Skip to contentVulnerabilities with public exploits
- fasterxml jackson-databindjackson-databind: Case-insensitive deserialization bypasses per-property @JsonIgnorePropertiesCVE-2026-54515Public exploitFix available5.3 Medium
- budibaseBudibase: Anonymous NoSQL operator injection via published-app query templatesCVE-2026-54350Public exploitFix available10.0 Critical
- gnupgCMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS...CVE-2026-57062Public exploitFix available2.9 Low
- gogsGogs: Path Traversal in organization name results in RCE through Git hooksCVE-2026-52813Public exploitFix available10.0 Critical
- gogsGogs: Write to readonly repositories using receive-pack + service=git-upload-pack confusionCVE-2026-52810Public exploitFix available7.1 High
- gogsGogs: RCE via git rebase --exec argument injection in pull request mergeCVE-2026-52806Public exploitFix available9.9 Critical
- fossbillingFOSSBilling: Server-side template injection in Twig template rendering enables information disclosure and RCECVE-2026-28496Public exploit9.4 Critical
- zohocorp manageengine adselfservice plus, manageengine adaudit plus, manageengine m365 manager plus +1 more +3 moreAccount Takeover via Predictable SSO Ticket GenerationCVE-2026-11374Public exploit9.0 Critical
- No product listedAn issue in Pivotal CRM v.6.6.04.08 allows a remote attacker to execute arbitrary code via the...CVE-2026-39253Public exploit8.1 High
- filamentphp filamentFilament: Unauthenticated temporary file upload on auth pagesCVE-2026-48500Public exploitFix available6.5 Medium
- tp link systems inc. archer mr402 v1, tp-link systems inc. archer c20 v5, archer c20 v6 +4 more +6 moreUnauthenticated Command Injection via DHCP Option Handling in Multiple TP-Link RoutersCVE-2026-11834Public exploit8.7 High
- mispMISP Core: Broken access control allows instance-wide unauthorized deletion of event reports and sharing groups via bulk deletion endpointsCVE-2026-56423Public exploit9.4 Critical
- prefect, prefecthq prefecthq/prefect +1 moreGit Argument Injection in prefecthq/prefectCVE-2026-5366Public exploitFix available9.9 Critical
- joomshaper sp page builder, joomshaper.net sp page builder extension for joomla +1 moreJoomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2CVE-2026-48908In KEVPublic exploitEPSS 89.2%10.0 Critical
- icagenda, icagenda.com icagenda extension for joomla +1 moreJoomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15CVE-2026-48939In KEVPublic exploitEPSS 20.1%10.0 Critical
- joomshaper.net sp lms extension for joomlaJoomla Extension - joomshaper.com - PHP Object injection in SP LMS extension for Joomla < 4.1.4CVE-2026-48909Public exploit9.5 Critical
- eemitch simple file listSimple File List <= 6.3.7 - Missing Authorization to Unauthenticated File Modification via simplefilelist_edit_job AJAX ActionCVE-2026-11912Public exploit7.5 High
- wpmudev branda – white label & branding, free login page customizerBranda – White Label & Branding, Free Login Page Customizer <= 3.4.29 - Unauthenticated Privilege Escalation via Account TakeoverCVE-2026-11551Public exploit9.8 Critical
- langflowLangflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's FlowCVE-2026-55255In KEVPublic exploitFix available8.4 High
- ohler55 ojOj: Negative-Size memcpy in Oj::Parser create_id Attribute HandlingCVE-2026-54900Public exploitFix available6.3 Medium
- linux, linux kernel, red hat enterprise linux 10 +10 more +12 morebpf: Free reuseport cBPF prog after RCU grace period.CVE-2026-52910Public exploitFix available7.8 High
- apache apisixApache APISIX: Authentication bypass in jwe-decryptCVE-2026-49230Public exploitFix available6.3 Medium
- betterdocs proBetterDocs Pro <= 3.8.0 - Unauthenticated Local File Inclusion via doc_styleCVE-2026-7515Public exploit9.8 Critical
- themefusion avada (fusion) builderAvada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion via Form Entry ValueCVE-2026-8713Public exploit9.1 Critical
- bitpressadmin bit integrations – form integration, webhook, spreadsheets, crm, lms & email automationBit integrations <= 2.8.7 - Unauthenticated Server-Side Request Forgery via Form Field Upload MappingCVE-2026-11989Public exploit6.5 Medium
- microsoft heif image extensionMicrosoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because...CVE-2025-62821Public exploit9.1 Critical
- jtl software shopJTL Shop < 5.7.2 Server-Side Template Injection via Smarty RendererCVE-2026-54390Public exploit9.3 Critical
- ffmpeg, red hat ai inference server, enterprise linux ai (rhel ai) 3 +2 more +4 moreHeap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoderCVE-2026-8461Public exploitFix available8.8 High
- optimole – optimize images | convert webp & avif | cdn & lazy load | image optimizationOptimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization <= 4.2.6 - Cross-Site Request Forgery via 'optml_replace_file' AJAX ActionCVE-2026-11784Public exploit4.3 Medium
- util-linuxutil-linux mount target TOCTOU allows local privilege escalationCVE-2026-53613Public exploitFix available7.0 High
- libssh2libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.cCVE-2026-55200Public exploitFix available9.2 Critical
- langflowLangflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leakCVE-2026-55450Public exploitFix available9.3 Critical
- anthropic claude code, anthropics claude-code +1 moreClaude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetchCVE-2026-54316Public exploitFix available6.0 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversalCVE-2026-54017Public exploitFix available7.7 High
- nv-tlabs gen3cNVIDIA SIL GEN3C Unauthenticated RCE via Pickle Deserialization in Inference APICVE-2026-53805Public exploit9.3 Critical
- fgmacedo python statemachine, python-statemachine +1 morePython StateMachine 3.0.0 < 3.2.0 RCE via SCXML eval() InjectionCVE-2026-47103Public exploitFix available9.3 Critical
- azuriom cmsBroken Access Control in Azuriom CMS Server Routes Allows Account TakeoverCVE-2026-54415Public exploit8.6 High
- f5 nginx open source, nginx plus, dos +14 more +16 moreNGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerabilityCVE-2026-42055Public exploitFix available9.2 Critical
- traefikTraefik: Kubernetes Gateway crossProviderNamespaces bypass allows HTTPRoute outside the allowlist to expose internal Traefik servicesCVE-2026-54761Public exploitFix available6.0 Medium
- flarum frameworkCRLF injection in Laravel's default email rule enables SMTP smuggling and spoofed-mail relayCVE-2026-48019Public exploitFix available8.9 High
- apache shiroApache Shiro: LDAP DN Injection in DefaultLdapRealmCVE-2026-49268Public exploitFix available8.8 High
- themegrill registration form for woocommerceWordPress Registration Form for WooCommerce plugin <= 1.0.9 - Privilege Escalation vulnerabilityCVE-2026-54807Public exploit9.8 Critical
- melapress wp activity logWordPress WP Activity Log plugin <= 5.6.3.1 - PHP Object Injection vulnerabilityCVE-2026-54806Public exploit9.8 Critical
- crocoblock jetsearchWordPress JetSearch plugin <= 3.5.17 - SQL Injection vulnerabilityCVE-2026-49079Public exploit9.3 Critical
- androidIn Contacts Provider, there is a possible way to access the contacts database due to SQL...CVE-2026-28576Public exploit10.0 Critical
- google androidIn Package Manager, there is a possible device lock controller bypass due to a missing permission...CVE-2026-0092Public exploit10.0 Critical
- google androidIn overrideConfig of CarrierConfigLoader.java, there is a possible way to bypass UID check due to...CVE-2025-48617Public exploit7.8 High
- No product listedIn Citrix Cloud through 2025-11-10, an account with read-only access can trigger the beginning of...CVE-2025-66391Public exploit8.8 High
pdfkit Debianpdfkit: Path traversal in from_stringCVE-2025-26240Public exploitFix available8.4 High- gitea open source git serverGitea Basic Auth bypasses OAuth2 access token scopesCVE-2026-28699Public exploitFix available8.1 High
- Show moreLoading…