dgraph

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

1. Dgraph <= 25.3.2 - Admin Token DisclosureCVE-2026-41492dgraph-io · CVSS 9.8 · 3.1% likely

   CWE-200

2. Dgraph <=v25.3.0 - Admin Mutation Missing AuthorizationCVE-2026-34976dgraph-io · CVSS 10 · 2.1% likely

   CWE-862

3. Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of ServiceCVE-2026-102748dgraph-io · CVSS 9.2 · 0.6% likely

   CWE-306

4. Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL QueryCVE-2026-44840dgraph-io · CVSS 7.5 · 0.5% likely

   CWE-943

5. Dgraph: Unauthenticated pprof endpoint leaks admin auth tokenCVE-2026-40173dgraph-io · CVSS 9.4 · 0.5% likely

   CWE-215

6. Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition FieldCVE-2026-41327dgraph-io · CVSS 9.1 · 0.5% likely

   CWE-943

7. Dgraph Alpha group stores can be replaced via unauthenticated external snapshot importCVE-2026-54061dgraph-io · CVSS 9.1 · 0.5% likely

   CWE-306

8. Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang FieldCVE-2026-41328dgraph-io · CVSS 9.1 · 0.4% likely

   CWE-943

9. Dgraph: DQL Injection via unvalidated regexp filter argument in GraphQL query rewriterCVE-2026-63637dgraph-io · CVSS 8.6 · 0.4% likely

   CWE-943

10. Dgraph Audit Log Encryption nonce reuseCVE-2023-31135dgraph-io · CVSS 3.3 · 0.2% likely

    CWE-326

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.