← All credits
VulDB CNA Team
1997 vulnerability records and advisories credit this contributor.
CVE-2026-6586
TransformerOptimus SuperAGI Budget Endpoint budget.py update_budget authorization
CVE-2026-6581
H3C Magic B1 aspForm SetMobileAPInfoById buffer overflow
CVE-2026-6591
ComfyUI LoadImage Node folder_paths.py folder_paths.get_annotated_filepath path traversal
CVE-2026-6576
liangliangyy DjangoBlog WeChat Bot commonapi.py CommandHandler command injection
CVE-2026-6570
kodcloud KodExplorer systemMember.class.php initInstall authorization
CVE-2026-6650
Z-BlogPHP ZBA File app_upload.php UnPack unrestricted upload
CVE-2026-6618
langgenius dify ApiBasedToolSchemaParser parser.py parse_openai_plugin_json_to_tool_bundle server-side request forgery
CVE-2026-6598
langflow-ai langflow Project Creation Endpoint projects.py encrypt_auth_settings cleartext storage in file
CVE-2026-6593
ComfyUI View Endpoint server.py cross site scripting
CVE-2026-6588
serge-chat serge Model API Endpoint model.py delete_model missing authentication