CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

106 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 10 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	Severity	Vendor / product	Summary	Published
CVE-2026-62229	8.8	high	openclaw / openclaw	OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in exec allowlist glob matching that allow	51d ago
CVE-2026-62228	8.8	high	openclaw / openclaw	OpenClaw before 2026.6.5 contain an authorization bypass vulnerability in node exec approvals that allows lower-tr	51d ago
CVE-2026-62223	8.8	high	openclaw / openclaw	OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in the device-pair approval feature that a	51d ago
CVE-2026-62218	8.8	high	openclaw / openclaw	OpenClaw 2026.1.20 before 2026.5.27 contain an authorization bypass vulnerability in the device.pair.approve featu	51d ago
CVE-2026-62217	8.8	high	openclaw / openclaw	OpenClaw 2026.5.14-beta.1 before 2026.5.27 contain an authorization flaw in the QQBot exec approvals feature.	51d ago
CVE-2026-62207	8.8	high	openclaw / openclaw	OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability that allows lower-trust callers t	51d ago
CVE-2026-62203	8.8	high	openclaw / openclaw	OpenClaw versions before 2026.6.6 contain an environment variable filtering vulnerability in host exec that fails	51d ago
CVE-2026-62202	8.8	high	openclaw / openclaw	OpenClaw versions 2026.6.1 before 2026.6.9 contain a privilege escalation vulnerability in isolated cron jobs that	51d ago
CVE-2026-62200	8.8	high	openclaw / openclaw	OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that could allow Git ext trans	54d ago
CVE-2026-62199	8.8	high	openclaw / openclaw	OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that can miss interpreter star	54d ago
CVE-2026-62194	8.8	high	openclaw / openclaw	OpenClaw versions 2026.5.20 before 2026.6.9 contain a privilege escalation vulnerability in plugin install command	54d ago
CVE-2026-62190	8.8	high	openclaw / openclaw	OpenClaw versions before 2026.6.9 contain an authorization bypass vulnerability in the flock wrapper that allows l	54d ago
CVE-2026-53843	8.8	high	openclaw / openclaw	OpenClaw before 2026.5.26 contains an authorization bypass vulnerability where a surviving pairing-scoped device s	81d ago
CVE-2026-53836	8.8	high	openclaw / openclaw	OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in PowerShell encoded-command handling that a	85d ago
CVE-2026-53828	8.8	high	openclaw / openclaw	OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in native command handling that allows aut	85d ago
CVE-2026-53822	8.8	high	openclaw / openclaw	OpenClaw before 2026.5.18 contains a command injection vulnerability where shell wrapper argv could change between	85d ago
CVE-2026-53821	8.8	high	openclaw / openclaw	OpenClaw before 2026.5.18 accepts WebSocket client-declared operator scopes before binding to server-approved pair	85d ago
CVE-2026-53819	8.8	high	openclaw / openclaw	OpenClaw before 2026.5.27 contains an arbitrary code execution vulnerability in skill install flows where workspac	86d ago
CVE-2026-53817	8.8	high	openclaw / openclaw	OpenClaw before 2026.5.22 contains a locality validation vulnerability in Control UI pairing that allows attackers	86d ago
CVE-2026-53811	8.8	high	openclaw / openclaw	OpenClaw before 2026.5.7 contains a privilege escalation vulnerability in the Matrix allowFrom feature that allows	86d ago
CVE-2026-53810	8.8	high	openclaw / openclaw	OpenClaw before 2026.5.18 contains a code execution vulnerability where marketplace runtime extension metadata can	86d ago
CVE-2026-53807	8.8	high	openclaw / openclaw	OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in Telegram interactive callbacks that all	86d ago
CVE-2026-53806	8.8	high	openclaw / openclaw	OpenClaw before 2026.5.12 contains a shell option parsing vulnerability that allows combined POSIX shell flags to	86d ago
CVE-2026-35674	8.8	high	openclaw / openclaw	OpenClaw before 2026.5.18 contains a scope bypass vulnerability in the Gateway chat.send route that allows scoped	99d ago
CVE-2026-45006	8.8	high	openclaw / openclaw	OpenClaw before 2026.4.23 contains an improper access control vulnerability in the gateway tool's config.apply and	117d ago
CVE-2026-32051	8.8	high	openclaw / openclaw	OpenClaw versions prior to 2026.3.1 contain an authorization mismatch vulnerability that allows authenticated call	169d ago
CVE-2026-32042	8.8	high	openclaw / openclaw	OpenClaw versions 2026.2.22 prior to 2026.2.25 contain a privilege escalation vulnerability allowing unpaired devi	169d ago
CVE-2026-32013	8.8	high	openclaw / openclaw	OpenClaw versions prior to 2026.2.25 contain a symlink traversal vulnerability in the agents.files.get and agents.	170d ago
CVE-2026-31998	8.6	high	openclaw / openclaw	OpenClaw versions 2026.2.22 and 2026.2.23 contain an authorization bypass vulnerability in the synology-chat chann	171d ago
CVE-2026-62226	8.5	high	openclaw / openclaw	OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act route that fa	51d ago
CVE-2026-62197	8.5	high	openclaw / openclaw	OpenClaw before 2026.6.6 contains a policy bypass vulnerability in browser CDP discovery that accepts blocked WebS	54d ago
CVE-2026-62196	8.3	high	openclaw / openclaw	OpenClaw versions 2026.3.22 before 2026.6.6 contain an authorization bypass vulnerability where WhatsApp group IDs	54d ago
CVE-2026-62195	8.3	high	openclaw / openclaw	OpenClaw versions 2026.5.20 before 2026.6.6 contain an authorization bypass vulnerability in the MCP loopback feat	54d ago
CVE-2026-53853	8.3	high	openclaw / openclaw	OpenClaw before 2026.5.12 contains an argument pattern validation bypass in the exec allowlist that allows attacke	81d ago
CVE-2026-53831	8.3	high	openclaw / openclaw	OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in system.run safe-bin allowlist validation	85d ago
CVE-2026-53814	8.3	high	openclaw / openclaw	OpenClaw before 2026.5.20 contains a privilege escalation vulnerability where hook-triggered agent runs incorrectl	86d ago
CVE-2026-32905	8.3	high	openclaw / openclaw	OpenClaw before 2026.5.4 contains an authorization bypass vulnerability in the bundled device-pair plugin that all	99d ago
CVE-2026-22171	8.2	high	openclaw / openclaw	OpenClaw versions prior to 2026.2.19 contain a path traversal vulnerability in the Feishu media download flow wher	172d ago
CVE-2026-62209	8.1	high	openclaw / openclaw	OpenClaw versions 2026.5.10-beta.1 before 2026.6.5 contain an authorization bypass in the ClickClack agent-mode di	51d ago
CVE-2026-62192	8.1	high	openclaw / openclaw	OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in Discord guild actions	54d ago
CVE-2026-62188	8.1	high	openclaw / openclaw\/feishu	OpenClaw @openclaw/feishu versions 2026.6.6 and earlier contain an incorrect authorization vulnerability in which	54d ago
CVE-2026-62187	8.1	high	openclaw / openclaw\/feishu	OpenClaw Feishu tools (npm package @openclaw/feishu) in versions <= 2026.6.6 could ignore per-account disablement.	54d ago
CVE-2026-53866	8.1	high	openclaw / openclaw	OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in shell inline-command parsing that allows a	81d ago
CVE-2026-53864	8.1	high	openclaw / openclaw	OpenClaw before 2026.5.26 contains an insufficient sanitization vulnerability in the host environment sanitizer th	81d ago
CVE-2026-53857	8.1	high	openclaw / openclaw	OpenClaw before 2026.5.3 contains a policy enforcement vulnerability where Zalo contacts with mutable display meta	81d ago
CVE-2026-53855	8.1	high	openclaw / openclaw	OpenClaw before 2026.4.2 contains an inline-eval bypass vulnerability allowing authenticated operators to weaken s	81d ago
CVE-2026-53849	8.1	high	openclaw / openclaw	OpenClaw before 2026.5.7 contains a privilege escalation vulnerability where the allowFrom feature improperly vali	81d ago
CVE-2026-53823	8.1	high	openclaw / openclaw	OpenClaw before 2026.5.3 contains a privilege escalation vulnerability in the allowFrom feature that binds to muta	85d ago
CVE-2026-32034	8.1	high	openclaw / openclaw	OpenClaw versions prior to 2026.2.21 contain an authentication bypass vulnerability in the Control UI when allowIn	170d ago
CVE-2026-32302	8.1	high	openclaw / openclaw	OpenClaw is a personal AI assistant.	176d ago
CVE-2026-62215	8	high	openclaw / openclaw	OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability in HTTP Canvas responses that all	51d ago
CVE-2026-53829	8	high	openclaw / openclaw	OpenClaw before 2026.5.18 contains an approval display truncation vulnerability allowing authenticated users to hi	85d ago
CVE-2026-35630	8	high	openclaw / openclaw	OpenClaw before 2026.5.18 contains an authorization bypass vulnerability in QQBot native approval buttons that fai	99d ago
CVE-2026-32014	8	high	openclaw / openclaw	OpenClaw versions prior to 2026.2.26 contain a metadata spoofing vulnerability where reconnect platform and device	170d ago
CVE-2026-62222	7.8	high	openclaw / openclaw	OpenClaw before 2026.5.22 contain a vulnerability in setup-mode discovery that allows loading of untrusted workspa	51d ago
CVE-2026-53813	7.8	high	openclaw / openclaw	OpenClaw before 2026.4.25 contains a path traversal vulnerability in memory-core artifact loading where workspace	86d ago
CVE-2026-45004	7.8	high	openclaw / openclaw	OpenClaw before 2026.4.23 contains an arbitrary code execution vulnerability in the bundled plugin setup resolver	117d ago
CVE-2026-32032	7.8	high	openclaw / openclaw	OpenClaw versions prior to 2026.2.22 contain an arbitrary shell execution vulnerability in shell environment fallb	170d ago
CVE-2026-32016	7.8	high	openclaw / openclaw	OpenClaw versions prior to 2026.2.22 on macOS contain a path validation bypass vulnerability in the exec-approval	170d ago
CVE-2026-32015	7.8	high	openclaw / openclaw	OpenClaw versions 2026.1.21 prior to 2026.2.19 contain a path hijacking vulnerability in tools.exec.safeBins that	170d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE) and CISA Known Exploited Vulnerabilities catalog (exploitation status). Both are United States government works in the public domain. Data refreshes daily; KEV hourly.

Loading

CVE Tracker