Skip to contentVulnerabilities with public exploits
- gnome gdk-pixbuf, red hat ai inference server 3.2, ai inference server 3.3 +35 more +37 moreGdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg imageCVE-2026-5201Public exploitFix available7.5 High
- rocketgenius gravity smtpGravity SMTP <= 2.1.4 - Unauthenticated Sensitive Information Exposure via REST APICVE-2026-4020Public exploitEPSS 73.8%7.5 High
- wpeverest everest forms proEverest Forms Pro <= 1.9.12 - Unauthenticated Remote Code Execution via Calculation FieldCVE-2026-3300Public exploitEPSS 39.2%9.8 Critical
- apache software foundation airflow provider for databricks, apache airflow providers databricks +1 moreApache Airflow Provider for Databricks: TLS Certificate Verification Disabled in Databricks Provider K8s Token ExchangeCVE-2026-32794Public exploitFix available4.8 Medium
- supsysticcom contact form by supsysticContact Form by Supsystic <= 1.7.36 - Unauthenticated Server-Side Template Injection via Prefill FunctionalityCVE-2026-4257Public exploitEPSS 41.5%9.8 Critical
- yunaiv yudao-cloudYunaiV yudao-cloud get-by-website sql injectionCVE-2026-5147Public exploit6.9 Medium
- trueconf client, trueconf +1 moreTrueConf Client Update Integrity Verification BypassCVE-2026-3502In KEVPublic exploit7.8 High
- nocobaseNocoBase Affected by Sandbox Escape to RCE via console._stdout Prototype Chain Traversal in Workflow Script NodeCVE-2026-34156Public exploitFix availableEPSS 35.0%10.0 Critical
- nicolargo glancesGlances Vulnerable to Command Injection via Dynamic Configuration ValuesCVE-2026-33641Public exploitFix available7.8 High
- 0xjacky nginx-ui, nginxui nginx ui +1 moreNginx UI: Unauthenticated MCP Endpoint Allows Remote Nginx TakeoverCVE-2026-33032Public exploitEPSS 35.3%9.8 Critical
- zte zxhn h188a firmwareUnauthenticated credential disclosure in the wizard interface in ZTE ZXHN H188A V6.0.10P2_TE and...CVE-2026-34472Public exploit7.1 High
- No product listedMultiple stored cross-site scripting (XSS) vulnerabilities in the Edit feature of the Software...CVE-2026-30082Public exploit6.1 Medium
- cloudark kubeplusIn KubePlus 4.1.4, the mutating webhook and kubeconfiggenerator components have an SSRF...CVE-2026-29954Public exploit7.6 High
- mrcmsMRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file...CVE-2026-29909Public exploit5.3 Medium
- No product listedIncorrect access control in the file_details.asp endpoint of DDSN Interactive Acora CMS v10.7.1...CVE-2026-29597Public exploit6.5 Medium
- xiongmai dvr/nvr devicesIn Sofia on Xiongmai DVR/NVR (AHB7008T-MH-V2 and NBD7024H-P) 4.03.R11 devices, root OS command...CVE-2026-34005Public exploit8.8 High
- mikro-orm mikroorm, mikro-orm +1 moreMikroORM is vulnerable to SQL Injection via specially crafted objectCVE-2026-34220Public exploitFix available9.3 Critical
- njzjz wenxianwenxian: Command Injection in GitHub Actions Workflow via `issue_comment.body`CVE-2026-34243Public exploit9.8 Critical
- promtengineer localgptPromtEngineer localGPT API Endpoint server.py LocalGPTHandler missing authenticationCVE-2026-5000Public exploit6.9 Medium
- langchain core, langchain-ai langchain, red hat openshift lightspeed +4 more +6 moreLangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functionsCVE-2026-34070Public exploitFix available7.5 High
- pab1it0 azure data explorer mcp server, adx-mcp-server +1 moreAzure Data Explorer MCP Server: KQL Injection in multiple tools allows MCP client to execute arbitrary Kusto queriesCVE-2026-33980Public exploit8.3 High
- handlebars-lang handlebars.js, handlebarsjs handlebars, red hat cluster observability operator 1.5.0 +12 more +14 moreHandlebars.js has JavaScript Injection via AST Type ConfusionCVE-2026-33937Public exploitFix available9.8 Critical
- dolibarr, dolibarr erp\/crm +1 moreDolibarr Core Discloses Sensitive Data via Authenticated Local File Inclusion in selectobject.phpCVE-2026-34036Public exploitFix available6.5 Medium
- wazuh, wazuh (github actions) +1 moreWazuh GitHub Actions Workflow Exposure of Sensitive CredentialsCVE-2025-15617Public exploit8.3 High
- moby, docker engine +1 moreMoby: AuthZ plugin bypass with oversized request bodyCVE-2026-34040Public exploitFix available8.8 High
- tenda ac6, ac6 firmware +1 moreTenda AC6 POST Request QuickIndex formQuickIndex stack-based overflowCVE-2026-4961Public exploit8.7 High
- tlsfuzzer ecdsa, python-ecdsa +1 morepython-ecdsa: Denial of Service via improper DER length validation in crafted private keysCVE-2026-33936Public exploitFix available5.3 Medium
- langflowLangflow - Path Traversal Arbitrary File Write via upload_user_fileCVE-2026-5027Public exploitEPSS 40.7%8.8 High
- grafana, red hat enterprise linux 10, enterprise linux 8 +1 more +3 moreRCE on Grafana via sqlExpressionsCVE-2026-27876Public exploitFix available9.1 Critical
- bluditRemote Code Execution via Unrestricted File Upload in BluditCVE-2026-25099Public exploit8.7 High
- spring ai, vmware spring ai +1 moreSpEL Injection via Unescaped Filter Key in SimpleVectorStore Leads to Remote Code ExecutionCVE-2026-22738Public exploitFix available9.8 Critical
- nextendweb smart slider 3Smart Slider 3 <= 3.5.1.33 - Authenticated (Subscriber+) Arbitrary File Read via actionExportAllCVE-2026-3098Public exploit6.5 Medium
- metabaseMetabase vulnerable to RCE and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization ImportCVE-2026-33725Public exploit7.2 High
- dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +4 more +6 moreDovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin....CVE-2026-24031Public exploitFix available7.7 High
- ultraviolet cocos ai, ultravioletrs cocos +1 moreCoCoS attested TLS is vulnerable to relay attacks via extracted ephemeral TLS keysCVE-2026-33697Public exploit7.5 High
- inventreeInvenTree has Path Traversal In Report TemplatesCVE-2026-33531Public exploit4.9 Medium
- tandoor recipesTandoor Recipes Vulnerable to Host Header InjectionCVE-2026-33149Public exploit8.1 High
- nodejs node, node.js, red hat enterprise linux 10 +7 more +9 moreA flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received...CVE-2026-21710Public exploitFix availableEPSS 25.4%7.5 High
- nodejs node, node.js +1 moreA flaw in V8's string hashing mechanism causes integer-like strings to be hashed to their numeric...CVE-2026-21717Public exploitFix available5.9 Medium
- theforeman foreman, red hat satellite 6, satellite 6.16 for rhel 8 +4 more +6 moreForman: foreman: remote code execution via command injection in websocket proxyCVE-2026-1961Public exploit8.0 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreicmp: fix NULL pointer dereference in icmp_tag_validation()CVE-2026-23398Public exploitFix available5.5 Medium
- wavlink wl-nu516u1, wl-nu516u1 firmware +1 moreWavlink WL-NU516U1 nas.cgi ftext stack-based overflowCVE-2026-4861Public exploit8.7 High
- freebsdRemote code execution via RPCSEC_GSS packet validationCVE-2026-4747Public exploit8.8 High
- ameliabooking booking for appointments and events calendar – ameliaAmelia Booking <= 9.1.2 - Authenticated (Customer+) Insecure Direct Object Reference to Arbitrary User Password ChangeCVE-2026-2931Public exploit8.8 High
- masteriyo lms – online course builder for elearning, lms & educationMasteriyo LMS <= 2.1.6 - Missing Authorization to Authenticated (Student+) Privilege Escalation to AdministratorCVE-2026-4484Public exploit8.8 High
- open-emr openemrOpenEMR has SQL Injection in CAMOS FormCVE-2026-33917Public exploit8.8 High
- open-emr openemrOpenEMR has a SQL Injection Vulnerability in patient selectionCVE-2026-33910Public exploit7.2 High
- open-emr openemrOpenEMR Vulnerable to Authenticated Blind Boolean-Based SQL Injection in new_search_popup.phpCVE-2026-29187Public exploit8.1 High
- openhandsOpenHands is Vulnerable to Command Injection through its Git Diff HandlerCVE-2026-33718Public exploitFix available7.6 High
- linuxfoundation opentelemetry instrumentation for java, open-telemetry opentelemetry-java-instrumentation, red hat jboss enterprise application platform 8 +1 more +3 moreOpenTelemetry: Unsafe Deserialization in RMI Instrumentation may Lead to Remote Code ExecutionCVE-2026-33701Public exploitFix available9.3 Critical
- Show moreLoading…