Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Medium Severity Vulnerabilities

Found 9114 vulnerabilities at Medium severity.

Vulnerability Name
CVE
CWE
Severity
Jenkins URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-53436)
CVE-2026-53436
CWE-601
Medium
Jenkins URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-53437)
CVE-2026-53437
CWE-601
Medium
Jenkins Missing Authorization Vulnerability (CVE-2026-53438)
CVE-2026-53438
CWE-862
Medium
Jenkins Missing Authorization Vulnerability (CVE-2026-53439)
CVE-2026-53439
CWE-862
Medium
Jenkins URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-53440)
CVE-2026-53440
CWE-601
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-53441)
CVE-2026-53441
CWE-707
Medium
Jenkins Missing Encryption of Sensitive Data Vulnerability (CVE-2026-53442)
CVE-2026-53442
CWE-311
Medium
Django Buffer Access with Incorrect Length Value Vulnerability (CVE-2026-53877)
CVE-2026-53877
CWE-805
Medium
Django Improper Neutralization of Line Delimiters Vulnerability (CVE-2026-53878)
CVE-2026-53878
CWE-144
Medium
SharePoint External Control of File Name or Path Vulnerability (CVE-2026-54108)
CVE-2026-54108
CWE-73
Medium
Skipper : Missing Authentication for Critical Function Vulnerability (CVE-2026-54246)
CVE-2026-54246
CWE-306
Medium
Skipper : Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-54247)
CVE-2026-54247
CWE-770
Medium
Angular Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-54264)
CVE-2026-54264
CWE-200
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-54265)
CVE-2026-54265
CWE-707
Medium
Angular Use of Weak Hash Vulnerability (CVE-2026-54266)
CVE-2026-54266
-
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-54267)
CVE-2026-54267
CWE-707
Medium
OpenSSL Observable Timing Discrepancy Vulnerability (CVE-2026-54872)
CVE-2026-54872
CWE-208
Medium
OpenSSL Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-54873)
CVE-2026-54873
CWE-770
Medium
OpenSSL Observable Timing Discrepancy Vulnerability (CVE-2026-54875)
CVE-2026-54875
CWE-208
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-55016)
CVE-2026-55016
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-55019)
CVE-2026-55019
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-55020)
CVE-2026-55020
CWE-707
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-55023)
CVE-2026-55023
CWE-125
Medium
SharePoint Integer Overflow or Wraparound Vulnerability (CVE-2026-55026)
CVE-2026-55026
CWE-190
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-55027)
CVE-2026-55027
CWE-125
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-55028)
CVE-2026-55028
CWE-125
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-55030)
CVE-2026-55030
CWE-707
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-55047)
CVE-2026-55047
CWE-125
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-55050)
CVE-2026-55050
CWE-125
Medium
SharePoint Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-55051)
CVE-2026-55051
CWE-918
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-55121)
CVE-2026-55121
CWE-125
Medium
SharePoint Improper Input Validation Vulnerability (CVE-2026-55124)
CVE-2026-55124
CWE-20
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-55126)
CVE-2026-55126
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-55135)
CVE-2026-55135
CWE-707
Medium
SharePoint Numeric Truncation Error Vulnerability (CVE-2026-55142)
CVE-2026-55142
CWE-197
Medium
CakePHP URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-55590)
CVE-2026-55590
CWE-601
Medium
Drupal Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability (CVE-2026-55803)
CVE-2026-55803
CWE-915
Medium
Drupal Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability (CVE-2026-55804)
CVE-2026-55804
CWE-915
Medium
Drupal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-55806)
CVE-2026-55806
CWE-601
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-55808)
CVE-2026-55808
CWE-707
Medium
Apache Tomcat Improper Authentication Vulnerability (CVE-2026-55955)
CVE-2026-55955
CWE-287
Medium
Apache Tomcat Improper Authorization Vulnerability (CVE-2026-55956)
CVE-2026-55956
CWE-285
Medium
SharePoint Improper Access Control Vulnerability (CVE-2026-56157)
CVE-2026-56157
CWE-284
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-56192)
CVE-2026-56192
CWE-125
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-57105)
CVE-2026-57105
CWE-707
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-58024)
CVE-2026-58024
CWE-200
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-58026)
CVE-2026-58026
CWE-200
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-58027)
CVE-2026-58027
CWE-200
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-58028)
CVE-2026-58028
CWE-707
Medium
MediaWiki Improper Authentication Vulnerability (CVE-2026-58029)
CVE-2026-58029
CWE-287
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-58030)
CVE-2026-58030
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-58032)
CVE-2026-58032
CWE-707
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-58033)
CVE-2026-58033
CWE-200
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-58037)
CVE-2026-58037
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-58038)
CVE-2026-58038
CWE-707
Medium
Apache Traffic Server Integer Overflow or Wraparound Vulnerability (CVE-2026-58152)
CVE-2026-58152
CWE-190
Medium
Apache Traffic Server Incorrect Authorization Vulnerability (CVE-2026-58156)
CVE-2026-58156
CWE-863
Medium
Apache Traffic Server Stack-based Buffer Overflow Vulnerability (CVE-2026-58158)
CVE-2026-58158
CWE-121
Medium
Apache Traffic Server Out-of-bounds Read Vulnerability (CVE-2026-58160)
CVE-2026-58160
CWE-125
Medium
MediaWiki Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-58517)
CVE-2026-58517
CWE-288
Medium
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2026-58518)
CVE-2026-58518
CWE-352
Medium
MediaWiki URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-58520)
CVE-2026-58520
CWE-601
Medium
SharePoint Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-58639)
CVE-2026-58639
CWE-918
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-5170)
CVE-2026-5170
CWE-617
Medium
Django Improper Handling of Length Parameter Inconsistency Vulnerability (CVE-2026-5766)
CVE-2026-5766
CWE-130
Medium
Oracle JRE Improper Access Control Vulnerability (CVE-2026-60147)
CVE-2026-60147
CWE-284
Medium
Roundcube Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-62641)
CVE-2026-62641
CWE-770
Medium
Roundcube Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2026-62642)
CVE-2026-62642
CWE-835
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-62826)
CVE-2026-62826
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-62829)
CVE-2026-62829
CWE-707
Medium
SharePoint Relative Path Traversal Vulnerability (CVE-2026-62837)
CVE-2026-62837
CWE-23
Medium
SharePoint Insufficiently Protected Credentials Vulnerability (CVE-2026-62839)
CVE-2026-62839
CWE-522
Medium
SharePoint Improper Input Validation Vulnerability (CVE-2026-62917)
CVE-2026-62917
CWE-20
Medium
SharePoint Incorrect Authorization Vulnerability (CVE-2026-63512)
CVE-2026-63512
CWE-863
Medium
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-63516)
CVE-2026-63516
CWE-502
Medium