Skip to contentVulnerabilities with public exploits
- cloudways breeze cacheBreeze Cache <= 2.4.4 - Unauthenticated Arbitrary File Upload via fetch_gravatar_from_remoteCVE-2026-3844Public exploitEPSS 27.7%9.8 Critical
- No product listedYadea T5 Electric Bicycles (models manufactured in/after 2024) have a weak authentication...CVE-2025-70994Public exploit7.3 High
- rocket.chatIn Rocket.Chat <8.3.0, <8.2.1, <8.1.2, <8.0.3, <7.13.5, <7.12.6, <7.11.6, and <7.10.9, a NoSQL...CVE-2026-29198Public exploit9.8 Critical
- squidexSquidex has Blind SSRF via file:// Protocol in Restore API leading to Local File InteractionCVE-2026-41177Public exploit5.5 Medium
- espocrmEspoCRM vulnerable to authenticated RCE via Formula with path traversal in attachment `sourceId`, exploitable by admin userCVE-2026-33656Public exploit9.1 Critical
- thexerteproject xerteonlinetoolkitsXerte Online Toolkits Missing Authentication via connector.phpCVE-2026-34413Public exploit8.8 High
- thexerteproject xerteonlinetoolkitsXerte Online Toolkits File Upload RCE via elfinder ConnectorCVE-2026-34415Public exploit9.3 Critical
- thexerteproject xerteonlinetoolkitsXerte Online Toolkits Path Traversal via connector.phpCVE-2026-34414Public exploit7.1 High
- thexerteproject xerteonlinetoolkitsXerte Online Toolkits Path Disclosure via /setupCVE-2026-41459Public exploit6.9 Medium
- linux, linux kernel +1 morebpf: Fix undefined behavior in interpreter sdiv/smod for INT_MINCVE-2026-31525Public exploitFix available7.8 High
- augmenttCVE-2026-6356CVE-2026-6356Public exploit9.6 Critical
- augmenttCVE-2026-6355CVE-2026-6355Public exploit6.5 Medium
- packagekit, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 morePackageKit vulnerable to TOCTOU Race on Transaction Flags leads to arbitrary package installation as rootCVE-2026-41651Public exploitFix available8.8 High
- red hat build of apache camel 4 for quarkus 3, build of apache camel 4.18 for quarkus 3.33, build of apache camel 4.18.1 for spring boot 3.5.14 +3 more +5 moreCamel-infinispan: camel-infinispan: remote code execution via unsafe deserializationCVE-2026-6857Public exploitFix available7.5 High
strongswan DebianUpdated strongswan packages fix security vulnerabilitiesCVE-2026-35333Public exploitFix availableNo scorestrongswan DebianUpdated strongswan packages fix security vulnerabilitiesCVE-2026-35330Public exploitFix availableNo score- amazon linux, linux kernel, arista cloudvision agni +142 more +144 morecrypto: algif_aead - Revert to operating out-of-placeCVE-2026-31431In KEVPublic exploitFix availableEPSS 98.1%7.8 High
- progress telerik ui for asp.net ajaxDeserialization of Untrusted Data Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-6023Public exploit8.1 High
- spring security, vmware spring security, red hat openshift developer tools and services +11 more +13 moreUnauthorized User Impersonation when Using X.509 Client CertificatesCVE-2026-22747Public exploitFix available6.8 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON). Supported...CVE-2026-34308Public exploitFix available6.5 Medium
- oracle peoplesoft enterprise hcm shared componentsVulnerability in the PeopleSoft Enterprise HCM Shared Components product of Oracle PeopleSoft ...CVE-2026-22019Public exploit5.4 Medium
- oracle graalvm, graalvm for jdk, jdk +3 more +5 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2026-22018Public exploitFix available3.7 Low
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...CVE-2026-22017Public exploitFix available6.5 Medium
- oracle graalvm, graalvm for jdk, jdk +33 more +35 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2026-22016Public exploitFix available7.5 High
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema)...CVE-2026-22015Public exploitFix available4.3 Medium
- oracle user managementVulnerability in the Oracle User Management product of Oracle E-Business Suite (component:...CVE-2026-22014Public exploit3.8 Low
- oracle graalvm, graalvm for jdk, jdk +3 more +5 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2026-22013Public exploitFix available5.3 Medium
- oracle applications dbaVulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component:...CVE-2026-22011Public exploit7.6 High
- oracle financial services analytical applications infrastructureVulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of...CVE-2026-22010Public exploit7.5 High
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...CVE-2026-22009Public exploitFix available6.5 Medium
- oracle corporation java se, oracle jdk, jre +2 moreVulnerability in Oracle Java SE (component: Libraries). The supported version that is affected...CVE-2026-22008Public exploitFix available3.7 Low
- oracle graalvm, graalvm for jdk, jdk +3 more +5 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2026-22007Public exploitFix available2.9 Low
- oracle peoplesoft enterprise hcm human resourcesVulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft ...CVE-2026-22006Public exploit5.4 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...CVE-2026-22005Public exploitFix available4.9 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...CVE-2026-22004Public exploitFix available4.9 Medium
- oracle graalvm, oracle corporation graalvm enterprise edition, java se +2 more +4 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2026-22003Public exploitFix available6.0 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...CVE-2026-22002Public exploitFix available4.9 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema)...CVE-2026-22001Public exploitFix available2.7 Low
- flowiseai flowiseFlowise: CSV Agent Prompt Injection Remote Code Execution VulnerabilityCVE-2026-41264Public exploitFix available9.2 Critical
- bluditBludit CMS Reflected XSS via Search PluginCVE-2026-41456Public exploit5.1 Medium
- mozilla firefox, thunderbird +1 moreOther issue in the Storage: IndexedDB componentCVE-2026-6770Public exploitFix available6.5 Medium
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Form Autofill componentCVE-2026-6765Public exploitFix available5.3 Medium
- apktoolApktool: Path Traversal to Arbitrary File WriteCVE-2026-39973Public exploitFix available7.1 High
- lawnchairLawnchair vulnerable to Command Injection via unquoted workflow dispatch input in release_update.ymlCVE-2026-39866Public exploit7.4 High
- sanjay1313 visitor management systemVisitor Management System 1.0 by sanjay1313 is vulnerable to Unrestricted File Upload in vms/php...CVE-2026-37748Public exploit7.2 High
- gitlawb openclaudeOpenClaude has Sandbox Bypass via Early-Exit Logic Flaw that Allows Path TraversalCVE-2026-35570Public exploitFix available8.4 High
- internlm lmdeployLMDeploy Vulnerable to Server-Side Request Forgery (SSRF) via Vision-Language Image LoadingCVE-2026-33626Public exploitEPSS 45.2%7.5 High
- linuxfoundation spinnakerSpinnaker vulnerable to RCE when using gitrepo artifact types due to improper sanitization of user input on branch and pathsCVE-2026-32604Public exploitFix available10.0 Critical
- otrs ag otrsPossible DoS via SQL BoxCVE-2026-6060Public exploit4.5 Medium
- openmage magento, magento-lts +1 moreOpenMage LTS's Phar Deserialization leads to Remote Code ExecutionCVE-2026-25524Public exploitFix available8.1 High
- Show moreLoading…