Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23821 vulnerabilities in this category.

Critical: 1574 High: 12741 Medium: 8710 Low: 792 Information: 4
Vulnerability Name
CVE
CWE
Severity
Grafana Files or Directories Accessible to External Parties Vulnerability (CVE-2026-33380)
CVE-2026-33380
CWE-552
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-27100)
CVE-2026-27100
CWE-200
Medium
Grafana Uncontrolled Resource Consumption Vulnerability (CVE-2026-33378)
CVE-2026-33378
CWE-400
Medium
Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-29170)
CVE-2026-29170
CWE-707
Medium
Caddy Web Server Improper Input Validation Vulnerability (CVE-2026-27585)
CVE-2026-27585
CWE-20
Medium
Craft CMS Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-28782)
CVE-2026-28782
CWE-639
Medium
Grafana Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-28383)
CVE-2026-28383
CWE-770
Medium
Apache HTTP Server Observable Timing Discrepancy Vulnerability (CVE-2026-33006)
CVE-2026-33006
CWE-208
Medium
Apache Tomcat Improper Input Validation Vulnerability (CVE-2026-32990)
CVE-2026-32990
CWE-20
Medium
Chamilo URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-32932)
CVE-2026-32932
CWE-601
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-32629)
CVE-2026-32629
CWE-707
Medium
Craft CMS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2026-32262)
CVE-2026-32262
CWE-22
Medium
SharePoint Improper Input Validation Vulnerability (CVE-2026-32201)
CVE-2026-32201
CWE-20
Medium
Chamilo Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-31941)
CVE-2026-31941
CWE-918
Medium
Craft CMS Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-28781)
CVE-2026-28781
CWE-639
Medium
Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-31859)
CVE-2026-31859
CWE-707
Medium
Grafana Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2026-28379)
CVE-2026-28379
CWE-362
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-30895)
CVE-2026-30895
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-30894)
CVE-2026-30894
CWE-707
Medium
Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-30882)
CVE-2026-30882
CWE-707
Medium
Next.js Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2026-29057)
CVE-2026-29057
-
Medium
Craft CMS Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-29069)
CVE-2026-29069
CWE-639
Medium
Craft CMS Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2026-29113)
CVE-2026-29113
CWE-352
Medium
Chamilo Observable Response Discrepancy Vulnerability (CVE-2026-30876)
CVE-2026-30876
CWE-204
Medium
Lodash Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Vulnerability (CVE-2026-2950)
CVE-2026-2950
CWE-1321
Medium
OpenSSL Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade') Vulnerability (CVE-2026-2673)
CVE-2026-2673
CWE-757
Medium
PostgreSQL Improper Validation of Specified Type of Input Vulnerability (CVE-2026-2003)
CVE-2026-2003
CWE-1287
Medium
Grafana Missing Authorization Vulnerability (CVE-2026-28380)
CVE-2026-28380
CWE-862
Medium
Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2026-33007)
CVE-2026-33007
CWE-476
Medium
Grafana Uncontrolled Resource Consumption Vulnerability (CVE-2026-33375)
CVE-2026-33375
CWE-400
Medium
Next.js Missing Origin Validation in WebSockets Vulnerability (CVE-2026-27977)
CVE-2026-27977
-
Medium
Caddy Web Server Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2026-27589)
CVE-2026-27589
CWE-352
Medium
Ruby on Rails Improper Verification of Intent by Broadcast Receiver Vulnerability (CVE-2026-33173)
CVE-2026-33173
CWE-925
Medium
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-33170)
CVE-2026-33170
CWE-707
Medium
Ruby on Rails Uncontrolled Resource Consumption Vulnerability (CVE-2026-33169)
CVE-2026-33169
CWE-400
Medium
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-33167)
CVE-2026-33167
CWE-707
Medium
Grafana Out-of-bounds Write Vulnerability (CVE-2026-27879)
CVE-2026-27879
CWE-787
Medium
Craft CMS Improper Authorization Vulnerability (CVE-2026-33162)
CVE-2026-33162
CWE-285
Medium
Craft CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-33161)
CVE-2026-33161
CWE-200
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-27970)
CVE-2026-27970
CWE-707
Medium
Craft CMS Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-33160)
CVE-2026-33160
CWE-639
Medium
Grafana Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-28376)
CVE-2026-28376
CWE-770
Medium
Next.js Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2026-27978)
CVE-2026-27978
CWE-352
Medium
Craft CMS Missing Authentication for Critical Function Vulnerability (CVE-2026-33159)
CVE-2026-33159
CWE-306
Medium
CKEditor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-28343)
CVE-2026-28343
CWE-707
Medium
Craft CMS Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-33158)
CVE-2026-33158
CWE-639
Medium
Grafana Improper Access Control Vulnerability (CVE-2026-28374)
CVE-2026-28374
CWE-284
Medium
Chamilo Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-33141)
CVE-2026-33141
CWE-639
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-33113)
CVE-2026-33113
CWE-707
Medium
Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-33051)
CVE-2026-33051
CWE-707
Medium
Grafana Uncontrolled Resource Consumption Vulnerability (CVE-2026-28375)
CVE-2026-28375
CWE-400
Medium
Django Inefficient Algorithmic Complexity Vulnerability (CVE-2026-33033)
CVE-2026-33033
CWE-407
Medium
EspoCRM Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-33534)
CVE-2026-33534
CWE-918
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-6365)
CVE-2026-6365
CWE-707
Medium
EspoCRM Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Vulnerability (CVE-2026-33657)
CVE-2026-33657
CWE-707
Medium
MongoDb Use of Uninitialized Variable Vulnerability (CVE-2026-9754)
CVE-2026-9754
CWE-457
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-57105)
CVE-2026-57105
CWE-707
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-58024)
CVE-2026-58024
CWE-200
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-58026)
CVE-2026-58026
CWE-200
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-58027)
CVE-2026-58027
CWE-200
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-58028)
CVE-2026-58028
CWE-707
Medium
MediaWiki Improper Authentication Vulnerability (CVE-2026-58029)
CVE-2026-58029
CWE-287
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-58030)
CVE-2026-58030
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-58032)
CVE-2026-58032
CWE-707
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-58033)
CVE-2026-58033
CWE-200
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-58038)
CVE-2026-58038
CWE-707
Medium
Apache Traffic Server Integer Overflow or Wraparound Vulnerability (CVE-2026-58152)
CVE-2026-58152
CWE-190
Medium
Apache Traffic Server Incorrect Authorization Vulnerability (CVE-2026-58156)
CVE-2026-58156
CWE-863
Medium
Apache Traffic Server Stack-based Buffer Overflow Vulnerability (CVE-2026-58158)
CVE-2026-58158
CWE-121
Medium
Apache Traffic Server Out-of-bounds Read Vulnerability (CVE-2026-58160)
CVE-2026-58160
CWE-125
Medium
MongoDb NULL Pointer Dereference Vulnerability (CVE-2026-9752)
CVE-2026-9752
CWE-476
Medium
SharePoint Improper Access Control Vulnerability (CVE-2026-56157)
CVE-2026-56157
CWE-284
Medium
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2026-58518)
CVE-2026-58518
CWE-352
Medium
MongoDb Insertion of Sensitive Information into Log File Vulnerability (CVE-2026-9735)
CVE-2026-9735
CWE-532
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-5170)
CVE-2026-5170
CWE-617
Medium