Skip to content

All CVEs, page 3

1724 CVEs, sorted by threat level then EPSS. Showing 241-360. Use search to combine filters.

Exploited in the wild · CISA KEVATT&CK inferred

Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability

Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense · EPSS 87.09% · Threat 84

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Gogs Path Traversal Vulnerability

Gogs · Gogs · EPSS 85.20% · Threat 84

Metasploit moduleExploit-DBATT&CK inferred

CVE-2025-47916: Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template st…

invisioncommunity · invisioncommunity · EPSS 84.32% · Threat 84

Exploited in the wild · CISA KEVExploit-DBPublic PoCATT&CK inferred

Microsoft Windows SMB Client Improper Access Control Vulnerability

Microsoft · Windows · EPSS 82.70% · Threat 84

Metasploit moduleExploit-DBPublic PoCATT&CK inferred

CVE-2024-44000: Insufficiently Protected Credentials vulnerability in LiteSpeed Technologies LiteSpeed Cac…

litespeedtech · litespeed cache · EPSS 82.34% · Threat 84

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBATT&CK inferred

Microsoft Internet Explorer Use-After-Free Vulnerability

Microsoft · Internet Explorer · EPSS 82.24% · Threat 84

Metasploit moduleExploit-DBPublic PoCATT&CK inferred

CVE-2024-10924: The Really Simple Security (Free, Pro, and Pro Multisite) plugins for WordPress are vulner…

really-simple-plugins · really simple security · EPSS 82.22% · Threat 84

Metasploit moduleATT&CK inferred

CVE-2025-34300: A template injection vulnerability exists in Sawtooth Software’s Lighthouse Studio version…

Unknown · · EPSS 81.26% · Threat 84

Metasploit moduleExploit-DBATT&CK inferred

CVE-2024-20419: A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM …

cisco · smart software manager on-prem · EPSS 80.64% · Threat 84

Exploited in the wild · CISA KEVCTID-mapped

Edimax IC-7100 IP Camera OS Command Injection Vulnerability

Edimax · IC-7100 IP Camera · EPSS 74.48% · Threat 84

Exploited in the wild · CISA KEVATT&CK inferred

Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability

Fortinet · Multiple Products · EPSS 68.29% · Threat 84

CRITICAL 9.9Ransomware

Exploited in the wild · CISA KEVCTID-mapped

Qlik Sense HTTP Tunneling Vulnerability

Qlik · Sense · EPSS 47.45% · Threat 84

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred

Artifex Ghostscript Type Confusion Vulnerability

Artifex · Ghostscript · EPSS 96.97% · Threat 83

MEDIUM 6.9Ransomware

Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred

Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability

Palo Alto Networks · PAN-OS · EPSS 94.82% · Threat 83

Exploit-DBPublic PoCATT&CK inferred

CVE-2018-1207: Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability …

dell · emc idrac7 · EPSS 90.09% · Threat 83

Metasploit moduleATT&CK inferred

CVE-2025-34152: An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 W…

Unknown · · EPSS 86.84% · Threat 83

Exploited in the wild · CISA KEVMetasploit moduleATT&CK inferred

Sangoma FreePBX OS Command Injection Vulnerability

Sangoma · FreePBX · EPSS 84.62% · Threat 83

Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred

MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability

MongoDB · MongoDB and MongoDB Server · EPSS 83.22% · Threat 83

Metasploit moduleExploit-DBATT&CK inferred

CVE-2024-2054: The Artica-Proxy administrative web application will deserialize arbitrary PHP objects sup…

articatech · artica proxy · EPSS 81.26% · Threat 83

Exploited in the wild · CISA KEVCTID-mapped

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

Synacor · Zimbra Collaboration Suite (ZCS) · EPSS 77.27% · Threat 83

Exploited in the wild · CISA KEVATT&CK inferred

Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability

Dassault Systèmes · DELMIA Apriso · EPSS 73.57% · Threat 83

Exploited in the wild · CISA KEVATT&CK inferred

SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

SysAid · SysAid On-Prem · EPSS 64.73% · Threat 83

Exploited in the wild · CISA KEVATT&CK inferred

Rockwell Multiple Products Insufficient Protected Credentials Vulnerability

Rockwell · Multiple Products · EPSS 63.63% · Threat 83

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred

Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability

Langflow · Langflow · EPSS 62.56% · Threat 83

Exploited in the wild · CISA KEVCTID-mapped

AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability

AMI · MegaRAC SPx · EPSS 60.75% · Threat 83

CRITICAL 10Ransomware

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

Cisco · Secure Firewall Management Center (FMC) · EPSS 43.17% · Threat 83

HIGH 7.5Top #19

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred

OpenSSL Information Disclosure Vulnerability

OpenSSL · OpenSSL · EPSS 100.00% · Threat 82

HIGH 7.5Top #13

Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped

Ignite Realtime Openfire Path Traversal Vulnerability

Ignite Realtime · Openfire · EPSS 100.00% · Threat 82

HIGH 7.5Top #12

Exploited in the wild · CISA KEVExploit-DBPublic PoCCTID-mapped

HTTP/2 Rapid Reset Attack Vulnerability

IETF · HTTP/2 · EPSS 100.00% · Threat 82

HIGH 7.5Top #52

Exploited in the wild · CISA KEVPublic PoCCTID-mapped

Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

Ivanti · Endpoint Manager (EPM) · EPSS 99.99% · Threat 82

HIGH 7.5Top #54

Exploited in the wild · CISA KEVExploit-DBPublic PoCCTID-mapped

Cisco ASA and FTD Read-Only Path Traversal Vulnerability

Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) · EPSS 99.99% · Threat 82

HIGH 7.5Top #69

Exploited in the wild · CISA KEVCTID-mapped

Apache OFBiz Forced Browsing Vulnerability

Apache · OFBiz · EPSS 99.98% · Threat 82

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped

Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability

Ivanti · Endpoint Manager Mobile (EPMM) · EPSS 99.93% · Threat 82

Exploited in the wild · CISA KEVATT&CK inferred

Omnissa Workspace ONE Server-Side Request Forgery

Omnissa · Workspace One UEM · EPSS 99.68% · Threat 82

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred

SolarWinds Serv-U Path Traversal Vulnerability

SolarWinds · Serv-U · EPSS 99.61% · Threat 82

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred

ISC BIND Data Processing Errors Vulnerability

ISC · BIND · EPSS 99.41% · Threat 82

MEDIUM 6.5Ransomware

Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped

Microsoft SharePoint Improper Authentication Vulnerability

Microsoft · SharePoint · EPSS 99.09% · Threat 82

Exploited in the wild · CISA KEVPublic PoCCTID-mapped

Microsoft .NET Framework Information Disclosure Vulnerability

Microsoft · .NET Framework · EPSS 98.62% · Threat 82

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred

Adobe ColdFusion Improper Access Control Vulnerability

Adobe · ColdFusion · EPSS 98.51% · Threat 82

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred

Rails Ruby on Rails Path Traversal Vulnerability

Rails · Ruby on Rails · EPSS 98.51% · Threat 82

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability

D-Link · DCS-2530L and DCS-2670L Devices · EPSS 97.51% · Threat 82

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Metabase GeoJSON API Local File Inclusion Vulnerability

Metabase · Metabase · EPSS 97.18% · Threat 82

Exploit-DBPublic PoCATT&CK inferred

CVE-2024-10914: A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 2024102…

dlink · dns-320 firmware · EPSS 96.28% · Threat 82

Metasploit moduleExploit-DBPublic PoCATT&CK inferred

CVE-2026-43284: In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-p…

linux · linux kernel · EPSS 94.19% · Threat 82

Exploited in the wild · CISA KEVATT&CK inferred

Microsoft Windows Remote Code Execution Vulnerability

Microsoft · Windows · EPSS 78.14% · Threat 82

Metasploit moduleATT&CK inferred

CVE-2024-3408: man-group/dtale version 3.10.0 is vulnerable to an authentication bypass and remote code e…

man · d-tale · EPSS 77.97% · Threat 82

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBATT&CK inferred

Nagios XI Remote Code Execution Vulnerability

Nagios · Nagios XI · EPSS 77.04% · Threat 82

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBATT&CK inferred

Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability

Microsoft · Windows · EPSS 76.58% · Threat 82

Metasploit modulePublic PoCATT&CK inferred

CVE-2025-48827: vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invo…

vbulletin · vbulletin · EPSS 75.64% · Threat 82

Metasploit moduleATT&CK inferred

CVE-2025-8943: The Custom MCPs feature is designed to execute OS commands, for instance, using tools like…

flowiseai · flowise · EPSS 75.20% · Threat 82

Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred

Juniper ScreenOS Improper Authentication Vulnerability

Juniper · ScreenOS · EPSS 61.14% · Threat 82

Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred

OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability

OSGeo · GeoServer · EPSS 60.01% · Threat 82

HIGH 8.8Ransomware

Exploited in the wild · CISA KEVATT&CK inferred

Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability

Microsoft · Exchange Server · EPSS 59.29% · Threat 82

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Adminer Server-Side Request Forgery Vulnerability

Adminer · Adminer · EPSS 98.46% · Threat 81

Exploited in the wild · CISA KEVCTID-mapped

SAP NetWeaver Directory Traversal Vulnerability

SAP · NetWeaver · EPSS 95.11% · Threat 81

Public PoCATT&CK inferred

CVE-2024-9047: The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all vers…

iptanus · wordpress file upload · EPSS 93.34% · Threat 81

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

RARLAB WinRAR Path Traversal Vulnerability

RARLAB · WinRAR · EPSS 90.48% · Threat 81

HIGH 7.5Ransomware

Exploited in the wild · CISA KEVATT&CK inferred

PaperCut NG/MF Improper Authentication Vulnerability

PaperCut · NG/MF · EPSS 78.05% · Threat 81

Metasploit moduleATT&CK inferred

CVE-2025-11749: The AI Engine plugin for WordPress is vulnerable to Sensitive Information Exposure in all …

Unknown · · EPSS 74.66% · Threat 81

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBATT&CK inferred

Microsoft Windows Out-of-Bounds Write Vulnerability

Microsoft · Windows · EPSS 73.69% · Threat 81

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

Synacor · Zimbra Collaboration Suite (ZCS) · EPSS 71.66% · Threat 81

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Microsoft SharePoint Weak Authentication Vulnerability

Microsoft · SharePoint · EPSS 69.54% · Threat 81

Exploited in the wild · CISA KEVMetasploit moduleATT&CK inferred

PaperCut NG/MF Unsafe Reflection Vulnerability

PaperCut · NG/MF · EPSS 63.53% · Threat 81

Exploited in the wild · CISA KEVATT&CK inferred

Ray-Project Ray Code Injection Vulnerability

Ray-Project · Ray · EPSS 62.46% · Threat 81

Exploited in the wild · CISA KEVATT&CK inferred

Sangoma FreePBX Improper Authentication Vulnerability

Sangoma · FreePBX · EPSS 55.95% · Threat 81

Exploited in the wild · CISA KEVATT&CK inferred

D-Link Routers Buffer Overflow Vulnerability

D-Link · Routers · EPSS 55.53% · Threat 81

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBCTID-mapped

Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability

Hitachi Vantara · Pentaho Business Analytics (BA) Server · EPSS 97.67% · Threat 80

Exploited in the wild · CISA KEVCTID-mapped

ZKTeco BioTime Path Traversal Vulnerability

ZKTeco · BioTime · EPSS 92.47% · Threat 80

Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred

Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability

Gladinet · CentreStack and Triofox · EPSS 92.14% · Threat 80

Exploited in the wild · CISA KEVCTID-mapped

Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

Ivanti · Endpoint Manager (EPM) · EPSS 90.98% · Threat 80

Exploit-DBPublic PoCATT&CK inferred

CVE-2025-32429: XWiki Platform is a generic wiki platform offering runtime services for applications built…

xwiki · xwiki · EPSS 87.90% · Threat 80

Exploit-DBPublic PoCATT&CK inferred

CVE-2024-42327: A non-admin user account on the Zabbix frontend with the default User role, or with any ot…

zabbix · zabbix · EPSS 79.11% · Threat 80

Exploit-DBPublic PoCATT&CK inferred

CVE-2025-2294: The Kubio AI Page Builder plugin for WordPress is vulnerable to Local File Inclusion in al…

Unknown · · EPSS 78.36% · Threat 80

Exploited in the wild · CISA KEVATT&CK inferred

tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability

tj-actions · changed-files GitHub Action · EPSS 72.09% · Threat 80

Exploited in the wild · CISA KEVATT&CK inferred

VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

VMware · vCenter Server · EPSS 54.57% · Threat 80

Exploited in the wild · CISA KEVATT&CK inferred

Check Point Multiple Products Improper Certificate Validation Vulnerability

Check Point · Multiple Products · EPSS 54.23% · Threat 80

Exploited in the wild · CISA KEVATT&CK inferred

GitLab Server-Side Request Forgery (SSRF) Vulnerability

GitLab · GitLab · EPSS 53.37% · Threat 80

CRITICAL 9.3Ransomware

Exploited in the wild · CISA KEVATT&CK inferred

PTC Windchill and FlexPLM Improper Input Validation Vulnerability

PTC · Windchill and FlexPLM · EPSS 46.05% · Threat 80

Exploited in the wild · CISA KEVCTID-mapped

DrayTek Vigor Routers OS Command Injection Vulnerability

DrayTek · Vigor Routers · EPSS 98.16% · Threat 79

Exploited in the wild · CISA KEVCTID-mapped

Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

Ivanti · Endpoint Manager (EPM) · EPSS 89.81% · Threat 79

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred

Grafana Path Traversal Vulnerability

Grafana Labs · Grafana · EPSS 88.50% · Threat 79

Exploited in the wild · CISA KEVATT&CK inferred

Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability

Ivanti · Endpoint Manager (EPM) · EPSS 88.33% · Threat 79

Exploited in the wild · CISA KEVATT&CK inferred

Dassault Systèmes DELMIA Apriso Code Injection Vulnerability

Dassault Systèmes · DELMIA Apriso · EPSS 79.20% · Threat 79

Exploit-DBATT&CK inferred

CVE-2023-3643: A vulnerability was found in Boss Mini 1.4.0 Build 6221. It has been classified as critica…

carel · boss mini firmware · EPSS 75.36% · Threat 79

Metasploit modulePublic PoCATT&CK inferred

CVE-2025-13486: The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Remote Code Exe…

Unknown · · EPSS 67.62% · Threat 79

Metasploit moduleExploit-DBPublic PoCATT&CK inferred

CVE-2026-23744: MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 a…

mcpjam · inspector · EPSS 67.52% · Threat 79

Exploited in the wild · CISA KEVATT&CK inferred

Microsoft Office PowerPoint Code Injection Vulnerability

Microsoft · Office · EPSS 67.31% · Threat 79

Metasploit moduleATT&CK inferred

CVE-2024-47407: A parameter within a command does not properly validate input within myPRO Manager which c…

Unknown · · EPSS 63.77% · Threat 79

Metasploit moduleATT&CK inferred

CVE-2024-46506: NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection v…

netalertx · netalertx · EPSS 62.67% · Threat 79

Exploited in the wild · CISA KEVATT&CK inferred

NUUO NVRmini2 Devices Missing Authentication Vulnerability

NUUO · NVRmini2 Devices · EPSS 48.50% · Threat 79

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Ubiquiti UniFi OS Improper Input Validation Vulnerability

Ubiquiti · UniFi OS · EPSS 45.77% · Threat 79

Metasploit modulePublic PoCATT&CK inferred

CVE-2025-1094: Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(),…

Unknown · · EPSS 90.03% · Threat 78

Public PoCATT&CK inferred

CVE-2025-49844: Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and belo…

redis · redis · EPSS 82.64% · Threat 78

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred

Linux Kernel Heap Out-of-Bounds Write Vulnerability

Linux · Kernel · EPSS 78.68% · Threat 78

Metasploit modulePublic PoCATT&CK inferred

CVE-2025-34299: Monsta FTP versions 2.11 and earlier contain a vulnerability that allows unauthenticated a…

monstaftp · monsta ftp · EPSS 72.68% · Threat 78

Exploit-DBPublic PoCATT&CK inferred

CVE-2023-3460: The Ultimate Member WordPress plugin before 2.6.7 does not prevent visitors from creating …

ultimatemember · ultimate member · EPSS 72.31% · Threat 78

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability

Sitecore · Multiple Products · EPSS 60.60% · Threat 78

Exploited in the wild · CISA KEVATT&CK inferred

PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability

PTZOptics · PT30X-SDI/NDI Cameras · EPSS 58.79% · Threat 78

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Fortinet FortiSandbox OS Command Injection Vulnerability

Fortinet · FortiSandbox · EPSS 47.36% · Threat 78

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Adobe ColdFusion Path Traversal Vulnerability

Adobe · ColdFusion · EPSS 42.39% · Threat 78

Exploit-DBPublic PoCATT&CK inferred

CVE-2024-6387: A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is …

sonicwall · sma 6200 firmware · EPSS 99.51% · Threat 77

Exploited in the wild · CISA KEVATT&CK inferred

D-Link DIR-823X Command Injection Vulnerability

D-Link · DIR-823X · EPSS 87.94% · Threat 77

Metasploit moduleExploit-DBPublic PoCATT&CK inferred

CVE-2024-43425: A flaw was found in Moodle. Additional restrictions are required to avoid a remote code ex…

moodle · moodle · EPSS 87.54% · Threat 77

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred

Paessler PRTG Network Monitor OS Command Injection Vulnerability

Paessler · PRTG Network Monitor · EPSS 87.00% · Threat 77

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred

Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability

Synacor · Zimbra Collaboration Suite (ZCS) · EPSS 81.04% · Threat 77

Public PoCATT&CK inferred

CVE-2026-21858: n8n is an open source workflow automation platform. Versions starting with 1.65.0 and belo…

n8n · n8n · EPSS 78.19% · Threat 77

HIGH 7.8Ransomware

Exploited in the wild · CISA KEVExploit-DBPublic PoCATT&CK inferred

Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability

Microsoft · Windows · EPSS 59.81% · Threat 77

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

ownCloud Improper Authentication Vulnerability

ownCloud · ownCloud · EPSS 43.19% · Threat 77

Exploit-DBATT&CK inferred

CVE-2025-1098: A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-ng…

Unknown · · EPSS 82.31% · Threat 76

Public PoCATT&CK inferred

CVE-2025-26794: Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote …

exim · exim · EPSS 77.49% · Threat 76

Public PoCATT&CK inferred

CVE-2025-6389: The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all ve…

Unknown · · EPSS 76.14% · Threat 76

Metasploit modulePublic PoCATT&CK inferred

CVE-2026-22200: Enhancesoft osTicket versions 1.18.x prior to 1.18.3 and 1.17.x prior to 1.17.7 contain an…

enhancesoft · osticket · EPSS 73.59% · Threat 76

Exploit-DBPublic PoCATT&CK inferred

CVE-2024-28000: Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache lit…

litespeedtech · litespeed cache · EPSS 68.27% · Threat 76

Exploit-DBPublic PoCATT&CK inferred

CVE-2025-55315: Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NE…

microsoft · asp.net core · EPSS 66.53% · Threat 76

Exploited in the wild · CISA KEVATT&CK inferred

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft · SQL Server · EPSS 57.27% · Threat 76

Metasploit moduleExploit-DBPublic PoCATT&CK inferred

CVE-2025-49132: Pterodactyl is a free, open-source game server management panel. Prior to version 1.11.11,…

Unknown · · EPSS 54.46% · Threat 76

CRITICAL 9.8Ransomware

Exploited in the wild · CISA KEVCTID-mapped

SonicWall SMA1000 Appliances Deserialization Vulnerability

SonicWall · SMA1000 Appliances · EPSS 23.43% · Threat 76

Metasploit moduleExploit-DBPublic PoCATT&CK inferred

CVE-2021-25094: The Tatsu WordPress plugin before 3.3.12 add_custom_font action can be used without prior …

brandexponents · tatsu · EPSS 83.23% · Threat 75

Exploited in the wild · CISA KEVATT&CK inferred

PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability

PTZOptics · PT30X-SDI/NDI Cameras · EPSS 79.84% · Threat 75

Public PoCATT&CK inferred

CVE-2025-21298: Windows OLE Remote Code Execution Vulnerability

microsoft · windows 10 1507 · EPSS 74.37% · Threat 75