Skip to contentVulnerabilities with public exploits
- ubiquiti unifi os, free5gc udm, udr +59 more +61 moreA malicious actor with access to the network could exploit an Improper Input Validation...CVE-2026-34910In KEVPublic exploitEPSS 90.0%10.0 Critical
- ubiquiti unifi os, free5gc udm, udr +59 more +61 moreA malicious actor with access to the network could exploit an Improper Access Control...CVE-2026-34908In KEVPublic exploitEPSS 88.9%10.0 Critical
- No product listedBuffer Overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain...CVE-2026-36228Public exploit7.3 High
- No product listedDirectory Traversal vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain...CVE-2026-36227Public exploit6.5 Medium
- No product listedCross Site Scripting vulnerability in Advantech WebAccess/SCADA 8.0-2015.08.16 allows a remote...CVE-2026-36226Public exploit6.1 Medium
- containerdcontainerd user ID handling bypass allows runAsNonRoot evasionCVE-2026-46680Public exploitFix available7.3 High
- smithyhq sqladminSQLAdmin: Authorization Bypass on `ajax_lookup`CVE-2026-46645Public exploitFix available4.3 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to IDOR in surveys when sites are running concurrent public surveys and private surveysCVE-2026-8337Public exploitFix available6.3 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to IDOR in the`/ccm/frontend/conversations/message_detail` endpointCVE-2026-8237Public exploitFix available6.3 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to IDOR in '/ccm/frontend/conversations/get_rating'CVE-2026-8239Public exploitFix available6.3 Medium
- nocodbNocoDB: Shared-base link access can invite arbitrary users as persistent base membersCVE-2026-46552Public exploit5.8 Medium
- berriai litellm, red hat exploit intelligence, ansible automation platform 2 +1 more +3 moreLiteLLM < 1.83.10 Privilege Escalation via User UpdateCVE-2026-47102Public exploitFix available8.7 High
- berriai litellm, red hat exploit intelligence, ansible automation platform 2 +1 more +3 moreLiteLLM < 1.83.14 Privilege Escalation via API Key GenerationCVE-2026-47101Public exploitFix available8.7 High
- samlify project samlifysamlify: XML Injection in AttributeValue Allows Privilege Escalation in Signed SAML AssertionsCVE-2026-46490Public exploitFix available8.7 High
- trend micro apex one, trend micro, inc. trendai apex one, trendai apex one as a service +2 moreA directory traversal vulnerability in the Apex One (on-premise) server could allow a pre...CVE-2026-34926In KEVPublic exploitEPSS 13.4%6.7 Medium
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moreipv6: rpl: reserve mac_len headroom when recompressed SRH growsCVE-2026-43501Public exploitFix available9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morertmutex: Use waiter::task instead of current in remove_waiter()CVE-2026-43499Public exploitFix available7.8 High
- divi engine form builderDivi Form Builder <= 5.1.2 - Unauthenticated Privilege Escalation via 'role'CVE-2026-5118Public exploit9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morenet/rds: reset op_nents when zerocopy page pin failsCVE-2026-43494Public exploitFix available7.8 High
- freebsdStack buffer overflow via setcred(2)CVE-2026-45250Public exploit7.8 High
- themefusion avada (fusion) builderAvada (Fusion) Builder <= 3.15.2 - Unauthenticated Remote Code Execution via PHP Function Injection via 'render_logics' Shortcode Attribute via Widget AJAX HandlerCVE-2026-6279Public exploit9.8 Critical
- litespeed cpanel plugin, litespeed technologies whm plugin, litespeedtech litespeed cpanel plugin +1 more +3 moreLiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as...CVE-2026-48172In KEVPublic exploitEPSS 17.9%10.0 Critical
- cisco secure workloadCisco Secure Workload Unauthorized API Access VulnerabilityCVE-2026-20223Public exploit10.0 Critical
- shivammathur setup-php, setup php +1 moresetup-php: Command Injection in Repository-Derived PHP Version ResolutionCVE-2026-46420Public exploitFix available5.6 Medium
- phenixdigital phoenix storybookUnauthenticated remote code execution via HEEx template injection in phoenix_storybook playgroundCVE-2026-8467Public exploitFix available9.5 Critical
- microsoft malware protection engineMicrosoft Defender Remote Code Execution VulnerabilityCVE-2026-45584Public exploit8.1 High
- microsoft defender, malware protection engine +1 moreMicrosoft Defender Elevation of Privilege VulnerabilityCVE-2026-41091In KEVPublic exploit7.8 High
- microsoft defender, defender antimalware platform +1 moreMicrosoft Defender Denial of Service VulnerabilityCVE-2026-45498In KEVPublic exploitEPSS 63.1%4.0 Medium
- nvidia triton inference serverNVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an...CVE-2026-24207Public exploit9.8 Critical
- isc bind, bind 9 +1 moreUnbounded resend loop in BIND 9 resolverCVE-2026-5950Public exploitFix available5.3 Medium
- mate-desktop atril, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 morePDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopenCVE-2026-46529Public exploitFix available8.4 High
- linux, linux kernel, red hat nvidia for rhel 10 +28 more +30 morenet: skbuff: propagate shared-frag marker through frag-transfer helpersCVE-2026-43503Public exploitFix available8.8 High
- No product listedBuffer Overflow vulnerability in EPSON L14150 FL27PB allows a remote attacker to execute...CVE-2026-39047Public exploit7.5 High
@cyntler/react-doc-viewer npm@cyntler/react-doc-viewer's TXTRenderer fails to sanitize file content and explicitly casts raw data as a ReactNodeCVE-2026-30691Public exploit6.1 Medium- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreWindows BitLocker Security Feature Bypass VulnerabilityCVE-2026-45585Public exploit6.8 Medium
- convoypanel panelCtrlPanel: Unauthenticated RCE using installer scriptCVE-2026-34234Public exploit10.0 Critical
- penpotPenpot: MCP REPL server binds to 0.0.0.0 with unauthenticated /execute endpoint — RCECVE-2026-45805Public exploitFix available8.8 High
- struktur libheif, red hat enterprise linux 10 +1 morelibheif: Heap-Buffer-Overflow Write in Grid Tile Chroma CompositingCVE-2026-32740Public exploitFix available8.8 High
- decolua 9router9Router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routesCVE-2026-46339Public exploitFix available10.0 Critical
- jaspersoft jasperreports io at-scale, jasperreports io professional, jasperreports library community edition +5 more +7 moreJaspersoft Library Deserialisation VulnerabilityCVE-2026-6009Public exploitFix available8.7 High
- haxtheweb haxcms-nodejsHAX CMS Vulnerable to Private Key Disclosure via Broken HMAC ImplementationCVE-2026-46395Public exploitFix available9.3 Critical
- haxtheweb @haxtheweb/open-apisHAX open-apis: Credential Theft via Server-Side Request Forgery (SSRF) in open-apisCVE-2026-46391Public exploitFix available8.7 High
- eclipse glassfishGlassFish's Administration Console is Vulnerable to RCECVE-2026-2586Public exploitFix available9.1 Critical
- eclipse glassfishGlassFish's gadget handler is vulnerable to RCECVE-2026-2587Public exploitFix available9.6 Critical
- funnelkit funnel builder for woocommerce checkoutFunnel Builder for WooCommerce Checkout < 3.15.0.3 Missing Authorization via AJAXCVE-2026-47100Public exploit8.7 High
- sparx systems pro cloud serverBroken Access Control in Sparx Pro Cloud ServerCVE-2026-42096Public exploit8.7 High
- apache camel, red hat openshift serverless, build of apache camel 4 for quarkus 3 +4 more +6 moreApache Camel: Camel-CXF Message Header Injection via Missing Inbound FilteringCVE-2026-47323Public exploitFix availableEPSS 19.6%9.8 Critical
- piotnet forms, piotnetdotcom piotnet forms +1 morePiotnet Forms <= 2.1.40 - Unauthenticated Arbitrary File Upload via Form File UploadCVE-2026-4883Public exploit9.8 Critical
- apache tomcatApache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bindCVE-2026-55957Public exploitFix available7.3 High
- typo3 extension "news system"SQL Injection in extension "News system" (news)CVE-2026-8726Public exploitFix available8.2 High
- Show moreLoading…