Skip to contentVulnerabilities with public exploits
- gitlab, gitlab community edition and enterprise edition +1 moreImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLabCVE-2026-85706In KEVPublic exploitFix availableEPSS 97.4%10.0 Critical
- linuxmm/pagewalk: fix stale walk->action escaping walk_pmd_range()CVE-2026-89754Public exploitFix available7.8 High
- linuxsmb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()CVE-2026-89633Public exploitFix available9.8 Critical
- linuxnet: tun: bound receive headroomCVE-2026-81000Public exploitFix available7.8 High
- spipSPIP < 4.4.18 Unauthenticated Blind SQL Injection via sitemap.xml.htmlCVE-2026-72708Public exploitFix available8.7 High
- dolibarrDolibarr 23.0.4 < 24.0.1 Authorization Bypass via hashp Parameter in document.phpCVE-2026-89013Public exploit8.7 High
- dolibarrDolibarr 24.0.0 < 24.0.1 SQL Filter Denylist Bypass via sqlfilters ParameterCVE-2026-89012Public exploit7.1 High
- schneider electric scadapack 32, scadapack 3xx, scadapack 470r +4 more +6 moreCWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of...CVE-2026-81861Public exploit5.9 Medium
- st engineering idirect 3315-series terminals, 9-series terminals, evolution iq‑series terminals +2 moreST Engineering iDirect iQ-Series Terminals Missing AuthorizationCVE-2026-38056Public exploit9.4 Critical
- craftcms cmsLow-privilege RCE through element-search eager loadingCVE-2026-79987Public exploit8.7 High
- knowns-dev knownsknowns before 0.31.0 External Control of Agent Working Directory via x-opencode-directory HeaderCVE-2026-88899Public exploit9.3 Critical
- traefikTraefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access loggingCVE-2026-88009Public exploitFix available8.8 High
- traefikTraefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect AuthorizationCVE-2026-88008Public exploitFix available7.0 High
- traefikTraefik v3.7.0 Authentication Bypass via from-to-www-redirectCVE-2026-88877Public exploit9.3 Critical
- cap-go capgo.appCapgo AAL1 Session MFA Bypass via Direct RBAC AuthorizationCVE-2026-88861Public exploit8.7 High
- palo alto networks checkov by prisma cloudCheckov by Prisma Cloud: Code Execution via Auto-Loaded Configuration FileCVE-2026-0303Public exploit2.4 Low
- unknown miniorange 2faminiOrange 2FA (Free & Pro) - 2FA Bypass via Session-Scoped OTP LockoutCVE-2026-77771Public exploit7.5 High
- unknown miniorange 2faminiOrange 2FA (Free & Pro) - Unauthenticated Arbitrary Option Deletion via Out-of-Band Email Link ValidatorCVE-2026-77770Public exploit10.0 Critical
- apache artemis, apache software foundation activemq artemis +1 moreApache Artemis, Apache ActiveMQ Artemis: Missing authentication on CORE protocol session reattachmentCVE-2026-57967Public exploit9.8 Critical
- add-ons.org drag and drop file upload for elementor formsDrag and Drop File Upload for Elementor Forms <= 1.6.0 - Unauthenticated Arbitrary File Upload via 'type' ParameterCVE-2026-18351Public exploit9.8 Critical
- No product listedFairSketch Rise CRM Version 3.9.6 is vulnerable to Cross Site Scripting (XSS). An authenticated...CVE-2026-36392Public exploit5.4 Medium
- No product listedPath Traversal in avatar attachments in Docmost v0.21.0 allows an unauthenticated malicious actor...CVE-2025-57231Public exploit7.5 High
- hewlett packard enterprise (hpe) clearpass policy manager (cppm)Unauthenticated Network-Based Denial of Service in CPPM systemsCVE-2026-73786Public exploit7.5 High
- maxsite cmsMaxSite CMS through 109.6 PHP Object Injection via ci_sessionCVE-2026-87930Public exploit9.2 Critical
- linuxBluetooth: ISO: fix use-after-free of listener socket in iso_conn_readyCVE-2026-80914Public exploitFix available8.8 High
- webpros cpanelA vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root...CVE-2026-67401Public exploit9.9 Critical
- tubitak bilgem software technologies research institute pardus lightdm greeterImproper Access Control Leading to Display Exposure in TÜBİTAK BİLGEM's Pardus LightDM GreeterCVE-2026-79617Public exploit7.1 High
- checkpoint quantum security gateway, check point multiple products, checkpoint gaia embedded +1 more +3 moreImproper Certificate Validation in Quantum Security GatewayCVE-2026-85102In KEVPublic exploitEPSS 54.1%9.8 Critical
- mrubycmrubyc through 4.0.0 NULL Pointer Dereference via OP_ENTERCVE-2026-86547Public exploit6.9 Medium
- newfold wp plugin bluehost, wp plugin crazy domains, wp plugin hostgator +2 more +4 moreVarious Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty SecretCVE-2026-80099Public exploit8.8 High
- samsung android, samsung mobile devices +1 moreHeap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026...CVE-2026-21096Public exploit9.2 Critical
- google chromeIncorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote...CVE-2026-87575Public exploitFix available5.4 Medium
- google chrome, chromium v8 +1 moreOut of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...CVE-2026-87491In KEVPublic exploitFix available8.8 High
- google chromeIncorrect authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote...CVE-2026-87492Public exploitFix available9.6 Critical
- No product listedSQL injection vulnerability in PbootCMS versions 3.2.0 through 3.2.5 allows an authenticated user...CVE-2026-79387Public exploit4.3 Medium
- n8nn8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript ExecutionCVE-2026-86076Public exploitFix available8.7 High
- microsoft windows, windows 11 version 23h2, windows 11 version 24h2 +8 more +10 moreWindows Update Stack Elevation of Privilege VulnerabilityCVE-2026-81963In KEVPublic exploit7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows Storage Elevation of Privilege VulnerabilityCVE-2026-69328Public exploit7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Cloud Files Mini Filter Driver Tampering VulnerabilityCVE-2026-83991Public exploit5.5 Medium
- microsoft authenticator, authenticator for android +1 moreMicrosoft Authenticator Elevation of Privilege VulnerabilityCVE-2026-80097Public exploit8.6 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Management Instrumentation Elevation of Privilege VulnerabilityCVE-2026-69451Public exploit7.1 High
- xenforoXenForo < 2.3.13 Path Traversal via Style Archive Importer on WindowsCVE-2026-74239Public exploit8.6 High
- xenforoXenForo < 2.3.13 Uncontrolled Recursion DoS via BBCode ParserCVE-2026-73321Public exploit7.1 High
- xenforoXenForo < 2.3.13 Unauthenticated Information Disclosure via Unfurl EndpointCVE-2026-73320Public exploit5.1 Medium
- xenforoXenForo < 2.3.13 XSS via Dynamic Redirect HandlerCVE-2026-73319Public exploit5.1 Medium
- xenforoXenForo < 2.3.13 Missing Authorization via force-agreement ControllerCVE-2026-73318Public exploit5.1 Medium
- xenforoXenForo < 2.3.13 Missing Authorization via ACP Cache-Rebuild DispatcherCVE-2026-73317Public exploit5.1 Medium
- xenforoXenForo < 2.3.13 Payment Replay via PayPal REST Payment ProviderCVE-2026-73316Public exploit8.7 High
- xenforoXenForo < 2.3.13 SSRF via PayPal REST Webhook HandlerCVE-2026-73315Public exploit7.7 High
- xenforoXenForo < 2.3.13 Signature Verification Bypass via PayPal REST WebhookCVE-2026-73314Public exploit8.7 High
- Show moreLoading…