v.26.3.2229

Medium Severity Vulnerabilities

Found 8644 vulnerabilities at Medium severity.

Vulnerability Name

CVE

CWE

Severity

PrestaShop Observable Timing Discrepancy Vulnerability (CVE-2026-25597)

CVE-2026-25597

CWE-208

Medium

MongoDb Missing Authorization Vulnerability (CVE-2026-25609)

CVE-2026-25609

CWE-862

Medium

MongoDb Reachable Assertion Vulnerability (CVE-2026-25610)

CVE-2026-25610

CWE-617

Medium

MongoDb Incorrect Type Conversion or Cast Vulnerability (CVE-2026-25613)

CVE-2026-25613

CWE-704

Medium

XWikiplatform Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2026-26000)

CVE-2026-26000

CWE-1021

Medium

Moodle Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-26047)

CVE-2026-26047

CWE-770

Medium

Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-27100)

CVE-2026-27100

CWE-200

Medium

Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-27126)

CVE-2026-27126

CWE-707

Medium

Craft CMS Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2026-27127)

CVE-2026-27127

CWE-367

Medium

Craft CMS Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2026-27128)

CVE-2026-27128

CWE-367

Medium

Craft CMS Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-27129)

CVE-2026-27129

CWE-918

Medium

Werkzeug WSGI Improper Handling of Windows Device Names Vulnerability (CVE-2026-27199)

CVE-2026-27199

CWE-67

Medium

Caddy Web Server Improper Input Validation Vulnerability (CVE-2026-27585)

CVE-2026-27585

CWE-20

Medium

Caddy Web Server Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2026-27589)

CVE-2026-27589

CWE-352

Medium

Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-27970)

CVE-2026-27970

CWE-707

Medium

Craft CMS Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-28781)

CVE-2026-28781

CWE-639

Medium

Craft CMS Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-28782)

CVE-2026-28782

CWE-639

Medium

Craft CMS Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-29069)

CVE-2026-29069

CWE-639

Medium

PostgreSQL Improper Validation of Specified Type of Input Vulnerability (CVE-2026-2003)

CVE-2026-2003

CWE-1287

Medium