Skip to contentVulnerabilities with public exploits
- rebeccastevens deepmerge-tsdeepmerge-ts: Stack exhaustion when merging recursive object graphsCVE-2026-40345Public exploitFix available8.2 High
- azuriom cmsAzuriom CMS Money Transfer ProfileController.php transferMoney toctouCVE-2026-19975Public exploit2.3 Low
- lb-link wr1210mLB-Link WR1210M Backup Endpoint backup.cgi main missing authenticationCVE-2026-19971Public exploit5.3 Medium
- linuxvhost: reset the vring metadata cache on vring reconfigurationCVE-2026-74580Public exploitFix available8.8 High
- No product listedAn issue in OSSRS SRS (Simple Realtime Server) <v5.0.213 allows a remote attacker to execute...CVE-2026-68004Public exploit9.8 Critical
- No product listedAn issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint...CVE-2026-67919Public exploit9.8 Critical
- No product listedA Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine...CVE-2026-38165Public exploit9.8 Critical
- phoca.cz phoca cart extension for joomlaJoomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6CVE-2026-74251Public exploit9.3 Critical
- sc0ttkclark pods – custom content types and fieldsPods <= 3.3.9 - Unauthenticated Privilege Escalation via Authorization Bypass to Admin Methods via 'pods_admin' AJAX RouterCVE-2026-19598Public exploit9.8 Critical
- lb-link x-proLB-LINK X-PRO shadow hard-coded credentialsCVE-2026-19900Public exploit9.2 Critical
- linuxsctp: prevent peer transport count overflowCVE-2026-74469Public exploitFix available8.8 High
- cozmoslabs user profile builder – beautiful user registration forms, user profiles & user role editorUser Profile Builder <= 3.16.4 - Unauthenticated Authentication Bypass via Type Confusion to Administrator Account Takeover via 'username' ParameterCVE-2026-15826Public exploit9.8 Critical
- linuxksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATECVE-2026-72422Public exploitFix available9.8 Critical
- linuxdibs: loopback: validate offset and size in move_data()CVE-2026-72018Public exploitFix available7.8 High
- microsoft malware protection engineMicrosoft Defender Elevation of Privilege VulnerabilityCVE-2026-69414Public exploit7.8 High
- mindsdb minds platformMindsDB Minds Platform v26.1.0 Unauthenticated RCE via scratchpad exec()CVE-2026-73678Public exploit10.0 Critical
- tenable security centerCommand InjectionCVE-2026-19681Public exploit9.4 Critical
- tenable security centerImproper Input ValidationCVE-2026-19679Public exploit8.7 High
- emlogEmlog: Missing CSRF protection in AI Assistant execute_tool leads to full database compromise and admin account takeoverCVE-2026-73847Public exploit6.8 Medium
- tenable security centerRemote Code ExecutionCVE-2026-19626Public exploit9.4 Critical
- apache strutsApache Struts: Unbounded read of a JSON request bodyCVE-2026-73633Public exploit7.5 High
- netis systems co., ltd. nc63 wireless ac1200 routerNetis NC63 V3.0.0.3327 Unauthenticated Firmware Update with Missing Cryptographic Firmware AuthenticationCVE-2026-73673Public exploit8.7 High
- gamerz wp-statsWP-Stats <= 2.56 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-19794Public exploit7.2 High
- pavex embed google photos albumEmbed Google Photos Album Easily <= 2.2.1 - Contributor+ Stored XSS via link Shortcode AttributeCVE-2026-14290Public exploit6.8 Medium
- freepbx ucp, sangoma freepbx +1 moreFreePBX UCP: Unauthenticated remote code execution via socket.io namespace auth bypass and AMI action injectionCVE-2026-73665Public exploit9.3 Critical
- freepbx missedcall, sangoma freepbx +1 moreFreePBX: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeoverCVE-2026-73663Public exploit9.3 Critical
- froiden worksuite saasWorksuite SaaS version prior to 6.0.14 Stored XSS via Asset Management Location and Description FieldsCVE-2026-18741Public exploit4.6 Medium
- zimbra collaboration, synacor zimbra collaboration suite +1 moreIn Zimbra Collaboration before 10.1.17, a local file inclusion (LFI) vulnerability exists in the...CVE-2026-73574Public exploit3.1 Low
- zimbra collaboration, synacor zimbra collaboration suite (zcs), zimbra collaboration suite +2 moreA remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when...CVE-2026-73570In KEVPublic exploitEPSS 76.6%8.9 High
- rsyncproject rsyncrsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive ParsingCVE-2026-70463Public exploitFix available8.6 High
- wpdirectorykit wp directory kitWordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerabilityCVE-2026-28001Public exploit9.3 Critical
- postgresqlPostgreSQL logical decoding can dlopen arbitrary fileCVE-2026-6471Public exploitFix available7.2 High
- postgresqlPostgreSQL to_char heap buffer overflow executes arbitrary codeCVE-2026-14669Public exploitFix available8.8 High
- postgresqlPostgreSQL tsvector and tsquery undersize allocations, via integer wraparoundCVE-2026-14662Public exploitFix available8.8 High
- iqonic design kivicareKiviCare < 4.5.2 - Unauthenticated Privilege Escalation via RegistrationCVE-2026-13610Public exploit7.5 High
- wolfsoftwaresystemsltd wolfstackWolfStack < 25.9.2 Hard-coded Secret Authentication Bypass via X-WolfStack-SecretCVE-2026-73519Public exploit9.3 Critical
- microsoft ufoMicrosoft UFO: Unauthenticated Mobile MCP access allows remote Android device control and screen disclosureCVE-2026-73296Public exploit9.4 Critical
- semaphoreui semaphoreSemaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmationCVE-2026-73292Public exploitFix available8.3 High
- jfrog artifactoryAuthenticated users may write data outside the intended Docker cache pathCVE-2026-66384In KEVPublic exploit5.3 Medium
- cal.com self-hosted (cal.diy)Cal.com Cal.diy 6.2.0 Stored XSS via BookingPageTagManager Analytics Tracking IDCVE-2026-57858Public exploit9.3 Critical
- pixelite events managerEvents Manager < 7.4.1 - Unauthenticated Privilege Escalation to AdministratorCVE-2026-18366Public exploit9.8 Critical
- eosphoros-ai db-gptDB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id HeaderCVE-2026-73034Public exploit9.3 Critical
- adobe commerce, commerce b2b, commerce and magento +3 more +5 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-71362In KEVPublic exploitFix availableEPSS 91.7%9.1 Critical
- microsoft exchange server, exchange server subscription edition, exchange server 2016 cumulative update 23 +3 more +5 moreMicrosoft Exchange Server Elevation of Privilege VulnerabilityCVE-2026-62911Public exploit8.0 High
- cisco secure firewall adaptive security appliance (asa) software, secure firewall threat defense (ftd) software, secure firewall threat defense +2 more +4 moreCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service VulnerabilityCVE-2026-20349In KEVPublic exploit8.6 High
- microsoft windows 10 version 22h2, windows 11 version 24h2, windows 11 version 25h2 +5 more +7 moreMicrosoft Windows Cross Device Service Elevation of Privilege VulnerabilityCVE-2026-66804Public exploit7.8 High
- microsoft windows ancillary function driver for winsock, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityCVE-2026-68820In KEVPublic exploit7.0 High
- microsoft sharepoint, sharepoint server, sharepoint enterprise server 2016 +2 more +4 moreMicrosoft SharePoint Server Remote Code Execution VulnerabilityCVE-2026-65660In KEVPublic exploit8.8 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows DNS Server Remote Code Execution VulnerabilityCVE-2026-62878Public exploit9.8 Critical
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreWindows Kernel Elevation of Privilege VulnerabilityCVE-2026-62737Public exploit7.8 High
- Show moreLoading…