Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15673 vulnerabilities in this category.

Critical: 1692 High: 4267 Medium: 8899 Low: 813 Information: 2
Vulnerability Name
CVE
CWE
Severity
TornadoWebServer Improper Handling of Highly Compressed Data (Data Amplification) Vulnerability (CVE-2026-103262)
CVE-2026-103262
CWE-409
High
EspoCRM Insufficiently Protected Credentials Vulnerability (CVE-2026-105833)
CVE-2026-105833
CWE-522
High
Jetty Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-10051)
CVE-2026-10051
CWE-200
High
MOVEit Transfer Improper Neutralization of Special Elements in Data Query Logic Vulnerability (CVE-2026-10698)
CVE-2026-10698
CWE-138
High
MOVEit Transfer Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2026-10699)
CVE-2026-10699
CWE-401
High
Angular Uncontrolled Resource Consumption Vulnerability (CVE-2026-111751)
CVE-2026-111751
CWE-400
High
Angular Uncontrolled Resource Consumption Vulnerability (CVE-2026-111752)
CVE-2026-111752
CWE-400
High
ProjectSend Incorrect Authorization Vulnerability (CVE-2026-112001)
CVE-2026-112001
CWE-863
High
Nexus Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-113370)
CVE-2026-113370
CWE-138
High
Nexus Insufficiently Protected Credentials Vulnerability (CVE-2026-113371)
CVE-2026-113371
CWE-522
High
Nexus Insufficiently Protected Credentials Vulnerability (CVE-2026-113372)
CVE-2026-113372
CWE-522
High
Nexus Missing Authorization Vulnerability (CVE-2026-113374)
CVE-2026-113374
CWE-862
High
Roundcube Improper Neutralization of CRLF Sequences ('CRLF Injection') Vulnerability (CVE-2026-113386)
CVE-2026-113386
CWE-707
High
Roundcube Improper Control of Resource Identifiers ('Resource Injection') Vulnerability (CVE-2026-114716)
CVE-2026-114716
CWE-99
High
Roundcube Improper Neutralization of CRLF Sequences ('CRLF Injection') Vulnerability (CVE-2026-114720)
CVE-2026-114720
CWE-707
High
Roundcube Deserialization of Untrusted Data Vulnerability (CVE-2026-114724)
CVE-2026-114724
CWE-502
High
Roundcube Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVE-2026-114727)
CVE-2026-114727
CWE-829
High
Roundcube Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-114730)
CVE-2026-114730
CWE-918
High
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-116218)
CVE-2026-116218
CWE-138
High
Dolibarr Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2026-116219)
CVE-2026-116219
CWE-138
High
CKEditor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-116688)
CVE-2026-116688
CWE-707
High
Highcharts Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-116796)
CVE-2026-116796
CWE-707
High
Highcharts Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-118244)
CVE-2026-118244
CWE-707
High
Highcharts Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-118246)
CVE-2026-118246
CWE-707
High
Highcharts Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Vulnerability (CVE-2026-118249)
CVE-2026-118249
CWE-1321
High
Highcharts Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Vulnerability (CVE-2026-118250)
CVE-2026-118250
CWE-1321
High
Highcharts Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-118251)
CVE-2026-118251
CWE-707
High
EspoCRM Inefficient Regular Expression Complexity Vulnerability (CVE-2026-118686)
CVE-2026-118686
CWE-1333
High
Sqlite Out-of-bounds Write Vulnerability (CVE-2026-119373)
CVE-2026-119373
CWE-787
High
Sqlite Out-of-bounds Write Vulnerability (CVE-2026-119374)
CVE-2026-119374
CWE-787
High
Sqlite Out-of-bounds Write Vulnerability (CVE-2026-119379)
CVE-2026-119379
CWE-787
High
CakePHP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-119418)
CVE-2026-119418
CWE-138
High
CakePHP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-119419)
CVE-2026-119419
CWE-138
High
phpMyAdmin Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2026-119426)
CVE-2026-119426
CWE-352
High
Sqlite Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2026-119586)
CVE-2026-119586
CWE-138
High
Sqlite Heap-based Buffer Overflow Vulnerability (CVE-2026-11822)
CVE-2026-11822
CWE-122
High
Sqlite Heap-based Buffer Overflow Vulnerability (CVE-2026-11824)
CVE-2026-11824
CWE-122
High
MongoDb Use After Free Vulnerability (CVE-2026-11933)
CVE-2026-11933
CWE-416
High
AngularJS Incomplete filtering of special elements Vulnerability (CVE-2026-11998)
CVE-2026-11998
-
High
MongoDb Reliance on Untrusted Inputs in a Security Decision Vulnerability (CVE-2026-13059)
CVE-2026-13059
CWE-807
High
MongoDb Heap-based Buffer Overflow Vulnerability (CVE-2026-13072)
CVE-2026-13072
CWE-122
High
MongoDb Out-of-bounds Read Vulnerability (CVE-2026-13077)
CVE-2026-13077
CWE-125
High
MongoDb Missing Authorization Vulnerability (CVE-2026-13078)
CVE-2026-13078
CWE-862
High
MediaWiki Improper Input Validation Vulnerability (CVE-2026-13706)
CVE-2026-13706
CWE-20
High
MediaWiki Session Fixation Vulnerability (CVE-2026-13707)
CVE-2026-13707
CWE-384
High
PostgreSQL Integer Overflow or Wraparound Vulnerability (CVE-2026-14662)
CVE-2026-14662
CWE-190
High
PostgreSQL Heap-based Buffer Overflow Vulnerability (CVE-2026-14664)
CVE-2026-14664
CWE-122
High
PostgreSQL Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2026-14668)
CVE-2026-14668
CWE-843
High
PostgreSQL Heap-based Buffer Overflow Vulnerability (CVE-2026-14669)
CVE-2026-14669
CWE-122
High
PostgreSQL Heap-based Buffer Overflow Vulnerability (CVE-2026-14670)
CVE-2026-14670
CWE-122
High
PostgreSQL Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2026-14671)
CVE-2026-14671
CWE-843
High
PostgreSQL Heap-based Buffer Overflow Vulnerability (CVE-2026-14676)
CVE-2026-14676
CWE-122
High
PostgreSQL Integer Overflow or Wraparound Vulnerability (CVE-2026-14677)
CVE-2026-14677
CWE-190
High
PostgreSQL Stack-based Buffer Overflow Vulnerability (CVE-2026-14679)
CVE-2026-14679
CWE-121
High
PostgreSQL Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2026-14680)
CVE-2026-14680
CWE-843
High
Django External Control of File Name or Path Vulnerability (CVE-2026-15307)
CVE-2026-15307
CWE-73
High
Python CVE-2026-15308 Vulnerability (CVE-2026-15308)
CVE-2026-15308
-
High
PostgreSQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-15741)
CVE-2026-15741
CWE-138
High
PostgreSQL Integer Overflow or Wraparound Vulnerability (CVE-2026-15742)
CVE-2026-15742
CWE-190
High
PostgreSQL Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2026-16238)
CVE-2026-16238
CWE-843
High
PostgreSQL Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2026-16239)
CVE-2026-16239
CWE-843
High
PostgreSQL Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVE-2026-18408)
CVE-2026-18408
CWE-829
High
PostgreSQL Heap-based Buffer Overflow Vulnerability (CVE-2026-19385)
CVE-2026-19385
CWE-122
High
Django Inefficient Algorithmic Complexity Vulnerability (CVE-2026-1285)
CVE-2026-1285
CWE-407
High
Jetty Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2026-1605)
CVE-2026-1605
CWE-401
High
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-1847)
CVE-2026-1847
CWE-770
High
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-1848)
CVE-2026-1848
CWE-770
High
MongoDb Uncontrolled Recursion Vulnerability (CVE-2026-1849)
CVE-2026-1849
CWE-674
High
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-1850)
CVE-2026-1850
CWE-770
High
SharePoint Untrusted Search Path Vulnerability (CVE-2026-20943)
CVE-2026-20943
CWE-426
High
SharePoint Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-20947)
CVE-2026-20947
CWE-138
High
SharePoint Untrusted Pointer Dereference Vulnerability (CVE-2026-20948)
CVE-2026-20948
CWE-822
High
SharePoint Improper Input Validation Vulnerability (CVE-2026-20951)
CVE-2026-20951
CWE-20
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-20963)
CVE-2026-20963
CWE-502
High
SharePoint Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-21260)
CVE-2026-21260
CWE-200
High