Skip to contentVulnerabilities with public exploits
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlingCVE-2026-17633Public exploit8.5 High
- cisco catalyst sd-wan controller, catalyst sd-wan manager +1 moreCisco Catalyst SD-WAN Security Hardening Release - Input Validation VulnerabilitiesCVE-2026-20303Public exploit9.9 Critical
- cisco unified computing system (standalone), unified computing system +1 moreCisco Integrated Management Controller Argument Injection and Remote Code Execution VulnerabilityCVE-2026-20200Public exploit8.8 High
- cotontiCotonti CMS Comments Plugin PHP Object Injection via Unrestricted unserialize() in Create/Edit ActionsCVE-2026-71294Public exploit7.7 High
- zbtlink cpe2801 firmware, we1026-5g-wd firmware, we1326 firmware +17 more +19 moreENDLESSDOORS: Zbtlink Router rctl/kworker Phone-Home Root ImplantCVE-2026-66747Public exploit9.3 Critical
- mlflowmlflow - Unvalidated Gateway Secret api_base Enables SSRF via Gateway Proxy EndpointCVE-2026-71211Public exploit7.1 High
- go-shiori shiorishiori - JWT CheckToken Never Re-Validates Account State, Allowing Stale-Privilege Access After Deletion or DemotionCVE-2026-71206Public exploit8.2 High
- dgtlmoon changedetection.iochangedetection.io - No Rate Limiting on /login Enables Unlimited Password Brute-ForceCVE-2026-71205Public exploit6.5 Medium
- dgtlmoon changedetection.iochangedetection.io - Omitted Checkbox in /settings Save Silently Disables API Key EnforcementCVE-2026-71204Public exploit6.3 Medium
- dgtlmoon changedetection.iochangedetection.io - Missing Authentication on /api/v1/full-spec Discloses Full OpenAPI SchemaCVE-2026-71203Public exploit5.3 Medium
- pluck cms cms, pluck-cms pluck cms +1 morePluck CMS - CSRF via Spoofable Missing-Referer Bypass Leads to Stored XSS and RCECVE-2026-70376Public exploit9.6 Critical
- seraphinitesoft seraphinite acceleratorSeraphinite Accelerator <= 2.29.18 - Reflected Cross-Site ScriptingCVE-2026-17532Public exploit6.1 Medium
- supsysticcom smart popup by supsysticSmart Popup by Supsystic <= 1.12.0 - Unauthenticated Privilege Escalation to AdministratorCVE-2026-18322Public exploit8.8 High
- No product listedZosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control. The application contains...CVE-2025-70962Public exploit7.5 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Any member with write access to a standard channel can edit or delete other members' messagesCVE-2026-70481Public exploitFix available5.4 Medium
- aws amazon bedrock agentcore harnessInsufficient input validation in Amazon Bedrock AgentCore harness InvokeHarness APICVE-2026-18830Public exploit8.6 High
- flowiseai flowiseFlowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)CVE-2026-69263Public exploitFix available8.7 High
- samsung open source oneA vulnerability allowing remote unauthenticated code execution on the agent host.CVE-2026-64633Public exploit10.0 Critical
- veeam service provider consoleA vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to...CVE-2026-58073Public exploit9.5 Critical
- flowiseai flowiseFlowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions OverrideCVE-2026-69254Public exploitFix available9.4 Critical
- cinnamon kotaemonkotaemon 0.12.0 Unauthenticated Remote Code Execution via Insecure DeserializationCVE-2026-69098Public exploit9.3 Critical
- bos ip cameraPuwell IP Camera 2.x - 4.x Unauthenticated Command Injection via DebugShellCVE-2026-61515Public exploit9.3 Critical
- linux, linux kernel +1 moresctp: don't free the ASCONF's own transport in DEL-IP processingCVE-2026-64564Public exploitFix available9.8 Critical
- linux, linux kernel +1 morerhashtable: clear stale iter->p on table restartCVE-2026-64563Public exploitFix available7.8 High
- zyxel wax650s firmwareAn improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S...CVE-2026-8508Public exploit6.5 Medium
- zyxel wax650s firmwareA post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel...CVE-2026-6837Public exploit7.2 High
- clearfoundation clearosClearOS 7.9 OS Command Injection via Log Viewer filter parameterCVE-2026-67599Public exploit8.6 High
- emlogEmlog Pro 2.6.23 TLS Certificate Validation Disabled in ai.phpCVE-2026-67598Public exploit9.1 Critical
- national security agency ghidraGhidra Swift Demangler Analyzer Arbitrary Code Execution via Project StateCVE-2026-18718Public exploit7.1 High
- krayin laravel-crmKrayin CRM 2.2.4 Missing Authentication via install/api/admin-config-setupCVE-2026-41452Public exploit9.3 Critical
- wellbia xigncode3CVE-2026-15430CVE-2026-15430Public exploit6.2 Medium
- siyuan-note siyuanSiYuan before v3.7.3 SQL Injection via searchEmbedBlockCVE-2026-69084Public exploitFix available9.9 Critical
- siyuan-note siyuanSiYuan before v3.7.3 SQL Injection via fullTextSearchAssetContentCVE-2026-69083Public exploitFix available9.9 Critical
- checkpoint multi-domain security management server, security management server +1 moreAuthentication Bypass in Check Point Security Management ServerCVE-2026-18574Public exploit9.3 Critical
- sharp corporation mfps, toshiba tec corporation tec mfps +1 moreSharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with...CVE-2026-63563Public exploit6.9 Medium
- papercut ng/mfPaperCut NG/MF: User enumeration via timing attackCVE-2026-8794Public exploit6.9 Medium
- papercut ng/mfPaperCut NG/MF: Insufficient brute-force protectionCVE-2026-8793Public exploit6.9 Medium
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreStapled OCSP response accepted without binding to the checked certificateCVE-2026-58062Public exploitFix available9.3 Critical
- No product listedAn OS command injection vulnerability in the openmediavault-md plugin of OpenMediaVault v8.0.4-1...CVE-2026-52102Public exploit9.8 Critical
- No product listedosTicket v1.18.3 is vulnerable to Stored Cross-Site Scripting (XSS) via the email From-header...CVE-2026-38444Public exploit6.1 Medium
- n-able n-centralIncomplete patch leads to administrative account takeoverCVE-2026-18577In KEVPublic exploitEPSS 14.6%8.2 High
- laughingman7743 pyathenaPyAthena SQL Injection via DefaultParameterFormatter DELETE/CTASCVE-2026-65321Public exploitFix available9.3 Critical
- go-vikunja vikunjaVikunja 0.24.0 Broken Object Level Authorization via Link-Share TokenCVE-2026-68582Public exploitFix available9.3 Critical
- nsquared simply schedule appointmentsSimply Schedule Appointments < 1.6.12.6 - Unauthenticated Appointment Data Disclosure and Mass Deletion via purge EndpointCVE-2026-16540Public exploit7.5 High
- keras-team keras-team/kerasImproper Handling of HDF5 ExternalLinks in keras-team/kerasCVE-2026-9335Public exploitFix available6.5 Medium
- n-able n-centralUnauthenticated administrative account takeoverCVE-2026-18556In KEVPublic exploitEPSS 43.9%8.2 High
- britcoder single sign on for tngSingle Sign On For TNG <= 2.0.0 - Unauthenticated Privilege Escalation via Unverified Password ChangeCVE-2026-15964Public exploit9.8 Critical
- nodejs nodeA flaw in Node.js HTTP/2 handling allows `nghttp2_session_mem_send()` to be called re-entrantly...CVE-2026-56848Public exploitFix available7.5 High
- unknown yop poll, yop poll +1 moreYOP Poll < 7.0.6 - Unauthenticated Vote Restriction Bypass via IP Header SpoofingCVE-2026-14840Public exploit5.3 Medium
- unknown theme demo importTheme Demo Import <= 1.1.3 - Admin+ Arbitrary File UploadCVE-2026-13157Public exploit7.2 High
- Show moreLoading…