorization in the POST /api/global/group

CVE-2026-100685 - Budibase before 3.45.0 fails to properly scope the GET /api/chat-links endpoint by workspace, allowi

CVE-2026-100684 - Budibase versions 3.41.0 before 3.45.0 contain an authentication bypass in the OIDC/SSO login path o

CVE-2026-100683 - Budibase (@budibase/server) before 3.45.0 builds MySQL and MSSQL column-rename DDL in packages/backe

CVE-2026-100682 - Budibase Server before 3.45.0 contains an arbitrary file write vulnerability in the PWA icon upload

CVE-2026-100681 - Budibase before 3.45.0 contains an unauthenticated server-side request forgery and credential exfilt

CVE-2026-100680 - Budibase versions before 3.45.0 fail to disable external JSON reference resolution in the OpenAPI/Sw

CVE-2026-100679 - stoatchat before 0.15.5 fails to validate that MFA tickets belong to the authenticated user, allowin

CVE-2026-100678 - stoatchat before 0.15.5 fails to enforce account-level attempt limits on MFA login challenges, allow

CVE-2026-100677 - stoatchat before 0.15.5 contains an account enumeration vulnerability in the login endpoint that exp

CVE-2026-100676 - January, the media proxy/embed service of stoatchat (stoatchat/stoatchat), before version 0.15.5 imp

CVE-2026-100675 - stoatchat versions before 0.15.5 contain a denial of service vulnerability in the acknowledgement wo

CVE-2026-100674 - stoatchat before 0.15.5 fails to revalidate usernames after Unicode sanitization, allowing attackers

CVE-2026-100673 - The Grav Data Manager plugin (getgrav/grav-plugin-datamanager) versions 1.0.1 through 1.4.4 render s

CVE-2026-100672 - The Comments plugin (getgrav/grav-plugin-comments) for Grav CMS through version 1.2.10 registers an

CVE-2026-100671 - Grav is a flat-file CMS. In versions 2.0.19 through 2.0.24 — and in 2.0.0 through 2.0.18 and 1.7.x o

CVE-2026-100670 - Grav CMS 2.0.14 through 2.0.24 contains a privilege escalation vulnerability in the group and accoun

CVE-2026-100669 - Grav before 2.0.25 ships web server configuration samples whose access-control deny rules are matche

CVE-2026-100668 - Grav 2.0.0 through 2.0.24 contain a Twig content sandbox escape. The `array` filter (and its identic

CVE-2026-100667 - grav-plugin-login (the Grav CMS Login plugin) versions >= 3.8.7 and < 3.9.7 allow the two-factor aut

CVE-2026-100666 - Netty's HttpServerCodec (io.netty:netty-codec-http) in versions 4.2.0.Final through 4.2.16.Final and

CVE-2026-100665 - Netty versions from 4.2.11.Final before 4.2.18.Final contain an incomplete hostname verification fix

CVE-2026-100664 - Netty's HTTP/3 codec (io.netty:netty-codec-http3) versions 4.2.2.Final through 4.2.17.Final builds t

CVE-2026-100663 - Netty's HTTP/3 codec (io.netty:netty-codec-http3) from 4.2.2.Final through 4.2.17.Final does not spe

CVE-2026-100662 - Netty's HTTP/3 codec (io.netty:netty-codec-http3) versions 4.2.0.Final through 4.2.17.Final contain

CVE-2026-100661 - Netty's HTTP/3 codec (io.netty:netty-codec-http3) versions 4.2.0.Final through 4.2.17.Final contain

CVE-2026-100660 - Netty's HTTP/3 codec (io.netty:netty-codec-http3) from 4.2.0.Final through 4.2.17.Final retains unbo

CVE-2026-100659 - Netty's HTTP/3 codec (io.netty:netty-codec-http3) in versions 4.2.0.Final through 4.2.17.Final does

CVE-2026-100658 - Rejected reason: This CVE ID has been rejected as a duplicate.

CVE-2026-100657 - Rejected reason: This CVE ID has been rejected as a duplicate.

CVE-2026-100656 - Rejected reason: This CVE ID has been rejected as a duplicate.

CVE-2026-100655 - Rejected reason: This CVE ID has been rejected as a duplicate.

CVE-2026-100654 - vLLM before 0.29.0 accepts user-controlled stop_token_ids on the OpenAI-compatible POST /v1/completi

CVE-2026-100653 - vLLM is an inference and serving engine for large language models. In versions from 0.22.1 through 0

CVE-2026-100652 - vLLM versions 0.22.0 through 0.23.0 fail to validate stop_token_ids against vocabulary bounds in Rus

CVE-2026-100651 - vLLM before 0.29.0 fails to enforce decoder prompt-length validation on the disaggregated serving en

CVE-2026-100650 - vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its docum

CVE-2026-100649 - vLLM before 0.29.0 contains a resource-limit bypass vulnerability in PyNvVideoCodec decoder allocati

CVE-2026-100648 - vllm before 0.29.0 fails to enforce VLLM_MAX_AUDIO_CLIP_FILESIZE_MB limit in multimodal chat audio d

CVE-2026-100647 - vLLM versions before 0.29.0 contain a denial-of-service vulnerability in the cache_salt parameter ac

CVE-2026-100646 - SiYuan is a self-hosted personal knowledge management system. In versions up to and including 3.8.3,

CVE-2026-100645 - SiYuan versions 3.7.0 before 3.8.4 contain a stored cross-site scripting vulnerability in gallery an

CVE-2026-100644 - SiYuan before v3.8.4 contains a SQL injection vulnerability in the graph query endpoint where the da

CVE-2026-100643 - SiYuan versions before v3.8.4 fail to properly escape four stored Attribute View values in textarea

CVE-2026-100642 - SiYuan versions from v2.1.0 before v3.8.4 contain a cross-site request forgery vulnerability in the

CVE-2026-100641 - SiYuan before v3.8.4 does not HTML-escape stored flashcard block content before interpolating it int

CVE-2026-100640 - SiYuan before v3.8.4 contains an authorization omission in the siyuan-get IPC handler that allows re

CVE-2026-100639 - SiYuan v3.8.3 fails to HTML-escape the data-subtype attribute when generating gutter-button markup (

CVE-2026-100638 - SiYuan versions before v3.8.4 contain a path traversal vulnerability in the setNotebookIcon endpoint

CVE-2026-100637 - SiYuan versions before v3.8.4 contain a path traversal vulnerability in the checkoutRepo endpoint th

CVE-2026-100636 - SiYuan versions before v3.8.4 contain a path traversal vulnerability in the exportBrowserHTML endpoi

CVE-2026-100635 - SiYuan before v3.8.4 contains an authentication bypass vulnerability in the publish service where se

CVE-2026-100634 - SiYuan before v3.8.4 does not validate the sender or restrict recipients in the 'siyuan-send-windows

CVE-2026-100633 - SiYuan is a self-hosted personal knowledge management system. In versions 3.8.0 through 3.8.3, the M

CVE-2026-100632 - Parse Server is an open-source backend server. In versions >= 9.0.0 and < 9.10.1-alpha.8, and in ver

CVE-2026-100631 - Parse Server is an open source backend server. In versions prior to 8.6.90 and in versions from 9.0.

CVE-2026-100630 - AVideo before 29.1.0 contains a stored cross-site scripting vulnerability in the video trailer1 fiel

CVE-2026-100629 - Capgo (capgo.app backend) before 12.127.5 contains an authorization flaw in the PATCH /private/role_

CVE-2026-100628 - capgo.app before 12.128.12 fails to enforce an organization's API key expiration policy when creatin

CVE-2026-100627 - Capgo (Cap-go/capgo.app) server backend Supabase functions contain an incorrect authorization flaw i

CVE-2026-100626 - capgo through 12.128.2 contains an insecure direct object reference vulnerability in the PUT /app/:a

CVE-2026-100625 - Capgo (capgo.app) exposes a native build TUS upload proxy (supabase/functions/_backend/public/build/

CVE-2026-100624 - Capgo.app before 12.264.5 does not enforce upload expiry or build lifecycle state in the /build/uplo

CVE-2026-100623 - Capgo (capgo.app) exposes the legacy membership table public.org_users directly through Supabase Pos

CVE-2026-100622 - capgo.app through 12.129.0 fails to verify deletion status when serving cached bundle artifacts from

CVE-2026-100621 - Capgo (capgo.app) contains an incomplete access-control/content-lock enforcement issue affecting all

CVE-2026-100620 - Capgo CLI (npm package @capgo/cli) through 7.98.2 is affected by an over-permissioned service accoun

CVE-2026-100619 - Capgo (capgo.app) blocks direct user inserts into the public.manifest table with a RESTRICTIVE row-l

CVE-2026-100618 - Capgo (capgo.app) is affected by an authorization flaw in the app icon update path. The PUT /app/:id

CVE-2026-100617 - Cap-go capgo.app fails to validate that principals in channel_permission_overrides belong to the org

CVE-2026-100616 - capgo.app is an over-the-air update platform for Capacitor apps. In all versions prior to a fix, the

CVE-2026-100615 - Cap-go capgo.app before 12.267.1 fails to validate target API key privilege during rotation, allowin

CVE-2026-100614 - Capgo before 12.244.1 contains a cross-tenant integrity vulnerability in the metadata-cleaning worke

CVE-2026-100613 - capgo.app is an over-the-air (OTA) update platform for Capacitor apps. In all versions up to and inc

CVE-2026-100612 - Capgo (capgo.app) through version 12.261.0 contains an incomplete access-control fix for the public.

CVE-2026-100611 - Capgo (capgo.app backend, versions ≤ 12.261.0) improperly restricts which roles the apikey_manager o

CVE-2026-100610 - Flowise through 3.1.4 exposes GET /api/v1/upsert-history/:id and PATCH /api/v1/upsert-history withou

CVE-2026-100609 - Flowise (npm packages `flowise` and `flowise-components`) through 3.1.4 looks up credentials by ID w

CVE-2026-100608 - Flowise through 3.1.4 does not enforce authorization on the BullMQ admin dashboard. When the server

CVE-2026-100607 - Flowise through 3.1.4 resolves SSO and local-password users solely by email without storing provider

CVE-2026-100606 - Flowise through 3.1.4 (Enterprise/platform mode with SSO enabled) contains an authentication bypass

CVE-2026-100605 - Flowise through 3.1.4 contains missing route-level RBAC checks on chat message endpoints that allow

CVE-2026-100604 - ClawHub (openclaw/clawhub) contains an incorrect authorization vulnerability in the ClawHub applicat

CVE-2026-100603 - ClawHub (openclaw/clawhub) application/backend contains a flaw in the skill report moderation flow:

CVE-2026-100602 - ClawHub (openclaw/clawhub application/backend) contains a missing authorization check in the changel

CVE-2026-100601 - ClawHub (openclaw/clawhub) application/backend contains a server-side request forgery vulnerability

CVE-2026-100600 - ClawHub (the openclaw/clawhub application/backend) does not bind anonymous HTTP API requests to a tr

CVE-2026-100315 - A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c

CVE-2026-100314 - A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec09

CVE-2026-100313 - A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d6

CVE-2026-98163 - In the Linux kernel, the following vulnerability has been resolved: cgroup: Avoid iteration of dyin

CVE-2026-100312 - A security flaw has been discovered in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3

CVE-2026-100311 - A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d6

CVE-2026-96533 - The Testimonials Widget WordPress plugin through 4.0.4 does not validate a user-supplied URL before

CVE-2026-96532 - The Testimonials Widget WordPress plugin through 4.0.4 does not perform a capability or ownership ch

CVE-2026-96531 - The Optimole WordPress plugin before 4.2.13 does not escape unrecognized attributes of its video-pl

CVE-2026-96526 - The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an object-level authori

CVE-2026-96525 - The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an ownership or suffici

CVE-2026-96524 - The MCP Server for WordPress WordPress plugin before 1.8.2 does not correctly verify the WordPress

CVE-2026-92411 - The WP Delicious WordPress plugin before 1.10.8 does not validate or escape the HTML tag name taken

CVE-2026-89237 - The Bluff Post WordPress plugin through 1.1.1 does not sanitise and escape parameters before using t

CVE-2026-85081 - The File Manager WordPress plugin before 8.0.5, FileOrganizer WordPress plugin before 1.2.1, File M

CVE-2026-84097 - The wp-review-slider-pro WordPress plugin before 12.7.12 does not sanitize a value stored through on

CVE-2026-84096 - The wp-review-slider-pro WordPress plugin before 12.7.12 does not perform a capability check on the

CVE-2026-84095 - The wp-review-slider-pro WordPress plugin before 12.7.12 does not perform a capability check on one

CVE-2026-19708 - The File Manager WordPress plugin before 8.0.5 does not prevent unauthenticated users from downloadi

CVE-2026-18143 - The Request a Quote for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in a

CVE-2026-16591 - The WP Directory Kit WordPress plugin before 1.5.8 does not sanitize and escape some of its category

CVE-2026-11871 - The Team Members WordPress plugin before 9.3 does not perform any authorization or visibility check

CVE-2026-15273 - The Automatic.css plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI

CVE-2026-100599 - OpenClaw versions 2026.5.1 through 2026.7.0 fail to apply the configured exec approval path to Googl

CVE-2026-100598 - OpenClaw (npm package openclaw) before 2026.7.1 incorrectly binds Signal approval reactions. In affe

CVE-2026-100597 - OpenClaw (npm package 'openclaw') before 2026.7.1 is vulnerable to a time-of-check time-of-use race

CVE-2026-100596 - OpenClaw versions before 2026.7.1 fail to properly authorize non-owner users executing MCP configura

CVE-2026-100595 - OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the diagnostics e

CVE-2026-100594 - OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the /export-traje

CVE-2026-100593 - OpenClaw (npm package `openclaw`) before 2026.7.1 does not enforce the documented owner-only require

CVE-2026-100592 - OpenClaw is an agent gateway distributed via npm. In versions >= 2026.4.10 and < 2026.7.1, persisten

CVE-2026-100591 - OpenClaw is an npm-distributed agent gateway. In versions before 2026.7.1, the global Active Memory

CVE-2026-100590 - OpenClaw before 2026.7.1 contains an authorization bypass vulnerability in the /voice set command th

CVE-2026-100589 - OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the browser tool that al

CVE-2026-100588 - OpenClaw (npm package 'openclaw') before 2026.7.1 does not enforce the administrator scope requireme

CVE-2026-100587 - OpenClaw versions before 2026.7.1 fail to properly validate owner authorization in the Codex compute

CVE-2026-100586 - OpenClaw Codex before 2026.7.1 fails to properly enforce owner authorization when creating native co

CVE-2026-100585 - OpenClaw (npm package `openclaw`) before 2026.7.1 fails to enforce the owner-only authorization requ

CVE-2026-100584 - OpenClaw is an npm-distributed agent runtime. In versions >= 2026.2.26 and < 2026.7.1, PowerShell co

CVE-2026-100583 - OpenClaw Discord versions before 2026.7.1 contain an authorization bypass vulnerability in guild met

CVE-2026-100582 - OpenClaw channel plugins (@openclaw/msteams, @openclaw/feishu, @openclaw/matrix, and @openclaw/googl

CVE-2026-100581 - OpenClaw for iOS before 2026.8.11 stores Gateway credentials as cleartext JSON in App Group UserDefa

CVE-2026-100580 - OpenClaw (npm package 'openclaw') before 2026.7.1 improperly handles case sensitivity in the model-f

CVE-2026-100579 - OpenClaw (npm package 'openclaw') before 2026.7.1 incorrectly trusts requester provenance in message

CVE-2026-100578 - OpenClaw (npm package `openclaw`) before 2026.7.1 fails to restrict owner-only infrastructure tools

CVE-2026-100577 - OpenClaw versions before 2026.8.1 fail to validate video asset URLs returned by providers, allowing

CVE-2026-100576 - OpenClaw versions before 2026.8.1 contain a server-side request forgery vulnerability in browser wai

CVE-2026-100575 - OpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlists in multi-person d

CVE-2026-100574 - OpenClaw (npm package 'openclaw') before 2026.8.1 contains a server-side request forgery vulnerabili

CVE-2026-100573 - OpenClaw versions before 2026.8.1 contain a sandbox policy bypass vulnerability in the MCP loopback

CVE-2026-100572 - OpenClaw versions >= 2026.3.25 and < 2026.8.1 apply invalid-token rate limiting for Synology Chat we

CVE-2026-100571 - OpenClaw (npm package 'openclaw') versions >= 2026.6.6 and < 2026.8.1 apply the SMS webhook invalid-

CVE-2026-100570 - OpenClaw (npm package 'openclaw') versions >= 2026.3.28 and < 2026.8.1 allow an untrusted workspace

CVE-2026-100569 - OpenClaw is an npm-distributed application. In versions >= 2026.4.25 and < 2026.8.1, the workspace e

CVE-2026-100568 - OpenClaw versions before 2026.8.1 fail to properly restrict access to operator command cron jobs, al

CVE-2026-100567 - OpenClaw is an agent gateway distributed as the npm package 'openclaw'. In versions >= 2026.4.5 and

CVE-2026-100566 - OpenClaw LINE versions before 2026.8.1 contain an access control vulnerability where group allowlist

CVE-2026-100564 - OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participant d

CVE-2026-100563 - OpenClaw (npm package `openclaw`) before 2026.8.1 does not neutralize leading characters that spread

CVE-2026-100562 - OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in the sessions.crea

CVE-2026-100561 - OpenClaw (npm package 'openclaw') versions >= 2026.3.22 and < 2026.8.1 contain an approval-bypass fl

CVE-2026-100560 - OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability where Allow Always a

CVE-2026-100559 - OpenClaw versions before 2026.8.1 contain a command parser vulnerability where escaped newlines conf

CVE-2026-100558 - OpenClaw versions before 2026.8.1 contain a resource exhaustion vulnerability in the Gateway listene

CVE-2026-100557 - OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in skill tool dispat

CVE-2026-100556 - OpenClaw (npm package openclaw) versions >= 2026.5.2 and < 2026.8.1 contain an incorrect authorizati

CVE-2026-100555 - OpenClaw is an npm-distributed gateway application. In versions >= 2026.7.1 and < 2026.8.1, Synology

CVE-2026-100554 - OpenClaw (npm package 'openclaw') versions >= 2026.5.12 and < 2026.8.1 do not immediately invalidate

CVE-2026-100553 - OpenClaw versions >= 2026.6.9 and < 2026.8.1 do not declare the native chatId parameter as a deliver

CVE-2026-100552 - OpenClaw (npm package 'openclaw') before 2026.8.1 does not correctly enforce per-chat tool policies

CVE-2026-100551 - OpenClaw for iOS versions >= 2026.7.1 and < 2026.8.11 do not enforce saved Gateway TLS pins in the C

CVE-2026-100550 - OpenClaw (npm package 'openclaw') before 2026.8.1 contains an access-control bypass in the Microsoft

CVE-2026-100549 - OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in QQBot voice attachment h

CVE-2026-100548 - OpenClaw (npm package 'openclaw') versions >= 2026.3.28 and < 2026.8.1 contain a credential exposure

CVE-2026-100547 - OpenClaw is a coding agent distributed as the npm package `openclaw`. In affected versions (2026.7.1

CVE-2026-100546 - OpenClaw (npm package `openclaw`) versions >= 2026.7.2 and < 2026.9.2 contain a race condition in th

CVE-2026-100545 - OpenClaw (npm package `openclaw`) before 2026.8.1 incorrectly enforces sender tool policies during s

CVE-2026-100544 - openclaw's @openclaw/voice-call package before 2026.8.1 launches the configured agent for classic in

CVE-2026-100543 - OpenClaw (npm package openclaw) before 2026.8.1 could include deterministic hashes computed over the

CVE-2026-100542 - OpenClaw (npm package 'openclaw') versions >= 2026.5.28 and < 2026.8.1 mishandle archive listings in

CVE-2026-100541 - OpenClaw's Matrix integration (npm package @openclaw/matrix) versions >= 2026.2.2 and < 2026.8.1 low

CVE-2026-100540 - OpenClaw Feishu before 2026.8.1 fails to validate whether a configured default account is disabled b

CVE-2026-100539 - OpenClaw (npm package 'openclaw') before 2026.8.1 fails to revoke memory tool access when an operato

CVE-2026-100538 - OpenClaw (npm package 'openclaw') before 2026.8.1 does not apply the originating sender's global or

CVE-2026-100537 - OpenClaw (npm package 'openclaw') before 2026.8.1 fails to apply the originating requester's effecti

CVE-2026-100536 - OpenClaw versions before 2026.8.1 fail to validate all source fields in structured message attachmen

CVE-2026-100535 - OpenClaw (npm package 'openclaw') versions >= 2026.4.5 and < 2026.8.1 can lose the originating reque

CVE-2026-100534 - OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in webhook TaskFlow

CVE-2026-100533 - OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in the tools.fs.workspaceOn

CVE-2026-100532 - @openclaw/whatsapp (npm) before 2026.8.1 exposes the WhatsApp login tool through the generic channel

CVE-2026-100531 - The @openclaw/slack npm package before 2026.8.1 contains an authorization flaw in its Slack download

CVE-2026-100530 - OpenClaw versions before 2026.8.1 fail to bind working directory context to reusable exec approvals,

CVE-2026-100529 - OpenClaw versions before 2026.8.1 contain an authorization scope widening vulnerability in file-tran

CVE-2026-100528 - OpenClaw (npm package 'openclaw') before 2026.8.1 could send third-party provider credentials to the

CVE-2026-100527 - OpenClaw before 2026.8.2 contains a denial of service vulnerability in the Browser extension relay t

CVE-2026-100526 - OpenClaw's Discord integration (npm package @openclaw/discord) before version 2026.9.3 could lose th

CVE-2026-100525 - The OpenClaw Prometheus diagnostics plugin (@openclaw/diagnostics-prometheus) before version 2026.9.

CVE-2026-100524 - Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in the extensions manager

CVE-2026-100523 - Cotonti through 1.0.0 contains an open redirect vulnerability in message.php that base64-decodes the