All CVEs, page 10
1724 CVEs, sorted by threat level then EPSS. Showing 1081-1200. Use search to combine filters.
CRITICAL 9.3
Public PoCATT&CK inferred
CVE-2026-56121CVE-2026-56121: Feast before 0.63.0 contains an unsafe deserialization vulnerability that allows unauthent…
Unknown · · EPSS 1.41% · Threat 51HIGH 7.1
Exploited in the wild · CISA KEVCTID-mapped
CVE-2024-53150Linux Kernel Out-of-Bounds Read Vulnerability
Linux · Kernel · EPSS 1.35% · Threat 51HIGH 8.1
Metasploit moduleATT&CK inferred
CVE-2026-22594CVE-2026-22594: Ghost is a Node.js content management system. In versions 5.105.0 through 5.130.5 and 6.0.…
ghost · ghost · EPSS 1.31% · Threat 51HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2017-15808CVE-2017-15808: In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php.
phpmyfaq · phpmyfaq · EPSS 1.17% · Threat 51HIGH 8.7
Exploit-DBATT&CK inferred
CVE-2025-41373CVE-2025-41373: A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version …
tesigandia · gandia integra total · EPSS 1.16% · Threat 51HIGH 8.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-25198CVE-2025-25198: mailcow: dockerized is an open source groupware/email suite based on docker. Prior to vers…
mailcow · mailcow\ · EPSS 1.12% · Threat 51HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2017-15734CVE-2017-15734: In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.main.ph…
phpmyfaq · phpmyfaq · EPSS 1.10% · Threat 51HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2017-15735CVE-2017-15735: In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for modifying a gloss…
phpmyfaq · phpmyfaq · EPSS 1.10% · Threat 51HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2024-48849CVE-2024-48849: Missing Origin Validation in WebSockets vulnerability in FLXEON. Session management was no…
Unknown · · EPSS 0.92% · Threat 51CRITICAL 9.3
Public PoCATT&CK inferred
CVE-2025-48757CVE-2025-48757: An insufficient database Row-Level Security policy in Lovable through 2025-04-15 allows re…
Unknown · · EPSS 0.83% · Threat 51HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2023-44088CVE-2023-44088: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne…
pandorafms · pandora fms · EPSS 0.73% · Threat 51CRITICAL 9.4
Public PoCATT&CK inferred
CVE-2025-65964CVE-2025-65964: n8n is an open source workflow automation platform. Versions 0.123.1 through 1.119.1 do no…
n8n · n8n · EPSS 0.66% · Threat 51HIGH 8.7
Exploit-DBATT&CK inferred
CVE-2025-40677CVE-2025-40677: SQL injection vulnerability in Summar Software´s Portal del Empleado. This vulnerability a…
Unknown · · EPSS 0.65% · Threat 51HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2025-12744CVE-2025-12744: A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT cop…
Unknown · · EPSS 0.63% · Threat 51CRITICAL 9.4
Public PoCATT&CK inferred
CVE-2025-2304CVE-2025-2304: A Privilege Escalation through a Mass Assignment exists in Camaleon CMS When a user wishe…
Unknown · · EPSS 0.63% · Threat 51CRITICAL 9.3
Public PoCATT&CK inferred
CVE-2026-29000CVE-2026-29000: pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3 contain an authentication bypass vulne…
Unknown · · EPSS 0.51% · Threat 51CRITICAL 9.3
Public PoCATT&CK inferred
CVE-2026-99999CVE-2026-99999: In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checks…
Unknown · · EPSS 0.32% · Threat 51CRITICAL 9.3
Public PoCATT&CK inferred
CVE-2026-59346CVE-2026-59346: VMware Workstation and Fusion contain an integer-overflow vulnerability. A malicious actor…
Unknown · · EPSS 0.26% · Threat 51MEDIUM 5.3
Public PoCATT&CK inferred
CVE-2025-55183CVE-2025-55183: An information leak vulnerability exists in specific configurations of React Server Compon…
vercel · next.js · EPSS 64.23% · Threat 50MEDIUM 5.3
Metasploit modulePublic PoCATT&CK inferred
CVE-2024-51977CVE-2024-51977: An unauthenticated attacker who can access either the HTTP service (TCP port 80), the HTTP…
Unknown · · EPSS 46.63% · Threat 50MEDIUM 5.4
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-20122Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
Cisco · Catalyst SD-WAN Manger · EPSS 25.80% · Threat 50HIGH 7.8
Public PoCATT&CK inferred
CVE-2024-11477CVE-2024-11477: 7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This …
7-zip · 7-zip · EPSS 22.39% · Threat 50HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2024-58258CVE-2024-58258: SugarCRM before 13.0.4 and 14.x before 14.0.1 allows SSRF in the API module because a limi…
Unknown · · EPSS 22.38% · Threat 50HIGH 7.8
Public PoCATT&CK inferred
CVE-2023-52440CVE-2023-52440: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slub overf…
linux · linux kernel · EPSS 21.91% · Threat 50HIGH 7.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2024-4956CVE-2024-4956: Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read s…
Unknown · · EPSS 18.25% · Threat 50HIGH 7.2
Metasploit moduleATT&CK inferred
CVE-2025-5946CVE-2025-5946: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…
centreon · centreon web · EPSS 13.51% · Threat 50HIGH 8.1
Exploit-DBATT&CK inferred
CVE-2025-2594CVE-2025-2594: The User Registration & Membership WordPress plugin before 4.1.3 does not properly validat…
wpeverest · user registration \& membership · EPSS 9.52% · Threat 50HIGH 8.1
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-42167CVE-2026-42167: mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a u…
proftpd · proftpd · EPSS 7.31% · Threat 50HIGH 8.7
Public PoCATT&CK inferred
CVE-2025-20029CVE-2025-20029: Command injection vulnerability exists in iControl REST and BIG-IP TMOS Shell (tmsh) save …
f5 · big-ip access policy manager · EPSS 7.15% · Threat 50HIGH 8.8
Public PoCATT&CK inferred
CVE-2024-32114CVE-2024-32114: In Apache ActiveMQ 6.x, the default configuration doesn't secure the API web context (wher…
apache · activemq · EPSS 7.15% · Threat 50MEDIUM 6.5
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-48710Kludex Starlette HTTP Request/Response Smuggling Vulnerability
Kludex · Starlette · EPSS 7.06% · Threat 50CRITICAL 9
Public PoCATT&CK inferred
CVE-2025-23266CVE-2025-23266: NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to …
Unknown · · EPSS 3.32% · Threat 50CRITICAL 9.1
Public PoCATT&CK inferred
CVE-2024-45337CVE-2024-45337: Applications and libraries which misuse connection.serverAuthenticate (via callback field …
Unknown · · EPSS 3.18% · Threat 50HIGH 8.4
Exploit-DBATT&CK inferred
CVE-2024-46278CVE-2024-46278: Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console.
sismics · teedy · EPSS 2.83% · Threat 50HIGH 7.8
Metasploit moduleExploit-DBATT&CK inferred
CVE-2026-43500CVE-2026-43500: In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare D…
linux · linux kernel · EPSS 2.62% · Threat 50HIGH 7.8
Metasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2026-46300CVE-2026-46300: In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve…
linux · linux kernel · EPSS 2.43% · Threat 50CRITICAL 9.1
Public PoCATT&CK inferred
CVE-2026-40281CVE-2026-40281: Gotenberg is a Docker-powered stateless API for PDF files. In versions 8.30.1 and earlier,…
thecodingmachine · gotenberg · EPSS 2.09% · Threat 50CRITICAL 9
Public PoCATT&CK inferred
CVE-2026-32475CVE-2026-32475: Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro a…
Unknown · · EPSS 1.99% · Threat 50CRITICAL 9.2
Public PoCATT&CK inferred
CVE-2026-42530CVE-2026-42530: NGINX Open Source has a vulnerability in the ngx_http_v3_module module. When NGINX Open So…
f5 · nginx gateway fabric · EPSS 1.48% · Threat 50HIGH 7
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-24983Microsoft Windows Win32k Use-After-Free Vulnerability
Microsoft · Windows · EPSS 1.38% · Threat 50MEDIUM 6.9
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-35939Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability
Craft CMS · Craft CMS · EPSS 1.35% · Threat 50MEDIUM 6.9
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-67279Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
MikroTik · RouterOS · EPSS 1.05% · Threat 50CRITICAL 9.2
Public PoCATT&CK inferred
CVE-2026-21440CVE-2026-21440: AdonisJS is a TypeScript-first web framework. A Path Traversal vulnerability in AdonisJS m…
Unknown · · EPSS 1.03% · Threat 50CRITICAL 9.1
Public PoCATT&CK inferred
CVE-2026-25769CVE-2026-25769: Wazuh is a free and open source platform used for threat prevention, detection, and respon…
wazuh · wazuh · EPSS 0.97% · Threat 50CRITICAL 9.2
Public PoCATT&CK inferred
CVE-2026-42533CVE-2026-42533: A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex…
f5 · nginx gateway fabric · EPSS 0.89% · Threat 50CRITICAL 9.1
Public PoCATT&CK inferred
CVE-2026-29145CVE-2026-29145: CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is …
apache · tomcat · EPSS 0.71% · Threat 50CRITICAL 9.2
Public PoCATT&CK inferred
CVE-2026-111497CVE-2026-111497: A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli ve…
Unknown · · EPSS 0.71% · Threat 50CRITICAL 9.2
Public PoCATT&CK inferred
CVE-2025-40634CVE-2025-40634: Stack-based buffer overflow vulnerability in the 'conn-indicator' binary running as root o…
Unknown · · EPSS 0.69% · Threat 50CRITICAL 9.1
Public PoCATT&CK inferred
CVE-2026-89274CVE-2026-89274: The WP Recipe Maker plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in…
Unknown · · EPSS 0.68% · Threat 50CRITICAL 10
ATT&CK inferred
CVE-2026-83938CVE-2026-83938: Missing authentication for critical function in Azure Kubernetes Configuration Service all…
Unknown · · EPSS 0.67% · Threat 50MEDIUM 6.9
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-7473Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability
Arista · Extensible Operating System · EPSS 0.65% · Threat 50CRITICAL 10
ATT&CK inferred
CVE-2026-97785CVE-2026-97785: Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privil…
Unknown · · EPSS 0.60% · Threat 50HIGH 8.5
Exploit-DBATT&CK inferred
CVE-2025-4971CVE-2025-4971: Broadcom Automic Automation Agent Unix versions < 24.3.0 HF4 and < 21.0.13 HF1 allow low p…
Unknown · · EPSS 0.59% · Threat 50CRITICAL 9.1
Public PoCATT&CK inferred
CVE-2025-61922CVE-2025-61922: PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. …
prestashop · prestashop checkout · EPSS 0.50% · Threat 50CRITICAL 9.1
Public PoCATT&CK inferred
CVE-2026-22732CVE-2026-22732: When applications specify HTTP response headers for servlet applications using Spring Secu…
vmware · spring security · EPSS 0.49% · Threat 50MEDIUM 6.9
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-96654Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
Plex · Media Server · EPSS 0.46% · Threat 50CRITICAL 9.2
Public PoCATT&CK inferred
CVE-2026-114509CVE-2026-114509: Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configure…
Unknown · · EPSS 0.40% · Threat 50CRITICAL 9.1
Public PoCATT&CK inferred
CVE-2026-91403CVE-2026-91403: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edi…
Unknown · · EPSS 0.37% · Threat 50HIGH 7
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-68820Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
Microsoft · Windows Ancillary Function Driver for WinSock · EPSS 0.33% · Threat 50MEDIUM 4.6
Public PoCATT&CK inferred
CVE-2025-9491CVE-2025-9491: Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This …
microsoft · windows 11 23h2 · EPSS 73.03% · Threat 49MEDIUM 6.9
Public PoCATT&CK inferred
CVE-2024-12986CVE-2024-12986: A vulnerability, which was classified as critical, has been found in DrayTek Vigor2960 and…
draytek · vigor300b firmware · EPSS 35.31% · Threat 49MEDIUM 6.5
Exploit-DBATT&CK inferred
CVE-2024-55963CVE-2024-55963: An issue was discovered in Appsmith before 1.51. A user on Appsmith that doesn't have admi…
appsmith · appsmith · EPSS 30.66% · Threat 49HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2025-20124CVE-2025-20124: A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker to ex…
cisco · identity services engine · EPSS 18.48% · Threat 49HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2025-27210CVE-2025-27210: An incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affectin…
Unknown · · EPSS 14.34% · Threat 49HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2024-11728CVE-2024-11728: The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable…
iqonic · kivicare · EPSS 13.63% · Threat 49HIGH 7.2
Metasploit moduleExploit-DBATT&CK inferred
CVE-2026-3576CVE-2026-3576: The Planyo Online Reservation System plugin for WordPress is vulnerable to Server-Side Req…
Unknown · · EPSS 8.81% · Threat 49HIGH 8.8
Public PoCATT&CK inferred
CVE-2025-54110CVE-2025-54110: Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate …
microsoft · windows 10 1507 · EPSS 4.72% · Threat 49HIGH 8.2
Exploit-DBATT&CK inferred
CVE-2025-44177CVE-2025-44177: A directory traversal vulnerability was discovered in White Star Software Protop version 4…
wss · protop · EPSS 4.43% · Threat 49MEDIUM 6.5
Exploited in the wild · CISA KEVCTID-mapped
CVE-2021-20035SonicWall SMA100 Appliances OS Command Injection Vulnerability
SonicWall · SMA100 Appliances · EPSS 4.41% · Threat 49MEDIUM 6.6
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-40602SonicWall SMA1000 Missing Authorization Vulnerability
SonicWall · SMA1000 appliance · EPSS 2.76% · Threat 49HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-26114CVE-2026-26114: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized atta…
microsoft · sharepoint server · EPSS 2.55% · Threat 49HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-53435CVE-2026-53435: In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to hav…
jenkins · jenkins · EPSS 2.16% · Threat 49HIGH 8.3
Exploit-DBATT&CK inferred
CVE-2026-58289CVE-2026-58289: Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-…
microsoft · edge chromium · EPSS 1.99% · Threat 49HIGH 8.2
Exploit-DBATT&CK inferred
CVE-2024-35133CVE-2024-35133: IBM Security Verify Access 10.0.0 through 10.0.8 OIDC Provider could allow a remote authen…
ibm · security verify access · EPSS 1.76% · Threat 49MEDIUM 6.7
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-21590Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability
Juniper · Junos OS · EPSS 1.74% · Threat 49HIGH 8.4
Exploit-DBATT&CK inferred
CVE-2025-47957CVE-2025-47957: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code lo…
microsoft · 365 apps · EPSS 1.31% · Threat 49HIGH 8.3
Exploit-DBATT&CK inferred
CVE-2025-68137CVE-2025-68137: EVerest is an EV charging software stack. Prior to version 2025.10.0, an integer overflow …
linuxfoundation · everest · EPSS 1.30% · Threat 49HIGH 7.7
Metasploit moduleATT&CK inferred
CVE-2026-42249CVE-2026-42249: Ollama for Windows contains a Remote Code Execution vulnerability in its update mechanism …
ollama · ollama · EPSS 0.99% · Threat 49HIGH 8.9
Public PoCATT&CK inferred
CVE-2026-64638CVE-2026-64638: WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. …
Unknown · · EPSS 0.89% · Threat 49CRITICAL 9.8
ATT&CK inferred
CVE-2026-115806CVE-2026-115806: The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object In…
Unknown · · EPSS 0.82% · Threat 49HIGH 7.7
Metasploit moduleATT&CK inferred
CVE-2026-42248CVE-2026-42248: Ollama for Windows does not perform integrity or authenticity verification of downloaded u…
ollama · ollama · EPSS 0.72% · Threat 49CRITICAL 9
Public PoCATT&CK inferred
CVE-2026-16723CVE-2026-16723: A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This…
Unknown · · EPSS 0.66% · Threat 49MEDIUM 6.7
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-34926Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
Trend Micro · Apex One · EPSS 0.54% · Threat 49HIGH 7.8
Metasploit modulePublic PoCATT&CK inferred
CVE-2026-3888CVE-2026-3888: Local privilege escalation in snapd on Linux allows local attackers to get root privilege …
canonical · ubuntu linux · EPSS 0.47% · Threat 49MEDIUM 6.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-50154CVE-2025-50154: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows…
microsoft · windows 10 1507 · EPSS 29.77% · Threat 48HIGH 7.5
Public PoCATT&CK inferred
CVE-2022-37122CVE-2022-37122: Carel pCOWeb HVAC BACnet Gateway 2.1.0, Firmware: A2.1.0 - B2.1.0, Application Software: 2…
carel · pcoweb card firmware · EPSS 23.06% · Threat 48HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2025-20125CVE-2025-20125: A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker with …
cisco · identity services engine · EPSS 16.36% · Threat 48HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2024-44871CVE-2024-44871: An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0…
mozilo · mozilocms · EPSS 16.24% · Threat 48HIGH 8.1
Public PoCATT&CK inferred
CVE-2025-52970CVE-2025-52970: A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions …
fortinet · fortiweb · EPSS 10.08% · Threat 48HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2021-43579CVE-2021-43579: A stack-based buffer overflow in image_load_bmp() in HTMLDOC <= 1.9.13 results in remote c…
htmldoc project · htmldoc · EPSS 7.35% · Threat 48HIGH 7.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-32023CVE-2025-32023: Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.…
redis · redis · EPSS 6.47% · Threat 48HIGH 7.2
Metasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2025-14558CVE-2025-14558: The rtsol(8) and rtsold(8) programs do not validate the domain search list options provide…
freebsd · freebsd · EPSS 6.38% · Threat 48HIGH 7.3
Metasploit moduleATT&CK inferred
CVE-2025-67888CVE-2025-67888: An issue was discovered in Control Web Panel (CWP) before 0.9.8.1209. User input passed vi…
Unknown · · EPSS 3.60% · Threat 48HIGH 8.1
Exploit-DBATT&CK inferred
CVE-2024-51774CVE-2024-51774: qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation…
qbittorrent · qbittorrent · EPSS 3.30% · Threat 48HIGH 7.5
Metasploit moduleATT&CK inferred
CVE-2024-48457CVE-2024-48457: An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router N…
Unknown · · EPSS 3.08% · Threat 48HIGH 8.1
Exploit-DBATT&CK inferred
CVE-2024-0399CVE-2024-0399: The WooCommerce Customers Manager WordPress plugin before 29.7 does not properly sanitise …
vanquish · woocommerce customers manager · EPSS 2.88% · Threat 48HIGH 8.1
Exploit-DBATT&CK inferred
CVE-2026-25994CVE-2026-25994: PJSIP is a free and open source multimedia communication library written in C. In 2.16 and…
pjsip · pjsip · EPSS 2.25% · Threat 48HIGH 8.6
Public PoCATT&CK inferred
CVE-2023-40448CVE-2023-40448: The issue was addressed with improved handling of protocols. This issue is fixed in tvOS 1…
apple · ipados · EPSS 2.18% · Threat 48HIGH 8.1
Exploit-DBATT&CK inferred
CVE-2026-42471CVE-2026-42471: Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The sync-invoke …
Unknown · · EPSS 1.91% · Threat 48HIGH 8.6
Public PoCATT&CK inferred
CVE-2026-44578CVE-2026-44578: Next.js is a React framework for building full-stack web applications. From 13.4.13 to bef…
vercel · next.js · EPSS 1.90% · Threat 48HIGH 8.2
Exploit-DBATT&CK inferred
CVE-2024-47773CVE-2024-47773: Discourse is an open source platform for community discussion. An attacker can make severa…
discourse · discourse · EPSS 1.66% · Threat 48HIGH 8.7
Public PoCATT&CK inferred
CVE-2026-3854CVE-2026-3854: An improper neutralization of special elements vulnerability was identified in GitHub Ente…
github · enterprise server · EPSS 1.50% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-74469CVE-2026-74469: In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer tr…
Unknown · · EPSS 1.47% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-19949CVE-2026-19949: The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to SQL Injection…
Unknown · · EPSS 1.43% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-2005CVE-2026-2005: Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitr…
postgresql · postgresql · EPSS 1.37% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2025-24252CVE-2025-24252: A use-after-free issue was addressed with improved memory management. This issue is fixed …
apple · ipados · EPSS 1.30% · Threat 48HIGH 8.7
Public PoCATT&CK inferred
CVE-2025-4660CVE-2025-4660: A remote code execution vulnerability exists in the Windows agent component of SecureConne…
forescout · secureconnector · EPSS 1.18% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2024-54498CVE-2024-54498: A path handling issue was addressed with improved validation. This issue is fixed in macOS…
apple · macos · EPSS 1.13% · Threat 48MEDIUM 6.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-61624Fortinet Multiple Products Path Traversal Vulnerability
Fortinet · Multiple Products · EPSS 1.08% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-8461CVE-2026-8461: An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the M…
Unknown · · EPSS 1.03% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-53359CVE-2026-53359: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow …
linux · linux kernel · EPSS 0.98% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2025-13780CVE-2025-13780: pgAdmin versions up to 9.10 are affected by a Remote Code Execution (RCE) vulnerability th…
pgadmin · pgadmin 4 · EPSS 0.94% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-26119CVE-2026-26119: Improper authentication in Windows Admin Center allows an authorized attacker to elevate p…
microsoft · windows admin center · EPSS 0.90% · Threat 48HIGH 8.7
Public PoCATT&CK inferred
CVE-2026-65643CVE-2026-65643: Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execu…
cpanel · cpanel · EPSS 0.88% · Threat 48HIGH 8.1
Exploit-DBATT&CK inferred
CVE-2025-28062CVE-2025-28062: A Cross-Site Request Forgery (CSRF) vulnerability was discovered in ERPNEXT 14.82.1 and 14…
frappe · erpnext · EPSS 0.80% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-45504CVE-2026-45504: Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attac…
microsoft · exchange server · EPSS 0.78% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-47301CVE-2026-47301: Improper access control in Microsoft Configuration Manager allows an authorized attacker t…
microsoft · configuration manager 2503 · EPSS 0.78% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-54121CVE-2026-54121: Improper authorization in Active Directory Certificate Services (AD CS) allows an authoriz…
microsoft · windows 10 1607 · EPSS 0.78% · Threat 48HIGH 8.7
Public PoCATT&CK inferred
CVE-2026-93687CVE-2026-93687: braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers …
Unknown · · EPSS 0.76% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-7482