Skip to contentVulnerabilities with public exploits
- piotnet addons for elementor proPiotnet Addons for Elementor Pro <= 7.1.70 - Unauthenticated Arbitrary File Upload via Form File UploadCVE-2026-4885Public exploit9.8 Critical
- significant-gravitas autogptAutoGPT: SendEmailBlock's IP blocklist bypass allows SSRF via user-controlled SMTP serverCVE-2026-33234Public exploit5.0 Medium
- significant-gravitas autogptAutoGPT has Authenticated Session Hijacking via IDORCVE-2026-30950Public exploit7.1 High
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustionCVE-2026-46522Public exploitFix available7.5 High
- aws amazon redshift connector for pythonRemote Code Execution via eval() Injection in amazon-redshift-python-driverCVE-2026-8838Public exploitFix available9.3 Critical
- docker engine, moby docker engine, docker docker/daemon +20 more +22 moreDocker: `PUT /containers/{id}/archive` executes container binary on the hostCVE-2026-41567Public exploitFix available7.2 High
- chroma chromadb, red hat enterprise linux ai (rhel ai) 3 +1 moreChromaDB Python project has a pre-authentication code injection vulnerabilityCVE-2026-45829Public exploitEPSS 15.1%10.0 Critical
- apple private cloud compute server software, private cloud compute +1 moreAn attacker in a privileged network position may be able to leak sensitive information. A path...CVE-2026-20685Public exploit6.5 Medium
- opajaap wp photo album plusWP Photo Album Plus < 9.1.11.001 - Unauthenticated SQL Injection via 'wppa-supersearch' ParameterCVE-2026-6379Public exploit8.6 High
- No product listedAn issue in Intelbras VIP-1230-D-G4 Version V2.800.00IB00C.0.T allows a remote attacker to obtain...CVE-2026-36438Public exploit5.3 Medium
- apache flinkApache Flink: Remote code execution via SQL injection in code generationCVE-2026-35194Public exploitFix available8.1 High
- debian linux, linux kernel, red hat nvidia for rhel 10 +25 more +27 moreptrace: slightly saner 'get_dumpable()' logicCVE-2026-46333Public exploitFix available7.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load EndpointsCVE-2026-45401Public exploitFix available8.5 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Read-Only Users Can Toggle Note Pin Status via Incorrect Permission Check (Write via Read-Only Access)CVE-2026-45316Public exploitFix available3.5 Low
- microsoft exchange server, microsoft, microsoft exchange server subscription edition +4 more +6 moreMicrosoft Exchange Server Spoofing VulnerabilityCVE-2026-42897In KEVPublic exploitEPSS 70.7%8.1 High
- portainerPortainer: Arbitrary File Read via Git Symlink Injection in Stack Auto-UpdateCVE-2026-44881Public exploitFix available8.5 High
- portainerPortainer: Missing authorization on Docker plugin endpoints allows host RCECVE-2026-44848Public exploitFix available9.4 Critical
- n8nn8n: HTTP Request Node Pagination Prototype Pollution to RCECVE-2026-44789Public exploitFix available9.4 Critical
- cisco catalyst sd-wan managerCisco Catalyst SD-WAN Manager XML External Entity Injection VulnerabilityCVE-2026-20224Public exploit8.6 High
- cisco catalyst sd-wan, catalyst sd-wan manager, catalyst sd-wan controller +2 more +4 moreCisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityCVE-2026-20182In KEVPublic exploitEPSS 91.1%10.0 Critical
- flowise, flowise components +1 moreFlowise - Remote Code Execution via MCP Security Bypass in validateCommandFlags and validateArgsForLocalFileAccessCVE-2026-56274Public exploitFix available8.7 High
- coreshopCoreShop Vulnerable to Remote Code Execution (RCE) via Insecure `pull_request_target` ConfigurationCVE-2026-41249Public exploit8.2 High
- strapiStrapi may leak sensitive data via relational filtering due to lack of query sanitizationCVE-2026-27886Public exploitFix available9.2 Critical
- postgresqlPostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choiceCVE-2026-6475Public exploitFix available8.8 High
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 5.1.5 - Unauthenticated Missing Authorization to Admin Approval Bypass via 'action' ParameterCVE-2026-6145Public exploit5.3 Medium
- linux kernel, linux, red hat nvidia for rhel 10 +38 more +40 morenet: skbuff: preserve shared-frag marker during coalescingCVE-2026-46300In KEVPublic exploitFix availableEPSS 16.1%7.8 High
- burstbv burst statistics – privacy-friendly wordpress analytics (google analytics alternative)Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account TakeoverCVE-2026-8181Public exploitEPSS 14.6%9.8 Critical
- cubecart v6CubeCart: Reflected XSS in Store Search BarCVE-2026-44376Public exploit6.1 Medium
- strapi, strapi @strapi/admin, @strapi/plugin-users-permissions +2 moreStrapi: Password Reset Does Not Revoke Existing Refresh SessionsCVE-2026-22706Public exploitFix available2.1 Low
- strapi, strapi @strapi/content-type-builder +1 moreStrapi Vulnerable to SQL Injection in Content Type BuilderCVE-2026-22599Public exploitFix available9.3 Critical
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: GlobalProtect Authentication Bypass VulnerabilitiesCVE-2026-0257In KEVPublic exploitEPSS 95.6%7.8 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code ExecutionCVE-2026-0264Public exploit7.2 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabledCVE-2026-0265Public exploit7.2 High
- f5 nginx open source, nginx gateway fabric, nginx ingress controller +1 more +3 moreNGINX ngx_http_proxy_v2_module vulnerabilityCVE-2026-42926Public exploitFix available6.3 Medium
- f5 nginx open source, nginx plus, dos +26 more +28 moreNGINX ngx_http_rewrite_module vulnerabilityCVE-2026-42945Public exploitFix availableEPSS 68.0%9.2 Critical
- f5 nginx open source, nginx plus, dos +4 more +6 moreNGINX ngx_http_ssl_module vulnerabilityCVE-2026-40701Public exploitFix available6.3 Medium
- samsung android, samsung mobile devices +1 moreImproper export of android application components in OmaCP prior to SMR May-2026 Release 1 allows...CVE-2026-21020Public exploit5.1 Medium
- samsung mobile devicesImproper input validation in FacAtFunction in Galaxy Watch prior to SMR May-2026 Release 1 allows...CVE-2026-21019Public exploit8.9 High
- samsung android, samsung mobile devices +1 moreOut-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged...CVE-2026-21018Public exploit6.8 Medium
- samsung android, samsung mobile devices +1 moreIncorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows local...CVE-2026-21016Public exploit5.1 Medium
- samsung android, samsung mobile devices +1 moreIncorrect default permissions in FactoryCamera prior to SMR May-2026 Release 1 allows local...CVE-2026-21015Public exploit6.8 Medium
- openplcproject openplc v3 firmwareA path injection vulnerability exists in OpenPLC v3 (2c82b0e79c53f8c1f1458eee15fec173400d6e1a) as...CVE-2026-31156Public exploit6.5 Medium
- No product listedNXP moal.ko Wi-Fi driver 5.1.7.10 FW version from v17.92.1.p149.43 To v17.92.1.p149.157 was...CVE-2025-29338Public exploit5.6 Medium
- sillytavernSillyTavern: Existing sessions are not invalidated after password change, allowing session reuse and account takeoverCVE-2026-44648Public exploitFix available7.5 High
- wftpserver wing ftp server, wing ftp server ftp server +1 moreWing FTP Server < 8.1.3 Authenticated Remote Code Execution via Session SerializationCVE-2026-44403Public exploit8.6 High
- dkfz nnu-net, mic-dkfz nnunet +1 morennU-Net: Agentic workflow injection in `.github/workflows/issue-triage.yml` of `MIC-DKFZ/nnUNet`CVE-2026-44246Public exploit7.2 High
- enesgkky pulpyPulpy: Incomplete filesystem sandbox in pulpy.fs bridge allows packaged web apps to read arbitrary user filesCVE-2026-44225Public exploit9.3 Critical
- webpros whmcsInsufficient ownership checks in `clientarea.php` allow an authenticated client area user to...CVE-2026-29204Public exploit9.1 Critical
- xibosignage xibo-cmsXibo: Authenticated Server-Side Request Forgery (SSRF) in Library Upload via URL functionalityCVE-2026-42141Public exploit7.7 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreWindows Kernel Elevation of Privilege VulnerabilityCVE-2026-40369Public exploit7.8 High
- Show moreLoading…