Skip to contentVulnerabilities with public exploits
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +9 more +11 moreWindows DNS Client Remote Code Execution VulnerabilityCVE-2026-41096Public exploit9.8 Critical
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows Netlogon Remote Code Execution VulnerabilityCVE-2026-41089Public exploitEPSS 78.3%9.8 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityCVE-2026-34344Public exploit7.8 High
- fortinet fortiauthenticatorA improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator...CVE-2026-44277Public exploit9.1 Critical
- apache tomcatApache Tomcat: Security constraints not correctly appliedCVE-2026-43515Public exploitFix available9.1 Critical
- apache tomcatApache Tomcat: Digest authenticator will authenticate any unknown userCVE-2026-43512Public exploitFix available9.8 Critical
- apache tomcatApache Tomcat: HTTP/2 request headers not validatedCVE-2026-41293Public exploitFix available9.8 Critical
- hahwul dalfoxDalfox: Unauthenticated Remote Code Execution via `found-action` in Dalfox Server ModeCVE-2026-45087Public exploitFix available10.0 Critical
- hashicorp toolingConsul-template vulnerable to sandbox path bypass in file helper via a symlink attackCVE-2026-5061Public exploitFix available4.7 Medium
- davidalmeidac sealed-envsealed-env: TOTP secret embedded in unseal token payload (enterprise mode)CVE-2026-45091Public exploitFix available9.1 Critical
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2026-8389Public exploit8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreIncorrect boundary conditions in the JavaScript Engine: JIT componentCVE-2026-8388Public exploitFix available6.5 Medium
- code runner mcp server runner mcp serverRCE in Code Runner MCP ServerCVE-2026-5029Public exploit8.7 High
- multipartymultiparty vulnerable to Denial of Service via Prototype Pollution leading to Uncaught ExceptionCVE-2026-8161Public exploitFix available7.5 High
- siemens ros#A vulnerability has been identified in ROS# (All versions < V2.2.2). Affected versions contain a...CVE-2026-41551Public exploit9.3 Critical
- tanstack, @tanstack arktype-adapter, eslint-plugin-router +211 more +213 moreMalware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keysCVE-2026-45321In KEVPublic exploitFix available9.6 Critical
- eximExim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in...CVE-2026-45185Public exploitFix available9.8 Critical
- dani-garcia vaultwardenVaultwarden: Brute-force protection bypass vulnerabilityCVE-2026-43914Public exploit7.3 High
- apple ipados, macos, tvos +4 more +6 moreA logic issue was addressed with improved restrictions. This issue is fixed in iOS 18.7.9 and...CVE-2026-28995Public exploit8.8 High
- apple ipados, macos, tvos +4 more +6 moreA memory corruption issue was addressed with improved input validation. This issue is fixed in...CVE-2026-28956Public exploit6.5 Medium
- apple ipados, macos, tvos +3 more +5 moreAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26...CVE-2026-43655Public exploit7.3 High
- apple ipados, macos, tvos +4 more +6 moreA memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS...CVE-2026-28992Public exploit4.7 Medium
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS...CVE-2026-28990Public exploit7.5 High
- wellbia xigncode3XIGNCODE3 xhunter1.sys kernel driver contains a Privilege Escalation VulnerabilityCVE-2026-3609Public exploit7.8 High
- github copilot-cliGitHub Copilot CLI: Nested Bare Repository Can Execute Arbitrary Commands via core.fsmonitorCVE-2026-45033Public exploitFix available8.5 High
- casbin casdoorCVE-2026-6815CVE-2026-6815Public exploit5.9 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 +11 more +13 moreCockpit: cockpit: arbitrary command execution via crafted links in system logs uiCVE-2026-4802Public exploitFix available8.0 High
- dnsmasq, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreCVE-2026-5172CVE-2026-5172Public exploitFix available7.3 High
- dnsmasqCVE-2026-4893CVE-2026-4893Public exploitFix available5.3 Medium
- dnsmasqCVE-2026-2291CVE-2026-2291Public exploitFix available7.3 High
- unknown custom css-js-phpCustom CSS JS PHP <= 2.0.7 - Unauthenticated SQL Injection to RCECVE-2026-6433Public exploit7.3 High
- No product listedJeecgBoot mLogin Endpoint LoginController.java authorizationCVE-2026-8196Public exploit6.3 Medium
- pgbouncerPgBouncer crash in kill_pool_logins_server_errorCVE-2026-6666Public exploitFix available5.9 Medium
- pgbouncerPgBouncer integer overflow in PgBouncer network packet parsingCVE-2026-6664Public exploitFix available7.5 High
- adamhathcock sharpcompressSharpCompress: Directory traversal via directory entries in WriteToDirectory (zip slip variant)CVE-2026-44788Public exploitFix available5.9 Medium
- gitroom postiz, gitroomhq postiz-app +1 morePostiz: Arbitrary Code Execution and Token Exfiltration in pr-docker-build.yml via untrusted Dockerfile.devCVE-2026-42298Public exploit10.0 Critical
- @mikro-orm knex, sql, mikro-orm +2 moreMikroORM: SQL injection via runtime-controlled identifiers and JSON-path keysCVE-2026-44680Public exploitFix available7.6 High
- bitcoinjbitcoinj: ScriptExecution P2PKH/P2WPKH Verification BypassCVE-2026-44714Public exploitFix available7.5 High
- prestashopPrestaShop: Stored XSS executable in customer service viewCVE-2026-44212Public exploitFix available9.3 Critical
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 morerxrpc: Also unshare DATA/RESPONSE packets when paged frags are presentCVE-2026-43500Public exploitFix availableEPSS 94.1%7.8 High
- th30d4y ip, w4nn4d13\/ip +1 moreth30d4y/IP: DOM-Based Cross-Site Scripting (XSS) VulnerabilityCVE-2026-41575Public exploit6.1 Medium
- apache nifiApache NiFi: Missing Execute Code Required Permission on TinkerpopClientServiceCVE-2026-39816Public exploitFix available7.5 High
- mervinpraison praisonaiPraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow executionCVE-2026-44338Public exploitFix availableEPSS 32.6%7.3 High
- vimVim: OS Command Injection via 'path' completionCVE-2026-44656Public exploitFix available4.6 Medium
- acer predatorsense, predatorsense v3, nitrosense +2 morePredatorSense V3: Local Privilege Escalation (LPE) vulnerabilityCVE-2026-8069Public exploit8.5 High
- linux, linux kernel, red hat nvidia for rhel 10 +30 more +32 morexfrm: esp: avoid in-place decrypt on shared skb fragsCVE-2026-43284Public exploitFix availableEPSS 94.2%8.8 High
- fohrloop dash-uploaderAn issue in fohrloop dash-uploader v.0.1.0 through v.0.7.0a2 allows a remote attacker to execute...CVE-2026-38361Public exploitFix available7.5 High
dash-uploader PyPIdash-uploader has a directory traversal vulnerabilityCVE-2026-38360Public exploit9.8 Critical- pfsenseNetgate pfSense CE 2.7.2 allows code execution by using the module installer with a backup file...CVE-2025-69690Public exploitDisputed9.1 Critical
- No product listedRayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control...CVE-2025-69599Public exploitDisputed9.8 Critical
- Show moreLoading…