Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

High Severity Vulnerabilities

Found 13355 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
Artifactory Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-42017)
CVE-2026-42017
CWE-200
High
axios Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Vulnerability (CVE-2026-42033)
CVE-2026-42033
CWE-1321
High
axios Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') Vulnerability (CVE-2026-42035)
CVE-2026-42035
CWE-707
High
axios Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-42038)
CVE-2026-42038
CWE-918
High
axios Uncontrolled Recursion Vulnerability (CVE-2026-42039)
CVE-2026-42039
CWE-674
High
Grafana Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-42127)
CVE-2026-42127
CWE-770
High
Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-42498)
CVE-2026-42498
CWE-200
High
Nginx Heap-based Buffer Overflow Vulnerability (CVE-2026-42533)
CVE-2026-42533
CWE-122
High
Apache HTTP Server Heap-based Buffer Overflow Vulnerability (CVE-2026-42536)
CVE-2026-42536
CWE-122
High
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2026-42764)
CVE-2026-42764
CWE-476
High
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2026-42765)
CVE-2026-42765
CWE-476
High
Nginx Heap-based Buffer Overflow Vulnerability (CVE-2026-42945)
CVE-2026-42945
CWE-122
High
Apache Tomcat Improper Handling of Case Sensitivity Vulnerability (CVE-2026-43513)
CVE-2026-43513
CWE-178
High
Apache HTTP Server Buffer Over-read Vulnerability (CVE-2026-44185)
CVE-2026-44185
CWE-126
High
Apache HTTP Server Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2026-44186)
CVE-2026-44186
CWE-835
High
axios Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-44486)
CVE-2026-44486
CWE-200
High
axios Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2026-44487)
CVE-2026-44487
CWE-201
High
axios Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-44488)
CVE-2026-44488
CWE-770
High
axios Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Vulnerability (CVE-2026-44490)
CVE-2026-44490
CWE-1321
High
axios Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-44492)
CVE-2026-44492
CWE-918
High
axios Unintended Proxy or Intermediary ('Confused Deputy') Vulnerability (CVE-2026-44494)
CVE-2026-44494
CWE-441
High
axios Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-44495)
CVE-2026-44495
CWE-94
High
axios Uncontrolled Resource Consumption Vulnerability (CVE-2026-44496)
CVE-2026-44496
CWE-400
High
Next.js Incorrect Authorization Vulnerability (CVE-2026-44573)
CVE-2026-44573
CWE-863
High
Next.js Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-44574)
CVE-2026-44574
CWE-288
High
Next.js Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-44575)
CVE-2026-44575
CWE-288
High
Next.js Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-44578)
CVE-2026-44578
CWE-918
High
Next.js Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-44579)
CVE-2026-44579
CWE-770
High
SharePoint Heap-based Buffer Overflow Vulnerability (CVE-2026-44819)
CVE-2026-44819
CWE-122
High
SharePoint Heap-based Buffer Overflow Vulnerability (CVE-2026-44824)
CVE-2026-44824
CWE-122
High
Next.js Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-45109)
CVE-2026-45109
CWE-288
High
Caddy Web Server Improper Input Validation Vulnerability (CVE-2026-45135)
CVE-2026-45135
CWE-20
High
OpenSSL Missing Cryptographic Step Vulnerability (CVE-2026-45445)
CVE-2026-45445
CWE-325
High
OpenSSL Use After Free Vulnerability (CVE-2026-45447)
CVE-2026-45447
CWE-416
High
SharePoint Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2026-45454)
CVE-2026-45454
CWE-22
High
SharePoint Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2026-45456)
CVE-2026-45456
CWE-843
High
SharePoint Use After Free Vulnerability (CVE-2026-45458)
CVE-2026-45458
CWE-416
High
SharePoint Untrusted Pointer Dereference Vulnerability (CVE-2026-45471)
CVE-2026-45471
CWE-822
High
SharePoint Heap-based Buffer Overflow Vulnerability (CVE-2026-45475)
CVE-2026-45475
CWE-122
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-45484)
CVE-2026-45484
CWE-502
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-45659)
CVE-2026-45659
CWE-502
High
Ruby Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2026-46727)
CVE-2026-46727
CWE-362
High
Oracle Database Server Uncontrolled Resource Consumption Vulnerability (CVE-2026-46834)
CVE-2026-46834
CWE-400
High
Oracle Database Server Uncontrolled Resource Consumption Vulnerability (CVE-2026-46835)
CVE-2026-46835
CWE-400
High
WebLogic CVE-2026-46848 Vulnerability (CVE-2026-46848)
CVE-2026-46848
-
High
Oracle Database Server Uncontrolled Resource Consumption Vulnerability (CVE-2026-47046)
CVE-2026-47046
CWE-400
High
Oracle JRE Uncontrolled Resource Consumption Vulnerability (CVE-2026-47057)
CVE-2026-47057
CWE-400
High
Oracle JRE Deserialization of Untrusted Data Vulnerability (CVE-2026-47058)
CVE-2026-47058
CWE-502
High
Oracle JRE Improper Access Control Vulnerability (CVE-2026-47063)
CVE-2026-47063
CWE-284
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2026-47204)
CVE-2026-47204
CWE-476
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2026-47220)
CVE-2026-47220
CWE-476
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2026-47221)
CVE-2026-47221
CWE-476
High
SharePoint Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2026-47294)
CVE-2026-47294
CWE-138
High
SharePoint Improper Authorization Vulnerability (CVE-2026-47298)
CVE-2026-47298
CWE-285
High
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47423)
CVE-2026-47423
CWE-707
High
Envoy Proxy Asymmetric Resource Consumption (Amplification) Vulnerability (CVE-2026-47774)
CVE-2026-47774
CWE-405
High
Envoy Proxy Excessively Deep Nesting Vulnerability (CVE-2026-48042)
CVE-2026-48042
CWE-1124
High
Envoy Proxy Improper Handling of Highly Compressed Data (Data Amplification) Vulnerability (CVE-2026-48044)
CVE-2026-48044
CWE-409
High
Envoy Proxy Use of Incorrect Operator Vulnerability (CVE-2026-48497)
CVE-2026-48497
CWE-480
High
Envoy Proxy Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2026-48706)
CVE-2026-48706
CWE-120
High
Envoy Proxy Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2026-48743)
CVE-2026-48743
-
High
Joomla CVE-2026-48896 Vulnerability (CVE-2026-48896)
CVE-2026-48896
-
High
Joomla Improper Authentication Vulnerability (CVE-2026-48897)
CVE-2026-48897
CWE-287
High
Joomla Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-48901)
CVE-2026-48901
CWE-524
High
Apache HTTP Server Use After Free Vulnerability (CVE-2026-48913)
CVE-2026-48913
CWE-416
High
Joomla CVE-2026-48948 Vulnerability (CVE-2026-48948)
CVE-2026-48948
-
High
Joomla CVE-2026-48957 Vulnerability (CVE-2026-48957)
CVE-2026-48957
-
High
Joomla CVE-2026-48958 Vulnerability (CVE-2026-48958)
CVE-2026-48958
-
High
Nginx Memory Allocation with Excessive Size Value Vulnerability (CVE-2026-49975)
CVE-2026-49975
CWE-789
High
Internet Information Services Memory Allocation with Excessive Size Value Vulnerability (CVE-2026-49975)
CVE-2026-49975
CWE-789
High
Apache Memory Allocation with Excessive Size Value Vulnerability (CVE-2026-49975)
CVE-2026-49975
CWE-789
High
Envoy Proxy Memory Allocation with Excessive Size Value Vulnerability (CVE-2026-49975)
CVE-2026-49975
CWE-789
High
MongoDb Use After Free Vulnerability (CVE-2026-4148)
CVE-2026-4148
CWE-416
High
Python Uncontrolled Recursion Vulnerability (CVE-2026-4224)
CVE-2026-4224
CWE-674
High
MongoDb Double Free Vulnerability (CVE-2026-4358)
CVE-2026-4358
CWE-415
High