Skip to contentVulnerabilities with public exploits
- vendureVendure vulnerable to timing attack that enables user enumeration in NativeAuthenticationStrategyCVE-2026-25050Public exploitFix available2.7 Low
- churchcrm, churchcrm crm +1 moreChurch CRM has SQL injection in PaddleNumEditor.phpCVE-2026-24854Public exploit8.8 High
- hikvision ds-3wap521-si, ds-3wap522-si, ds-3wap621e-si +3 more +5 moreSome Hikvision Wireless Access Points are vulnerable to authenticated command execution due to...CVE-2026-0709Public exploit7.2 High
- eclipse theia website, eclipse foundation theia - website +1 moreIn the Eclipse Theia Website repository, the GitHub Actions workflow .github/workflows/preview...CVE-2026-1699Public exploit10.0 Critical
- llamastack llama stackLlama Stack exposes secret in initialization logCVE-2026-25211Public exploitFix available3.2 Low
- polarlearnPolarLearn's unvalidated vote direction allows vote count manipulationCVE-2026-25126Public exploit7.1 High
- sharpred deephasdeepHas vulnerable to Prototype Pollution via constructor.prototypeCVE-2026-25047Public exploitFix available9.4 Critical
- ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 moreA code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated...CVE-2026-1340In KEVPublic exploitEPSS 98.6%9.8 Critical
- ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 moreA code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated...CVE-2026-1281In KEVPublic exploitEPSS 98.7%9.8 Critical
- tp-link vigi c385 firmware, tp-link systems inc. vigi c485 v1 +1 moreAuthenticated RCE Vulnerability Due to Buffer Overflow on TP-Link VIGI C385CVE-2026-1457Public exploit8.5 High
- tp-link systems inc. archer re605x, tp-link archer re605x firmware +1 moreInsufficient Backup File Upload Input Validation on TP-Link Archer RE605XCVE-2025-15545Public exploit7.3 High
- shirt-pocket superduper\!An issue in Shirt Pocket's SuperDuper! 3.11 and earlier allow a local attacker to modify the...CVE-2025-69604Public exploit7.8 High
- amidaware tactical rmmA Server-Side Template Injection (SSTI) vulnerability in the /reporting/templates/preview/...CVE-2025-69516Public exploit8.8 High
- erugoAuthenticated Remote Code Execution via Arbitrary File UploadCVE-2026-24897Public exploit10.0 Critical
- egroupwareEGroupware has SQL Injection in Nextmatch Filter ProcessingCVE-2026-22243Public exploitFix available8.7 High
- vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreNext.js: Denial of Service via connection exhaustion in applications using Cache ComponentsCVE-2026-44579Public exploitFix available7.5 High
- vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreNext.js: Server-side request forgery in applications using WebSocket upgradesCVE-2026-44578Public exploitFix availableEPSS 35.5%8.6 High
- vercel next.jsNext.js: HTTP request smuggling in rewritesCVE-2026-29057Public exploitFix available6.3 Medium
- facebook react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack +2 moreNext.js HTTP request deserialization can lead to DoS when using insecure React Server ComponentsCVE-2026-23870Public exploitFix available7.5 High
- inc2734 snow monkey formsSnow Monkey Forms <= 12.0.3 - Unauthenticated Arbitrary File Deletion via Path TraversalCVE-2026-1056Public exploitEPSS 13.3%9.8 Critical
- solarwinds web help deskSolarWinds Web Help Desk Authentication Bypass VulnerabilityCVE-2025-40554Public exploitEPSS 60.6%9.8 Critical
- solarwinds web help deskSolarWinds Web Help Desk Authentication Bypass VulnerabilityCVE-2025-40552Public exploitEPSS 52.0%9.8 Critical
- solarwinds web help deskSolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution VulnerabilityCVE-2025-40551In KEVPublic exploitEPSS 84.2%9.8 Critical
- solarwinds web help deskSolarWinds Web Help Desk Security Control Bypass VulnerabilityCVE-2025-40536In KEVPublic exploitEPSS 73.6%8.1 High
- dokployDokploy Vulnerable to Authenticated Remote Code Execution via Command Injection in Docker Container Terminal WebSocket EndpointCVE-2026-24841Public exploit9.9 Critical
- podcastgenerator podcast generatorA Stored cross-site scripting (XSS) vulnerability in 'Create New Live Item' in PodcastGenerator 3.2.9 allows remote attackers to inject arbitrary script or HTML via the 'TITLE', 'SHORT DESCRIPTION' an…CVE-2025-70336Public exploit4.8 Medium
- studiocmsStudioCMS has an Authorization Bypass Through User-Controlled KeyCVE-2026-24134Public exploitFix available6.5 Medium
- nyariv sandboxjsSandboxJS has Sandbox Escape via Unprotected AsyncFunction ConstructorCVE-2026-23830Public exploitFix available10.0 Critical
- fortinet fortianalyzer, fortimanager, fortinac-f +6 more +8 moreAn Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability...CVE-2026-24858In KEVPublic exploitEPSS 86.6%9.4 Critical
- grafana, grafana grafana/grafana, grafana/grafana-enterprise +12 more +14 moreDashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege EscalationCVE-2026-21721Public exploitFix available8.1 High
- hustojHUSTOJ has Arbitrary File Write (Zip Slip) in Problem Import Modules that leads to RCECVE-2026-24479Public exploit9.3 Critical
- qgisQGIS had validated RCE and Repository Takeover via GitHub ActionsCVE-2026-24480Public exploit8.7 High
- openssl, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreNULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex functionCVE-2025-69421Public exploitFix available7.5 High
- openssl, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreMissing ASN1_TYPE validation in TS_RESP_verify_response() functionCVE-2025-69420Public exploitFix available7.5 High
- openssl, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreOut of bounds write in PKCS12_get_friendlyname() UTF-8 conversionCVE-2025-69419Public exploitFix available7.4 High
- cpuid cpu-zThe kernel driver of CPUID CPU-Z v2.17 and earlier does not validate user-supplied values passed...CVE-2025-65264Public exploit5.5 Medium
- openssl, red hat cost management 4, ai inference server 3.2 +316 more +318 moreStack buffer overflow in CMS (Auth)EnvelopedData parsingCVE-2025-15467Public exploitFix availableEPSS 74.8%8.8 High
- opensslImproper validation of PBMAC1 parameters in PKCS#12 MAC verificationCVE-2025-11187Public exploitFix available6.1 Medium
- py-pdf pypdfpypdf has possible Infinite Loop when processing outlines/bookmarksCVE-2026-24688Public exploitFix available5.1 Medium
- fastapiexpert python-multipart, red hat lightspeed core, openshift lightspeed +11 more +13 morePython-Multipart has Arbitrary File Write via Non-Default ConfigurationCVE-2026-24486Public exploitFix available8.6 High
- microsoft office, 365 apps, 365 apps for enterprise +5 more +7 moreMicrosoft Office Security Feature Bypass VulnerabilityCVE-2026-21509In KEVPublic exploitEPSS 70.8%7.8 High
- apache continuumApache Continuum: Command injection leading to RCECVE-2016-15057Public exploit9.9 Critical
- worklenzWorklenz version 2.1.5 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Project...CVE-2025-70368Public exploit5.4 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreipv6: Fix use-after-free in inet6_addr_del().CVE-2026-23010Public exploitFix available7.8 High
- linux, linux kernel +1 morexhci: sideband: don't dereference freed ring when removing sideband endpointCVE-2026-23009Public exploitFix available5.5 Medium
- linux, linux kernel +1 moredrm/vmwgfx: Fix KMS with 3D on HW version 10CVE-2026-23008Public exploitFix available5.5 Medium
- linux, linux kernel +1 moreblock: zero non-PI portion of auto integrity bufferCVE-2026-23007Public exploitFix available5.5 Medium
- linux, linux kernel +1 moreASoC: tlv320adcx140: fix null pointerCVE-2026-23006Public exploitFix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morex86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1CVE-2026-23005Public exploitFix available5.5 Medium
- linux, linux kernel +1 moredst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()CVE-2026-23004Public exploitFix available7.8 High
- Show moreLoading…