CVEs we hold for Ca

Records whose assigning authority named Ca as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-9640LXD Snapshot Import Privilege Escalation VulnerabilityCanonical LXD

CVE-2026-9639Authenticated Denial of Service via Malicious Backup Tarball in LXDCanonical LXD

CVE-2026-9494ubuntu-pro-client Information Disclosure via Cleartext Bearer Token Exposure in Process Command LineCanonical Ubuntu 14.04 LTS

CVE-2026-9349calcom cal.diy Generic React API bookings-single-view.getServerSideProps.tsx getServerSideProps information disclosurecalcom cal.diy

CVE-2026-9304calcom cal.diy Logo API route.ts validateUrlForSSRF server-side request forgerycalcom cal.diy

CVE-2026-9303calcom cal.diy cross-site request forgerycalcom cal.diy

CVE-2026-92839no title heldCanva

CVE-2026-9262no title heldCanon Inc. EOS Network Setting Tool for macOS

CVE-2026-9261no title heldCanon Inc. EOS Network Setting Tool for macOS

CVE-2026-9260no title heldCanon Inc. EOS Network Setting Tool for macOS

CVE-2026-9259no title heldCanon Inc. EOS Network Setting Tool for macOS

CVE-2026-9258no title heldCanon Inc. EOS Network Setting Tool for macOS

CVE-2026-91998Casdoor through 4.4.0 Cross-Organization User Administration via /api/mcpcasdoor

CVE-2026-9098CVE-2026-9098Casdoor

CVE-2026-9097CVE-2026-9097Casdoor

CVE-2026-9096CVE-2026-9096Casdoor

CVE-2026-9095CVE-2026-9095Casdoor

CVE-2026-90942Casdoor through 4.4.0 Private Key Exposure via Certificate Endpointscasdoor

CVE-2026-9094CVE-2026-9094Casdoor

CVE-2026-9093CVE-2026-9093Casdoor

CVE-2026-9092CVE-2026-9092Casdoor

CVE-2026-9091CVE-2026-9091Casdoor

CVE-2026-9090CVE-2026-9090Casdoor

CVE-2026-8933snap-confine Local Privilege Escalation via Capabilities Misconfiguration or Flaw in Execution Environment SetupCanonical Ubuntu 22.04 LTS

CVE-2026-88864Capgo SSO Provider Authentication Bypass via PostgREST Direct WriteCap-go capgo.app

CVE-2026-88863capgo.app through 12.207.1 Privilege Escalation via invite_new_user_to_orgCap-go capgo.app

CVE-2026-88862Capgo API Key Manager Authentication Bypass via x-limited-key-idCap-go capgo.app

CVE-2026-88861Capgo AAL1 Session MFA Bypass via Direct RBAC AuthorizationCap-go capgo.app

CVE-2026-88860Capgo Authorization Bypass via Stale Channel Permission OverridesCap-go capgo.app

CVE-2026-88259CareCam CM2507 Missing Authentication for Critical FunctionCareCam HMT.CM2507 Firmware

CVE-2026-85675OWL DocumentProcessingToolkit Server-Side Request Forgery via URL Fetchingcamel-ai owl

CVE-2026-85497CareCam CM2507 Use of Password Hash With Insufficient Computational EffortCareCam HMT.CM2507 Firmware

CVE-2026-85478CareCam CM2507 Missing Authentication for Critical FunctionCareCam HMT.CM2507 Firmware

CVE-2026-85306WordPress MountDev AI MCP Connector for WordPress plugin <= 1.6.5 - Broken Access Control vulnerabilityCascadia Web Services MountDev AI MCP Connector for…

CVE-2026-85094no title heldCanva

CVE-2026-85085no title heldCanva

CVE-2026-85083CareCam Pro IP Cameras Use of Hard-coded CredentialsCareCam ANJIA AJL33PC0801 Firmware

CVE-2026-84930CatFolders Document Gallery < 2.0.7 - Author+ Stored XSS via titleTag Block AttributeUnknown CatFolders Document Gallery & PDF Library

CVE-2026-84423Casdoor upload-resource API resource.go missing authenticationn/a Casdoor

CVE-2026-84400CareCam CM2507 Missing Authentication for Critical FunctionCareCam HMT.CM2507 Firmware

CVE-2026-84398CareCam CM2507 Empty Password in Configuration FileCareCam HMT.CM2507 Firmware

CVE-2026-82835caoqianming django-vue-admin file access controlcaoqianming django-vue-admin

CVE-2026-81546no title heldCanva Affinity

CVE-2026-81321CareCam CM2507 Cleartext Storage of Sensitive InformationCareCam HMT.CM2507 Firmware

CVE-2026-81305CareCam CM2507 Inclusion of Functionality from Untrusted Control SphereCareCam HMT.CM2507 Firmware

CVE-2026-8077Weak credentials vulnerability in the CashDro 3 web administration panelCashDro 3 Administration Panel

CVE-2026-8076Weak credentials vulnerability in the CashDro 3 web administration panelCashDro 3 Administration Panel

CVE-2026-80234CAYIN Technology｜CAYIN CMS-WS/CMS-SE - Missing AuthenticationCAYIN CMS-SE

CVE-2026-80233CAYIN Technology｜CAYIN CMS-WS/CMS-SE/SMP - Arbitrary File UploadCAYIN SMP

CVE-2026-79752CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injectioncakephp

CVE-2026-79621CatalogX < 6.1.3 - Unauthenticated Email Content Injection via Shared TransientUnknown CatalogX

CVE-2026-77635CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDrivercakephp; cakephp/database

CVE-2026-77634CakePHP: SmtpTransport vulnerable to CRLF header injectioncakephp

CVE-2026-77337CakePHP: Potential Authentication bypass with CookieAuthenticatorcakephp authentication

CVE-2026-77281Caddy: rewrite placeholder re-expansioncaddyserver caddy

CVE-2026-77113Path Traversal Vulnerability in apport-unpackCanonical Apport

CVE-2026-7641Import and export users and customers <= 2.0.8 - Authenticated (Subscriber+) Privilege Escalation via Multisite…carazo Import and export users and customers

CVE-2026-75501CVE-2026-75501Calix GS7 XGS (GS5239XG)

CVE-2026-7328Unverified AXI Address in Subsystem Mode Commands Enables Denial of ServiceCaliptra Core Runtime Firmware

CVE-2026-72847broot Terminal Escape Sequence Injection via Unsanitized File and Directory Names in the Tree ViewCanop broot

CVE-2026-71287Cacti sanitize_sql_column() Regex Allowlist Permits SQL Time-Delay Functions Leading to Blind SQL Injectioncacti

CVE-2026-6970authd Denial of Service and Local Privilege EscalationCanonical authd

CVE-2026-69118Cachet 2.4.1 Authenticated Server-Side Template Injection RCEcachethq cachet

CVE-2026-69113Cap v0.3.1 Broken Access Control via video comment endpointCapSoftware Cap

CVE-2026-6892no title heldCanon Inc. PIXMA iX6800 Series CUPS Printer Driver for macOS

CVE-2026-6891no title heldCanon Inc. My Image Garden for macOS

CVE-2026-6815CVE-2026-6815Casdoor

CVE-2026-66898Path traversal via unvalidated instance name in backup tarball restore enables root file write / RCECanonical LXD

CVE-2026-66897Instance template path traversal allows arbitrary host file write as rootCanonical LXD

CVE-2026-6458AES-256-GCM Authentication Tag Does Not Cover First Ciphertext Blocks When AAD Is EmptyCaliptra Core Runtime Firmware

CVE-2026-63768cal.diy 6.2.0 Conferencing OAuth Callback Open Redirect via Unsigned Statecalcom cal.diy

CVE-2026-6369Exposed Session Token in canonical-livepatch client snapcanonical-livepatch

CVE-2026-63300Cross-project instance move bypasses all project restrictions allowing host command executionCanonical LXD

CVE-2026-63299Storage volume cross-project move and snapshot restore bypass project disk limitsCanonical LXD

CVE-2026-63298LXD arbitrary lxc.conf directive injection via NVIDIA instance configurationCanonical LXD

CVE-2026-63297Cross-project instance copy bypasses target project restrictions via TOCTOU in config mergeCanonical LXD

CVE-2026-63296Project restriction bypass via instance migration config overrideCanonical LXD

CVE-2026-63295Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`Canonical LXD

CVE-2026-63294Root RCE via image backup.yaml symlinkCanonical LXD

CVE-2026-63293Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as rootCanonical LXD

CVE-2026-62420Cross-project cluster migration bypasses project restrictions via cluster notification flagCanonical LXD

CVE-2026-61898accountsservice: shell injection via attacker-controlled ~/.pam_environment in Ubuntu language helper scriptsCanonical accountsservice

CVE-2026-61897accountsservice: incomplete privilege drop when running Ubuntu-specific language helper scriptsCanonical accountsservice

CVE-2026-6174CC Child Pages <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'more' Parametercaterhamcomputing CC Child Pages

CVE-2026-59704Cap - Missing Access Control in Video AI Metadata EndpointCap

CVE-2026-59683OpenRGB: local and remote system compromise via arbitrary file write using attacker controlled stringsCalcProgrammer1 OpenRGB

CVE-2026-59682Arbitrary file overwrite and deletion local and remote in OpenRGBCalcProgrammer1 OpenRGB

CVE-2026-59180Apprise forwards configured auth headers across cross-origin HTTP redirectscaronc apprise

CVE-2026-5818MCU Firmware Update Authentication Bypass on Caliptra CoreCaliptra Core Runtime Firmware

CVE-2026-57858Cal.com Cal.diy 6.2.0 Stored XSS via BookingPageTagManager Analytics Tracking IDCal.com Self-Hosted (Cal.diy)

CVE-2026-5774Juju API Server Denial of Service and Authentication Replay via Unsynchronized Token MapCanonical Juju

CVE-2026-56790CANBoat - Off-by-One Global Buffer Overflow in searchForPgn()canboat

CVE-2026-56339Capgo - Unauthenticated Organization Existence Enumeration via rescind_invitation RPCCap-go capgo

CVE-2026-56338Capgo - Denial of Service in 2FA Email Verification via /auth/v1/otp EndpointCapgo

CVE-2026-56337Capgo - Information Disclosure via Unauthenticated RPC Function exist_app_v2Capgo

CVE-2026-56336Capgo - Information Disclosure via Unauthenticated SSO check-domain EndpointCapgo

CVE-2026-56335Capgo - Channel Configuration Mutation via Write-Scoped API KeysCapgo

CVE-2026-56334Capgo - Missing UPDATE RLS Policy for Build Status PersistenceCapgo

CVE-2026-56333Capgo - Server-Side Validation Bypass via Direct Browser-Side Organization Security Settings UpdatesCapgo

CVE-2026-56332Capgo - Open Redirect via confirmation_url ParameterCapgo

CVE-2026-56331Capgo - Improper Error Handling in Accept Invitation Endpoint via Invalid Magic StringCapgo

CVE-2026-56330Capgo - Open Redirect via Unvalidated Stripe Billing URLsCapgo

CVE-2026-56329Capgo - Cross-Tenant Preview Namespace Collision via Non-Bijective Underscore DecodingCapgo

CVE-2026-56328Capgo - Integrity Issue in Release Routing via Multiple Public ChannelsCapgo

CVE-2026-56327Capgo - Unauthenticated Organization Existence Oracle via public.invite_user_to_org RPCCapgo

CVE-2026-56325Capgo - App ID Confusion via ILIKE Wildcard in Preview Subdomain LookupCapgo

CVE-2026-56324Capgo - Rate Limit Bypass via User-Controlled device_id ParameterCapgo

CVE-2026-56323Capgo - Unauthenticated Channel Enumeration and App Oracle via GET /channel_selfCapgo

CVE-2026-56322Capgo - Information Disclosure via Unauthenticated /updates defaultChannel ParameterCapgo

CVE-2026-56321Capgo - Missing Authentication Middleware on GET /private/role_bindings EndpointCapgo

CVE-2026-56320Capgo - Org/App Scope Mismatch in Device Creation EndpointCapgo

CVE-2026-56319Capgo - App Existence Oracle via GET /statistics/app/:app_idCapgo

CVE-2026-56318Capgo - Information Disclosure via /private/validate_password_compliance EndpointCapgo

CVE-2026-56316Cap-go - Job Existence Oracle via Unauthenticated OPTIONS /build/upload/:jobId/*Cap-go capgo

CVE-2026-56314Capgo - Deleted Bundle Selection via Missing Deletion Filter in /updates EndpointCapgo

CVE-2026-56313Capgo - Cross-Organization Account Disruption via SSO Prelink EndpointCapgo

CVE-2026-56312Capgo - Account Creation Before CAPTCHA Validation in accept_invitation EndpointCapgo

CVE-2026-56311Capgo - Unauthenticated Cross-Tenant Disclosure via get_current_plan_max_org RPCCapgo

CVE-2026-56310Cap-go - Authorization Bypass in Organization Members Endpoint via API Key Scope BypassCap-go capgo

CVE-2026-56309Capgo - Plan Bypass via Unrestricted Attachment Upload EndpointCapgo

CVE-2026-56308Capgo - Insufficient Authentication in Email Change EndpointCapgo

CVE-2026-56307Cap-go - Broken Cursor Pagination in /private/devices EndpointCap-go capgo

CVE-2026-56306Capgo - Subkey Enforcement Bypass via x-limited-key-id Header ParsingCapgo

CVE-2026-56305Capgo - Authentication Bypass in Password Change via Missing Current Password ValidationCapgo

CVE-2026-56303Capgo - Unauthenticated API Key Metadata Disclosure via SECURITY DEFINER RPC FunctionCapgo

CVE-2026-56302Capgo - Unsecured Supabase Images Bucket via Missing Row Level SecurityCapgo

CVE-2026-56300Capgo - Unauthenticated API Key Validity and Permission Oracle via RPC FunctionsCapgo

CVE-2026-56299Capgo - Denial of Service via Unauthenticated OPTIONS Request to /build/upload EndpointCapgo

CVE-2026-56298Capgo - EXIF Metadata Exposure in App Information Image UploadCapgo

CVE-2026-56296Cap-go - App Existence Oracle via Unauthenticated transfer_app RPCCap-go capgo

CVE-2026-56295Capgo - Policy Enforcement Bypass in Webhook Management Endpoints via Non-Expiring API KeysCapgo

CVE-2026-56294capacitor-native-biometric - Authentication Bypass via Unvalidated CryptoObject in onAuthenticationSucceededcapacitor-native-biometric

CVE-2026-56293Capgo - Stale Cross-Organization Authorization via Incomplete deploy_history Update in transfer_app()Capgo

CVE-2026-56286Capgo - Account Deletion Without Password ConfirmationCapgo

CVE-2026-56284Capgo - Unauthenticated Metrics Disclosure via get_total_metrics RPCCap-go capgo

CVE-2026-56283Capgo - HTML Injection Leading to Open Redirection in Organization SettingsCapgo

CVE-2026-56282Capgo - Information Disclosure via Unauthenticated /replication EndpointCapgo

CVE-2026-56281Capgo - SQL Injection via Unvalidated limit Parameter in Admin Stats EndpointCapgo

CVE-2026-56280Cap-go - Privilege Inversion in Build Log Stream via SSE DisconnectCap-go capgo

CVE-2026-56279Capgo - Information Disclosure via get_orgs_v7 RPC EndpointCapgo

CVE-2026-56257Capgo - Authorization Bypass in App Ownership Transfer via Direct PostgREST UpdateCapgo

CVE-2026-56256Capgo - Two-Factor Authentication Bypass via Organization Management APICapgo

CVE-2026-56255Capgo - Denial of Service via Unlimited Demo App CreationCapgo

CVE-2026-56254capacitor-updater - End-to-End Encryption Bypass via Private Key Distributioncapacitor-updater

CVE-2026-56253Capgo - Unauthenticated Organization Member Email Disclosure via get_org_members RPCCapgo

CVE-2026-56252Capgo - Scope Isolation Failure in Webhook Test EndpointCapgo

CVE-2026-56251Capgo - Privilege Escalation via Broken Row Level Security in org_usersCapgo

CVE-2026-56250Capgo - Arbitrary R2 Object Deletion via Mutable r2_path in app_versionsCapgo

CVE-2026-56249Capgo - Unauthorized Channel Overwrite and Ownership Takeover via POST /channel Name CollisionCapgo

CVE-2026-56248Capgo - Unauthenticated Denial-of-Service via audit_logs RLS PolicyCap-go capgo

CVE-2026-56247Capgo - Privilege Escalation via Cross-Scope RBAC Role AssignmentCapgo

CVE-2026-56246Capgo - Cross-Organization Authorization Bypass via Scoped API Key Privilege InheritanceCapgo

CVE-2026-56245Supabase Capgo - Unauthenticated Cross-Tenant Build-Time Accounting Poisoning via record_build_time RPCCap-go capgo

CVE-2026-56244Capgo - Webhook Signing Secret Disclosure via Non-Admin API KeyCapgo

CVE-2026-56243Capgo - Hashed API Key Enforcement Bypass via PostgREST/RLS PlaneCapgo

CVE-2026-56242Capgo - Unauthenticated API Key Validity Oracle and User Identity Disclosure via get_identity_apikey_only RPCCapgo

CVE-2026-56241Capgo - RBAC Demotion Privilege Retention via Stale org_users.user_rightCapgo

CVE-2026-56240Capgo - Billing Authorization Bypass via Exhausted Usage CreditsCapgo

CVE-2026-56239Capgo - Privilege Escalation via SECURITY DEFINER Function apply_usage_overageCapgo

CVE-2026-56238Capgo - Unauthenticated Information Disclosure via PostgREST global_stats EndpointCapgo

CVE-2026-56237Capgo - Unauthenticated API Key Generation via Client-Side Parameter ManipulationCapgo

CVE-2026-56236Capgo CLI - Arbitrary File Overwrite via Symlink-Following in Local Credential Operationscapgo cli

CVE-2026-56235Capgo - Unauthenticated Cross-Tenant Metrics Disclosure via RPC FunctionsCap-go capgo

CVE-2026-56234Capgo - Password Spraying via Public-Key Accessible Credential Validation EndpointCapgo

CVE-2026-56233Capgo - SSRF and Privilege Escalation via Path Traversal in Builder Upload ProxyCapgo

CVE-2026-56232Capgo - Subkey Scope Bypass in middlewareKey via x-limited-key-id HeaderCapgo

CVE-2026-56231Capgo - Broken Object Level Authorization in Build Job Control via jobId ParameterCapgo

CVE-2026-56230Capgo - Broken Object Level Authorization via x-limited-key-id HeaderCapgo

CVE-2026-56229Capgo - Cross-App Build Job Access via app_id/job_id Mismatch in /build/status and /build/logsCapgo

CVE-2026-56228Capgo - Denial of Service via Improper Password Policy Length ValidationCapgo

CVE-2026-56227Capgo - Server-Side Request Forgery via Webhook URL ValidationCapgo

CVE-2026-56226Capgo - Unauthenticated Organization Data Disclosure via get_orgs_v6 RPCCap-go capgo

CVE-2026-56225Capgo - Authorization Bypass in API Key Management via App-Limited KeysCapgo

CVE-2026-56224Capgo - Login CSRF and Session Fixation via URL Query ParametersCapgo

CVE-2026-56223Capgo - Account Takeover via Cross-Domain SSO Email Assertion in provision-userCapgo

CVE-2026-56222Capgo - Cross-Organization App Takeover via Mismatched org_id and app_id in /private/role_bindingsCapgo

CVE-2026-56221Cap-go - SQL Injection in Cloudflare Analytics Engine Queries via cloudflare.tsCap-go capgo

CVE-2026-56220Capgo - Unauthorized Manifest Insertion via Read-Only Org MemberCapgo

CVE-2026-56219Capgo - Unauthenticated RBAC Bindings and Email Disclosure via get_org_user_access_rbac NULL-auth BypassCapgo

CVE-2026-56218Capgo - EXIF Metadata Exposure via Image UploadCapgo

CVE-2026-56217Capgo - Encrypted Bundle Policy Bypass via Direct PostgREST UpdateCapgo

CVE-2026-56216Capgo - Scope Escalation via API Key Creation in /functions/v1/apikeyCapgo

CVE-2026-56215Capgo - Account Merge via Poisoned public.users.email in SSO ProvisioningCapgo

CVE-2026-56214Capgo - Unauthenticated Organization Enumeration and Billing Status Disclosure via Supabase RPCCapgo

CVE-2026-56213Capgo - Unauthenticated Cross-Tenant Metrics Poisoning via upsert_version_meta RPCCapgo

CVE-2026-56212Capgo - Improper 2FA Enforcement Logic via Team Security SettingsCapgo

CVE-2026-56082Capgo - Unauthenticated Cross-Tenant Billing Log Tampering via public.record_build_time RPCCap-go capgo

CVE-2026-56081Cap-go - Account Lockout via 2FA Misconfiguration on Unverified EmailCap-go capgo

CVE-2026-56080Cap-go - Authentication Logic Flaw in Enforce Password PolicyCap-go capgo

CVE-2026-56079Capgo - Cross-Tenant Authorization Bypass via PostgREST Webhook AccessCapgo

CVE-2026-56073Cap-go - OTP Bypass via Response Manipulation in Email VerificationCap-go capgo

CVE-2026-55894Capstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecodecapstone-engine capstone

CVE-2026-55893Capstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecodecapstone-engine capstone

CVE-2026-5561Campcodes Complete POS Management and Inventory System Environment Variable SettingsController.php injectionCampcodes Complete POS Management and Inventory System

CVE-2026-55590CakePHP: Open redirect weakness via backslash bypasscakephp authentication

CVE-2026-5546Campcodes Complete Online Learning Management System Crud_model.php add_lesson unrestricted uploadCampcodes Complete Online Learning Management System

CVE-2026-54815WordPress Cargo Shipping Location for WooCommerce plugin <= 5.6 - SQL Injection vulnerabilityCargo Shipping Location for WooCommerce

CVE-2026-54713CakePHP Queue: Incomplete Comparison in getUniqueId vulnerable to collisionscakephp queue

CVE-2026-5469Casdoor Webhook URL server-side request forgeryn/a Casdoor

CVE-2026-5468Casdoor dangerouslySetInnerHTML cross site scriptingn/a Casdoor

200 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.