Log in Start free

vulnerability-lookup

Products

ProductCVEsExploitedLatest
vulnerability-lookup6–Sep 27, 2026

Exploited and recent CVEs

  • CVE-2026-101041 Medium 6.3 Vulnerability-Lookup - Race Condition in Account Recovery Token Consumption Allows Password Takeover 0.2%
  • CVE-2026-73432 Medium 5.1 Stored Server-Side Request Forgery in Remote-Instance Synchronization Allows Access to Internal Services in vulnerability-lookup 0.4%
  • CVE-2026-73431 High 8.8 Reusable Account Activation and Recovery Tokens Allow Repeated Account Takeover in vulnerability-lookup 0.4%
  • CVE-2026-73405 Medium 5.3 Authorization Bypass in SSE Pub/Sub Allows Unconfirmed Accounts to Access Stream Events in vulnerability-lookup 0.5%
  • CVE-2026-73374 Medium 6.1 Stored Cross-Site Scripting (XSS) via Unescaped CNA Reference Tags in vulnerability-lookup 0.6%
  • CVE-2026-72761 Medium 6.9 Webhook SSRF guard bypassed by IPv6 transition addresses (NAT64/6to4/Teredo pass is_global check) in vulnerability-lookup 0.5%