Skip to contentVulnerabilities with public exploits
- cakephp, cakephp cakephp/database +1 moreCakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriverCVE-2026-77635Public exploitFix available9.2 Critical
- rocq-prover rocqRocq Prover through 9.2.0 Universe Checking State Desynchronised After Module CloseCVE-2026-72714Public exploit6.8 Medium
- leanprover lean4Lean 4 before 4.32.2 Kernel Accepts Opaque Declaration With an Unbound Free VariableCVE-2026-72711Public exploit6.8 Medium
- rocq-prover rocqRocq Prover before 9.2.0 Guard Checker Accepts Fixpoint Passed as a Higher-Order ArgumentCVE-2026-72705Public exploit6.8 Medium
- rocq-prover rocqRocq Prover through 9.2.0 Guard Checker Trusts Corrupted Recursive Tree After TransportCVE-2026-72704Public exploit6.8 Medium
- rocq-prover rocqRocq Prover 8.20 before 9.2.0 Guard Checker Accepts Non-Terminating Fixpoint via Unchecked Cross-CallsCVE-2026-72703Public exploit6.8 Medium
- rocq-prover rocqCoq and Rocq Prover Print Assumptions Omits Unsafe Universe Checking Inlined Through Parameter InlineCVE-2020-37268Public exploit6.8 Medium
- tp-link systems inc. archer be800 v1Command Injection Vulnerability in VPN connection of Archer BE800CVE-2026-16348Public exploit8.5 High
- tp-link systems inc. archer be800 v1, archer ax75 v1, archer be3600 v1 +2 moreCommand Injection Vulnerability in Parent Control of Multiple TP-Link Archer DevicesCVE-2026-9254Public exploit8.7 High
- tp-link systems inc. deco xe75 v3 / xe5300 v3.6/ we10800 v3.6Hard-coded Mesh Group Private Key in TP-Link Deco XE75, XE5300, and WE10800CVE-2026-15469Public exploit7.7 High
- apache camelApache Camel: Camel-Undertow: the endpoint discarded the undertow-specific header filter strategy in favour of the base HTTP one, so the undertow filtering never ran on endpoint-configured routesCVE-2026-78329Public exploitFix available9.8 Critical
- apache camelApache Camel: Camel-Atmosphere-Websocket: WebSocket dispatch header injectionCVE-2026-71300Public exploitFix available9.8 Critical
- apache camelApache Camel: Camel-Knative: CloudEvent extension fields received in structured content mode were mapped onto message headers without applying any header filter strategyCVE-2026-63621Public exploitFix available5.3 Medium
- apache camelApache Camel: Camel-platform-http-main: when JWT authentication was configured with a keystore but no issuer or audience, the iss and aud claims were never validated, so any unexpired token signed by…CVE-2026-66908Public exploitFix available7.5 High
- apache camelApache Camel: Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without constraining the resultCVE-2026-66907Public exploitFix available7.5 High
- apache camelApache Camel: Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDirCVE-2026-66906Public exploitFix available9.1 Critical
- apache camelApache Camel: Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDirCVE-2026-60093Public exploitFix available5.5 Medium
- apache camelApache Camel: Camel-Mail: the MimeMultipart data format copied MIME headers onto the Camel message without a header filter strategy when unmarshalling with headersInline enabledCVE-2026-59230Public exploitFix available6.5 Medium
- netis systems nc63Netis NC63 V3.0.0.3327 Stack Buffer Overflow via destHost ParameterCVE-2026-76071Public exploit9.3 Critical
- netis systems nc63Netis NC63 V3.0.0.3327 Stack Buffer Overflow via Login Password ParameterCVE-2026-76070Public exploit9.3 Critical
- konami metal gear online 3Konami's Metal Gear Online 3 contains a heap-based buffer overflowCVE-2026-19874Public exploit9.1 Critical
- bytebot-ai bytebotbytebot-ai bytebot Agent Execution Workflow infinite loopCVE-2026-78250Public exploit5.3 Medium
- dji air 3, air 3s, avata 2 +13 more +15 moreDJI Drone Bluetooth Interface Unauthenticated DUML Command ExecutionCVE-2026-78306Public exploit8.5 High
- gitlabImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLabCVE-2026-10053Public exploitFix available8.5 High
- tecnativa docker-socket-proxydocker-socket-proxy through 0.5.0 Insufficient Access Control Granularity Exposes Container FilesystemsCVE-2026-78122Public exploit8.3 High
- linuxovpn: skip rehash for peers already removed from by_idCVE-2026-74727Public exploitFix available9.8 Critical
- linuxsctp: clear new_transport when removing a peerCVE-2026-74586Public exploitFix available9.8 Critical
- joomgalleryfriends.net joomgallery extension for joomlaJoomla Extension - joomgalleryfriends.net - Password-Protected Category Bypass via JSON Format in JoomGallery < 4.4.0CVE-2026-66916Public exploit6.9 Medium
- joomgalleryfriends.net joomgallery extension for joomlaJoomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0CVE-2026-66917Public exploit8.6 High
- runtipiRuntipi: Authenticated arbitrary file write via backup restore symlink plantingCVE-2026-55168Public exploit6.5 Medium
- geotoolsGeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layersCVE-2026-76904Public exploitFix available9.8 Critical
- j2commerce.com j2store extension for joomlaJoomla Extension - j2commerce.com - Stored XSS in Guest checkout in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5CVE-2026-74252Public exploit8.6 High
- j2commerce.com j2store extension for joomlaJoomla Extension - j2commerce.com - Download quota manipulation in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5CVE-2026-67358Public exploit5.3 Medium
- linuxnet/sched: cls_route: fix fastmap use-after-free on filterCVE-2026-74583Public exploitFix available7.8 High
- dji air 3, air 3s, avata 2 +13 more +15 moreCleartext Exposure of DJI Drone Wi-Fi Credentials via BLECVE-2026-77812Public exploit9.4 Critical
- spipSPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as...CVE-2026-77806Public exploitFix available9.8 Critical
- unknown newpath wildapricotpress add-onNewPath WildApricotPress Add-on – Member Directory <= 1.0.0 - Unauthenticated Member PII Disclosure via REST APICVE-2026-13736Public exploit5.3 Medium
- canonical apportPath Traversal Vulnerability in apport-unpackCVE-2026-77113Public exploitFix available6.7 Medium
- spipSPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as...CVE-2026-77647Public exploitFix available9.8 Critical
- microsoft entra id, entra +1 moreMicrosoft Entra ID Remote Code Execution VulnerabilityCVE-2026-69836Known exploitedPublic exploit10.0 Critical
- merit lilin v1, tp-link dr3150 firmware, dr3220v-4g firmware +34 more +36 morePre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada GatewaysCVE-2026-19586Public exploit9.3 Critical
- leanprover lean4Lean 4 Kernel Type Checking Bypass via Mismatched Structure ProjectionsCVE-2026-72844Public exploit6.8 Medium
- apache inlongApache InLong: SQL Injection via Unvalidated MyBatis Dollar-Sign Interpolation in AuditAlertRuleServiceCVE-2026-63039Public exploit9.8 Critical
- baylan measuring instruments industry and trade inc. smart meter management application (bms)Missing Authentication for Critical Function in Management API in Baylan Water Meters's BMSCVE-2026-15706Public exploit9.8 Critical
- phoca.cz phoca cart extension for joomlaJoomla Extension - phoca.cz - Stored XSS via User-Agent header in Admin Order View in Phoca Cart 5.0.0-6.1.7CVE-2026-76564Public exploit8.6 High
- phoca.cz phoca download extension for joomlaJoomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4CVE-2026-76569Public exploit5.3 Medium
- phoca.cz phoca cart extension for joomlaJoomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7CVE-2026-76565Public exploit5.3 Medium
- tp-link systems inc. archer c20 v6, tp-link archer c20 firmware +1 moreCommand Injection in Router Web Management InterfaceCVE-2026-75616Public exploit8.5 High
- themetechmount truebooker – appointment booking and scheduler systemTrueBooker <= 1.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover to 'truebooker_wp_user_id' ParameterCVE-2026-18315Public exploit9.8 Critical
- elementor proWordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerabilityCVE-2026-32475Public exploit9.0 Critical
- Show moreLoading…