Skip to contentVulnerabilities with public exploits
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()CVE-2026-23003Public exploitFix available7.5 High
- linux, linux kernel +1 morelib/buildid: use __kernel_read() for sleepable contextCVE-2026-23002Public exploitFix available5.5 Medium
- linux, linux kernel +1 moremacvlan: fix possible UAF in macvlan_forward_source()CVE-2026-23001Public exploitFix available7.8 High
- wpmudev hustle – email marketing, lead generation, optins, popupsHustle <= 7.8.9.2 - Authenticated (Subscriber+) Arbitrary File Upoload via Module ImportCVE-2026-0911Public exploit7.5 High
- mainichiweb friendly functions for welcartFriendly Functions for Welcart <= 1.2.5 - Cross-Site Request Forgery to Settings UpdateCVE-2026-1208Public exploit4.3 Medium
- irisideatechsolutions kalrav ai agentKalrav AI Agent <= 2.3.3 - Unauthenticated Arbitrary File Upload via kalrav_upload_file AJAX ActionCVE-2025-13374Public exploit9.8 Critical
- saleorSaleor has an Insecure Direct Object Reference (IDOR) in GraphQL APICVE-2026-24136Public exploit8.7 High
- phpmyfaqphpMyFAQ missing authorization exposes /api/setup/backup to any authenticated userCVE-2026-24421Public exploitFix available6.5 Medium
- smartertools smartermailSmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub APICVE-2026-24423In KEVPublic exploitEPSS 88.2%9.3 Critical
- data device corporation datasims avionics arincdataSIMS Avionics ARINC 664-1 - Local Buffer OverflowCVE-2021-47881Public exploit6.7 Medium
- google protobuf, red hat ai inference server 3.2, ai inference server 3.3 +14 more +16 moreDenial of Service in Python ProtobufCVE-2026-0994Public exploitFix available8.2 High
- red hat amq broker 7, build of optaplanner 8, data grid 8 +20 more +22 moreOrg.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injectionCVE-2026-0603Public exploitFix available8.3 High
- discord clientDiscord Client Uncontrolled Search Path Element Local Privilege Escalation VulnerabilityCVE-2026-0776Public exploit7.3 High
- langflowLangflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution VulnerabilityCVE-2026-0770In KEVPublic exploitEPSS 62.6%9.8 Critical
- langflowLangflow eval_custom_component_code Eval Injection Remote Code Execution VulnerabilityCVE-2026-0769Public exploitEPSS 41.2%9.8 Critical
- langflowLangflow code Code Injection Remote Code Execution VulnerabilityCVE-2026-0768Public exploitEPSS 28.1%9.8 Critical
- microsoft azure front doorAzure Front Door Elevation of Privilege VulnerabilityCVE-2026-24306Public exploit9.8 Critical
- happymonster happy addons for elementorWordPress Happy Addons for Elementor plugin <= 3.20.4 - SQL Injection vulnerabilityCVE-2025-68999Public exploit8.5 High
- garidium g-ffl checkoutWordPress g-FFL Checkout plugin <= 2.1.0 - Arbitrary File Upload vulnerabilityCVE-2025-68001Public exploit10.0 Critical
- crocoblock jetengineWordPress JetEngine plugin <= 3.7.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-67923Public exploit7.1 High
- docling docling-coreDocling Core vulnerable to Remote Code Execution via unsafe PyYAML usageCVE-2026-24009Public exploitFix available8.1 High
- smartertools smartermailSmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset APICVE-2026-23760In KEVPublic exploitEPSS 96.4%9.3 Critical
- discord websocket api serviceDiscord through 2026-01-16 allows gathering information about whether a user's client state is...CVE-2026-24332Public exploit4.3 Medium
- choijun la-studio element kit for elementor, la-studio element kit for elementor +1 moreLA-Studio Element Kit for Elementor <= 1.5.6.3 - Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakit_bkrole parameterCVE-2026-0920Public exploit9.8 Critical
- pypa wheel, red hat discovery 2 for rhel 10, discovery 2 for rhel 8 +57 more +59 morewheel Allows Arbitrary File Permission Modification via Path TraversalCVE-2026-24049Public exploitFix available7.1 High
- langfuseLangfuse Slack OAuth Installation Endpoint Lacks Authentication, Enabling Arbitrary Project LinkingCVE-2026-24055Public exploit6.3 Medium
- phpgurukul online course registrationPHPgurukul Online Course Registration v3.1 lacks Cross-Site Request Forgery (CSRF) protection on...CVE-2025-70899Public exploit6.5 Medium
- atomberg erica smart fan firmwareAn issue in Atomberg Atomberg Erica Smart Fan Firmware Version: V1.0.36 allows an attacker to...CVE-2025-69822Public exploit7.4 High
- beatxp vega smartwatch firmwareAn issue in Beat XP VEGA Smartwatch (Firmware Version - RB303ATV006229) allows an attacker to...CVE-2025-69821Public exploit7.4 High
- tmsglobalsoft tms management consoleA path traversal vulnerability exists in TMS Management Console (version 6.3.7.27386.20250818)...CVE-2025-69612Public exploit6.5 Medium
- ijl orjsonorjson does not limit recursion for deeply nested JSON documentsCVE-2025-67221Public exploitFix available7.5 High
- backstage, red hat developer hub 1.8, developer hub 1.9 +2 moreBackstage has a Possible Symlink Path Traversal in Scaffolder ActionsCVE-2026-24046Public exploitFix available7.1 High
- saleorSaleor vulnerable to stored XSS via Unrestricted File UploadCVE-2026-23499Public exploit8.5 High
- saleorSaleor lacks proper HTML sanitization in rich text fieldsCVE-2026-22849Public exploit7.2 High
- linuxfoundation everest, everest everest-core +1 moreEVerest's Integer Overflow and Signed to Unsigned conversion lead to either stack buffer overflow or infinite loopCVE-2025-68137Public exploit8.4 High
- lodash, lodash lodash-amd, lodash-es +119 more +121 morePrototype Pollution Vulnerability in Lodash _.unset and _.omit functionsCVE-2025-13465Public exploitFix available6.9 Medium
- tp link systems inc. tl-wr841n v13, tp-link systems inc. archer c20 v5, tp-link archer ax53 firmware +2 more +4 moreLogic Vulnerability on TP-Link Archer C20, Archer AX53 and TL-WR841N v13CVE-2026-0834Public exploit7.2 High
- cisco unified communications manager, unity connection, unified communications manager im and presence service +2 moreCisco Unified Communications Products Remote Code Execution VulnerabilityCVE-2026-20045In KEVPublic exploit8.2 High
- vllm, red hat ai inference server, ai inference server 3.2 +6 more +8 morevLLM affected by RCE via auto_map dynamic module loading during model initializationCVE-2026-22807Public exploitFix available8.8 High
- laravel reverbLaravel Redis Horizontal Scaling Insecure DeserializationCVE-2026-23524Public exploitFix available9.8 Critical
- apache solrApache Solr: Insufficient file-access checking in standalone core-creation requestsCVE-2026-22444Public exploitFix available7.1 High
- gnu inetutils, debian linux +1 moretelnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value...CVE-2026-24061In KEVPublic exploitFix availableEPSS 99.0%9.8 Critical
- kodezen academy lms – wordpress lms plugin for complete elearning solutionAcademy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.5.0 - Unauthenticated Privilege Escalation via Account TakeoverCVE-2025-15521Public exploit9.8 Critical
- anthropic claude code, anthropics claude-code +1 moreClaude Code Leaks Data via Malicious Environment Configuration Before Trust ConfirmationCVE-2026-21852Public exploitFix availableEPSS 27.5%5.3 Medium
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...CVE-2026-21986Public exploit7.1 High
- oracle flexcube universal bankingVulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services...CVE-2026-21978Public exploit6.5 Medium
- oracle http server, weblogic server proxy plug-in, oracle corporation http server, oracle weblogic server proxy plug-in +1 more +3 moreVulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle...CVE-2026-21962In KEVPublic exploitEPSS 73.2%10.0 Critical
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...CVE-2026-21955Public exploit8.2 High
- newplane open5gsOpen 5GS WebUI uses a hard-coded JWT signing keyCVE-2026-0622Public exploit6.5 Medium
- orvalOrval MCP client is vulnerable to code injection via unsanitized x-enum-descriptions in enum generationCVE-2026-23947Public exploitFix available9.3 Critical
- Show moreLoading…