Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23975 vulnerabilities in this category.

Critical: 1584 High: 12800 Medium: 8788 Low: 799 Information: 4
Vulnerability Name
CVE
CWE
Severity
SharePoint Improper Access Control Vulnerability (CVE-2026-56157)
CVE-2026-56157
CWE-284
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-56192)
CVE-2026-56192
CWE-125
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-57105)
CVE-2026-57105
CWE-707
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-58024)
CVE-2026-58024
CWE-200
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-58026)
CVE-2026-58026
CWE-200
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-58027)
CVE-2026-58027
CWE-200
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-58028)
CVE-2026-58028
CWE-707
Medium
MediaWiki Improper Authentication Vulnerability (CVE-2026-58029)
CVE-2026-58029
CWE-287
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-58030)
CVE-2026-58030
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-58032)
CVE-2026-58032
CWE-707
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-58033)
CVE-2026-58033
CWE-200
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-58037)
CVE-2026-58037
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-58038)
CVE-2026-58038
CWE-707
Medium
Apache Traffic Server Integer Overflow or Wraparound Vulnerability (CVE-2026-58152)
CVE-2026-58152
CWE-190
Medium
Apache Traffic Server Incorrect Authorization Vulnerability (CVE-2026-58156)
CVE-2026-58156
CWE-863
Medium
Apache Traffic Server Stack-based Buffer Overflow Vulnerability (CVE-2026-58158)
CVE-2026-58158
CWE-121
Medium
Apache Traffic Server Out-of-bounds Read Vulnerability (CVE-2026-58160)
CVE-2026-58160
CWE-125
Medium
MediaWiki Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-58517)
CVE-2026-58517
CWE-288
Medium
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2026-58518)
CVE-2026-58518
CWE-352
Medium
MediaWiki URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-58520)
CVE-2026-58520
CWE-601
Medium
SharePoint Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-58639)
CVE-2026-58639
CWE-918
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-5170)
CVE-2026-5170
CWE-617
Medium
Django Improper Handling of Length Parameter Inconsistency Vulnerability (CVE-2026-5766)
CVE-2026-5766
CWE-130
Medium
Oracle JRE Improper Access Control Vulnerability (CVE-2026-60147)
CVE-2026-60147
CWE-284
Medium
Roundcube Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-62641)
CVE-2026-62641
CWE-770
Medium
Roundcube Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2026-62642)
CVE-2026-62642
CWE-835
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-62826)
CVE-2026-62826
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-62829)
CVE-2026-62829
CWE-707
Medium
SharePoint Relative Path Traversal Vulnerability (CVE-2026-62837)
CVE-2026-62837
CWE-23
Medium
SharePoint Insufficiently Protected Credentials Vulnerability (CVE-2026-62839)
CVE-2026-62839
CWE-522
Medium
SharePoint Improper Input Validation Vulnerability (CVE-2026-62917)
CVE-2026-62917
CWE-20
Medium
SharePoint Incorrect Authorization Vulnerability (CVE-2026-63512)
CVE-2026-63512
CWE-863
Medium
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-63516)
CVE-2026-63516
CWE-502
Medium
Next.js Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2026-64643)
CVE-2026-64643
CWE-201
Medium
Next.js Inefficient Algorithmic Complexity Vulnerability (CVE-2026-64644)
CVE-2026-64644
CWE-407
Medium
Next.js URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-64645)
CVE-2026-64645
CWE-601
Medium
Next.js Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-64646)
CVE-2026-64646
CWE-770
Medium
Next.js Improper Encoding or Escaping of Output Vulnerability (CVE-2026-64647)
CVE-2026-64647
CWE-116
Medium
Next.js Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-64648)
CVE-2026-64648
CWE-524
Medium
Next.js Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-64649)
CVE-2026-64649
CWE-918
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-64897)
CVE-2026-64897
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-64900)
CVE-2026-64900
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-64902)
CVE-2026-64902
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-64916)
CVE-2026-64916
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-64922)
CVE-2026-64922
CWE-707
Medium
Apache Traffic Server Incorrect Behavior Order Vulnerability (CVE-2026-65100)
CVE-2026-65100
CWE-696
Medium
Apache Traffic Server Improper Certificate Validation Vulnerability (CVE-2026-65325)
CVE-2026-65325
CWE-295
Medium
Artifactory Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-65618)
CVE-2026-65618
CWE-918
Medium
SharePoint Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-65660)
CVE-2026-65660
CWE-94
Medium
DOMPurify Protection Mechanism Failure Vulnerability (CVE-2026-65899)
CVE-2026-65899
CWE-693
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-65900)
CVE-2026-65900
CWE-707
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-65901)
CVE-2026-65901
CWE-707
Medium
DOMPurify Trust Boundary Violation Vulnerability (CVE-2026-65902)
CVE-2026-65902
CWE-501
Medium
DOMPurify Incorrect Comparison Vulnerability (CVE-2026-65903)
CVE-2026-65903
CWE-697
Medium
DOMPurify Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2026-65904)
CVE-2026-65904
CWE-754
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-65911)
CVE-2026-65911
CWE-707
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-65912)
CVE-2026-65912
CWE-707
Medium
DOMPurify Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Vulnerability (CVE-2026-65913)
CVE-2026-65913
CWE-1321
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-65914)
CVE-2026-65914
CWE-707
Medium
Artifactory Missing Authorization Vulnerability (CVE-2026-65922)
CVE-2026-65922
CWE-862
Medium
Artifactory Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-65923)
CVE-2026-65923
CWE-918
Medium
Artifactory Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-65924)
CVE-2026-65924
CWE-918
Medium
Artifactory Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-65925)
CVE-2026-65925
CWE-918
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-66010)
CVE-2026-66010
CWE-707
Medium
Artifactory Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-66018)
CVE-2026-66018
CWE-200
Medium
Angular Insufficient Verification of Data Authenticity Vulnerability (CVE-2026-68945)
CVE-2026-68945
CWE-345
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-69149)
CVE-2026-69149
CWE-707
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-69151)
CVE-2026-69151
CWE-707
Medium
Python Improper Encoding or Escaping of Output Vulnerability (CVE-2026-6019)
CVE-2026-6019
CWE-116
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-6365)
CVE-2026-6365
CWE-707
Medium
Drupal Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability (CVE-2026-6366)
CVE-2026-6366
CWE-915
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-6367)
CVE-2026-6367
CWE-707
Medium
PostgreSQL Missing Authorization Vulnerability (CVE-2026-6470)
CVE-2026-6470
CWE-862
Medium
PostgreSQL Missing Authorization Vulnerability (CVE-2026-6472)
CVE-2026-6472
CWE-862
Medium
PostgreSQL Use of Externally-Controlled Format String Vulnerability (CVE-2026-6474)
CVE-2026-6474
CWE-134
Medium