Exploited: 178
LatestCVE-2026-124040 — CivetWeb through 1.16 HTTP/2 Use-After-Free via Stale Pseudo-Header State
VulnFeed.org
AREN

open-wanderer wanderer vulnerabilities and fixes

Exploited and high-severity open-wanderer wanderer vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.

RSS for this product
  1. 7.6CVE-2026-62345Stored XSS via Unsanitized waypoint.icon in Map Marker (insertAdjacentHTML)Verify fixopen-wanderer wanderer
    1 min read
  2. 10.0CVE-2026-71495Wanderer: SSRF Vulnerability in /api/v1/trail/download - Unvalidated URL Leads to Internal Network AccessVerify fixopen-wanderer wanderer
    1 min read
  3. 7.6CVE-2026-62346Wanderer: Stored XSS via waypoint.name and waypoint.icon in Elevation Profile innerHTMLVerify fixopen-wanderer wanderer
    1 min read
  4. 7.5CVE-2026-62344Wanderer: Unauthenticated Access to Private Trails and Comments via ActivityPub EndpointsVerify fixopen-wanderer wanderer
    1 min read
Esc