Skip to contentVulnerabilities with public exploits
- berriai litellm, red hat exploit intelligence, ansible automation platform 2 +1 more +3 moreLiteLLM: Authentication Bypass via Host Header InjectionCVE-2026-49468Public exploitFix available9.5 Critical
- kidocode crawl4aiCrawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker APICVE-2026-53753Public exploitFix available9.8 Critical
- oracle application performance management, oracle corporation apm - application performance management +1 moreVulnerability in the APM - Application Performance Management product of Oracle Enterprise...CVE-2026-46858Public exploit9.1 Critical
- microsoft malware protection engineMicrosoft Defender Elevation of Privilege VulnerabilityCVE-2026-50656Public exploitEPSS 11.2%7.8 High
- langflowLangflow: Unauthenticated RCE in Shareable PlaygroundsCVE-2026-48519Public exploitFix available9.6 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreSandbox escape in the DOM: Navigation componentCVE-2026-12295Public exploitFix available9.6 Critical
- liquid web / stellarwp the events calendarWordPress The Events Calendar plugin 6.15.12-6.16.2 - SQL Injection vulnerabilityCVE-2026-49772Public exploit9.3 Critical
- eyal fitoussi geo my wordpressWordPress GEO my WordPress plugin <= 4.5.5 - SQL Injection vulnerabilityCVE-2026-52715Public exploit9.3 Critical
- linux, linux kernel, red hat nvidia for rhel 10 +28 more +30 morenet/sched: fix pedit partial COW leading to page cache corruptionCVE-2026-46331Public exploitFix available7.8 High
- cato networks socket, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreSocket versions before 2.041 for Perl have an out-of-bounds heap readCVE-2026-12087Public exploitFix available9.1 Critical
- crm perks wp zendesk for contact form 7, wpforms, elementor, formidable and ninja formsWordPress WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin <= 1.1.4 - PHP Object Injection vulnerabilityCVE-2026-49105Public exploit9.8 Critical
- crm perks integration for keap/infusionsoft and contact form 7, wpforms, elementor, formidable, ninja formsWordPress Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin <= 1.2.1 - PHP Object Injection vulnerabilityCVE-2026-49104Public exploit9.8 Critical
- crm perks wp insightly for contact form 7, wpforms, elementor, formidable and ninja formsWordPress WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin <= 1.1.4 - PHP Object Injection vulnerabilityCVE-2026-49085Public exploit9.8 Critical
- latepointWordPress LatePoint plugin <= 5.5.1 - Privilege Escalation vulnerabilityCVE-2026-49083Public exploit7.5 High
- codepeople wp time slots booking formWordPress WP Time Slots Booking Form plugin <= 1.2.46 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-40791Public exploit7.1 High
- arraytics wp event solutionWordPress Eventin plugin <= 4.1.8 - Broken Access Control vulnerabilityCVE-2026-40776Public exploit7.5 High
- flipper code – wordpress development company wp mapsWordPress WP Maps plugin <= 4.9.1 - SQL Injection vulnerabilityCVE-2026-39492Public exploit9.3 Critical
- crm perks integration for activecampaign and contact form 7, wpforms, elementor, ninja formsWordPress Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.1.1 - PHP Object Injection vulnerabilityCVE-2026-9691Public exploit9.8 Critical
- discuz! x5.0Discuz! X5.0 Authentication Bypass via dbbak.php Encryption OracleCVE-2026-49952Public exploit9.3 Critical
- vitejs vite, voidzero vite\+ +1 moreVite: `server.fs.deny` bypass on Windows alternate pathsCVE-2026-53571Public exploitFix available8.2 High
- mastodonMastodon has a consent-check bypass in its remote CollectionsCVE-2026-47777Public exploitFix available7.5 High
- cisco catalyst sd-wan managerCisco Catalyst SD-WAN Manager Arbitrary File Write VulnerabilityCVE-2026-20262In KEVPublic exploitEPSS 29.1%6.5 Medium
- No product listedRuoYi v4.8.2 is vulnerable to SQL Injection via the /tool/gen/createTable endpoint. The issue...CVE-2026-38812Public exploit9.8 Critical
- No product listedA Time-Based Blind SQL Injection vulnerability in the alias_management module of OpenSIPS Control...CVE-2026-36670Public exploit8.8 High
- No product listedAn issue in Microvirt MEmu Android Emulator 9.2.7.0 allows a local attacker to escalate...CVE-2026-36213Public exploit7.8 High
- comma ai openpilotComma AI Openpilot Pickle modeld.py pickle.loads deserializationCVE-2026-12191Public exploit8.5 High
- litespeed cpanel plugin, litespeedtech litespeed cpanel plugin, litespeed whm plugin +2 moreLiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0)...CVE-2026-54420In KEVPublic exploit8.5 High
- ladela online scheduling and appointment booking system – booklyOnline Scheduling and Appointment Booking System – Bookly <= 27.2 - Unauthenticated Stored Cross-Site Scripting via 'bookly-customer-full-name' CookieCVE-2026-5513Public exploit7.2 High
- emarket-design customer support ticket system & helpdeskWP Ticket <= 6.0.4 - Unauthenticated SQL Injection via WordPress Search 's' ParameterCVE-2026-9848Public exploit7.5 High
- nezhahq nezhaNezha Monitoring: Pre-auth path traversal via /dashboard.. prefix confusion leaks jwt_secret_keyCVE-2026-53519Public exploitFix available9.1 Critical
- simple-help simplehelpSimpleHelp Authentication Bypass via Missing OIDC JWT Signature VerificationCVE-2026-48558In KEVPublic exploitEPSS 80.3%9.5 Critical
- chroma chromadb, red hat enterprise linux ai (rhel ai) 3, openshift ai (rhoai) +2 moreChromaDB has a code injection vulnerabilityCVE-2026-45833Public exploit9.4 Critical
- langchain-ai langgraphjs@langchain/langgraph-checkpoint-mongodb: NoSQL parameter injection in MongoDBSaver allows cross-tenant state accessCVE-2026-48121Public exploitFix available6.7 Medium
- amasty order attributes for magento 2Amasty Order Attributes for Magento 2 < 4.0.0 Unauthenticated Arbitrary File UploadCVE-2026-53787Public exploit9.3 Critical
- unknown keepinmind dashboard notesKeepInMind - Dashboard Notes <= 0.8.5 - Contributor+ Stored XSSCVE-2026-9271Public exploit6.8 Medium
- phpbbImproper authentication checks in the OAuth implementation allow account hijacking even when...CVE-2026-48611Public exploit9.8 Critical
- squid-cache squidSquid: Memory disclosure in FTP gatewayCVE-2026-47729Public exploitFix available6.5 Medium
- beardev joomsportWordPress JoomSport plugin <= 5.7.7 - SQL Injection vulnerabilityCVE-2026-42647Public exploit9.3 Critical
- hippoo mobile app for woocommerce, hippooo hippoo mobile app for woocommerce +1 moreWordPress Hippoo Mobile App for WooCommerce plugin <= 1.9.4 - Privilege Escalation vulnerabilityCVE-2026-49060Public exploit9.8 Critical
- duck-organization quest-botQuest Bot: Untrusted pull request code can be built and deployed by privileged `workflow_run` deployment.CVE-2026-47172Public exploit9.5 Critical
- soagen informatics technologies software and consulting inc. apinizerSSTI in Soagen Informatics' ApinizerCVE-2026-11561Public exploit9.8 Critical
- davidanderson updraftplus: wp backup & migration pluginUpdraftPlus: WP Backup & Migration Plugin <= 1.26.4 - Unauthenticated Authentication Bypass via UpdraftCentral udrpcCVE-2026-10795Public exploit8.1 High
- spring integration, vmware spring integration +1 moreRemote-file synchronizer in Spring Integration writes server-supplied filename under localDirectory without canonicalizationCVE-2026-40987Public exploitFix available7.1 High
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...CVE-2026-35273In KEVPublic exploitEPSS 96.7%9.8 Critical
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UICVE-2026-0273Public exploit6.1 Medium
- @fedify fedify, vocab-runtime +1 moreFedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 rangesCVE-2026-50131Public exploitFix available8.6 High
- litestar-org litestarLitestar: HTML Injection Through CSRF TokenCVE-2026-48060Public exploitFix available8.1 High
- aws cloud development kit libraryOS Command Injection in NodejsFunction Bundling in aws-cdk-libCVE-2026-11417Public exploitFix available7.0 High
- splunk enterprise, splunk +1 moreUnauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk EnterpriseCVE-2026-20253In KEVPublic exploitEPSS 96.9%9.8 Critical
- splunk, splunk cloud platform, enterprise +1 more +3 moreRemote Code Execution through Deserialization of Untrusted Data in Splunk Secure GatewayCVE-2026-20251Public exploitEPSS 30.6%8.8 High
- Show moreLoading…