Skip to contentVulnerabilities with public exploits
- unknown everest toolkitEverest Toolkit <= 1.2.3 - Admin+ Arbitrary File UploadCVE-2026-13158Public exploit7.2 High
- comfy-org comfyuiComfyUI 0.23.0 Unauthenticated RCE via LoadTrainingDataset Pickle DeserializationCVE-2026-68771Public exploit9.3 Critical
- webpros cpanel, wp squared +1 moreImproper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in...CVE-2026-58048Public exploit9.4 Critical
- pterodactyl wingsWings: Maliciously crafted packet during SFTP connection handshake causes denial of serviceCVE-2026-52856Public exploitFix available7.5 High
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: RCE via backslash-escape mismatch in Import/Export Data query guard (incomplete defense, sibling gap to CVE-2025-13780)CVE-2026-17566Public exploit9.4 Critical
- nodejs nodeA flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger a reachable assertion in...CVE-2026-58045Public exploitFix available6.2 Medium
- nodejs nodeA flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding...CVE-2026-58044Public exploitFix available3.7 Low
- nodejs nodeA flaw in Node.js can cause dns.resolveAny() Aborts the Node.js Process When a DNS Response...CVE-2026-58042Public exploitFix available5.9 Medium
- nodejs nodeA flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSync...CVE-2026-58041Public exploitFix available5.3 Medium
- nodejs nodeA flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory...CVE-2026-56846Public exploitFix available7.5 High
- realtyna organic idx plugin + wpl real estate, unknown realtyna organic idx plugin + wpl real estate +1 moreRealtyna Organic IDX plugin + WPL Real Estate <= 5.2.0 - Unauthenticated Arbitrary File Upload via 'files[file]' Parameter via Public I/O 'set_property' CommandCVE-2026-14483Public exploit9.8 Critical
- codeigniter4CodeIgniter: Uploaded file extension validation bypass in is_image and mime_in rulesCVE-2026-63223Public exploitFix available9.8 Critical
- nodejs nodeA flaw in Node.js Permission Model enforcement allows process.report writes (and overwrites)...CVE-2026-58039Public exploitFix available3.3 Low
- No product listedAn issue in the parseGoosePayload() function (/goose/goose_receiver.c) of libiec61850 v1.6 allows...CVE-2026-52134Public exploit9.8 Critical
- tugcantopaloglu openclaw-dashboard, openclaw agent dashboard +1 moreOpenClaw Dashboard Stored XSS via lastMessage Session FieldCVE-2026-66421Public exploit8.8 High
- tugcantopaloglu openclaw-dashboard, openclaw agent dashboard +1 moreOpenClaw Dashboard v3.0.0 Stored XSS via Failed Login Username FieldCVE-2026-66418Public exploit9.3 Critical
- wolfcmsWolf CMS 0.8.3.1 Authenticated RCE via FileManagerController File UploadCVE-2026-67206Public exploit8.7 High
- railsAction Pack: Possible arbitrary file read and remote code execution in Active Storage variant processingCVE-2026-66066Public exploitFix availableEPSS 32.9%9.5 Critical
- ibm webmethods integration (on prem), webmethods integration +1 moreIBM webMethods Integration could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted dataCVE-2026-12118Public exploit9.8 Critical
- ibm langflow oss, langflow +1 moreLangflow is affected by remote code execution due to multiple unauthenticated and insufficiently authorized API endpointsCVE-2026-12940Public exploit9.8 Critical
- apache kyuubiApache Kyuubi: REST batch multipart upload path traversal allows controlled file writeCVE-2026-52680Public exploit9.8 Critical
- apache zeppelinApache Zeppelin: Cross-site request forgery in REST and WebSocket request handlingCVE-2026-44613Public exploit6.1 Medium
- broadcom vmware vcenter, vmware vcenter, cloud foundation +4 more +6 morevCenter directory-traversal vulnerabilityCVE-2026-59310In KEVPublic exploitEPSS 61.7%9.8 Critical
- phpOut-of-bounds write in bccomp() via crafted operand and scaleCVE-2026-17544Public exploitFix available8.1 High
- phpSQL injection in ext-pgsql via E'...' backslash breakoutCVE-2026-17543Public exploitFix available8.1 High
- nodejs node, node.js +1 moreA flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree...CVE-2026-58043Public exploitFix available7.5 High
- nodejs node, node.js +1 moreA flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions,...CVE-2026-56850Public exploitFix available4.1 Medium
- nodejs node, node.js +1 moreA flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()`...CVE-2026-56847Public exploitFix available3.3 Low
- nodejs nodeAn incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname...CVE-2026-58040Public exploitFix available6.3 Medium
- broadcom spring tools, spring tools for eclipse, tools for vscode / cursor / theia +2 morelive information startup mode is vulnerable for remote code executionCVE-2026-47858Public exploit8.0 High
- webreinvent vaahcmsVaahCMS 2.0.0 - 2.3.4 Malicious JavaScript Supply Chain via security-otp.blade.phpCVE-2026-67595Public exploit9.2 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreposix-cpu-timers: Prevent UAF caused by non-leader exec() raceCVE-2026-64560Public exploitFix available7.8 High
- widgetfactorylimited jce, joomlacontenteditor.net joomla content editor (jce) extension for joomla +1 moreJoomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.9.99.10CVE-2026-65891Public exploit6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreBinutils: binutils: out-of-bounds write in bfd dlx elf backend relocation processingCVE-2026-18220Public exploit7.8 High
- aimy-extensions aimy captcha-less form guard, aimy-extensions.com aimy captcha-less form guard plugin for joomla +1 moreJoomla Extension - aimy-extensions.com - RCE via PHP object injection in Aimy Captcha-Less Form Guard 18.0 - 20.0CVE-2026-65883Public exploit10.0 Critical
- stylemixthemes cost calculator builder proCost Calculator Builder PRO <= 4.0.3 - Unauthenticated Remote Code Execution via 'orderDetails' ParameterCVE-2026-14900Public exploit9.8 Critical
- apache apache-airflow-providers-fab, apache software foundation airflow fab provider +1 moreApache Airflow FAB provider: FAB auth manager: JWT signature verification disabled by default for Azure AD OAuth (`verify_signature` defaults to `False`)CVE-2026-59243Public exploit9.8 Critical
- apache traffic serverApache Traffic Server: Untrusted @ headers can spoof ATS internal metadataCVE-2026-33267Public exploit7.7 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreCriu: criu: container escape via rseq critical section hijack during checkpoint/restoreCVE-2026-18107Public exploitFix available7.8 High
- generalsandman tinywebTinyWeb 0.0.8 Path Traversal via URL Path ComponentCVE-2026-67185Public exploit8.7 High
- generalsandman tinywebTinyWeb 0.0.8 Null Pointer Dereference DoS via Malformed HTTP RequestCVE-2026-67184Public exploit8.7 High
- generalsandman tinywebTinyWeb 0.0.8 Memory Leak DoS via HTTP Request HandlingCVE-2026-67183Public exploit8.7 High
- tomaka rouilleRouille 0.3.3 - 3.6.2 HTTP Request Smuggling via proxy Header InjectionCVE-2026-67182Public exploit6.9 Medium
- tomaka rouilleRouille 0.3.3 - 3.6.2 HTTP Request Smuggling via proxy Transfer-Encoding HeaderCVE-2026-67181Public exploit6.3 Medium
- tomaka rouilleRouille 0.4.0 - 3.6.2 HTTP Response Splitting via Header InjectionCVE-2026-66746Public exploit5.3 Medium
- tomaka rouilleRouille 0.1.6 - 3.6.2 Reachable Assertion DoS via remove_prefix percent-encodingCVE-2026-66754Public exploit8.2 High
- tiny-httptiny-http 0.12.0 HTTP Response Splitting via Header InjectionCVE-2026-66753Public exploit6.3 Medium
- tiny-httptiny-http 0.12.0 HTTP Request Smuggling via Transfer-Encoding HandlingCVE-2026-66752Public exploit6.3 Medium
- sdelements lets-chatLet's Chat 0.3.0 - 0.4.8 Improper Authorization via DELETE /rooms/:roomCVE-2026-66751Public exploit5.3 Medium
- sdelements lets-chatLet's Chat 0.3.0 - 0.4.8 Broken Access Control File Disclosure via GET /files routeCVE-2026-66750Public exploit5.3 Medium
- Show moreLoading…