Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

High Severity Vulnerabilities

Found 13326 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
SharePoint Heap-based Buffer Overflow Vulnerability (CVE-2026-55127)
CVE-2026-55127
CWE-122
High
SharePoint Use After Free Vulnerability (CVE-2026-55128)
CVE-2026-55128
CWE-416
High
SharePoint Out-of-bounds Write Vulnerability (CVE-2026-55130)
CVE-2026-55130
CWE-787
High
SharePoint Double Free Vulnerability (CVE-2026-55132)
CVE-2026-55132
CWE-415
High
SharePoint Stack-based Buffer Overflow Vulnerability (CVE-2026-55134)
CVE-2026-55134
CWE-121
High
Open Resty Out-of-bounds Write Vulnerability (CVE-2026-55233)
CVE-2026-55233
CWE-787
High
Apache Tomcat Missing Critical Step in Authentication Vulnerability (CVE-2026-55957)
CVE-2026-55957
CWE-304
High
Perl Out-of-bounds Read Vulnerability (CVE-2026-57432)
CVE-2026-57432
CWE-125
High
Apache Traffic Server Uncontrolled Resource Consumption Vulnerability (CVE-2026-58151)
CVE-2026-58151
CWE-400
High
Apache Traffic Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2026-58153)
CVE-2026-58153
-
High
Apache Traffic Server Out-of-bounds Write Vulnerability (CVE-2026-58154)
CVE-2026-58154
CWE-787
High
Apache Traffic Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-58157)
CVE-2026-58157
CWE-200
High
Apache Traffic Server Incorrect Authorization Vulnerability (CVE-2026-58159)
CVE-2026-58159
CWE-863
High
Apache Traffic Server NULL Pointer Dereference Vulnerability (CVE-2026-58161)
CVE-2026-58161
CWE-476
High
Apache Traffic Server Use After Free Vulnerability (CVE-2026-58164)
CVE-2026-58164
CWE-416
High
Apache Traffic Server Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2026-58175)
CVE-2026-58175
CWE-401
High
Apache Traffic Server Uncontrolled Recursion Vulnerability (CVE-2026-58178)
CVE-2026-58178
CWE-674
High
Apache Traffic Server Stack-based Buffer Overflow Vulnerability (CVE-2026-58180)
CVE-2026-58180
CWE-121
High
Apache Traffic Server Stack-based Buffer Overflow Vulnerability (CVE-2026-58181)
CVE-2026-58181
CWE-121
High
Apache Traffic Server Uncontrolled Resource Consumption Vulnerability (CVE-2026-58182)
CVE-2026-58182
CWE-400
High
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2026-58183)
CVE-2026-58183
CWE-20
High
Apache Traffic Server Out-of-bounds Write Vulnerability (CVE-2026-58184)
CVE-2026-58184
CWE-787
High
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2026-58186)
CVE-2026-58186
CWE-20
High
Apache Traffic Server Out-of-bounds Write Vulnerability (CVE-2026-58187)
CVE-2026-58187
CWE-787
High
Apache Traffic Server Out-of-bounds Write Vulnerability (CVE-2026-58188)
CVE-2026-58188
CWE-787
High
Apache Traffic Server Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-58189)
CVE-2026-58189
CWE-918
High
SharePoint Improper Authorization Vulnerability (CVE-2026-58277)
CVE-2026-58277
CWE-285
High
Apache Traffic Server Uncontrolled Resource Consumption Vulnerability (CVE-2026-59173)
CVE-2026-59173
CWE-400
High
Jetty Sensitive Information in Resource Not Removed Before Reuse Vulnerability (CVE-2026-5795)
CVE-2026-5795
CWE-226
High
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60153)
CVE-2026-60153
CWE-306
High
Oracle Database Server Improper Privilege Management Vulnerability (CVE-2026-60175)
CVE-2026-60175
CWE-269
High
WebLogic Improper Access Control Vulnerability (CVE-2026-60196)
CVE-2026-60196
CWE-284
High
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60201)
CVE-2026-60201
CWE-306
High
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60203)
CVE-2026-60203
CWE-306
High
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60207)
CVE-2026-60207
CWE-306
High
WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-60293)
CVE-2026-60293
CWE-200
High
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60312)
CVE-2026-60312
CWE-306
High
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60313)
CVE-2026-60313
CWE-306
High
WebLogic Improper Access Control Vulnerability (CVE-2026-60343)
CVE-2026-60343
CWE-284
High
Oracle HTTP Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-60431)
CVE-2026-60431
CWE-200
High
Oracle HTTP Server Improper Privilege Management Vulnerability (CVE-2026-60454)
CVE-2026-60454
CWE-269
High
WebLogic Improper Access Control Vulnerability (CVE-2026-60527)
CVE-2026-60527
CWE-284
High
WebLogic Improper Access Control Vulnerability (CVE-2026-60528)
CVE-2026-60528
CWE-284
High
WebLogic Improper Access Control Vulnerability (CVE-2026-60529)
CVE-2026-60529
CWE-284
High
Oracle HTTP Server Improper Privilege Management Vulnerability (CVE-2026-60530)
CVE-2026-60530
CWE-269
High
Oracle JRE Improper Access Control Vulnerability (CVE-2026-62574)
CVE-2026-62574
CWE-284
High
SharePoint Improper Authentication Vulnerability (CVE-2026-62827)
CVE-2026-62827
CWE-287
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-63514)
CVE-2026-63514
CWE-502
High
SharePoint Improper Input Validation Vulnerability (CVE-2026-63520)
CVE-2026-63520
CWE-20
High
Next.js Excessive Iteration Vulnerability (CVE-2026-64641)
CVE-2026-64641
CWE-834
High
Next.js Improper Authorization Vulnerability (CVE-2026-64642)
CVE-2026-64642
CWE-285
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-64901)
CVE-2026-64901
CWE-502
High
SharePoint Missing Authentication for Critical Function Vulnerability (CVE-2026-64921)
CVE-2026-64921
CWE-306
High
Apache Traffic Server Uncontrolled Resource Consumption Vulnerability (CVE-2026-65324)
CVE-2026-65324
CWE-400
High
Artifactory Improper Verification of Cryptographic Signature Vulnerability (CVE-2026-65616)
CVE-2026-65616
CWE-347
High
Artifactory Deserialization of Untrusted Data Vulnerability (CVE-2026-65617)
CVE-2026-65617
CWE-502
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-65658)
CVE-2026-65658
CWE-502
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-65663)
CVE-2026-65663
CWE-502
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-65665)
CVE-2026-65665
CWE-502
High
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-65898)
CVE-2026-65898
CWE-707
High
Artifactory Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2026-65921)
CVE-2026-65921
CWE-22
High
Artifactory Improper Privilege Management Vulnerability (CVE-2026-66015)
CVE-2026-66015
CWE-269
High
Apache Tomcat Uncontrolled Resource Consumption Vulnerability (CVE-2026-66299)
CVE-2026-66299
CWE-400
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-66805)
CVE-2026-66805
CWE-502
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-66808)
CVE-2026-66808
CWE-502
High
PostgreSQL Integer Overflow or Wraparound Vulnerability (CVE-2026-6473)
CVE-2026-6473
CWE-190
High
PostgreSQL UNIX Symbolic Link (Symlink) Following Vulnerability (CVE-2026-6475)
CVE-2026-6475
CWE-61
High
PostgreSQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-6476)
CVE-2026-6476
CWE-138
High
PostgreSQL Use of Inherently Dangerous Function Vulnerability (CVE-2026-6477)
CVE-2026-6477
CWE-242
High
PostgreSQL Uncontrolled Recursion Vulnerability (CVE-2026-6479)
CVE-2026-6479
CWE-674
High
TYPO3 Cleartext Storage of Sensitive Information Vulnerability (CVE-2026-6553)
CVE-2026-6553
CWE-312
High
PostgreSQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-6637)
CVE-2026-6637
CWE-138
High
PostgreSQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-6638)
CVE-2026-6638
CWE-138
High
MongoDb Integer Underflow (Wrap or Wraparound) Vulnerability (CVE-2026-6914)
CVE-2026-6914
CWE-191
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-70321)
CVE-2026-70321
CWE-502
High