Skip to contentVulnerabilities with public exploits
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilitiesCVE-2026-93674Public exploitEPSS 15.3%9.8 Critical
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilitiesCVE-2026-104335Public exploit8.8 High
- yawkat lz4-javayawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local userCVE-2026-106451Public exploitFix available7.3 High
- handlebars-lang handlebars.jsHandlebars: JavaScript Injection via Own Property Check BypassCVE-2026-106445Public exploitFix available9.2 Critical
- google chromePrivilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote...CVE-2026-106378Public exploitFix available8.3 High
- tp-link systems inc. tapo c500 v2.0Authenticated ONVIF PTZ Out-of-Bounds Stack Write Denial of Service in TP-Link Tapo C500CVE-2026-104945Public exploit6.8 Medium
- tp-link systems inc. tapo c500 v2.0Unauthenticated TDP Function Pointer Dispatch Denial of Service in TP-Link Tapo C500CVE-2026-104944Public exploit7.1 High
- payloadcms payloadPayload: RCE in Payload Form BuilderCVE-2026-105857Public exploitFix available10.0 Critical
- @payloadcms plugin-import-export, payloadcms payload +1 morePayload: Prototype pollution in Payload Import Export pluginCVE-2026-105844Public exploitFix available9.3 Critical
- modelcontextprotocol typescript-sdkMCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP serverCVE-2026-104850Public exploitFix available7.5 High
- getformwork formworkgetformwork URI Sanitizer DomSanitizer.php sanitizeNodeAttribute cross site scriptingCVE-2026-105950Public exploit5.1 Medium
- smarty-php smartySmarty before 4.5.8 and 5.x before 5.8.5 PHP Code Injection via extends: Inheritance CacheCVE-2026-82531Public exploitFix available9.2 Critical
- linuxexec: Cleanup POSIX timers right after de_thread()CVE-2026-98260Public exploitFix available7.8 High
- linuxposix-cpu-timers: Prevent freeing a timer which is queued on the expiry listCVE-2026-98258Public exploitFix available7.8 High
- linuxsignal: Prevent exec() raceCVE-2026-98256Public exploitFix available7.8 High
- linuxdrm/msm: RCU-free the scheduler-containing ring and VM objectsCVE-2026-98180Public exploitFix available7.1 High
- cloud foundry uaa, cf-deployment +1 moreUAA OAuth Token Endpoint Vulnerability allows user access token reuse for client_credentials grant typeCVE-2026-59358Public exploit7.6 High
- totolink x6000rTOTOLINK X6000R UploadFirmwareFile cstecgi.cgi firmware_check os command injectionCVE-2026-105484Public exploit10.0 Critical
- No product listedDbit WIFI4 N300 1.0.0 devices allows administrators (from the local Wi-Fi network) to execute OS...CVE-2025-71384Public exploit6.7 Medium
- langgenius difyDify: IDOR in AppMCPServer PUT Endpoint Allows Modification of Other Apps' MCP ServersCVE-2026-105761Public exploit7.1 High
- atlassian bamboo, bamboo data center, bitbucket data center +14 more +16 moreh3. Summary
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira...CVE-2026-21589In KEVPublic exploitEPSS 99.7%9.3 Critical
- newell brands dymo idNewell Brands DYMO ID parent directory open to path traversal through improper spheres of controlCVE-2026-102262Public exploit7.0 High
- langflow-ai langflow, langflow-base, lfx +2 moreLangflow: OS command injection (RCE) via arbitrary command in MCP stdio server configurationCVE-2026-105697Public exploitFix available9.9 Critical
- apache strutsApache Struts: OGNL injection in the legacy RESTful action mapperCVE-2026-104711Public exploit9.8 Critical
- neorazorx facturascriptsFacturaScripts < 2026.7 PHP Object Injection via WidgetSelectCVE-2026-104905Public exploit6.1 Medium
- ordasoft joomla cck, ordasoft.com ordasoft joomla cck +1 moreJoomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16CVE-2026-102428Public exploit9.3 Critical
- the document foundation libreofficeRCE via calcext:data-mappings, sql provider and jdbc connectorCVE-2026-63277Public exploitFix available8.5 High
- papermergePapermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a ...CVE-2026-105314Public exploit7.5 High
- red hat build of keycloak, single sign-on 7 +1 moreKeycloak-services: keycloak-services: token introspection audience bypass via dynamic client registrationCVE-2026-105306Public exploit6.5 Medium
- defunkt gistGist RubyGem before 6.1.0 Disabled TLS Certificate VerificationCVE-2026-105221Public exploit9.1 Critical
- unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates) +1 moreWordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerabilityCVE-2026-103355Public exploit9.3 Critical
- unknown user private filesUser Private Files < 2.2.0 - Unauthenticated Private File Disclosure via .htaccess Rewrite Rule Bypass (Multisite)CVE-2026-97332Public exploit5.3 Medium
- ahsay ahsaycbs, cloud backup suite +1 moreAhsay AhsayCBS Replication Receiver UpdateReceivers.do os command injectionCVE-2026-105134In KEVPublic exploitEPSS 81.8%10.0 Critical
- ahsay ahsaycbs, cloud backup suite +1 moreAhsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authenticationCVE-2026-105133In KEVPublic exploitEPSS 84.5%6.9 Medium
- ultimate member memberWordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerabilityCVE-2026-96451Public exploit8.8 High
- nasa-ammos ait-coreUnauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltrationCVE-2026-105105Public exploit9.8 Critical
- beaverbuilder beaver builder page builder – drag and drop website builderBeaver Builder Page Builder <= 2.11.0.5 - Unauthenticated Arbitrary Shortcode Execution via Sidebar Module Widget OutputCVE-2026-92084Public exploit9.1 Critical
- roxnor wp ultimate reviewWP Ultimate Review < 2.4.4 - Author+ Stored XSS via Review Overview SettingsCVE-2026-101162Public exploit6.4 Medium
- roxnor wp ultimate reviewWP Ultimate Review < 2.4.4 - Unauthenticated DoS via Unset Display Settings in wp-reviews ShortcodeCVE-2026-101161Public exploit7.5 High
- roxnor wp ultimate reviewWP Ultimate Review < 2.4.4 - Unauthenticated DoS via Non-Numeric Review RatingCVE-2026-101160Public exploit7.5 High
- c4illin convertxIn ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes...CVE-2026-105080Public exploit9.4 Critical
- rajnandan1 kenerKener 4.0.0 before 4.1.6 Hidden Monitor Data Disclosure via Dashboard APICVE-2026-105030Public exploit6.9 Medium
- gitea runnerGitea Runner host isolation bypass through container optionsCVE-2026-73802Public exploitFix available8.8 High
- mikrotik routerosMikroTik RouterOS Integer UnderflowCVE-2026-84411Public exploit9.3 Critical
- alanaktion phprojectPhproject < 1.8.7 Missing Authorization via Issues REST APICVE-2026-104991Public exploit7.1 High
- microsoft exchange server, exchange server subscription edition, exchange server 2016 cumulative update 23 +3 more +5 moreMicrosoft Exchange Server Elevation of Privilege VulnerabilityCVE-2026-96940Public exploit8.8 High
- aws loomMissing authentication for critical function in Loom for AWSCVE-2026-103956Public exploit10.0 Critical
- apache software foundation openofficeApache OpenOffice, Apache OpenOffice: Opening a malicious document can lead to system takeoverCVE-2026-59265Public exploit8.8 High
- fsspec filesystem specfsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code ExecutionCVE-2026-104851Public exploitFix available8.8 High
- tinylibs tinypoolTinypool: Prototype Pollution Gadget to RCE in run() optionsCVE-2026-104849Public exploitFix available9.5 Critical
- Show moreLoading…