Skip to contentVulnerabilities with public exploits
- jonschlinkert picomatchPicomatch has a ReDoS vulnerability via extglob quantifiersCVE-2026-33671Public exploitFix available7.5 High
- lemmynet lemmyLemmy's Activitypub-Federation has SSRF via 0.0.0.0 bypass in activitypub-federation-rust v4_is_invalid()CVE-2026-33693Public exploitFix available6.5 Medium
- eemeli yamlyaml is vulnerable to Stack Overflow via deeply nested YAML collectionsCVE-2026-33532Public exploitFix available4.3 Medium
- psf requestsRequests has Insecure Temp File Reuse in its extract_zipped_paths() utility functionCVE-2026-25645Public exploitFix available4.4 Medium
- wpeverest user registrationWordPress User Registration plugin <= 4.4.9 - Privilege Escalation vulnerabilityCVE-2026-32488Public exploit8.1 High
- apple ipados, macos, tvos +3 more +5 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...CVE-2026-20687Public exploit7.1 High
- apple ipados, ios and ipados, iphone os +2 moreA buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4...CVE-2026-28858Public exploit9.8 Critical
- apple ipados, macos, tvos +4 more +6 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...CVE-2026-20637Public exploit6.2 Medium
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS...CVE-2026-20698Public exploit7.8 High
- apple ipados, macos, tvos +4 more +6 moreThis issue was addressed with improved authentication. This issue is fixed in iOS 18.7.7 and...CVE-2026-28867Public exploit6.2 Medium
- mmahrous thumblerthumbler allows OS Command InjectionCVE-2026-26833Public exploit9.8 Critical
- zapolnoch tesseract ocrnode-tesseract-ocr is vulnerable to OS Command Injection through unsanitized recognize() function parameterCVE-2026-26832Public exploit9.8 Critical
- dbashford textracttextract is vulnerable to OS Command InjectionCVE-2026-26831Public exploit9.8 Critical
- pdf-image project pdf-imagepdf-image has an OS Command Injection Vulnerability through its pdfFilePath parameterCVE-2026-26830Public exploit9.8 Critical
- zabbixBlind, read-only SQL injection in Zabbix API via sortfield parameterCVE-2026-23921Public exploitFix available8.7 High
- craftcms cms, craft cms +1 moreCraft CMS: Potential authenticated Remote Code Execution via malicious attached BehaviorCVE-2026-33157Public exploitFix available8.6 High
- parisneo lollms-webui, lollms web ui +1 moreLoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpointCVE-2026-33340Public exploitEPSS 22.1%9.1 Critical
- f5 nginx open source, nginx plus +1 moreNGINX ngx_stream_ssl_module vulnerabilityCVE-2026-28755Public exploitFix available5.3 Medium
- f5 nginx open source, nginx plus, red hat enterprise linux 10 +9 more +11 moreNGINX ngx_http_dav_module vulnerabilityCVE-2026-27654Public exploitFix availableEPSS 26.5%8.8 High
- langflowLangflow GitHub Actions Shell InjectionCVE-2026-33475Public exploit9.1 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape in the Responsive Design Mode componentCVE-2026-4692Public exploitFix available10.0 Critical
- esiclivreSQL injection in Solicitante::resetaSenha() in esiclivre/esiclivre v0.2.2 and earlier allows...CVE-2026-30655Public exploit6.5 Medium
- acowebs woocommerce custom product addons proWoocommerce Custom Product Addons Pro <= 5.4.1 - Unauthenticated Remote Code Execution via Custom Pricing FormulaCVE-2026-4001Public exploit9.8 Critical
- aquasec setup-trivy, trivy, aquasecurity trivy-action +3 more +5 moreTrivy ecosystem supply chain briefly compromisedCVE-2026-33634In KEVPublic exploitFix availableEPSS 61.5%9.4 Critical
- citrix netscaler, netscaler gateway, netscaler adc +2 more +4 moreInsufficient input validation leading to memory overreadCVE-2026-3055In KEVPublic exploitEPSS 91.5%9.3 Critical
- mantisbtMantisBT SOAP API has an authentication bypass vulnerability on MySQLCVE-2026-30849Public exploitFix available9.3 Critical
- tenda a15, a15 firmware +1 moreTenda A15 UploadCfg stack-based overflowCVE-2026-4567Public exploit9.3 Critical
- strongswanstrongSwan 4.5.0 < 6.0.5 EAP-TTLS AVP Parsing Integer UnderflowCVE-2026-25075Public exploitFix available8.7 High
github.com/digitalocean/droplet-agent Go, govulncheck-vulndb openSUSE +1 moreDigitalOcean Droplet Agent: Command Injection via Metadata Service EndpointCVE-2026-24516Public exploit8.8 Highznuny Debian, otrs2 Ubuntu +1 moreA Cross-Site Scripting (XSS) vulnerability exists in Znuny::ITSM 6.5.x in the customer.pl...CVE-2025-52204Public exploitFix available6.1 Medium- tikiA Reflected Cross-Site Scripting (XSS) vulnerability exists in the POST request data zipPath of...CVE-2024-46879Public exploit5.4 Medium
- tikiA Cross-Site Scripting (XSS) vulnerability exists in the page parameter of tiki-editpage.php in...CVE-2024-46878Public exploit5.4 Medium
- carazo import and export users and customersImport and export users and customers <= 1.29.7 - Privilege Escalation to Administrator via save_extra_user_profile_fieldsCVE-2026-3629Public exploit8.1 High
- minhnhut link gatewayMinhNhut Link Gateway <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode AttributesCVE-2026-3333Public exploit6.4 Medium
- anssilaitila contact list – online staff directory & address bookContact List <= 3.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_cl_map_iframe' ParameterCVE-2026-3516Public exploit6.4 Medium
- wpchill kali forms — contact form & drag-and-drop builderKali Forms <= 2.4.9 - Unauthenticated Remote Code Execution via form_processCVE-2026-3584Public exploit9.8 Critical
- libfuse, red hat enterprise linux 7, enterprise linux 8 +2 moreUse After Free in libfuseCVE-2026-33150Public exploitFix available7.8 High
- generic-mapping-tools gmtGMT: Stack-based Buffer Overflow in gmt_remote_dataset_idCVE-2026-33147Public exploit7.3 High
- devolutions server, mariadb +1 moreHeap-based Buffer Overflow in MariaDBCVE-2026-32710Public exploitFix available8.6 High
- middleapi orpcoRPC: Stored XSS in OpenAPI Reference Plugin via unescaped JSON.stringifyCVE-2026-33331Public exploitFix available8.2 High
- fastgptFastGPT has Arbitrary Code Execution in GitHub Actions via pull_request_target in fastgpt-preview-image.ymlCVE-2026-33075Public exploit9.4 Critical
- pjsip, pjsip pjproject +1 morePJSIP is vulnerable to Heap-based Buffer Overflow through DNS parserCVE-2026-32945Public exploitFix available8.4 High
- apereo xerte online toolkits, xerte online toolkits +1 moreXerte Online Toolkits <= 3.14 Unauthenticated Template Import Arbitrary File Upload Leading to Remote Code ExecutionCVE-2026-32985Public exploit9.3 Critical
- google chromeInappropriate implementation in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote...CVE-2026-4447Public exploitFix available8.8 High
- google chromeStack buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote...CVE-2026-4444Public exploitFix available8.8 High
- spring security, vmware spring security +1 moreUnder Some Conditions Spring Security HTTP Headers Are not WrittenCVE-2026-22732Public exploitFix available9.1 Critical
- kubernetes ingress-nginx, nginx ingress controller +1 moreingress-nginx comment-based nginx configuration injectionCVE-2026-4342Public exploitFix available8.8 High
- microsoft bing imagesMicrosoft Bing Images Remote Code Execution VulnerabilityCVE-2026-32194Public exploit9.8 Critical
- open-emr openemrOpenEMR has Remote Code Execution in backup functionalityCVE-2026-32238Public exploit9.1 Critical
- intakeIntake has a Command Injection via shell() Expansion in Parameter DefaultsCVE-2026-33310Public exploitFix available8.8 High
- Show moreLoading…