Skip to contentVulnerabilities with public exploits
- octobercms octoberOctober CMS: Twig Sandbox Bypass via Collection MethodsCVE-2026-22692Public exploitFix available4.9 Medium
- fortinet fortisandboxA path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5,...CVE-2026-39813Public exploitEPSS 44.0%9.1 Critical
- fortinet fortisandbox, fortisandbox paas +1 moreA improper neutralization of special elements used in an os command ('os command injection')...CVE-2026-39808In KEVPublic exploitEPSS 93.2%9.1 Critical
- eclipse jetty, red hat hawtio hawtio 4.4.0, openshift developer tools and services +39 more +41 moreHTTP Request Smuggling via Chunked Extension Quoted-String ParsingCVE-2026-2332Public exploitFix available7.4 High
- apache apisixApache APISIX: forward auth plugin allows header injectionCVE-2026-31908Public exploitFix available9.1 Critical
- wp media backwpup – wordpress backup & restore pluginBackWPup <= 5.6.6 - Authenticated (Administrator+) Local File Inclusion via 'block_name' ParameterCVE-2026-6227Public exploit7.2 High
- No product listedAn authenticated arbitrary file upload vulnerability in the /admin/tinymce/upload endpoint of...CVE-2026-38526Public exploit9.9 Critical
- No product listedA Local File Inclusion (LFI) vulnerability in the NFSen module (nfsen.inc.php) of LibreNMS 22.11...CVE-2026-30480Public exploit6.5 Medium
- leafletjs leafletLeaflet versions up to and including 1.9.4 are vulnerable to Cross-Site Scripting (XSS) via the...CVE-2025-69993Public exploit6.1 Medium
- espocrmEspoCRM: Stored HTML injection in email notifications about stream notes via unescaped post fieldCVE-2026-33657Public exploit4.6 Medium
- espocrmEspoCRM has authenticated SSRF via internal-host validation bypass using alternative IPv4 notationCVE-2026-33534Public exploit4.3 Medium
- codeastro online job portalCodeAstro Online Job Portal Delete Job Posting job-delete.php access controlCVE-2026-6201Public exploit5.3 Medium
- prometheusPrometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorerCVE-2026-40179Public exploitFix available5.3 Medium
- code-projects simple content management systemcode-projects Simple Content Management System welcome.php cross site scriptingCVE-2026-6184Public exploit4.8 Medium
- code-projects simple content management systemcode-projects Simple Content Management System index.php sql injectionCVE-2026-6183Public exploit6.9 Medium
- code-projects simple content management systemcode-projects Simple Content Management System login.php sql injectionCVE-2026-6182Public exploit6.9 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers...CVE-2026-21010Public exploit6.6 Medium
- samsung android, samsung mobile devices +1 moreExposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent...CVE-2026-21008Public exploit5.1 Medium
- samsung cameraImproper access control in Samsung Camera prior to version 16.5.00.28 allows local attacker to...CVE-2026-21014Public exploit5.1 Medium
- samsung galaxy wearableIncorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers...CVE-2026-21013Public exploit6.9 Medium
- samsung android, samsung mobile devices +1 moreExternal control of file name in AODManager prior to SMR Apr-2026 Release 1 allows privileged...CVE-2026-21012Public exploit6.8 Medium
- samsung android, samsung mobile devices +1 moreIncorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1...CVE-2026-21011Public exploit5.4 Medium
- samsung android, samsung mobile devices +1 moreImproper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows...CVE-2026-21009Public exploit4.1 Medium
- samsung android, samsung mobile devices +1 moreImproper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows...CVE-2026-21007Public exploit4.4 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers...CVE-2026-21006Public exploit4.7 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1...CVE-2026-21003Public exploit5.2 Medium
- haproxyAn issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the...CVE-2026-33555Public exploitFix available4.0 Medium
- No product listedIn Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for...CVE-2026-31283Public exploitDisputed9.8 Critical
- No product listedTotara LMS v19.1.5 and before is vulnerable to Incorrect Access Control. The login page code can...CVE-2026-31282Public exploitDisputed9.8 Critical
- No product listedTotara LMS v19.1.5 and before is vulnerable to HTLM Injection. An attacker can inject malicious...CVE-2026-31281Public exploitDisputed8.0 High
- No product listedAn issue in the Bluetooth RFCOMM service of Parani M10 Motorcycle Intercom v2.1.3 allows...CVE-2026-31280Public exploit6.5 Medium
pyro Ubuntu, pyro4 Ubuntu, pyro5 Ubuntu +2 moreAn issue in the <code>pickle</code> protocol of Pyro v3.x allows attackers to execute arbitrary code via supplying a crafted pickled string message.CVE-2026-31048Public exploit9.8 Critical- cloudark kubeplusThe `/registercrd` endpoint in KubePlus 4.14 in the kubeconfiggenerator component is vulnerable...CVE-2026-29955Public exploit8.8 High
tinyobjloader UbuntuA stack overflow in the experimental/tinyobj_loader_opt.h file of tinyobjloader commit d56555b...CVE-2026-29628Public exploit6.2 Medium- linux, linux kernel +1 morebpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_ORCVE-2026-31413Public exploitFix available7.8 High
- deepwisdom metagptFoundationAgents MetaGPT common.py decode_image server-side request forgeryCVE-2026-6111Public exploit5.3 Medium
- adobe acrobat, acrobat 2024, acrobat and reader +2 more +4 moreAcrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)CVE-2026-34621In KEVPublic exploit8.6 High
- aws-mcp-serveraws-mcp-server AWS CLI Command Injection Remote Code Execution VulnerabilityCVE-2026-5059Public exploit9.8 Critical
- nomachineNoMachine External Control of File Path Local Privilege Escalation VulnerabilityCVE-2026-5054Public exploit7.8 High
- nomachineNoMachine External Control of File Path Arbitrary File Deletion VulnerabilityCVE-2026-5053Public exploit7.1 High
- paperclipai paperclip, paperclip paperclipai, paperclipai\/server +1 more +3 morePaperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization BypassCVE-2026-41679Known exploitedPublic exploitFix availableEPSS 31.7%10.0 Critical
- temporal technologies, inc. temporalMissing Authentication on Streaming gRPC Replication EndpointCVE-2026-5724Public exploitFix available6.3 Medium
- axios, red hat cryostat 4, gatekeeper 3 +63 more +65 moreAxios has Unrestricted Cloud Metadata Exfiltration via Header Injection ChainCVE-2026-40175Public exploitFix available4.8 Medium
- berriai litellm, red hat lightspeed core, ansible automation platform 2.6 +2 more +4 moreDuplicate Advisory: LiteLLM has a sandbox escape in custom-code guardrailCVE-2026-40217Public exploitFix availableEPSS 17.0%8.8 High
- musl libcmusl libc GB18030 4-byte Decoder iconv.c iconv algorithmic complexityCVE-2026-6042Public exploitFix available4.8 Medium
- No product listedPHP-MYSQL-User-Login-System v1.0 was discovered to contain a SQL injection vulnerability via the...CVE-2026-29861Public exploit9.8 Critical
- apache tomcat, red hat enterprise linux 10, enterprise linux 10.0 extended update support +21 more +23 moreApache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptorCVE-2026-34486In KEVPublic exploitFix availableEPSS 98.5%7.5 High
- apache tomcat, tomcat native +1 moreApache Tomcat, Apache Tomcat Native: OCSP checks sometimes soft-fail even when soft-fail is disabledCVE-2026-29145Public exploitFix available9.1 Critical
- apache tomcatApache Tomcat: Occasionally open redirectCVE-2026-25854Public exploitFix available6.1 Medium
- apache tomcatApache Tomcat: Request smuggling via invalid chunk extensionCVE-2026-24880Public exploitFix available7.5 High
- Show moreLoading…