Invicti named a Leader in IDC MarketScape: Worldwide DAST 2026 Vendor Assessment. Read now.
Log in
Invicti Platform
US
EU
CA
AppSec with Zero Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
AI-BOM
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Invicti vs. Competitors
Case Studies
Contact Us
Careers
MSSP
Partners
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Documentation
Vulnerability Database
Get a demo
Home
/
Web Application Vulnerabilities
/ Missing Update
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
Missing Update
This page lists
23975 vulnerabilities
in this category.
Critical: 1584
High: 12800
Medium: 8788
Low: 799
Information: 4
Vulnerability Name
CVE
CWE
Severity
Joomla CVE-2026-48900 Vulnerability (CVE-2026-48900)
CVE-2026-48900
-
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48903)
CVE-2026-48903
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48905)
CVE-2026-48905
CWE-707
Medium
Joomla Improper Access Control Vulnerability (CVE-2026-48947)
CVE-2026-48947
CWE-284
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48949)
CVE-2026-48949
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48950)
CVE-2026-48950
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48951)
CVE-2026-48951
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48952)
CVE-2026-48952
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48953)
CVE-2026-48953
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48954)
CVE-2026-48954
CWE-707
Medium
Joomla CVE-2026-48955 Vulnerability (CVE-2026-48955)
CVE-2026-48955
-
Medium
Joomla CVE-2026-48956 Vulnerability (CVE-2026-48956)
CVE-2026-48956
-
Medium
markdown-it Uncontrolled Resource Consumption Vulnerability (CVE-2026-48988)
CVE-2026-48988
CWE-400
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-49458)
CVE-2026-49458
CWE-707
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-49459)
CVE-2026-49459
CWE-707
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-49978)
CVE-2026-49978
CWE-707
Medium
MongoDb Use of Uninitialized Resource Vulnerability (CVE-2026-4147)
CVE-2026-4147
CWE-908
Medium
Python Improper Preservation of Permissions Vulnerability (CVE-2026-4360)
CVE-2026-4360
CWE-281
Medium
Jboss EAP Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-4366)
CVE-2026-4366
CWE-918
Medium
Squid Improper Input Validation Vulnerability (CVE-2026-50012)
CVE-2026-50012
CWE-20
Medium
Angular Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-50169)
CVE-2026-50169
CWE-200
Medium
Angular Uncontrolled Resource Consumption Vulnerability (CVE-2026-50171)
CVE-2026-50171
CWE-400
Medium
Angular Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-50184)
CVE-2026-50184
CWE-200
Medium
Apache Tomcat Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Vulnerability (CVE-2026-50229)
CVE-2026-50229
CWE-707
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50555)
CVE-2026-50555
CWE-707
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50556)
CVE-2026-50556
CWE-707
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50557)
CVE-2026-50557
CWE-707
Medium
Envoy : Use After Free Vulnerability (CVE-2026-50572)
CVE-2026-50572
CWE-416
Medium
ReviveAdserver Improper Access Control Vulnerability (CVE-2026-50739)
CVE-2026-50739
CWE-284
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50740)
CVE-2026-50740
CWE-707
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50742)
CVE-2026-50742
CWE-707
Medium
ReviveAdserver Improper Access Control Vulnerability (CVE-2026-50744)
CVE-2026-50744
CWE-284
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50745)
CVE-2026-50745
CWE-707
Medium
Sqlite Use After Free Vulnerability (CVE-2026-51298)
CVE-2026-51298
CWE-416
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-52725)
CVE-2026-52725
CWE-707
Medium
Caddy Web Server Improper Encoding or Escaping of Output Vulnerability (CVE-2026-52846)
CVE-2026-52846
CWE-116
Medium
Jenkins URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-53436)
CVE-2026-53436
CWE-601
Medium
Jenkins URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-53437)
CVE-2026-53437
CWE-601
Medium
Jenkins Missing Authorization Vulnerability (CVE-2026-53438)
CVE-2026-53438
CWE-862
Medium
Jenkins Missing Authorization Vulnerability (CVE-2026-53439)
CVE-2026-53439
CWE-862
Medium
Jenkins URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-53440)
CVE-2026-53440
CWE-601
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-53441)
CVE-2026-53441
CWE-707
Medium
Jenkins Missing Encryption of Sensitive Data Vulnerability (CVE-2026-53442)
CVE-2026-53442
CWE-311
Medium
Django Buffer Access with Incorrect Length Value Vulnerability (CVE-2026-53877)
CVE-2026-53877
CWE-805
Medium
Django Improper Neutralization of Line Delimiters Vulnerability (CVE-2026-53878)
CVE-2026-53878
CWE-144
Medium
SharePoint External Control of File Name or Path Vulnerability (CVE-2026-54108)
CVE-2026-54108
CWE-73
Medium
Skipper : Missing Authentication for Critical Function Vulnerability (CVE-2026-54246)
CVE-2026-54246
CWE-306
Medium
Skipper : Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-54247)
CVE-2026-54247
CWE-770
Medium
Angular Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-54264)
CVE-2026-54264
CWE-200
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-54265)
CVE-2026-54265
CWE-707
Medium
Angular Use of Weak Hash Vulnerability (CVE-2026-54266)
CVE-2026-54266
-
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-54267)
CVE-2026-54267
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-55016)
CVE-2026-55016
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-55019)
CVE-2026-55019
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-55020)
CVE-2026-55020
CWE-707
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-55023)
CVE-2026-55023
CWE-125
Medium
SharePoint Integer Overflow or Wraparound Vulnerability (CVE-2026-55026)
CVE-2026-55026
CWE-190
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-55027)
CVE-2026-55027
CWE-125
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-55028)
CVE-2026-55028
CWE-125
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-55030)
CVE-2026-55030
CWE-707
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-55047)
CVE-2026-55047
CWE-125
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-55050)
CVE-2026-55050
CWE-125
Medium
SharePoint Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-55051)
CVE-2026-55051
CWE-918
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-55121)
CVE-2026-55121
CWE-125
Medium
SharePoint Improper Input Validation Vulnerability (CVE-2026-55124)
CVE-2026-55124
CWE-20
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-55126)
CVE-2026-55126
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-55135)
CVE-2026-55135
CWE-707
Medium
SharePoint Numeric Truncation Error Vulnerability (CVE-2026-55142)
CVE-2026-55142
CWE-197
Medium
CakePHP URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-55590)
CVE-2026-55590
CWE-601
Medium
Drupal Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability (CVE-2026-55803)
CVE-2026-55803
CWE-915
Medium
Drupal Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability (CVE-2026-55804)
CVE-2026-55804
CWE-915
Medium
Drupal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-55806)
CVE-2026-55806
CWE-601
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-55808)
CVE-2026-55808
CWE-707
Medium
Apache Tomcat Improper Authentication Vulnerability (CVE-2026-55955)
CVE-2026-55955
CWE-287
Medium
Apache Tomcat Improper Authorization Vulnerability (CVE-2026-55956)
CVE-2026-55956
CWE-285
Medium
«
1
...
306
307
308
...
320
»