Skip to contentVulnerabilities with public exploits
- icewhaletech zimaosZimaOS: Unauthorized Creation of Files/Folders in Restricted System Directories via APICVE-2026-28286Public exploit8.6 High
- twentyAn issue in Twenty CRM v1.15.0 and before allows a remote attacker to execute arbitrary code via...CVE-2026-26720Public exploit9.8 Critical
- max-3000 maxsite cms, maxsite cms +1 moreMaxSite CMS MarkItUp Preview AJAX Endpoint preview-ajax.php eval code injectionCVE-2026-3395Public exploit6.9 Medium
- qualcomm 5g fixed wireless access platform firmware, apq8098 firmware, ar8031 firmware +236 more +238 moreInteger Overflow or Wraparound in GraphicsCVE-2026-21385In KEVPublic exploitFix available7.8 High
- google androidIn dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access...CVE-2026-0047Public exploitFix available8.4 High
- google androidIn createSessionInternal of PackageInstallerService.java, there is a possible way for an app to...CVE-2026-0023Public exploitFix available7.8 High
- google androidIn isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service...CVE-2026-0014Public exploitFix available6.2 Medium
- google androidIn setupLayout of PickActivity.java, there is a possible way to start any activity as a...CVE-2026-0013Public exploitFix available8.4 High
- google androidIn multiple locations, there is a possible out of bounds read and write due to a heap buffer...CVE-2026-0006Public exploitFix available9.8 Critical
- themeum tutor lms – elearning and online course solutionTutor LMS <= 3.9.6 - Unauthenticated SQL Injection via coupon_codeCVE-2025-13673Public exploit7.5 High
- opendcimopenDCIM <= 23.04 OS Command Injection via dot Configuration ParameterCVE-2026-28517Public exploitEPSS 10.2%9.3 Critical
- opendcimopenDCIM <= 23.04 SQL Injection in Config::UpdateParameterCVE-2026-28516Public exploit9.3 Critical
- opendcimopenDCIM <= 23.04 Missing Authorization in install.phpCVE-2026-28515Public exploit9.3 Critical
- expressjs multer, red hat logging subsystem for red hat openshift, developer hub 1.8 +7 more +9 moreMulter vulnerable to Denial of Service via incomplete cleanupCVE-2026-3304Public exploitFix available8.7 High
- centreon open ticketsPath traversal in Centreon Open TicketsCVE-2026-2749Public exploit9.9 Critical
- haproxy aloha, haproxy, haproxy enterprise +2 moreHAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because...CVE-2026-26080Public exploitFix available3.7 Low
- politechnika warszawska omega-psirReflected XSS in Omega-PSIRCVE-2026-1434Public exploit5.1 Medium
- openclawOpenClaw is vulnerable to validation bypass through GNU long-option abbreviations in allowlist modeCVE-2026-28363Public exploitFix available9.9 Critical
- vmware workstationVMware Workstation for Windows null pointer dereference may allow an authenticated user to trigger a crashCVE-2026-22722Public exploit6.1 Medium
- ajentiAjenti has a potential Remote Code ExecutionCVE-2026-27975Public exploitFix available8.1 High
- langflowLangflow has Remote Code Execution in CSV AgentCVE-2026-27966Public exploitEPSS 35.2%9.8 Critical
- koajs koa, red hat developer hub, openshift ai (rhoai) +4 more +6 moreKoa has Host Header Injection via `ctx.hostname`CVE-2026-27959Public exploitFix available7.5 High
- openlit, openlit software development kit +1 moreOpenLIT Vulnerable to Remote Code Execution and Secret Exposure via Misuse of `pull_request_target` in GitHub Actions WorkflowsCVE-2026-27941Public exploitFix available10.0 Critical
- wp-graphqlWPGraphQL Repo Vulnerable to Command Injection via Unsanitized GitHub Actions Expression in Release WorkflowCVE-2026-27938Public exploit7.7 High
- pennyw0rth netexecNetExec vulnerable to arbitrary file write via path traversal in spider_plus moduleCVE-2026-27884Public exploit5.3 Medium
- bluedragonsecurity rldnsrldns Vulnerable to Heap-based Out-of-Bounds ReadCVE-2026-27831Public exploit7.5 High
- No product listedA reflected Cross-Site Scripting (XSS) vulnerability exists in the register.php backend script of...CVE-2025-56605Public exploit5.4 Medium
- n8nn8n: Expression Sandbox Escape Leads to RCECVE-2026-27577Public exploitFix availableEPSS 10.7%9.4 Critical
- n8nn8n has a Sandbox Escape in its JavaScript Task RunnerCVE-2026-27495Public exploitFix available9.4 Critical
- servicenow ai platformRemote Code Execution in ServiceNow AI PlatformCVE-2026-0542Public exploit9.2 Critical
- microsoft windows osDenial of Service in Microsoft OSCVE-2026-2636Public exploit5.5 Medium
- open-emr openemrOpenEMR has SQL Injection VulnerabilityCVE-2026-25746Public exploit8.8 High
- juniper junos os evolvedJunos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as rootCVE-2026-21902Public exploitEPSS 18.5%9.3 Critical
- angular @nguniversal/common, @nguniversal/express-engine, angular-cli +2 moreAngular SSR is vulnerable to SSRF and Header Injection via request handling pipelineCVE-2026-27739Public exploitFix available9.2 Critical
- cisco catalyst sd-wan manager, catalyst sd-wan controller and manager, sd-wan vbond orchestrator +1 more +3 moreCisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityCVE-2026-20127In KEVPublic exploitEPSS 87.6%10.0 Critical
- gardyn home kit, home kit cloud api, home kit mobile application +2 moreAdministrative Credentials Can Be Extracted Through Gardyn API ResponsesCVE-2025-1242Public exploit9.3 Critical
- live-codes livecodesLiveCodes vulnerable to JavaScript Injection via untrusted PR title in i18n-update-pull workflowCVE-2026-27701Public exploit8.8 High
- epati antikor next generation firewall, epati cyber security technologies inc. antikor next generation firewall (ngfw) +1 moreAuthentication Bypass in ePati's Antikor NGFWCVE-2026-2624Public exploit9.8 Critical
- pamzey patients waiting area queue management systemSourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System queue.php cross site scriptingCVE-2026-3171Public exploit5.1 Medium
- agentfront enclave@enclave-vm/core is vulnerable to Sandbox EscapeCVE-2026-27597Public exploitFix available10.0 Critical
- jugmac00 flask-reuploadedFlask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template InjectionCVE-2026-27641Public exploitFix available9.8 Critical
- freescoutFreeScout: Missing .htaccess in Restricted File Extensions Allows Remote Code Execution on ApacheCVE-2026-27636Public exploit8.8 High
- hitachi configuration manager, device manager, ops center api configuration manager +2 moreInformation Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration ManagerCVE-2025-5781Public exploit5.2 Medium
- olivetinOliveTin vulnerable to OS Command Injection via `password` argument type and webhook JSON extraction bypasses shell safety checksCVE-2026-27626Public exploitFix available10.0 Critical
- opnsense core, typicms +1 moreTypiCMS Core has Stored Cross-Site Scripting (XSS) via SVG File UploadCVE-2026-27621Public exploitFix available6.8 Medium
- rustfsRustFS's Missing Post Policy Validation leads to Arbitrary Object WriteCVE-2026-27607Public exploitFix available8.1 High
- rollup, red hat openshift pipelines, openshift service mesh 3 +26 more +28 moreRollup 4 has Arbitrary File Write via Path TraversalCVE-2026-27606Public exploitFix available8.8 High
- open-emr openemrOpenEMR Arbitrary File Read VulnerabilityCVE-2026-24849Public exploit10.0 Critical
richie PyPIOpenFUN Richie Observable Timing Discrepancy in its sync_course_run_from_request functionCVE-2026-26717Public exploitFix available4.8 Medium- insat masterscada, masterscada buk-ts +1 moreInSAT MasterSCADA BUK-TS OS Command InjectionCVE-2026-22553Public exploit9.3 Critical
- Show moreLoading…