Skip to content

All CVEs, page 5

1724 CVEs, sorted by threat level then EPSS. Showing 481-600. Use search to combine filters.

Public PoCATT&CK inferred

CVE-2025-30065: Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions a…

apache · parquet java · EPSS 43.60% · Threat 67

Exploited in the wild · CISA KEVExploit-DBPublic PoCATT&CK inferred

WordPress Core Remote File Inclusion Vulnerability

WordPress · Core · EPSS 39.98% · Threat 67

Exploited in the wild · CISA KEVCTID-mapped

Trimble Cityworks Deserialization Vulnerability

Trimble · Cityworks · EPSS 31.09% · Threat 67

Exploited in the wild · CISA KEVATT&CK inferred

Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability

Palo Alto Networks · PAN-OS · EPSS 29.12% · Threat 67

Metasploit modulePublic PoCATT&CK inferred

CVE-2026-59774: Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository m…

Unknown · · EPSS 28.31% · Threat 67

Exploited in the wild · CISA KEVATT&CK inferred

Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability

Sierra Wireless · AirLink ALEOS · EPSS 27.26% · Threat 67

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Apple Multiple Products WebKit Use-After-Free Vulnerability

Apple · Multiple Products · EPSS 27.08% · Threat 67

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Citrix NetScaler Memory Overflow Vulnerability

Citrix · NetScaler · EPSS 20.28% · Threat 67

Exploited in the wild · CISA KEVATT&CK inferred

Lantronix EDS5000 Code Injection Vulnerability

Lantronix · EDS5000 · EPSS 19.96% · Threat 67

Exploited in the wild · CISA KEVATT&CK inferred

Sangoma Switchvox SQL Injection Vulnerability

Sangoma · Switchvox · EPSS 18.98% · Threat 67

Exploited in the wild · CISA KEVATT&CK inferred

Sophos XG Firewall Buffer Overflow Vulnerability

Sophos · XG Firewall · EPSS 10.67% · Threat 67

Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred

WordPress Core Interpretation Conflict Vulnerability

WordPress · Core · EPSS 10.65% · Threat 67

Exploited in the wild · CISA KEVCTID-mapped

GeoVision Devices OS Command Injection Vulnerability

GeoVision · Multiple Devices · EPSS 10.07% · Threat 67

Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred

SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

SonicWall · SMA1000 Appliances · EPSS 8.04% · Threat 67

CRITICAL 9.3Ransomware

Exploited in the wild · CISA KEVATT&CK inferred

Nx Console Embedded Malicious Code Vulnerability

Nx · Nx Console · EPSS 1.34% · Threat 67

Metasploit moduleExploit-DBATT&CK inferred

CVE-2024-8522: The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection …

thimpress · learnpress · EPSS 62.88% · Threat 66

Exploited in the wild · CISA KEVMetasploit moduleATT&CK inferred

Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability

Gladinet · CentreStack and Triofox · EPSS 53.30% · Threat 66

Exploit-DBPublic PoCATT&CK inferred

CVE-2026-23918: Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.…

apache · http server · EPSS 49.73% · Threat 66

Metasploit modulePublic PoCATT&CK inferred

CVE-2025-54988: Critical XXE in Apache Tika (tika-parser-pdf-module) in Apache Tika 1.13 through and inclu…

apache · tika · EPSS 47.95% · Threat 66

Metasploit moduleATT&CK inferred

CVE-2025-61678: FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. …

Unknown · · EPSS 44.01% · Threat 66

Exploited in the wild · CISA KEVATT&CK inferred

SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability

SolarWinds · Serv-U · EPSS 43.65% · Threat 66

Public PoCATT&CK inferred

CVE-2025-64155: An improper neutralization of special elements used in an os command ('os command injectio…

fortinet · fortisiem · EPSS 42.54% · Threat 66

Exploited in the wild · CISA KEVATT&CK inferred

Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

Cisco · IOS and IOS XE · EPSS 41.50% · Threat 66

Exploited in the wild · CISA KEVExploit-DBPublic PoCATT&CK inferred

Microsoft Win32K Privilege Escalation Vulnerability

Microsoft · Win32k · EPSS 41.19% · Threat 66

Public PoCATT&CK inferred

CVE-2025-10230: A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registr…

Unknown · · EPSS 39.77% · Threat 66

Exploited in the wild · CISA KEVExploit-DBATT&CK inferred

Cisco IOS Cross-Site Request Forgery Vulnerability

Cisco · IOS · EPSS 33.87% · Threat 66

Metasploit moduleATT&CK inferred

CVE-2026-0826: In certain scenarios when the admin has enabled Interactive Connectivity Establishment (IC…

Unknown · · EPSS 32.23% · Threat 66

Metasploit modulePublic PoCATT&CK inferred

CVE-2026-66066: Action Pack is a framework for handling and responding to web requests. In versions prior …

Unknown · · EPSS 27.86% · Threat 66

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

CVE-2026-104935

Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

Ivanti · Connect Secure · EPSS 25.98% · Threat 66

Exploited in the wild · CISA KEVATT&CK inferred

Microsoft Windows Shell Protection Mechanism Failure Vulnerability

Microsoft · Windows · EPSS 24.54% · Threat 66

Metasploit moduleATT&CK inferred

CVE-2026-0768: Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allow…

langflow · langflow · EPSS 23.09% · Threat 66

Exploited in the wild · CISA KEVCTID-mapped

Zyxel DSL CPE OS Command Injection Vulnerability

Zyxel · DSL CPE Devices · EPSS 22.89% · Threat 66

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Google Chromium Out of Bounds Memory Access Vulnerability

Google · Chromium · EPSS 22.33% · Threat 66

Exploited in the wild · CISA KEVExploit-DBATT&CK inferred

TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability

TP-Link · TL-WA855RE · EPSS 22.19% · Threat 66

HIGH 7.8Ransomware

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability

Microsoft · Windows · EPSS 22.18% · Threat 66

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8 · EPSS 6.06% · Threat 66

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

Adobe · Commerce and Magento · EPSS 3.95% · Threat 66

Exploited in the wild · CISA KEVCTID-mapped

Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability

Apple · Multiple Products · EPSS 3.85% · Threat 66

Exploited in the wild · CISA KEVATT&CK inferred

Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability

Quest · KACE Systems Management Appliance (SMA) · EPSS 2.49% · Threat 66

Exploited in the wild · CISA KEVATT&CK inferred

Kestra OSS OS Command Injection Vulnerability

Kestra · Kestra OSS · EPSS 2.10% · Threat 66

Exploited in the wild · CISA KEVATT&CK inferred

Ubiquiti UniFi OS Path Traversal Vulnerability

Ubiquiti · UniFi OS · EPSS 1.79% · Threat 66

Public PoCATT&CK inferred

CVE-2023-22047: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo…

oracle · peoplesoft enterprise · EPSS 76.98% · Threat 65

Exploit-DBATT&CK inferred

CVE-2025-6965: There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregat…

sqlite · sqlite · EPSS 73.30% · Threat 65

Public PoCATT&CK inferred

CVE-2025-15467: Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously cra…

openssl · openssl · EPSS 55.85% · Threat 65

Metasploit modulePublic PoCATT&CK inferred

CVE-2025-2563: The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users t…

wpeverest · user registration \& membership · EPSS 49.08% · Threat 65

Exploited in the wild · CISA KEVATT&CK inferred

Reolink RLC-410W IP Camera OS Command Injection Vulnerability

Reolink · RLC-410W IP Camera · EPSS 47.63% · Threat 65

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

SysAid · SysAid On-Prem · EPSS 42.61% · Threat 65

Metasploit modulePublic PoCATT&CK inferred

CVE-2025-61675: FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. …

Unknown · · EPSS 38.76% · Threat 65

Exploited in the wild · CISA KEVCTID-mapped

Zyxel DSL CPE OS Command Injection Vulnerability

Zyxel · DSL CPE Devices · EPSS 20.70% · Threat 65

Metasploit moduleExploit-DBPublic PoCATT&CK inferred

CVE-2025-34077: An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤ 3.7.1…

Unknown · · EPSS 16.38% · Threat 65

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

Atlassian · Multiple Products · EPSS 12.71% · Threat 65

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

MLflow Server-Side Request Forgery Vulnerability

MLflow · MLflow · EPSS 10.02% · Threat 65

Exploited in the wild · CISA KEVATT&CK inferred

Cisco Unified Communications Products Code Injection Vulnerability

Cisco · Unified Communications Manager · EPSS 4.54% · Threat 65

Exploited in the wild · CISA KEVATT&CK inferred

Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability

Fortinet · Multiple Products · EPSS 3.80% · Threat 65

Exploited in the wild · CISA KEVATT&CK inferred

Array Networks ArrayOS AG OS Command Injection Vulnerability

Array Networks · ArrayOS AG · EPSS 3.42% · Threat 65

Exploited in the wild · CISA KEVCTID-mapped

Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability

Qualitia · Active! Mail · EPSS 3.36% · Threat 65

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Microsoft · SharePoint · EPSS 3.04% · Threat 65

Exploited in the wild · CISA KEVATT&CK inferred

Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability

Linux · Kernel · EPSS 2.88% · Threat 65

HIGH 8.8Ransomware

Exploited in the wild · CISA KEVATT&CK inferred

Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability

Microsoft · SharePoint Server · EPSS 2.70% · Threat 65

Exploited in the wild · CISA KEVATT&CK inferred

Samsung Mobile Devices Out-of-Bounds Write Vulnerability

Samsung · Mobile Devices · EPSS 2.22% · Threat 65

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

CVE-2026-104286

Fortinet FortiMail Path Traversal Vulnerability

Fortinet · FortiMail · EPSS 2.20% · Threat 65

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability

Cisco · Catalyst SD-WAN Manager · EPSS 1.82% · Threat 65

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Apple macOS Improper Authentication Vulnerability

Apple · macOS · EPSS 1.72% · Threat 65

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

LiteSpeed cPanel Plugin Privilege Escalation Vulnerability

LiteSpeed · cPanel Plugin · EPSS 1.01% · Threat 65

Exploited in the wild · CISA KEVATT&CK inferred

Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability

Arista · VeloCloud Orchestrator · EPSS 1.00% · Threat 65

Exploited in the wild · CISA KEVATT&CK inferred

ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability

ConnectWise · ScreenConnect · EPSS 0.92% · Threat 65

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

WSO2 Multiple Products Path Traversal Vulnerability

WSO2 · Multiple Products · EPSS 0.59% · Threat 65

Exploit-DBPublic PoCATT&CK inferred

CVE-2019-11358: jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuer…

jquery · jquery · EPSS 86.82% · Threat 64

Public PoCATT&CK inferred

CVE-2025-49596: The MCP inspector is a developer tool for testing and debugging MCP servers. Versions of M…

Unknown · · EPSS 44.45% · Threat 64

Public PoCATT&CK inferred

CVE-2024-51482: ZoneMinder is a free, open source closed-circuit television software application. ZoneMind…

Unknown · · EPSS 36.61% · Threat 64

Public PoCATT&CK inferred

CVE-2024-9932: The Wux Blog Editor plugin for WordPress is vulnerable to arbitrary file uploads due to in…

Unknown · · EPSS 36.39% · Threat 64

Public PoCATT&CK inferred

CVE-2026-1357: The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulner…

Unknown · · EPSS 35.12% · Threat 64

Exploited in the wild · CISA KEVATT&CK inferred

Adobe Acrobat Use-After-Free Vulnerability

Adobe · Acrobat · EPSS 33.49% · Threat 64

HIGH 7Ransomware

Exploited in the wild · CISA KEVExploit-DBATT&CK inferred

Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

Microsoft · Windows · EPSS 30.39% · Threat 64

Exploited in the wild · CISA KEVPublic PoCCTID-mapped

FreeType Out-of-Bounds Write Vulnerability

FreeType · FreeType · EPSS 27.77% · Threat 64

Exploit-DBATT&CK inferred

CVE-2019-25024: OpenRepeater (ORP) before 2.2 allows unauthenticated command injection via shell metachara…

alleghenycreative · openrepeater · EPSS 27.63% · Threat 64

Metasploit moduleATT&CK inferred

CVE-2026-22778: vLLM is an inference and serving engine for large language models (LLMs). From 0.8.3 to be…

vllm · vllm · EPSS 16.70% · Threat 64

Metasploit modulePublic PoCATT&CK inferred

CVE-2024-39205: An issue in pyload-ng v0.5.0b3.dev85 running under python3.11 or below allows attackers to…

Unknown · · EPSS 16.54% · Threat 64

Exploited in the wild · CISA KEVATT&CK inferred

Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability

Microsoft · Windows · EPSS 15.85% · Threat 64

Metasploit moduleATT&CK inferred

CVE-2024-51978: An unauthenticated attacker who knows the target device's serial number, can generate the …

Unknown · · EPSS 15.83% · Threat 64

Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred

Apache ActiveMQ Improper Input Validation Vulnerability

Apache · ActiveMQ · EPSS 15.49% · Threat 64

Exploited in the wild · CISA KEVPublic PoCCTID-mapped

Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability

Citrix · NetScaler ADC and Gateway · EPSS 10.56% · Threat 64

Exploited in the wild · CISA KEVMetasploit moduleATT&CK inferred

SimpleHelp Authentication Bypass Vulnerability

SimpleHelp · SimpleHelp · EPSS 5.72% · Threat 64

Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Citrix · NetScaler · EPSS 5.30% · Threat 64

Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred

Citrix NetScaler Improper Input Validation Vulnerability

Citrix · NetScaler · EPSS 5.11% · Threat 64

Exploited in the wild · CISA KEVATT&CK inferred

Microsoft Power Pages Improper Access Control Vulnerability

Microsoft · Power Pages · EPSS 1.62% · Threat 64

Exploited in the wild · CISA KEVATT&CK inferred

Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability

Microsoft · Internet Key Exchange (IKE) Service Extensions · EPSS 1.62% · Threat 64

Exploited in the wild · CISA KEVATT&CK inferred

Cisco Secure Email Gateway Relative Path Traversal Vulnerability

Cisco · Secure Email Gateway · EPSS 1.57% · Threat 64

Exploited in the wild · CISA KEVCTID-mapped

Microsoft Partner Center Improper Access Control Vulnerability

Microsoft · Partner Center · EPSS 1.30% · Threat 64

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

Microsoft · SharePoint Server · EPSS 1.01% · Threat 64

Exploited in the wild · CISA KEVATT&CK inferred

Oracle E-Business Suite Improper Privilege Management Vulnerability

Oracle · E-Business Suite · EPSS 0.81% · Threat 64

Metasploit moduleExploit-DBPublic PoCATT&CK inferred

CVE-2023-4220: Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/big…

chamilo · chamilo lms · EPSS 76.08% · Threat 63

Exploit-DBPublic PoCATT&CK inferred

CVE-2025-31650: Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for som…

apache · tomcat · EPSS 61.32% · Threat 63

Exploited in the wild · CISA KEVCTID-mapped

Mitel SIP Phones Argument Injection Vulnerability

Mitel · SIP Phones · EPSS 41.65% · Threat 63

Exploit-DBATT&CK inferred

CVE-2020-5504: In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts…

phpmyadmin · phpmyadmin · EPSS 39.04% · Threat 63

Exploited in the wild · CISA KEVATT&CK inferred

GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability

GitLab · Community and Enterprise Editions · EPSS 36.14% · Threat 63

Public PoCATT&CK inferred

CVE-2025-6440: The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company &…

Unknown · · EPSS 33.34% · Threat 63

Public PoCATT&CK inferred

CVE-2025-68926: RustFS is a distributed object storage system built in Rust. In versions prior to 1.0.0-al…

rustfs · rustfs · EPSS 31.85% · Threat 63

Public PoCATT&CK inferred

CVE-2024-50379: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in …

apache · tomcat · EPSS 31.82% · Threat 63

Metasploit moduleATT&CK inferred

CVE-2025-34511: Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager (XM) and Experien…

sitecore · experience commerce · EPSS 30.45% · Threat 63

Exploited in the wild · CISA KEVExploit-DBPublic PoCATT&CK inferred

Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability

Microsoft · Windows · EPSS 28.74% · Threat 63

Exploit-DBATT&CK inferred

CVE-2021-44567: An unauthenticated SQL Injection vulnerability exists in RosarioSIS before 7.6.1 via the v…

rosariosis · rosariosis · EPSS 23.08% · Threat 63

HIGH 7.8Ransomware

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

Microsoft · Windows · EPSS 13.90% · Threat 63

Exploited in the wild · CISA KEVATT&CK inferred

Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability

Sitecore · CMS and Experience Platform (XP) · EPSS 13.79% · Threat 63

HIGH 8.1Ransomware

Exploited in the wild · CISA KEVATT&CK inferred

Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

Fortinet · FortiOS and FortiProxy · EPSS 7.23% · Threat 63

Exploited in the wild · CISA KEVExploit-DBPublic PoCATT&CK inferred

MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability

MikroTik · RouterOS · EPSS 6.39% · Threat 63

Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred

BerriAI LiteLLM SQL Injection Vulnerability

BerriAI · LiteLLM · EPSS 5.77% · Threat 63

Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred

Citrix NetScaler Out-of-Bounds Read Vulnerability

Citrix · NetScaler · EPSS 4.04% · Threat 63

Exploited in the wild · CISA KEVATT&CK inferred

N-able N-Central Command Injection Vulnerability

N-able · N-Central · EPSS 3.45% · Threat 63

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

N-able N-Central Insecure Deserialization Vulnerability

N-able · N-Central · EPSS 1.90% · Threat 63

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Aquasecurity Trivy Embedded Malicious Code Vulnerability

Aquasecurity · Trivy · EPSS 1.75% · Threat 63

Exploited in the wild · CISA KEVATT&CK inferred

TrueConf Server Code Injection Vulnerability

TrueConf · Server · EPSS 1.69% · Threat 63

Exploited in the wild · CISA KEVATT&CK inferred

Arista VeloCloud Orchestrator Improper Input Validation Vulnerability

Arista · VeloCloud Orchestrator · EPSS 1.06% · Threat 63

Public PoCATT&CK inferred

CVE-2023-48795: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 an…

openbsd · openssh · EPSS 93.55% · Threat 62

Public PoCATT&CK inferred

CVE-2025-55184: A pre-authentication denial of service vulnerability exists in React Server Components ver…

facebook · react · EPSS 66.88% · Threat 62

Exploited in the wild · CISA KEVATT&CK inferred

Reolink Multiple IP Cameras OS Command Injection Vulnerability

Reolink · Multiple IP Cameras · EPSS 37.54% · Threat 62

Metasploit moduleATT&CK inferred

CVE-2025-11700: N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection lea…

n-able · n-central · EPSS 31.68% · Threat 62

Exploited in the wild · CISA KEVATT&CK inferred

Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Cisco · Catalyst SD-WAN Manager · EPSS 31.48% · Threat 62

Metasploit moduleATT&CK inferred

CVE-2025-57790: A security vulnerability has been identified that allows remote attackers to perform unaut…

commvault · commvault · EPSS 28.98% · Threat 62

Public PoCATT&CK inferred

CVE-2026-1492: The User Registration & Membership – Custom Registration Form Builder, Custom Login Form, …

Unknown · · EPSS 28.54% · Threat 62