Maple Labs

Maple Labs · CVE search

Every CVE, searchable.

The US government’s National Vulnerability Database, kept on Maple Labs’ own hardware and updated every two hours. Search by CVE, product or words, and filter by severity or CISA’s known-exploited list.

423,983 CVEs, updated from the NVD 1 hour ago.

861–880 of 404,826

  1. CVE-2026-125331 critical 9.1

    HarnessRouter is a self-hosted unified API for running agent harnesses with sessions, streaming, files, cancellation, and failure handling. Prior to 0.31.8, a console that is not in self-hosted mode attaches the server's internal key to requests carrying an Authorization header before validating the bearer, while the service-only PUT and GET /v1/orgs/{org}/connections/{name}, PUT /v1/orgs/{org}/policy/{backend}, and /internal/* routes trust that key and take the organization from the URL. In a multi-organization deployment, a remote caller can use a made-up bearer to rewrite another organization's provider connection to an attacker-controlled endpoint, causing later prompts to be disclosed and attacker-controlled responses to influence tasks. This issue is fixed in version 0.31.8.

  2. CVE-2026-125330 high 7.5

    HarnessRouter is a self-hosted unified API for agent harnesses. From version 0.4.2 until 0.31.7, routes that accept a session ID or response ID validate only the caller's organization and do not enforce the workspace scope of a non-default workspace API key. A key holder who learns a non-guessable identifier from another workspace in the same organization can read sessions, conversation turns, files, traces, and responses, overwrite files, cancel or delete sessions, and publish share links. The issue does not cross organization boundaries, and console users, organization keys, and Default Workspace keys intentionally retain organization-wide access. This issue is fixed in version 0.31.7.

  3. CVE-2026-125329 high 8.4

    Kaneo is a project management application with boards, Gantt charts, and GitHub integration that can be self-hosted or used as a cloud service. Prior to 2.13.0, GET /api/external-link/task/:taskId returns integration.config to any workspace member, including the viewer role, when a task has a linked Gitea issue or pull request. The plaintext integration.config contains the Gitea accessToken and webhookSecret, allowing the token's granted Gitea actions and forged webhook deliveries that pass HMAC verification. GitHub integrations and installations without a configured Gitea integration are not affected. This issue is fixed in version 2.13.0.

  4. CVE-2026-125328 medium 5.8

    pgEdge Go LLM Library provides a unified Go interface for multiple LLM providers with streaming, tool calling, retries, and an HTTP and server-sent events proxy. From 0.1.0 until 0.2.0, GET /v1/health in llm/proxy/handlers.go uses handleHealth to ping providers with the operator's real credentials and returns their error text, while the Authorize hook in llm/proxy/proxy.go permits access by default when the consuming application does not configure it. When a provider rejects the configured credential, a remote caller who can reach the proxy can obtain part of the operator's third-party provider API key from the resulting error. This issue is fixed in version 0.2.0.

  5. CVE-2026-125327 high 7.5

    pgEdge RAG Server is an API server for retrieval-augmented generation over PostgreSQL content using pgvector. Prior to 2.0.0, the unauthenticated query endpoint uses FetchDocuments in internal/database/search.go to read the entire filtered corpus without a LIMIT and rebuild an in-memory BM25 index on every request. Because HybridEnabled is set by default in internal/config/loader.go and the endpoint has no rate limit, inexpensive remote queries can impose database and CPU work proportional to corpus size and exhaust service resources. This issue is fixed in version 2.0.0.

  6. CVE-2026-125137 high 7.8

    Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

  7. CVE-2026-125136 high 8.8

    Heap-based buffer overflow in Windows Network Connected Devices Auto-Setup Service allows an unauthorized attacker to execute code over an adjacent network.

  8. CVE-2026-125135 medium 6.8

    Out-of-bounds read in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.

  9. CVE-2026-125134 high 7.5

    Use after free in Windows Function Discovery Resource Publication allows an unauthorized attacker to execute code over an adjacent network.

  10. CVE-2026-124233 medium 6.5

    Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  11. CVE-2026-124229 medium 6.6

    Deserialization of untrusted data in Microsoft Office Excel allows an unauthorized attacker to execute code with a physical attack.

  12. CVE-2026-124228 high 8.8

    Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office Outlook allows an authorized attacker to execute code over a network.

  13. CVE-2026-124227 high 7.5

    Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  14. CVE-2026-124226 high 8.8

    Execution with unnecessary privileges in Windows PowerShell allows an authorized attacker to bypass a security feature locally.

  15. CVE-2026-124225 high 7.8

    Improper control of generation of code ('code injection') in Windows PowerShell allows an unauthorized attacker to execute code locally.

  16. CVE-2026-124224 high 7.0

    Improper link resolution before file access ('link following') in Windows PowerShell allows an authorized attacker to elevate privileges locally.

  17. CVE-2026-124210 medium 6.5

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  18. CVE-2026-124194 medium 6.5 Known exploited

    Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

  19. CVE-2026-124187 high 8.8

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  20. CVE-2026-124185 high 7.5

    Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.