Skip to contentVulnerabilities with public exploits
- termixTermix Vulnerable to Arbitrary Command Execution via Session HijackingCVE-2026-45746Public exploit9.0 Critical
- shd101wyy markdown preview enhancedMarkdown Preview Enhanced OS Command Injection in External File and Link OpeningCVE-2026-49492Public exploit8.6 High
- code-projects vehicle management systemcode-projects Vehicle Management System New Driver Registration Form newdriver.php unrestricted uploadCVE-2026-11344Public exploit6.9 Medium
- dbgateDbGate: Remote Code Execution via functionName injection in loadReader endpointCVE-2026-48017Public exploitFix available8.8 High
- dbgateDbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injectionCVE-2026-47670Public exploitFix available9.4 Critical
- dbgateDbGate: Unauthenticated Remote Code Execution via JSON Script RunnerCVE-2026-47668Public exploitFix available10.0 Critical
- arista eos, extensible operating system +1 moreArista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding BypassCVE-2026-7473In KEVPublic exploit6.9 Medium
- samsung android, samsung mobile devices +1 moreImproper handling of insufficient privileges in SecTelephonyProvider prior to SMR Jun-2026...CVE-2026-21017Public exploit4.6 Medium
- dts electronics industry and trade ltd. co. redline wr3200Authentication Bypass in DTS Electronics' Redline WR3200CVE-2026-6274Public exploit9.8 Critical
- shapedplugin, llc product slider pro for woocommerceWordPress Product Slider Pro for WooCommerce plugin < 3.5.4 - Backdoor vulnerabilityCVE-2026-49777Public exploit10.0 Critical
- widgetfactorylimited jce, joomlacontenteditor.net joomla content editor (jce) extension for joomla, widget factory joomla content editor +2 moreJoomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5CVE-2026-48907In KEVPublic exploitEPSS 85.4%10.0 Critical
- google chromeInsufficient validation of untrusted input in Enterprise Reporting in Google Chrome prior to 149...CVE-2026-11120Public exploitFix available9.6 Critical
- google chromeInappropriate implementation in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a...CVE-2026-11119Public exploitFix available9.6 Critical
- google chromeUse after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...CVE-2026-11118Public exploitFix available8.8 High
- google chromeUse after free in Views in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote...CVE-2026-11117Public exploitFix available8.8 High
- google chromeUse after free in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...CVE-2026-11116Public exploitFix available8.8 High
- google chromeUse after free in Updater in Google Chrome on Windows prior to 149.0.7827.53 allowed a local...CVE-2026-11115Public exploitFix available7.3 High
- google chromeUse after free in Device Trust in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote...CVE-2026-11114Public exploitFix available9.6 Critical
- google chromeInsufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53...CVE-2026-11113Public exploitFix available9.6 Critical
- google chromeInsufficient validation of untrusted input in Chromoting in Google Chrome on Linux prior to 149.0...CVE-2026-11112Public exploitFix available9.6 Critical
- google chromeOut of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...CVE-2026-11111Public exploitFix available8.1 High
- google chromeUninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...CVE-2026-11110Public exploitFix available6.5 Medium
- google chromeUninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...CVE-2026-11109Public exploitFix available6.5 Medium
- google chromeInappropriate implementation in NFC in Google Chrome on Android prior to 149.0.7827.53 allowed a...CVE-2026-11108Public exploitFix available8.8 High
- google chromeInappropriate implementation in Downloads in Google Chrome prior to 149.0.7827.53 allowed a...CVE-2026-11107Public exploitFix available4.3 Medium
- google chromeInappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote...CVE-2026-11106Public exploitFix available6.5 Medium
- google chromeInsufficient validation of untrusted input in WebUI in Google Chrome prior to 149.0.7827.53...CVE-2026-11105Public exploitFix available6.5 Medium
- google chromeUninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who...CVE-2026-11104Public exploitFix available6.5 Medium
- google chromeInappropriate implementation in Installer in Google Chrome on Windows prior to 149.0.7827.53...CVE-2026-11103Public exploitFix available7.8 High
- google chromeInappropriate implementation in Isolated Web Apps in Google Chrome prior to 149.0.7827.53 allowed...CVE-2026-11102Public exploitFix available8.8 High
- google chromeUninitialized Use in Dawn in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote...CVE-2026-11101Public exploitFix available6.5 Medium
- google chromeUse after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote...CVE-2026-10961Public exploitFix available8.3 High
- cisco catalyst sd-wan manager, catalyst sd-wan controller, sd-wan vsmart controller +2 moreCisco Catalyst SD-WAN Controller Authenticated Privilege Escalation VulnerabilityCVE-2026-20245In KEVPublic exploitEPSS 25.3%7.8 High
- microsoft copilot chat (microsoft edge), copilot chat +1 moreCopilot Chat (Microsoft Edge) Information Disclosure VulnerabilityCVE-2026-47644Public exploit6.5 Medium
- solarwinds serv-uSolarWinds Serv-U Unauthenticated Denial of Service VulnerabilityCVE-2026-28318In KEVPublic exploitEPSS 87.3%7.5 High
- progress ecs connection manager, loadmaster, progress software moveit waf +4 more +6 moreOS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFCVE-2026-8037In KEVPublic exploitEPSS 99.8%9.6 Critical
- No product listedIncorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0...CVE-2026-35904Public exploit9.8 Critical
- No product listedCross Site Scripting (XSS) vulnerability in the "Task in Progress / Recent" page in Arket Globe...CVE-2025-65640Public exploit6.3 Medium
- securly, securly chrome extension +1 moreCVE-2026-8888CVE-2026-8888Public exploit7.5 High
- cisco unified communications managerCisco Unified Communications Manager Server-Side Request Forgery VulnerabilityCVE-2026-20230In KEVPublic exploitEPSS 88.5%8.6 High
- apache http server, debian linux, red hat jboss core services for rhel 8 +19 more +21 moreApache HTTP Server: mod_http2 denial of serviceCVE-2026-49975Public exploitFix availableEPSS 33.0%7.5 High
- 7-zipGHSL-2026-140_7-Zip: 7-Zip has a heap buffer overflow via NTFS compressed stream buffer under-allocationCVE-2026-48095Public exploitFix available8.8 High
- No product listedA Cross Site Scripting vulnerability exists in the Kimi AI v1.0 web interface's 'Preview' feature...CVE-2026-39107Public exploit6.3 Medium
- go standard library crypto/x509, red hat assisted installer for red hat openshift container platform 2, cert manager support for red hat openshift release 1.19 +128 more +130 moreInefficient candidate hostname parsing in crypto/x509CVE-2026-27145Public exploitFix available6.5 Medium
- elixir-tesla teslaCRLF injection in Tesla.Multipart disposition parameters allows multipart part header injectionCVE-2026-48598Public exploitFix available2.1 Low
- armember premium – membership plugin, content restriction, member levels, user profile & user signupARMember Premium <= 7.3.1 - Insecure Password Reset Mechanism to Unauthenticated Privilege EscalationCVE-2026-5076Public exploit9.8 Critical
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2026-10702Public exploit4.3 Medium
- nic birdCZ.NIC BIRD Internet Routing Daemon through 2.19.0 contains a stack-based buffer overflow in the...CVE-2026-49943Public exploit6.3 Medium
- maziyarpanahi openmedOpenMed < 1.5.2 Remote Code Execution via PII Model LoadingCVE-2026-47117Public exploitFix available9.3 Critical
- appsmithCVE-2026-7299CVE-2026-7299Public exploit6.3 Medium
- Show moreLoading…