tugcantopaloglu

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

tugcantopaloglu records in CISA KEV

No tugcantopaloglu vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Openclaw Agent Dashboard 2 records HIGH

Records

3 records

TI-2026-47175 CVE-2026-66418 · GHSA-jgjm-xq9g-p8xp

OpenClaw Dashboard v3.0.0 Stored XSS via Failed Login Username Field

HIGH 75

OpenClaw Dashboard v3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to inject arbitrary HTML and script payloads by submitting a crafted username in a failed login…

CVSS 4.0CRITICAL 9.3 Network No auth User interaction EPSS 0.00633 Published 2026-07-30 No fix listed CWE-79

TI-2026-47177 CVE-2026-66421 · GHSA-hc44-65x2-rvc2

OpenClaw Dashboard Stored XSS via lastMessage Session Field

HIGH 71

OpenClaw Dashboard contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to execute arbitrary JavaScript in the administrator's browser session by injecting HTML markup into ag…

CVSS 4.0HIGH 8.8 Network No auth User interaction EPSS 0.00633 Published 2026-07-30 No fix listed CWE-79

TI-2026-13061 CVE-2026-15522 · GHSA-9cqv-qvmj-xrc4

tugcantopaloglu godot-mcp run_project index.js validatePath path traversal

MEDIUM 55

A security flaw has been discovered in tugcantopaloglu godot-mcp 2.0.0.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00172 Published 2026-07-13 Fixed in 3.0.0 CWE-22

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0