Export limit exceeded: 373471 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 373471 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 373471 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 373471 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (1 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-69110 1 Microck 1 Opencode-studio 2026-08-05 9.1 Critical
OpenCode Studio before 2.4.4 contains a missing authentication vulnerability that allows unauthenticated remote attackers to read arbitrary files within the temp and static/music directories by directly accessing the GET /api/tmp/:tmpFile and GET /api/music/:fileName endpoints. Attackers can retrieve intermediate audio, video artifacts, and subtitles belonging to other users' jobs, and additionally delete any video by ID through the unauthenticated DELETE /api/short-video/:videoId endpoint.