Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Medium Severity Vulnerabilities

Found 9114 vulnerabilities at Medium severity.

Vulnerability Name
CVE
CWE
Severity
OpenSSL Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-84784)
CVE-2026-84784
CWE-770
Medium
Angular : Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-88056)
CVE-2026-88056
CWE-918
Medium
Angular : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vuln (CVE-2026-88057)
CVE-2026-88057
CWE-707
Medium
Angular : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vuln (CVE-2026-88058)
CVE-2026-88058
CWE-707
Medium
Angular : Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-88059)
CVE-2026-88059
CWE-200
Medium
Angular : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vuln (CVE-2026-88060)
CVE-2026-88060
CWE-707
Medium
EspoCRM Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-88896)
CVE-2026-88896
CWE-918
Medium
Dolibarr Improper Handling of Case Sensitivity Vulnerability (CVE-2026-89012)
CVE-2026-89012
CWE-178
Medium
MongoDb NULL Pointer Dereference Vulnerability (CVE-2026-8063)
CVE-2026-8063
CWE-476
Medium
MongoDb Improperly Controlled Sequential Memory Allocation Vulnerability (CVE-2026-8199)
CVE-2026-8199
CWE-1325
Medium
MongoDb Insertion of Sensitive Information into Log File Vulnerability (CVE-2026-8200)
CVE-2026-8200
CWE-532
Medium
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-8202)
CVE-2026-8202
CWE-770
Medium
MongoDb Use After Free Vulnerability (CVE-2026-8336)
CVE-2026-8336
CWE-416
Medium
Jetty Use of Non-Canonical URL Paths for Authorization Decisions Vulnerability (CVE-2026-8384)
CVE-2026-8384
CWE-647
Medium
Django Improper Handling of Case Sensitivity Vulnerability (CVE-2026-8404)
CVE-2026-8404
CWE-178
Medium
Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-8595)
CVE-2026-8595
CWE-707
Medium
EspoCRM Incorrect Authorization Vulnerability (CVE-2026-90934)
CVE-2026-90934
CWE-863
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scriptin (CVE-2026-91775)
CVE-2026-91775
CWE-707
Medium
TornadoWebServer Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response (CVE-2026-91991)
CVE-2026-91991
CWE-707
Medium
TornadoWebServer Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-91992)
CVE-2026-91992
CWE-200
Medium
CaddyWebServer : Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-92284)
CVE-2026-92284
CWE-770
Medium
EspoCRM Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) Vulnerability (CVE-2026-92298)
CVE-2026-92298
CWE-338
Medium
CaddyWebServer : Improper Handling of Case Sensitivity Vulnerability (CVE-2026-92700)
CVE-2026-92700
CWE-178
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scriptin (CVE-2026-92730)
CVE-2026-92730
CWE-707
Medium
LimeSurvey Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-97685)
CVE-2026-97685
CWE-639
Medium
GibbonEdu Missing Authentication Vulnerability (CVE-2026-97864)
CVE-2026-97864
-
Medium
Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-9029)
CVE-2026-9029
CWE-707
Medium
MongoDb Insertion of Sensitive Information into Log File Vulnerability (CVE-2026-9735)
CVE-2026-9735
CWE-532
Medium
MongoDb Cleartext Transmission of Sensitive Information Vulnerability (CVE-2026-9741)
CVE-2026-9741
CWE-319
Medium
MongoDb Improper Validation of Specified Type of Input Vulnerability (CVE-2026-9742)
CVE-2026-9742
CWE-1287
Medium
MongoDb NULL Pointer Dereference Vulnerability (CVE-2026-9743)
CVE-2026-9743
CWE-476
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-9746)
CVE-2026-9746
CWE-617
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-9747)
CVE-2026-9747
CWE-617
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-9748)
CVE-2026-9748
CWE-617
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-9749)
CVE-2026-9749
CWE-617
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-9750)
CVE-2026-9750
CWE-617
Medium
MongoDb Insertion of Sensitive Information into Log File Vulnerability (CVE-2026-9751)
CVE-2026-9751
CWE-532
Medium
MongoDb NULL Pointer Dereference Vulnerability (CVE-2026-9752)
CVE-2026-9752
CWE-476
Medium
MongoDb Use of Uninitialized Variable Vulnerability (CVE-2026-9754)
CVE-2026-9754
CWE-457
Medium