Skip to contentVulnerabilities with public exploits
- cedar2025 xboard, v2board +1 morev2board / Xboard Authentication Token Exposure via loginWithMailLinkCVE-2026-39912Public exploit9.1 Critical
- citeum openctiOpenCTI affected by RCE via notifier templateCVE-2026-39980Public exploitFix available9.1 Critical
- helm, red hat helm cli 4.1 +1 moreHelm has a path traversal in plugin metadata version enables arbitrary file write outside Helm plugin directoryCVE-2026-35204Public exploitFix available8.4 High
- sonicwall sma1000, sma6200 firmware, sma6210 firmware +3 more +5 moreImproper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall...CVE-2026-4112Public exploit7.2 High
- hashicorp tooling, red hat openshift container platform 4, trusted artifact signer +1 more +3 moreGo-getter may allow to arbitrary filesystem reads through git operationsCVE-2026-4660Public exploitFix available7.5 High
- davidfcarr quick playgroundQuick Playground <= 1.3.1 - Missing Authorization to Unauthenticated Arbitrary File UploadCVE-2026-1830Public exploit9.8 Critical
- No product listedThe pstrip64.sys driver in EnTech Taiwan PowerStrip <=3.90.736 allows local users to escalate...CVE-2026-29923Public exploit7.8 High
- gitlabExposed Dangerous Method or Function in GitLabCVE-2026-5173Public exploitFix available8.5 High
- coreweave marimomarimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication BypassCVE-2026-39987In KEVPublic exploitFix availableEPSS 99.7%9.3 Critical
- google chromeType Confusion in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute...CVE-2026-5865Public exploitFix available8.8 High
- patrickjuchli basic-ftp, red hat developer hub 1.8, developer hub 1.9 +3 more +5 moreFTP Command Injection via CRLF in basic-ftpCVE-2026-39983Public exploitFix available8.6 High
- open-telemetry opentelemetry-go, opentelemetry, red hat cert manager support for red hat openshift release 1.19 +4 more +6 moreOpenTelemetry-Go has an incomplete fix for CVE-2026-24051: BSD kenv command not using absolute path enables PATH hijackingCVE-2026-39883Public exploitFix available7.3 High
- meta react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack +1 more +3 moreReact Server Components have a Denial of Service VulnerabilityCVE-2026-23869Public exploitFix available7.5 High
- futo immichimmich has Stored XSS via OCR Text in 360° Panorama ViewerCVE-2026-35455Public exploit7.3 High
- zammadZammad has a server-side template injection leading to RCE via AI AgentCVE-2026-34724Public exploit8.7 High
- xwiki, org.xwiki.platform xwiki-platform-legacy-oldcore, xwiki-platform-oldcore +1 more +3 moreXWiki Platform affected by remote code execution with script right through unprotected Velocity scripting APICVE-2026-33229Public exploitFix available8.6 High
- codename065 download managerWordPress Download Manager plugin <= 3.3.52 - Broken Access Control vulnerabilityCVE-2026-39676Public exploit5.3 Medium
- livemesh addons for elementorWordPress Livemesh Addons for Elementor plugin <= 9.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-39636Public exploit6.5 Medium
- gravity forms formsGravity Forms <= 2.9.30 - Reflected Cross-Site Scripting via 'form_ids' ParameterCVE-2026-4406Public exploit4.7 Medium
- semtech lr1110, lr1120, lr1121 +2 moreSemtech LR11xx Memory Write Access Control BypassCVE-2025-14857Public exploit5.4 Medium
- dbt-labs dbt-coredbt has a Command Injection in Reusable Workflow via Unsanitized comment-body OutputCVE-2026-39382Public exploit9.3 Critical
- kagi fastfeedparserFastFeedParser has an infinite redirect loop DoS via meta-refresh chainCVE-2026-39376Public exploitFix available7.5 High
- redwoodjs redwoodsdk, sdk +1 moreRedwoodSDK has a CSRF vulnerability in server function dispatch via GET requestsCVE-2026-39371Public exploitFix available8.1 High
- rack rack-sessionRack::Session::Cookie secrets: decrypt failure fallback enables secretless session forgery and Marshal deserializationCVE-2026-39324Public exploitFix available9.3 Critical
- churchcrm, churchcrm crm +1 moreChurchCRM has Blind XSS via Global Search – Administrative Cookie Session ExfiltrationCVE-2026-39338Public exploit8.6 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 +3 more +5 moreCockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injectionCVE-2026-4631Public exploitFix availableEPSS 15.5%9.8 Critical
- filebrowserFile Browser has a Command Injection via Hook RunnerCVE-2026-35585Public exploitFix available7.5 High
- freescoutFreeScout has an Unauthenticated IDOR in Open Tracking Endpoint Allows Cross-Conversation Thread Manipulation and EnumerationCVE-2026-35584Public exploit6.9 Medium
- openidentityplatform openamPre-Authentication Remote Code Execution via `jato.clientSession` Deserialization in OpenAMCVE-2026-33439Public exploitFix available9.3 Critical
- pi-hole ftl, ftldns +1 morePi-hole FTL affected by Remote Code Execution (RCE) via dns.upstreams Newline InjectionCVE-2026-35517Public exploit8.8 High
- djangoproject djangoPotential denial-of-service vulnerability in MultiPartParser via base64-encoded file uploadCVE-2026-33033Public exploitFix available6.5 Medium
- weaver e-cologyWeaver E-cology 10.0 Unauthenticated RCE via dubboApi Debug EndpointCVE-2026-22679Public exploitEPSS 20.7%9.3 Critical
- dolibarr erp/crm, erp\/crm +1 moreDolibarr ERP/CRM < 23.0.2 Authenticated RCE via dol_eval_standard()CVE-2026-22666Public exploitEPSS 15.8%8.6 High
- apache activemq, activemq broker, apache software foundation activemq all +8 more +10 moreApache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeansCVE-2026-34197In KEVPublic exploitFix availableEPSS 98.3%8.8 High
- ameliabooking booking for appointments and events calendar – ameliaAmelia <= 2.1.3 - Insecure Direct Object Reference to Authenticated (Employee+) Privilege Escalation via 'externalId' ParameterCVE-2026-5465Public exploit8.8 High
- saturdaydrive ninja forms - file uploadsNinja Forms - File Upload <= 3.3.26 - Unauthenticated Arbitrary File UploadCVE-2026-0740Public exploitEPSS 62.9%9.8 Critical
- No product listedAn issue in JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to force the...CVE-2025-69515Public exploit9.1 Critical
- genieacsGenieACS has an unauthenticated access vulnerability via the NBI API endpointCVE-2025-56015Public exploit7.5 High
- No product listedThe Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL...CVE-2024-36058Public exploit9.8 Critical
- No product listedKoha Library before 23.05.10 fails to sanitize user-controllable filenames prior to unzipping,...CVE-2024-36057Public exploit9.8 Critical
- meesho online shopping appMeesho Online Shopping App com.meesho.supply endpoint risky encryptionCVE-2026-5682Public exploit6.3 Medium
- vitejs vite, red hat advanced cluster security 4, ansible automation platform 2 +13 more +15 moreVite Affected by Arbitrary File Read via Vite Dev Server WebSocketCVE-2026-39363Public exploitFix available8.2 High
- kedro-org kedro-pluginsKedro-Datasets has a path traversal vulnerability in PartitionedDataset allows arbitrary file writeCVE-2026-35492Public exploitFix available6.5 Medium
- tandoor recipesTandoor Recipes Affected by Private Recipe Exposure and Unauthorized ModificationCVE-2026-35045Public exploit8.1 High
- useplunk plunkPlunk has a CRLF Email Header Injection in raw MIME message construction allows authenticated API user to inject arbitrary email headersCVE-2026-34975Public exploit8.5 High
- scoder lupa, red hat openshift ai (rhoai), satellite 6.18 +2 moreLupa has a Sandbox escape and RCE due to incomplete attribute_filter enforcement in getattr / setattrCVE-2026-34444Public exploitFix available7.9 High
- glpi-project glpiGLPI has a Server-Side Template Injection via Double-CompilationCVE-2026-26026Public exploitEPSS 12.0%9.1 Critical
- givanz vvvebjsgivanz Vvvebjs File Upload Endpoint upload.php cross site scriptingCVE-2026-5615Public exploit5.3 Medium
- nationalsecurityagency emissaryEmissary has GitHub Actions Shell Injection via Workflow InputsCVE-2026-35580Public exploitFix available9.1 Critical
- rarlab winrarWinRAR 5.61 Denial of Service via Malformed Language FileCVE-2019-25677Public exploit6.9 Medium
- Show moreLoading…