Skip to content
WWeaviate
Products
| Product | CVEs | Exploited | Latest |
|---|
| Verba | 3 | – | Oct 4, 2026 |
| weaviate | 1 | – | Jul 2, 2026 |
Exploited and recent CVEs
-
CVE-2026-105145
Medium 5.3
Weaviate Verba generate_stream Endpoint util.py get_environment information disclosure
0.3%
-
CVE-2026-65318
High 8.6
Verba (goldenverba) Unauthenticated Server-Side Request Forgery via WebSocket Import Endpoint HTMLReader
0.6%
-
CVE-2026-65317
High 8.6
Verba (goldenverba) Server-Side Request Forgery via /api/connect and Same-Origin Middleware Bypass
0.6%
-
CVE-2026-59093
High 8.8
Weaviate < 1.38.0 - Privilege Escalation via Unchecked Permissions in RBAC Role Assignment
0.7%