Skip to contentVulnerabilities with public exploits
- xenforoXenForo < 2.3.13 MFA Bypass via Passkey TFA ProviderCVE-2026-73313Public exploit7.6 High
- xenforoXenForo < 2.3.13 Refresh Token Replay via Expired Access TokenCVE-2026-73312Public exploit9.1 Critical
- xenforoXenForo < 2.3.13 OAuth2 Authorization Code ReuseCVE-2026-73311Public exploit9.1 Critical
- xenforoXenForo < 2.3.13 OAuth2 Authorization Code Token Theft via redirect_uri BypassCVE-2026-73310Public exploit8.2 High
- xenforoXenForo < 2.3.13 Authentication Bypass via OAuth2 Token EndpointCVE-2026-73309Public exploit9.1 Critical
- No product listedA reflected cross-site scripting (XSS) vulnerability in the grid_datasource.php component of...CVE-2026-78838Public exploit6.5 Medium
- No product listedA SQL injection vulnerability in the ap_form_{id} parameter in AppNitro MachForm v30 allows...CVE-2026-78837Public exploit7.5 High
- No product listedAn authenticated stored cross-site scripting (XSS) vulnerability in the Column Management...CVE-2026-52307Public exploit5.4 Medium
- adobe commerce, commerce b2b, commerce and magento +3 more +5 moreAdobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)CVE-2026-75650In KEVPublic exploitFix availableEPSS 99.4%10.0 Critical
- jetbrains youtrackIn JetBrains YouTrack before 2025.3.161254,
2026.1.14042 improper authentication in YouTrack...CVE-2026-86478Public exploit9.8 Critical
- red hat directory server 11, directory server 11.5 e4s for rhel 8, directory server 11.7 e4s for rhel 8 +13 more +15 more389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editorCVE-2026-19843Public exploitFix available8.4 High
- librenmsLibreNMS before 26.8.0 Authentication Bypass via API Token Type ConfusionCVE-2026-86426Public exploit9.2 Critical
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +12 more +14 moreIpa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aciCVE-2026-76578Public exploit9.8 Critical
- mediatek, inc. mediatek chipsetIn MiracastService, there is a possible escalation of privilege due to a confused deputy. This...CVE-2026-20516Public exploit5.5 Medium
- mispMISP UiBeta Collection View Bypasses Event ACL, Exposing Unauthorized Event DataCVE-2026-86283Public exploit7.1 High
- thu-maic openmaicOpenMAIC before 1.0.1 SSRF via Environment-Gated URL ValidationCVE-2026-86259Public exploit9.0 Critical
- shabti frontend admin by dynamiappsFrontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Account Takeover via '_acf_objects' Object IdentifierCVE-2026-75816Public exploit9.8 Critical
- n-able n-centralpre-authentication remote code executionCVE-2026-86218In KEVPublic exploitEPSS 15.4%10.0 Critical
- mikrotik routerosSSH session privilege manipulation via a crafted username in Mikrotik RouterOSCVE-2026-86060In KEVPublic exploit9.2 Critical
- mikrotik routerosUnauthenticated file read in Mikrotik RouterOSCVE-2026-67281Public exploit8.7 High
- mikrotik routerosSSH Pre-Authentication Rekey State Bypass in MikroTik RouterOSCVE-2026-67279In KEVPublic exploitFix available6.9 Medium
- mikrotik routerosSSH user impersonation possible in Mikrotik RouterOSCVE-2026-67276Known exploitedPublic exploit9.2 Critical
- getwpfunnels mail mint – email marketing, newsletter, email automation & woocommerce emailsMail Mint <= 1.31.0 - Unauthenticated PHP Object Injection in Arbitrary Form FieldsCVE-2026-10196Public exploit9.8 Critical
- inspireui mstore api – create native android & ios apps on the cloudMStore API <= 4.20.0 - Unauthenticated Authentication Bypass via 'id_token' Parameter JWT ForgeryCVE-2026-13447Public exploit9.8 Critical
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 moreLibtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksizeCVE-2026-85769Public exploitFix available6.5 Medium
- linuxxfrm: ah6: validate routing header segments_leftCVE-2026-80844Public exploitFix available7.3 High
- voltronic power snmp web proVoltronic Power SNMP Web Pro 1.1 Unauthenticated RCE via upload.cgiCVE-2026-44402Public exploit9.3 Critical
- linuxfutex: Fix race on the initial mm->futex.phash.ref allocationCVE-2026-80775Public exploitFix available7.3 High
- crcn sift.jssift 17.1.3 Prototype Pollution Remote Code Execution via $whereCVE-2026-85625Public exploit9.2 Critical
- yordam information technology consulting, training and electronic systems industry and trade inc. library information and document automation programReflected HTML Injection via Form Hijacking in Yordam Informatics's Library Automation SystemCVE-2026-77818Public exploit6.1 Medium
- chewkeanho software-actualizer(Holloway) Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the Alpha user and root user password loops of Shell/debian-minbase-install.sh. The i…CVE-2026-85649Public exploit7.9 High
- openpanel-dev openpanelOpenPanel before 2.3.0 SSRF via favicon and og endpointsCVE-2026-85612Public exploit8.7 High
- traefikTraefik before v2.11.55 and v3.0.0 through v3.7.10 Authentication Bypass via digestAuthCVE-2026-85595Public exploit9.3 Critical
- divi engine ajax filterDivi Ajax Filter <= 5.1.2 - Unauthenticated Local File Inclusion via 'custom_loop_template' ParameterCVE-2026-11613Public exploit9.8 Critical
- strukturag libheiflibheif: Heap buffer overflow in `scale_nearest_neighbor()` via duplicate Alpha planes from nested `iden`/`auxl` itemsCVE-2026-84383Public exploitFix available9.8 Critical
- No product listedAn arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute...CVE-2026-78839Public exploit8.1 High
- No product listedAn issue in HiDPT/ Weyon HiDPTAndroid Hi3751V350 Hi3751V352E_DMO allows a remote attacker to...CVE-2026-78745Public exploit9.8 Critical
- No product listedPowerJob Server version 5.1.2 (and likely earlier) uses a predictable JWT signing key for HS256...CVE-2026-75431Public exploit9.1 Critical
- No product listedPowerJob Worker version 5.1.2 (and likely earlier versions) exposes the /worker/deployContainer...CVE-2026-75430Public exploit9.8 Critical
- No product listedPowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution...CVE-2026-75429Public exploit9.8 Critical
- No product listedIn Trimble TM4WEB 21.4.0.4, the external bill viewer endpoint is vulnerable to reflected cross...CVE-2022-35499Public exploit7.1 High
- No product listedIn Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is...CVE-2022-35497Public exploit5.4 Medium
- google chromeUse after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker...CVE-2026-85048Public exploitFix available8.3 High
- google chromeRace condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute...CVE-2026-85045Public exploitFix available7.5 High
- google chrome, v8, chromium v8 +2 moreType confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute...CVE-2026-85046In KEVPublic exploitFix available8.8 High
- unknown mail mintWordPress Mail Mint plugin <= 1.31.0 - PHP Object Injection vulnerabilityCVE-2026-84753Public exploit9.8 Critical
- nousresearch hermes-agentHermes Agent 0.18.2 - 0.21.0 RCE via git core.fsmonitor Config InjectionCVE-2026-71963Public exploit8.6 High
- n8nn8n before 1.123.73 Remote Code Execution via Git NodeCVE-2026-85168Public exploit7.7 High
- pydantic httpx2HTTPX2: Conflicting Content-Length and Transfer-Encoding headers can be auto-generatedCVE-2026-84380Public exploitFix available5.6 Medium
- cisco nx-os softwareCisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution VulnerabilityCVE-2026-20212Public exploit9.8 Critical
- Show moreLoading…