Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Medium Severity Vulnerabilities

Found 8945 vulnerabilities at Medium severity.

Vulnerability Name
CVE
CWE
Severity
axios Improper Authentication Vulnerability (CVE-2026-42041)
CVE-2026-42041
CWE-287
Medium
axios Permissive List of Allowed Inputs Vulnerability (CVE-2026-42042)
CVE-2026-42042
CWE-183
Medium
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2026-42766)
CVE-2026-42766
CWE-476
Medium
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2026-42767)
CVE-2026-42767
CWE-476
Medium
OpenSSL Improper Certificate Validation Vulnerability (CVE-2026-42769)
CVE-2026-42769
CWE-295
Medium
OpenSSL Out-of-bounds Read Vulnerability (CVE-2026-42771)
CVE-2026-42771
CWE-125
Medium
Apache HTTP Server Out-of-bounds Read Vulnerability (CVE-2026-43951)
CVE-2026-43951
CWE-125
Medium
Apache HTTP Server Improper Privilege Management Vulnerability (CVE-2026-44119)
CVE-2026-44119
CWE-269
Medium
axios Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') Vulnerability (CVE-2026-44489)
CVE-2026-44489
CWE-707
Medium
Next.js Acceptance of Extraneous Untrusted Data With Trusted Data Vulnerability (CVE-2026-44572)
CVE-2026-44572
CWE-349
Medium
Next.js Interpretation Conflict Vulnerability (CVE-2026-44576)
CVE-2026-44576
CWE-436
Medium
Next.js Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-44577)
CVE-2026-44577
CWE-770
Medium
Next.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-44580)
CVE-2026-44580
CWE-707
Medium
Next.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-44581)
CVE-2026-44581
CWE-707
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-44821)
CVE-2026-44821
CWE-125
Medium
OpenSSL Missing Cryptographic Step Vulnerability (CVE-2026-45446)
CVE-2026-45446
CWE-325
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45453)
CVE-2026-45453
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45462)
CVE-2026-45462
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45464)
CVE-2026-45464
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45465)
CVE-2026-45465
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45467)
CVE-2026-45467
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45468)
CVE-2026-45468
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45479)
CVE-2026-45479
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45481)
CVE-2026-45481
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45483)
CVE-2026-45483
CWE-707
Medium
Angular Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-46417)
CVE-2026-46417
CWE-918
Medium
Envoy Proxy Use After Free Vulnerability (CVE-2026-47205)
CVE-2026-47205
CWE-416
Medium
Envoy Proxy Use After Free Vulnerability (CVE-2026-47207)
CVE-2026-47207
CWE-416
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47634)
CVE-2026-47634
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47636)
CVE-2026-47636
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47637)
CVE-2026-47637
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47638)
CVE-2026-47638
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47639)
CVE-2026-47639
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47640)
CVE-2026-47640
CWE-707
Medium
SharePoint CVE-2026-47641 Vulnerability (CVE-2026-47641)
CVE-2026-47641
-
Medium
Envoy Proxy Improper Handling of Length Parameter Inconsistency Vulnerability (CVE-2026-47692)
CVE-2026-47692
CWE-130
Medium
Squid Out-of-bounds Read Vulnerability (CVE-2026-47729)
CVE-2026-47729
CWE-125
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47759)
CVE-2026-47759
CWE-707
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47760)
CVE-2026-47760
CWE-707
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47761)
CVE-2026-47761
CWE-707
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47762)
CVE-2026-47762
CWE-707
Medium
Envoy Proxy Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2026-47775)
CVE-2026-47775
CWE-209
Medium
Envoy Proxy Improper Neutralization of Null Byte or NUL Character Vulnerability (CVE-2026-47778)
CVE-2026-47778
CWE-158
Medium
Envoy Proxy Use After Free Vulnerability (CVE-2026-48090)
CVE-2026-48090
CWE-416
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48560)
CVE-2026-48560
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48562)
CVE-2026-48562
CWE-707
Medium
Django Incomplete Comparison with Missing Factors Vulnerability (CVE-2026-48587)
CVE-2026-48587
CWE-1023
Medium
Django Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-48588)
CVE-2026-48588
CWE-524
Medium
Joomla CVE-2026-48900 Vulnerability (CVE-2026-48900)
CVE-2026-48900
-
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48903)
CVE-2026-48903
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48905)
CVE-2026-48905
CWE-707
Medium
Joomla Improper Access Control Vulnerability (CVE-2026-48947)
CVE-2026-48947
CWE-284
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48949)
CVE-2026-48949
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48950)
CVE-2026-48950
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48951)
CVE-2026-48951
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48952)
CVE-2026-48952
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48953)
CVE-2026-48953
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48954)
CVE-2026-48954
CWE-707
Medium
Joomla CVE-2026-48955 Vulnerability (CVE-2026-48955)
CVE-2026-48955
-
Medium
Joomla CVE-2026-48956 Vulnerability (CVE-2026-48956)
CVE-2026-48956
-
Medium
markdown-it Uncontrolled Resource Consumption Vulnerability (CVE-2026-48988)
CVE-2026-48988
CWE-400
Medium
MongoDb Use of Uninitialized Resource Vulnerability (CVE-2026-4147)
CVE-2026-4147
CWE-908
Medium
Python Improper Preservation of Permissions Vulnerability (CVE-2026-4360)
CVE-2026-4360
CWE-281
Medium
Jboss EAP Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-4366)
CVE-2026-4366
CWE-918
Medium
Squid Improper Input Validation Vulnerability (CVE-2026-50012)
CVE-2026-50012
CWE-20
Medium
Angular Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-50169)
CVE-2026-50169
CWE-200
Medium
Angular Uncontrolled Resource Consumption Vulnerability (CVE-2026-50171)
CVE-2026-50171
CWE-400
Medium
Angular Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-50184)
CVE-2026-50184
CWE-200
Medium
Apache Tomcat Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Vulnerability (CVE-2026-50229)
CVE-2026-50229
CWE-707
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50555)
CVE-2026-50555
CWE-707
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50556)
CVE-2026-50556
CWE-707
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50557)
CVE-2026-50557
CWE-707
Medium
ReviveAdserver Improper Access Control Vulnerability (CVE-2026-50739)
CVE-2026-50739
CWE-284
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50740)
CVE-2026-50740
CWE-707
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50742)
CVE-2026-50742
CWE-707
Medium