|
CRITICAL 9.3
|
CVE-2026-46423
|
Rocket.Chat: SAML signature validation skipped when IdP certificate field is empty_CVE-2026-46423
Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8.4.1, 8.3.3, 8.2.3, 8.1.4, 8.0.5, 7.13.7, and 7...
|
RocketChat |
Rocket.Chat >= 8.5.0-rc.0, < 8.5.0
|
|
CVE
|
|
CRITICAL 9.1
|
CVE-2026-45689
|
Rocket.Chat: Pre-Auth NoSQL Injection in OAuth2 Token Endpoint leading to Arbitrary User ATO_CVE-2026-45689
Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8.4.1, 8.3.3, 8.2.3, 8.1.4, 8.0.5, 7.13.7, and 7...
|
RocketChat |
Rocket.Chat >= 8.5.0-rc.0, < 8.5.0
|
|
CVE
|
|
CRITICAL 9.1
|
CVE-2026-45688
|
Rocket.Chat: Pre-Auth NoSQL Injection in CAS Login Handler leading to Arbitrary CAS/SAML User Session Hijack_CVE-2026-45688
Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8.4.1, 8.3.3, 8.2.3, 8.1.4, 8.0.5, 7.13.7, and 7...
|
RocketChat |
Rocket.Chat >= 8.5.0-rc.0, < 8.5.0
|
|
CVE
|
|
CRITICAL 9.3
|
CVE-2026-33543
|
FOSSBilling: Authentication bypass allows unauthenticated administrator creation_CVE-2026-33543
FOSSBilling is a free, open-source billing and client management system. Versions 0.7.2 and prior expose a guest API endpoint, /api/guest/staff/cre...
|
FOSSBilling |
FOSSBilling < 0.8.0
|
|
CVE
|
|
CRITICAL 9.3
|
CVE-2026-55666
|
Rocket.Chat: Email Parameter Fallback Leads To Account Takeover Within Apple OAuth_CVE-2026-55666
Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, and 7.10.13, ...
|
RocketChat |
Rocket.Chat >= 8.5.0-rc.0, < 8.5.1
|
|
CVE
|
|
CRITICAL 9
|
CVE-2026-55570
|
SiYuan: Stored XSS results to Electron RCE in SiYuan marketplace via unescaped `data-obj` attribute (Bypass for CVE-2026-45375’s patch)_CVE-2026-55570
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, it does not escape the untrusted fields (name, version, author, desc...
|
siyuan-note |
siyuan < 3.7.0
|
|
CVE
|
|
CRITICAL 9.9
|
CVE-2026-55454
|
Appsmith: Caddy admin API exposed without authentication_CVE-2026-55454
Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, the bundled Caddy reverse-proxy's admin API — which has...
|
appsmithorg |
appsmith < 2.1
|
|
CVE
|
|
CRITICAL 9.9
|
CVE-2026-54158
|
SiYuan: Stored XSS to RCE via attribute-view cell rendering in genAVValueHTML()_CVE-2026-54158
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the attribute-view (database) cell renderer genAVValueHTML interpola...
|
siyuan-note |
siyuan < 3.7.0
|
|
CVE
|
|
CRITICAL 9.2
|
CVE-2026-54069
|
SiYuan: Unauthenticated Admin API Access via Blanket chrome-extension:// Origin Allowlist_CVE-2026-54069
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, SiYuan Note's kernel HTTP server unconditionally trusts all chrome-e...
|
siyuan-note |
siyuan < 3.7.0
|
|
CVE
|
|
CRITICAL 9.9
|
CVE-2026-54067
|
SiYuan: Stored XSS to RCE via CSS-snippet |
