Skip to contentVulnerabilities with public exploits
- misp cti-transmuteStored Cross-Site Scripting (XSS) in CTI Transmute Notification Panel via Malicious Convert NamesCVE-2026-9806Public exploit6.3 Medium
- veeam backup and replicationThis vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.CVE-2026-32996Public exploit7.3 High
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: keycloak: information disclosure via saml ecp endpointCVE-2026-9794Public exploitFix available5.3 Medium
- acer nitrorsense v3NitroSense V3: Security Vulnerability InformationCVE-2026-9789Public exploit8.5 High
- marcantondahmen automadAutomad Broken Access Control: unauthenticated exposure of administrator bcrypt password hashes and TOTP secrets via public API endpointCVE-2026-45332Public exploitFix available7.5 High
- sensiolabs symfony, symfony dom-crawler +1 moreSymfony: XXE (Local File Disclosure) in DomCrawler::addXmlContent() via validateOnParse = trueCVE-2026-45071Public exploitFix available8.7 High
- symfonySymfony: Email Header / SMTP Command Injection via CRLF in Symfony\Component\Mime\AddressCVE-2026-45067Public exploitFix available6.3 Medium
- sherlock-project sherlockSherlock: Command Injection via pull_request_target in validate_modified_targets.ymlCVE-2026-44590Public exploit9.3 Critical
- No product listedTeamSpeak 3 Server Connection State Management process_resend_queue use after freeCVE-2026-4390Public exploit5.3 Medium
- saleswonder llc webinarignitionWordPress WebinarIgnition plugin < 4.08.253 - Privilege Escalation vulnerabilityCVE-2026-42758Public exploit9.8 Critical
- dotcms coreUnauthenticated SQL Injection in dotCMS Publish Audit APICVE-2026-8054Public exploit10.0 Critical
- smub wpcode – insert headers and footers + custom code snippets – wordpress code managerWPCode <= 2.3.5 - Authenticated (Author+) Remote Code Execution via CPT Capability Bypass via XML-RPC wp.newPostCVE-2026-8832Public exploit8.8 High
- pmqs io::compress, red hat enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreIO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output globCVE-2026-48962Public exploitFix available7.3 High
- spaceapplications yamcsYamcs: No Rate Limiting on Authentication EndpointCVE-2026-44596Public exploitFix available6.5 Medium
- spaceapplications yamcsYamcs: Unauthorized user enumeration via IAM API endpointsCVE-2026-44595Public exploitFix available4.3 Medium
- No product listedNorthern.tech Mender Server v4.1.0, v4.0.1 and below, and fixed in v4.1.1 and v4.0.2 allows...CVE-2026-49009Public exploit3.1 Low
- No product listedCommand injection in Raynet rvia version 12.6.4392.49-amd64.deb allows adversaries to execute...CVE-2026-38945Public exploit7.8 High
- No product listedAn issue in fetch_jpg() in xdrv_10_scripter.ino in Tasmota through 15.3.0.3 allows a remote...CVE-2026-38427Public exploit7.3 High
- No product listedBuffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker...CVE-2026-38426Public exploit7.3 High
- No product listedBuffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker...CVE-2026-38422Public exploit7.3 High
- No product listedNetis AC1200 Router NC21 V4.0.1.4296 exposes a CGI endpoint /cgi-bin/skk_get.cgi that returns the...CVE-2026-36539Public exploit7.3 High
- No product listedCraft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate...CVE-2026-31266Public exploit7.3 High
- No product listedA Cross-Site Request Forgery (CSRF) vulnerability was discovered in the delete.php endpoint of...CVE-2026-30498Public exploit6.3 Medium
- No product listedCommand injection in Raynet rvia 12.6.4392.49-amd64.deb allows adversaries to execute commands...CVE-2025-69600Public exploit7.8 High
- yamcsYamcs Vulnerable to LDAP Injection in LdapAuthModuleCVE-2026-42568Public exploitFix available4.3 Medium
- yeoman environmentyeoman-environment Vulnerable to Arbitrary Package Installation without User ConfirmationCVE-2026-42089Public exploitFix available8.6 High
- openvpn connectPrivilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS...CVE-2026-9560Public exploit9.4 Critical
- chatwootChatwoot: SQL Injection in Conversation/Contact Filter API via Custom Attribute ValuesCVE-2026-44706Public exploit8.5 High
- joomla joomla\!, joomla! project cms +1 moreJoomla! Core - [20260508] - Improper access check in com_config webservice endpointsCVE-2026-35223Public exploitFix availableEPSS 12.8%8.6 High
- apache flink kubernetes operatorApache Flink Kubernetes Operator: Server-Side Request Forgery and local file access in Kubernetes OperatorCVE-2026-40564Public exploit6.5 Medium
- mirasvit full page cache warmer for magento 2, full page cache warmer +1 moreMirasvit Cache Warmer for Magento < 1.11.12 PHP Object InjectionCVE-2026-45247In KEVPublic exploitEPSS 26.2%9.3 Critical
- mossdef-org luci-app-https-dns-proxyluci-app-https-dns-proxy Authenticated Command Injection via setInitActionCVE-2026-46368Public exploit8.7 High
- f5 nginx open source, nginx gateway fabric, nginx ingress controller +6 more +8 moreNGINX Open-Source ngx_http_v3_module vulnerabilityCVE-2026-42530Public exploitFix available9.2 Critical
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreSamba: samba: remote code execution in printing subsystem via unescaped job descriptionCVE-2026-4480Public exploitFix availableEPSS 28.7%9.0 Critical
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +26 more +28 moreSamba: remote code execution in samrCVE-2026-4408Public exploitFix availableEPSS 46.9%9.0 Critical
- No product listedPbootCMS v.3.2.11 contains a code injection vulnerability in its site configuration functionalityCVE-2026-36239Public exploit4.3 Medium
- bulwarkmail webmailIn Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, an unsanitized subject field in...CVE-2026-48849Public exploitFix available4.4 Medium
- bulwarkmail webmailRoundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection...CVE-2026-48842Public exploitFix available8.1 High
- acer care centerAcer Care Center creates a Named Pipe with a weak Security DescriptorCVE-2026-9490Public exploit6.8 Medium
- huggingface huggingface/transformers, transformers +1 moreArbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformersCVE-2026-4372Public exploitFix available7.8 High
- nezhahq nezhaNezha Monitoring: RoleMember can run shell on every server (cross-tenant RCE) via POST /api/v1/cronCVE-2026-46716Public exploitFix available9.9 Critical
- microsoft sharepoint enterprise server 2016, sharepoint server 2019, sharepoint server subscription edition +1 more +3 moreMicrosoft SharePoint Remote Code Execution VulnerabilityCVE-2026-45659In KEVPublic exploitEPSS 80.2%8.8 High
- docker desktopDocker Model Runner container-to-host code execution via MLX-LM model_file importlib loadingCVE-2026-5843Public exploit8.8 High
- docker desktopDocker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backendsCVE-2026-5817Public exploit8.8 High
- baptistearno typebot.ioTypeBot: SSRF Protection Bypass via DNS-Resolved Hostnames in Webhook / HTTP Request ValidationCVE-2026-34207Public exploit7.6 High
- f5 nginx open source, nginx plus, debian linux +15 more +17 moreNGINX ngx_http_rewrite_module vulnerabilityCVE-2026-9256Public exploitFix availableEPSS 10.9%9.2 Critical
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to IDOR + wrong-authorization-level in Express association Reorder dialogCVE-2026-8347Public exploitFix available2.3 Low
- shell-quote, red hat cluster observability operator 1.5.0, cryostat 4 +46 more +48 moreshell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op`CVE-2026-9277Public exploitFix available9.2 Critical
- encode starlette, red hat exploit intelligence, openshift lightspeed +18 more +20 moreStarlette has missing Host header validation that poisons request.url.path, bypassing path-based security checksCVE-2026-48710In KEVPublic exploitFix availableEPSS 70.3%6.5 Medium
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +54 more +56 moreInvoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/sshCVE-2026-46595Public exploitFix available10.0 Critical
- Show moreLoading…