Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23821 vulnerabilities in this category.

Critical: 1574 High: 12741 Medium: 8710 Low: 792 Information: 4
Vulnerability Name
CVE
CWE
Severity
MongoDb Cleartext Transmission of Sensitive Information Vulnerability (CVE-2026-9741)
CVE-2026-9741
CWE-319
Medium
MongoDb Improper Validation of Specified Type of Input Vulnerability (CVE-2026-9742)
CVE-2026-9742
CWE-1287
Medium
SharePoint Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-58639)
CVE-2026-58639
CWE-918
Medium
MediaWiki URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-58520)
CVE-2026-58520
CWE-601
Medium
MediaWiki Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-58517)
CVE-2026-58517
CWE-288
Medium
MongoDb Insertion of Sensitive Information into Log File Vulnerability (CVE-2026-9751)
CVE-2026-9751
CWE-532
Medium
MongoDb NULL Pointer Dereference Vulnerability (CVE-2026-9743)
CVE-2026-9743
CWE-476
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-9746)
CVE-2026-9746
CWE-617
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-9747)
CVE-2026-9747
CWE-617
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-9748)
CVE-2026-9748
CWE-617
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-9749)
CVE-2026-9749
CWE-617
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-9750)
CVE-2026-9750
CWE-617
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-56192)
CVE-2026-56192
CWE-125
Medium
Apache Tomcat Improper Authorization Vulnerability (CVE-2026-55956)
CVE-2026-55956
CWE-285
Medium
Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-9029)
CVE-2026-9029
CWE-707
Medium
SharePoint Integer Overflow or Wraparound Vulnerability (CVE-2026-55026)
CVE-2026-55026
CWE-190
Medium
Jenkins URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-53440)
CVE-2026-53440
CWE-601
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-53441)
CVE-2026-53441
CWE-707
Medium
Jenkins Missing Encryption of Sensitive Data Vulnerability (CVE-2026-53442)
CVE-2026-53442
CWE-311
Medium
Django Buffer Access with Incorrect Length Value Vulnerability (CVE-2026-53877)
CVE-2026-53877
CWE-805
Medium
Django Improper Neutralization of Line Delimiters Vulnerability (CVE-2026-53878)
CVE-2026-53878
CWE-144
Medium
SharePoint External Control of File Name or Path Vulnerability (CVE-2026-54108)
CVE-2026-54108
CWE-73
Medium
Angular Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-54264)
CVE-2026-54264
CWE-200
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-54265)
CVE-2026-54265
CWE-707
Medium
Angular Use of Weak Hash Vulnerability (CVE-2026-54266)
CVE-2026-54266
-
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-54267)
CVE-2026-54267
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-55016)
CVE-2026-55016
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-55019)
CVE-2026-55019
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-55020)
CVE-2026-55020
CWE-707
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-55023)
CVE-2026-55023
CWE-125
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-55027)
CVE-2026-55027
CWE-125
Medium
Apache Tomcat Improper Authentication Vulnerability (CVE-2026-55955)
CVE-2026-55955
CWE-287
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-55135)
CVE-2026-55135
CWE-707
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-55808)
CVE-2026-55808
CWE-707
Medium
Drupal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-55806)
CVE-2026-55806
CWE-601
Medium
Drupal Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability (CVE-2026-55804)
CVE-2026-55804
CWE-915
Medium
Drupal Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability (CVE-2026-55803)
CVE-2026-55803
CWE-915
Medium
CakePHP URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-55590)
CVE-2026-55590
CWE-601
Medium
SharePoint Numeric Truncation Error Vulnerability (CVE-2026-55142)
CVE-2026-55142
CWE-197
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-55126)
CVE-2026-55126
CWE-707
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-55028)
CVE-2026-55028
CWE-125
Medium
SharePoint Improper Input Validation Vulnerability (CVE-2026-55124)
CVE-2026-55124
CWE-20
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-55121)
CVE-2026-55121
CWE-125
Medium
SharePoint Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-55051)
CVE-2026-55051
CWE-918
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-55050)
CVE-2026-55050
CWE-125
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-55047)
CVE-2026-55047
CWE-125
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-55030)
CVE-2026-55030
CWE-707
Medium
Django Improper Handling of Length Parameter Inconsistency Vulnerability (CVE-2026-5766)
CVE-2026-5766
CWE-130
Medium
Oracle JRE Improper Access Control Vulnerability (CVE-2026-60147)
CVE-2026-60147
CWE-284
Medium
Jenkins Missing Authorization Vulnerability (CVE-2026-53438)
CVE-2026-53438
CWE-862
Medium
DOMPurify Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Vulnerability (CVE-2026-65913)
CVE-2026-65913
CWE-1321
Medium
Jetty Improper Input Validation Vulnerability (CVE-2026-6790)
CVE-2026-6790
CWE-20
Medium
PHP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-6735)
CVE-2026-6735
CWE-707
Medium
Artifactory Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-65618)
CVE-2026-65618
CWE-918
Medium
SharePoint Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-65660)
CVE-2026-65660
CWE-94
Medium
DOMPurify Protection Mechanism Failure Vulnerability (CVE-2026-65899)
CVE-2026-65899
CWE-693
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-65900)
CVE-2026-65900
CWE-707
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-65901)
CVE-2026-65901
CWE-707
Medium
DOMPurify Trust Boundary Violation Vulnerability (CVE-2026-65902)
CVE-2026-65902
CWE-501
Medium
DOMPurify Incorrect Comparison Vulnerability (CVE-2026-65903)
CVE-2026-65903
CWE-697
Medium
PostgreSQL Buffer Over-read Vulnerability (CVE-2026-6575)
CVE-2026-6575
CWE-126
Medium
DOMPurify Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2026-65904)
CVE-2026-65904
CWE-754
Medium
PostgreSQL Covert Timing Channel Vulnerability (CVE-2026-6478)
CVE-2026-6478
CWE-385
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-65911)
CVE-2026-65911
CWE-707
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-65912)
CVE-2026-65912
CWE-707
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-65914)
CVE-2026-65914
CWE-707
Medium
Apache Traffic Server Improper Certificate Validation Vulnerability (CVE-2026-65325)
CVE-2026-65325
CWE-295
Medium
Artifactory Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-66018)
CVE-2026-66018
CWE-200
Medium
Python Improper Encoding or Escaping of Output Vulnerability (CVE-2026-6019)
CVE-2026-6019
CWE-116
Medium
Drupal Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability (CVE-2026-6366)
CVE-2026-6366
CWE-915
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-69151)
CVE-2026-69151
CWE-707
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-69149)
CVE-2026-69149
CWE-707
Medium
Angular Insufficient Verification of Data Authenticity Vulnerability (CVE-2026-68945)
CVE-2026-68945
CWE-345
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-6367)
CVE-2026-6367
CWE-707
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-66010)
CVE-2026-66010
CWE-707
Medium