[ Vulnerability Database ]
A comprehensive hub for tracking high-impact vulnerabilities across application code and third-party libraries, for security teams and developers.
Trusted by Startups to Fortune 100
CVE-2026-113392
(7.4)
Path Traversal (CWE-22) in DrayTek Vigor2960 Apmupload
Unauthorized File Access
CVE-2026-113391
(9.9)
OS Command Injection (CWE-77) in Vigor2960 Upload Endpoint
Remote Code Execution
CVE-2026-113390
(9.9)
OS Command Injection (CWE-78) in DrayTek Vigor2960
Remote Code Execution
CVE-2026-113389
(9.9)
OS Command Injection (CWE-77) in DrayTek Vigor2960
Remote Code Execution
CVE-2026-113358
(7.5)
Missing Authentication (CWE-306) in LavaLite Filer
Unauthorized File Disclosure
CVE-2026-113356
(7.5)
PHP Object Injection (CWE-502) in DokuWiki Draft Handling
Arbitrary File Operations and Potential Code Execution
CVE-2026-113352
(7.5)
Path Traversal (CWE-22) in uTox File Transfer Module
Arbitrary File Write and Potential Code Execution
CVE-2026-77937
(8.1)
Authentication Bypass (CWE-639) in Letta API Server
Cross-Tenant Unauthorized Access and Modification
CVE-2026-77935
(8.3)
IDOR (CWE-639) in Coze Studio Workflow API Route Access
Cross-tenant workflow access and unauthorized modification
CVE-2026-77932
(9.8)
Missing Authentication (CWE-306) in DB-GPT Agent API
Unauthenticated Remote Code Execution
Let AI Fix Your Code, You Build the Future
Get Pentest Report
