Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Medium Severity Vulnerabilities

Found 9114 vulnerabilities at Medium severity.

Vulnerability Name
CVE
CWE
Severity
Next.js Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2026-64643)
CVE-2026-64643
CWE-201
Medium
Next.js Inefficient Algorithmic Complexity Vulnerability (CVE-2026-64644)
CVE-2026-64644
CWE-407
Medium
Next.js URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-64645)
CVE-2026-64645
CWE-601
Medium
Next.js Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-64646)
CVE-2026-64646
CWE-770
Medium
Next.js Improper Encoding or Escaping of Output Vulnerability (CVE-2026-64647)
CVE-2026-64647
CWE-116
Medium
Next.js Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-64648)
CVE-2026-64648
CWE-524
Medium
Next.js Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-64649)
CVE-2026-64649
CWE-918
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-64897)
CVE-2026-64897
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-64900)
CVE-2026-64900
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-64902)
CVE-2026-64902
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-64916)
CVE-2026-64916
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-64922)
CVE-2026-64922
CWE-707
Medium
Apache Traffic Server Incorrect Behavior Order Vulnerability (CVE-2026-65100)
CVE-2026-65100
CWE-696
Medium
Apache Traffic Server Improper Certificate Validation Vulnerability (CVE-2026-65325)
CVE-2026-65325
CWE-295
Medium
Artifactory Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-65618)
CVE-2026-65618
CWE-918
Medium
SharePoint Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-65660)
CVE-2026-65660
CWE-94
Medium
DOMPurify Protection Mechanism Failure Vulnerability (CVE-2026-65899)
CVE-2026-65899
CWE-693
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-65900)
CVE-2026-65900
CWE-707
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-65901)
CVE-2026-65901
CWE-707
Medium
DOMPurify Trust Boundary Violation Vulnerability (CVE-2026-65902)
CVE-2026-65902
CWE-501
Medium
DOMPurify Incorrect Comparison Vulnerability (CVE-2026-65903)
CVE-2026-65903
CWE-697
Medium
DOMPurify Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2026-65904)
CVE-2026-65904
CWE-754
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-65911)
CVE-2026-65911
CWE-707
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-65912)
CVE-2026-65912
CWE-707
Medium
DOMPurify Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Vulnerability (CVE-2026-65913)
CVE-2026-65913
CWE-1321
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-65914)
CVE-2026-65914
CWE-707
Medium
Artifactory Missing Authorization Vulnerability (CVE-2026-65922)
CVE-2026-65922
CWE-862
Medium
Artifactory Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-65923)
CVE-2026-65923
CWE-918
Medium
Artifactory Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-65924)
CVE-2026-65924
CWE-918
Medium
Artifactory Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-65925)
CVE-2026-65925
CWE-918
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-66010)
CVE-2026-66010
CWE-707
Medium
Artifactory Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-66018)
CVE-2026-66018
CWE-200
Medium
Angular Insufficient Verification of Data Authenticity Vulnerability (CVE-2026-68945)
CVE-2026-68945
CWE-345
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-69149)
CVE-2026-69149
CWE-707
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-69151)
CVE-2026-69151
CWE-707
Medium
Python Improper Encoding or Escaping of Output Vulnerability (CVE-2026-6019)
CVE-2026-6019
CWE-116
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-6365)
CVE-2026-6365
CWE-707
Medium
Drupal Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability (CVE-2026-6366)
CVE-2026-6366
CWE-915
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-6367)
CVE-2026-6367
CWE-707
Medium
PostgreSQL Missing Authorization Vulnerability (CVE-2026-6470)
CVE-2026-6470
CWE-862
Medium
PostgreSQL Missing Authorization Vulnerability (CVE-2026-6472)
CVE-2026-6472
CWE-862
Medium
PostgreSQL Use of Externally-Controlled Format String Vulnerability (CVE-2026-6474)
CVE-2026-6474
CWE-134
Medium
PostgreSQL Covert Timing Channel Vulnerability (CVE-2026-6478)
CVE-2026-6478
CWE-385
Medium
PostgreSQL Buffer Over-read Vulnerability (CVE-2026-6575)
CVE-2026-6575
CWE-126
Medium
PHP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-6735)
CVE-2026-6735
CWE-707
Medium
Jetty Improper Input Validation Vulnerability (CVE-2026-6790)
CVE-2026-6790
CWE-20
Medium
Django Improper Verification of Cryptographic Signature Vulnerability (CVE-2026-6873)
CVE-2026-6873
CWE-347
Medium
Django Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-6907)
CVE-2026-6907
CWE-524
Medium
MongoDb Improper Validation of Specified Quantity in Input Vulnerability (CVE-2026-6915)
CVE-2026-6915
CWE-1284
Medium
Oracle Database Server Improper Access Control Vulnerability (CVE-2026-71100)
CVE-2026-71100
CWE-284
Medium
OpenSSL Out-of-bounds Write Vulnerability (CVE-2026-72897)
CVE-2026-72897
CWE-787
Medium
Envoy : Authentication Bypass by Alternate Name Vulnerability (CVE-2026-73511)
CVE-2026-73511
CWE-289
Medium
Envoy : Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2026-73549)
CVE-2026-73549
CWE-754
Medium
Envoy : Use of Non-Canonical URL Paths for Authorization Decisions Vulnerability (CVE-2026-73551)
CVE-2026-73551
CWE-647
Medium
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vu (CVE-2026-73628)
CVE-2026-73628
CWE-707
Medium
OpenSSL Improper Validation of Integrity Check Value Vulnerability (CVE-2026-75803)
CVE-2026-75803
CWE-354
Medium
OpenSSL Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-75804)
CVE-2026-75804
CWE-770
Medium
OpenSSL NULL-pointer dereference Vulnerability (CVE-2026-75805)
CVE-2026-75805
-
Medium
OpenSSL Improper Validation of Specified Quantity in Input Vulnerability (CVE-2026-75806)
CVE-2026-75806
CWE-1284
Medium
Nexus Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-77121)
CVE-2026-77121
CWE-770
Medium
Nexus Incorrect Authorization Vulnerability (CVE-2026-77122)
CVE-2026-77122
CWE-863
Medium
Nexus Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2026-77123)
CVE-2026-77123
CWE-201
Medium
Nexus Incomplete List of Disallowed Inputs Vulnerability (CVE-2026-77124)
CVE-2026-77124
CWE-184
Medium
Nexus Incorrect Authorization Vulnerability (CVE-2026-77125)
CVE-2026-77125
CWE-863
Medium
CaddyWebServer : Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-77281)
CVE-2026-77281
CWE-94
Medium
OpenSSL Observable Timing Discrepancy Vulnerability (CVE-2026-77696)
CVE-2026-77696
CWE-208
Medium
CakePHP : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vuln (CVE-2026-79752)
CVE-2026-79752
CWE-138
Medium
PHP NULL Pointer Dereference Vulnerability (CVE-2026-7259)
CVE-2026-7259
CWE-476
Medium
PHP Stack-based Buffer Overflow Vulnerability (CVE-2026-7260)
CVE-2026-7260
CWE-121
Medium
FrontAccounting Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2026-80210)
CVE-2026-80210
CWE-352
Medium
FrontAccounting Use of Password Hash With Insufficient Computational Effort Vulnerability (CVE-2026-80211)
CVE-2026-80211
CWE-916
Medium
Dolibarr Incorrect Authorization Vulnerability (CVE-2026-81729)
CVE-2026-81729
CWE-863
Medium
PrestaShop Authentication bypass by spoofing Vulnerability (CVE-2026-84186)
CVE-2026-84186
-
Medium
OpenSSL Out-of-bounds Read Vulnerability (CVE-2026-84782)
CVE-2026-84782
CWE-125
Medium
OpenSSL Use After Free Vulnerability (CVE-2026-84783)
CVE-2026-84783
CWE-416
Medium