Skip to contentVulnerabilities with public exploits
- apache camelApache Camel: Camel-CXF Information Disclosure via Unmuted Consumer ExceptionsCVE-2026-85257Public exploit5.3 Medium
- apache camelApache Camel: Camel-Platform-HTTP Request-Header Echo Suppression Bypassed by Header-Name CasingCVE-2026-85254Public exploit6.5 Medium
- apache camelApache Camel: Camel-HTTP Credential Disclosure to Cross-Host Redirect TargetsCVE-2026-85251Public exploit7.5 High
- apache camelApache Camel: Camel-XPath XML External Entity Processing and File Disclosure via the documentType=InputSource OptionCVE-2026-85250Public exploit7.5 High
- apache camelApache Camel: Camel-Tika Header Injection via Unfiltered Document MetadataCVE-2026-85249Public exploit6.5 Medium
- apache software foundation camelApache Camel: Camel-PQC Signature Verification Bypass via a Shared Unsynchronized Signature InstanceCVE-2026-85248Public exploit5.9 Medium
- apache camelApache Camel: Camel-Knative Improper Certificate Validation When SSL Is Enabled Without a TruststoreCVE-2026-85247Public exploit5.9 Medium
- apache camelApache Camel: Camel-Mina Information Disclosure via Unmuted Consumer ExceptionsCVE-2026-85246Public exploit5.3 Medium
- apache camelApache Camel: Camel-Thrift Cross-Exchange Data Disclosure via a Shared Deserialization TargetCVE-2026-85245Public exploit5.9 Medium
- apache camelApache Camel: Camel-Crypto-PGP Integrity Verification Downgrade via Attacker-Controlled Message StructureCVE-2026-85243Public exploit5.9 Medium
- apache camelApache Camel: Camel-Shiro Authentication Bypass via Skipped Credential Verification on Subject ReuseCVE-2026-84181Public exploit5.9 Medium
- apache camelApache Camel: Camel-Knative Information Disclosure via Unmuted Consumer ExceptionsCVE-2026-84180Public exploit5.3 Medium
- apache software foundation camelApache Camel: Camel-OAuth Login Cross-Site Request Forgery via Missing State Binding in the Authorization Code FlowCVE-2026-84178Public exploit6.1 Medium
- apache camelApache Camel: Camel-Platform-HTTP-Vertx Cross-Origin Credential Exposure via Wildcard Origin ReflectionCVE-2026-84176Public exploit6.5 Medium
- apache software foundation camelApache Camel: Camel-Dynamic-Router Control Endpoint Compiles Predicate Expressions Supplied by Control MessagesCVE-2026-83531Public exploit8.8 High
- apache camelApache Camel: Camel-AS2 Server-Side Request Forgery and Credential Disclosure via Asynchronous MDN Delivery AddressCVE-2026-80344Public exploit8.2 High
- apache camelApache Camel: Camel-Netty-HTTP Security Constraint Bypass via Case-Sensitive Context-Path MatchingCVE-2026-80343Public exploit8.2 High
- apache software foundation camelApache Camel: Camel-OAuth Authentication Bypass via Fail-Open ProcessorsCVE-2026-80312Public exploit8.2 High
- apache camelApache Camel: camel-azure-files resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing ent…CVE-2026-79986Public exploit7.4 High
- apache software foundation camelApache Camel: camel-smb resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry conta…CVE-2026-79985Public exploit7.4 High
- apache software foundation camelApache Camel: camel-mina-sftp resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry…CVE-2026-79984Public exploit7.4 High
- apache camelApache Camel: camel-ftp resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry conta…CVE-2026-79983Public exploit7.4 High
- apache software foundation camelApache Camel: Camel-Spring-Redis Unfiltered Java Deserialization of Redis PayloadsCVE-2026-78165Public exploit8.8 High
- apache software foundation camelApache Camel: HTTP producers resolve property placeholders in message-supplied URI override headersCVE-2026-78164Public exploit8.2 High
- apache software foundation camelApache Camel: Camel-Docling Unvalidated Message Body Input Source Enables Server-Side Request Forgery and Local File DisclosureCVE-2026-78163Public exploit5.9 Medium
- apache camelApache Camel: Camel-Hazelcast Managed Instances Missing Java Deserialization Filter (Incomplete Fix for CVE-2026-43865)CVE-2026-78162Public exploit10.0 Critical
- No product listedSlims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows cross-site request forgery (CSRF...CVE-2026-107084Public exploit8.8 High
- No product listedSENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL...CVE-2026-107083Public exploit9.8 Critical
- No product listedSlims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows an authenticated staff user to...CVE-2026-107082Public exploit8.8 High
- No product listedSQL injection via identifier injection in the tableName and tableFields POST parameters of admin...CVE-2026-107081Public exploit9.8 Critical
- giteaGitea API disclosure of private user social graph, keys and starsCVE-2026-97859Public exploit6.5 Medium
- giteaGitea draft release creation disclosing attachment metadataCVE-2026-110311Public exploit4.3 Medium
- linuxHID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()CVE-2026-98499Public exploitFix available8.1 High
- unknown contact form 7 signature addonContact Form 7 Signature Addon <= 4.2.2 - Unauthenticated Arbitrary File Read via Path Traversal in Email AttachmentsCVE-2026-104246Public exploit5.9 Medium
- thimpress learnpress – wordpress lms plugin for create and sell online coursesLearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' ParameterCVE-2026-104736Public exploit9.8 Critical
- mage mage-aiMage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an...CVE-2026-111823Public exploit9.8 Critical
- zoneminderZoneMinder: Authenticated OS Command Injection (RCE) via Export FeatureCVE-2026-102607Public exploit8.8 High
- tandoorrecipes recipesTandoor Recipes: Blind SSRF via AI provider URL (api_base)CVE-2026-59970Public exploit7.7 High
- wp chill passsterWordPress Passster plugin <= 4.3.18 - Broken Access Control vulnerabilityCVE-2026-110896Public exploit5.3 Medium
- theme-one the gridWordPress The Grid plugin <= 2.8.1 - Remote Code Execution (RCE) vulnerabilityCVE-2026-94169Public exploit10.0 Critical
- jeff farthing theme my loginTheme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data FilterCVE-2026-89079Public exploit9.8 Critical
- wpcodefactory customer email verification for woocommerceCustomer Email Verification for WooCommerce <= 3.3.0 - Unauthenticated Privilege Escalation to 'alg_wc_ev_verify_email' ParameterCVE-2026-104745Public exploit8.1 High
- wheelsWheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled ...CVE-2026-111444Public exploit9.8 Critical
- frappe hrmsFrappe HRMS 14.0.0 before 14.38.2 SQL Injection via Missing ValidationCVE-2026-111389Public exploit8.3 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreCifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypassCVE-2026-104715Public exploitFix available7.8 High
- No product listedCross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker...CVE-2025-52097Public exploit5.4 Medium
- google chromeUse after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to...CVE-2026-110922Public exploitFix available8.8 High
- bmc helix network managementBMC Helix Network Management 26.3.00 before 26.3.01 Authentication Bypass via SAML ConfigurationCVE-2026-111283Public exploit9.5 Critical
- apache software foundation airflow sftp provider, airflow ssh provider +1 moreApache Airflow SSH provider, Apache Airflow SFTP provider: SSH hook disables host-key verification by defaultCVE-2026-94134Public exploit9.1 Critical
- beyondtrust remote supportImproper Origin Validation in Internal Messaging Components of BeyondTrust Remote SupportCVE-2026-102764In KEVPublic exploitEPSS 79.5%9.3 Critical
- Show moreLoading…