Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

High Severity Vulnerabilities

Found 13326 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
axios Unintended Proxy or Intermediary ('Confused Deputy') Vulnerability (CVE-2026-44494)
CVE-2026-44494
CWE-441
High
axios Uncontrolled Resource Consumption Vulnerability (CVE-2026-44496)
CVE-2026-44496
CWE-400
High
Next.js Incorrect Authorization Vulnerability (CVE-2026-44573)
CVE-2026-44573
CWE-863
High
Next.js Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-44574)
CVE-2026-44574
CWE-288
High
Next.js Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-44575)
CVE-2026-44575
CWE-288
High
Next.js Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-44578)
CVE-2026-44578
CWE-918
High
Next.js Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-44579)
CVE-2026-44579
CWE-770
High
SharePoint Heap-based Buffer Overflow Vulnerability (CVE-2026-44819)
CVE-2026-44819
CWE-122
High
SharePoint Heap-based Buffer Overflow Vulnerability (CVE-2026-44824)
CVE-2026-44824
CWE-122
High
Next.js Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-45109)
CVE-2026-45109
CWE-288
High
Caddy Web Server Improper Input Validation Vulnerability (CVE-2026-45135)
CVE-2026-45135
CWE-20
High
OpenSSL Missing Cryptographic Step Vulnerability (CVE-2026-45445)
CVE-2026-45445
CWE-325
High
OpenSSL Use After Free Vulnerability (CVE-2026-45447)
CVE-2026-45447
CWE-416
High
SharePoint Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2026-45454)
CVE-2026-45454
CWE-22
High
SharePoint Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2026-45456)
CVE-2026-45456
CWE-843
High
SharePoint Use After Free Vulnerability (CVE-2026-45458)
CVE-2026-45458
CWE-416
High
SharePoint Untrusted Pointer Dereference Vulnerability (CVE-2026-45471)
CVE-2026-45471
CWE-822
High
SharePoint Heap-based Buffer Overflow Vulnerability (CVE-2026-45475)
CVE-2026-45475
CWE-122
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-45484)
CVE-2026-45484
CWE-502
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-45659)
CVE-2026-45659
CWE-502
High
Ruby Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2026-46727)
CVE-2026-46727
CWE-362
High
Oracle Database Server Uncontrolled Resource Consumption Vulnerability (CVE-2026-46834)
CVE-2026-46834
CWE-400
High
Oracle Database Server Uncontrolled Resource Consumption Vulnerability (CVE-2026-46835)
CVE-2026-46835
CWE-400
High
WebLogic CVE-2026-46848 Vulnerability (CVE-2026-46848)
CVE-2026-46848
-
High
Oracle Database Server Uncontrolled Resource Consumption Vulnerability (CVE-2026-47046)
CVE-2026-47046
CWE-400
High
Oracle JRE Uncontrolled Resource Consumption Vulnerability (CVE-2026-47057)
CVE-2026-47057
CWE-400
High
Oracle JRE Deserialization of Untrusted Data Vulnerability (CVE-2026-47058)
CVE-2026-47058
CWE-502
High
Oracle JRE Improper Access Control Vulnerability (CVE-2026-47063)
CVE-2026-47063
CWE-284
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2026-47204)
CVE-2026-47204
CWE-476
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2026-47220)
CVE-2026-47220
CWE-476
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2026-47221)
CVE-2026-47221
CWE-476
High
SharePoint Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2026-47294)
CVE-2026-47294
CWE-138
High
SharePoint Improper Authorization Vulnerability (CVE-2026-47298)
CVE-2026-47298
CWE-285
High
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47423)
CVE-2026-47423
CWE-707
High
Envoy Proxy Asymmetric Resource Consumption (Amplification) Vulnerability (CVE-2026-47774)
CVE-2026-47774
CWE-405
High
Envoy Proxy Excessively Deep Nesting Vulnerability (CVE-2026-48042)
CVE-2026-48042
CWE-1124
High
Envoy Proxy Improper Handling of Highly Compressed Data (Data Amplification) Vulnerability (CVE-2026-48044)
CVE-2026-48044
CWE-409
High
Envoy Proxy Use of Incorrect Operator Vulnerability (CVE-2026-48497)
CVE-2026-48497
CWE-480
High
Envoy Proxy Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2026-48706)
CVE-2026-48706
CWE-120
High
Envoy Proxy Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2026-48743)
CVE-2026-48743
-
High
Joomla CVE-2026-48896 Vulnerability (CVE-2026-48896)
CVE-2026-48896
-
High
Joomla Improper Authentication Vulnerability (CVE-2026-48897)
CVE-2026-48897
CWE-287
High
Joomla Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-48901)
CVE-2026-48901
CWE-524
High
Apache HTTP Server Use After Free Vulnerability (CVE-2026-48913)
CVE-2026-48913
CWE-416
High
Joomla CVE-2026-48948 Vulnerability (CVE-2026-48948)
CVE-2026-48948
-
High
Joomla CVE-2026-48957 Vulnerability (CVE-2026-48957)
CVE-2026-48957
-
High
Joomla CVE-2026-48958 Vulnerability (CVE-2026-48958)
CVE-2026-48958
-
High
Nginx Memory Allocation with Excessive Size Value Vulnerability (CVE-2026-49975)
CVE-2026-49975
CWE-789
High
Internet Information Services Memory Allocation with Excessive Size Value Vulnerability (CVE-2026-49975)
CVE-2026-49975
CWE-789
High
Apache Memory Allocation with Excessive Size Value Vulnerability (CVE-2026-49975)
CVE-2026-49975
CWE-789
High
Envoy Proxy Memory Allocation with Excessive Size Value Vulnerability (CVE-2026-49975)
CVE-2026-49975
CWE-789
High
MongoDb Use After Free Vulnerability (CVE-2026-4148)
CVE-2026-4148
CWE-416
High
Python Uncontrolled Recursion Vulnerability (CVE-2026-4224)
CVE-2026-4224
CWE-674
High
MongoDb Double Free Vulnerability (CVE-2026-4358)
CVE-2026-4358
CWE-415
High
Angular Origin Validation Error Vulnerability (CVE-2026-50168)
CVE-2026-50168
CWE-346
High
Angular Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-50170)
CVE-2026-50170
CWE-524
High
ReviveAdserver Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-50741)
CVE-2026-50741
CWE-94
High
Sqlite Use After Free Vulnerability (CVE-2026-51296)
CVE-2026-51296
CWE-416
High
Sqlite Use After Free Vulnerability (CVE-2026-51297)
CVE-2026-51297
CWE-416
High
Sqlite Use After Free Vulnerability (CVE-2026-51304)
CVE-2026-51304
CWE-416
High
Caddy Web Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2026-52844)
CVE-2026-52844
CWE-22
High
Caddy Web Server Improper Authentication Vulnerability (CVE-2026-52845)
CVE-2026-52845
CWE-287
High
Apache Tomcat Always-Incorrect Control Flow Implementation Vulnerability (CVE-2026-53404)
CVE-2026-53404
CWE-670
High
Jenkins Deserialization of Untrusted Data Vulnerability (CVE-2026-53435)
CVE-2026-53435
CWE-502
High
Angular Uncontrolled Resource Consumption Vulnerability (CVE-2026-54268)
CVE-2026-54268
CWE-400
High
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-54433)
CVE-2026-54433
CWE-707
High
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-55021)
CVE-2026-55021
CWE-707
High
SharePoint Use After Free Vulnerability (CVE-2026-55032)
CVE-2026-55032
CWE-416
High
SharePoint Heap-based Buffer Overflow Vulnerability (CVE-2026-55033)
CVE-2026-55033
CWE-122
High
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-55034)
CVE-2026-55034
CWE-707
High
SharePoint Stack-based Buffer Overflow Vulnerability (CVE-2026-55038)
CVE-2026-55038
CWE-121
High
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-55045)
CVE-2026-55045
CWE-125
High
SharePoint Missing Authorization Vulnerability (CVE-2026-55052)
CVE-2026-55052
CWE-862
High
SharePoint Stack-based Buffer Overflow Vulnerability (CVE-2026-55055)
CVE-2026-55055
CWE-121
High
SharePoint Heap-based Buffer Overflow Vulnerability (CVE-2026-55125)
CVE-2026-55125
CWE-122
High