All CVEs, page 6
1724 CVEs, sorted by threat level then EPSS. Showing 601-720. Use search to combine filters.
CRITICAL 10
Public PoCATT&CK inferred
CVE-2026-22557CVE-2026-22557: A malicious actor with access to the network could exploit a Path Traversal vulnerability …
Unknown · · EPSS 28.12% · Threat 62HIGH 7.8
Exploited in the wild · CISA KEVExploit-DBPublic PoCATT&CK inferred
CVE-2024-49138Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
Microsoft · Windows · EPSS 26.21% · Threat 62HIGH 7.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-20245Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
Cisco · Catalyst SD-WAN Manager · EPSS 25.32% · Threat 62HIGH 7.8
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2024-35250Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability
Microsoft · Windows · EPSS 25.22% · Threat 62HIGH 8.1
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-23209Craft CMS Code Injection Vulnerability
Craft CMS · Craft CMS · EPSS 21.78% · Threat 62CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2025-32778CVE-2025-32778: Web-Check is an all-in-one OSINT tool for analyzing any website. A command injection vulne…
Unknown · · EPSS 19.55% · Threat 62CRITICAL 9.4
Metasploit moduleATT&CK inferred
CVE-2025-6793CVE-2025-6793: Marvell QConvergeConsole QLogicDownloadImpl Directory Traversal Arbitrary File Deletion an…
marvell · qconvergeconsole · EPSS 17.49% · Threat 62CRITICAL 10
Exploit-DBATT&CK inferred
CVE-2025-34040CVE-2025-34040: An arbitrary file upload vulnerability exists in the Zhiyuan OA platform via the wpsAssist…
Unknown · · EPSS 15.40% · Threat 62HIGH 8.8
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-6558Google Chromium ANGLE and GPU Improper Input Validation Vulnerability
Google · Chromium · EPSS 10.93% · Threat 62HIGH 8.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2024-23222Apple Multiple Products WebKit Type Confusion Vulnerability
Apple · Multiple Products · EPSS 10.59% · Threat 62HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2024-44308Apple Multiple Products Code Execution Vulnerability
Apple · Multiple Products · EPSS 10.16% · Threat 62CRITICAL 9.8
Metasploit moduleATT&CK inferred
CVE-2025-8489CVE-2025-8489: The King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elemen…
Unknown · · EPSS 9.61% · Threat 62HIGH 8.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-43529Apple Multiple Products Use-After-Free WebKit Vulnerability
Apple · Multiple Products · EPSS 8.76% · Threat 62HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-42016JFrog Artifactory Incorrect Authorization Vulnerability
JFrog · Artifactory · EPSS 8.64% · Threat 62CRITICAL 9.9
Metasploit moduleATT&CK inferred
CVE-2026-52806CVE-2026-52806: Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs allows authenticated…
Unknown · · EPSS 7.93% · Threat 62CRITICAL 10
Metasploit moduleATT&CK inferred
CVE-2026-41679CVE-2026-41679: Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a …
paperclip · paperclipai · EPSS 7.36% · Threat 62CRITICAL 10
Metasploit moduleATT&CK inferred
CVE-2025-24865CVE-2025-24865: The administrative web interface of mySCADA myPRO Manager can be accessed without authen…
myscada · mypro · EPSS 7.25% · Threat 62CRITICAL 9.3
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-61932Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability
Motex · LANSCOPE Endpoint Manager · EPSS 2.77% · Threat 62CRITICAL 9.3
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-53521F5 BIG-IP Stack-Based Buffer Overflow Vulnerability
F5 · BIG-IP · EPSS 2.30% · Threat 62CRITICAL 9.2
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-110447Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
Collabora · Collabora Online – Built-in CODE Server · EPSS 2.28% · Threat 62CRITICAL 9.3
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-94127F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
F5 · BIG-IP APM · EPSS 2.23% · Threat 62CRITICAL 9.3
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-45247Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability
Mirasvit · Mirasvit Full Page Cache Warmer · EPSS 2.08% · Threat 62CRITICAL 9.3
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-72529TrueConf Server Missing Authentication for Critical Function Vulnerability
TrueConf · Server · EPSS 1.46% · Threat 62CRITICAL 9.4
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-102489Zammad GmbH Zammad Session Fixation Vulnerability
Zammad GmbH · Zammad · EPSS 1.26% · Threat 62CRITICAL 9.3
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-59374ASUS Live Update Embedded Malicious Code Vulnerability
ASUS · Live Update · EPSS 1.20% · Threat 62CRITICAL 9.3
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-102764BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
BeyondTrust · Remote Support · EPSS 1.18% · Threat 62CRITICAL 9.3
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-8398Daemon Tools Lite Embedded Malicious Code Vulnerability
Daemon · Daemon Tools Lite · EPSS 0.96% · Threat 62CRITICAL 9.4
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-114625Arista VeloCloud Orchestrator SQL Injection Vulnerability
Arista · VeloCloud Orchestrator · EPSS 0.81% · Threat 62CRITICAL 9.4
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-102490Zammad GmbH Zammad Improper Privilege Management Vulnerability
Zammad GmbH · Zammad · EPSS 0.55% · Threat 62MEDIUM 5.6
Public PoCATT&CK inferred
CVE-2025-27636CVE-2025-27636: Bypass/Injection vulnerability in Apache Camel components under particular conditions. Th…
apache · camel · EPSS 97.06% · Threat 61HIGH 7.5
Public PoCATT&CK inferred
CVE-2025-55752CVE-2025-55752: Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced …
apache · tomcat · EPSS 64.41% · Threat 61HIGH 7.5
Public PoCATT&CK inferred
CVE-2025-62168CVE-2025-62168: Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact …
squid-cache · squid · EPSS 63.36% · Threat 61MEDIUM 5.4
Exploited in the wild · CISA KEVExploit-DBPublic PoCCTID-mapped
CVE-2025-24054Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability
Microsoft · Windows · EPSS 62.27% · Threat 61HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2023-0159CVE-2023-0159: The Extensive VC Addons for WPBakery page builder WordPress plugin before 1.9.1 does not v…
wprealize · extensive vc addons for wpbakery page builder · EPSS 55.46% · Threat 61HIGH 7.5
Metasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2025-2011CVE-2025-2011: The Slider & Popup Builder by Depicter plugin for WordPress is vulnerable to generic SQL I…
Unknown · · EPSS 45.75% · Threat 61HIGH 8.7
Public PoCATT&CK inferred
CVE-2024-52301CVE-2024-52301: Laravel is a web application framework. When the register_argc_argv php directive is set t…
laravel · framework · EPSS 44.76% · Threat 61MEDIUM 6.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-32201Microsoft SharePoint Server Improper Input Validation Vulnerability
Microsoft · SharePoint Server · EPSS 43.38% · Threat 61HIGH 8.2
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-68664CVE-2025-68664: LangChain is a framework for building agents and LLM-powered applications. Prior to versio…
langchain · langchain core · EPSS 42.93% · Threat 61HIGH 8.3
Exploit-DBATT&CK inferred
CVE-2024-0132CVE-2024-0132: NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) v…
nvidia · nvidia container toolkit · EPSS 40.84% · Threat 61CRITICAL 9.3
Public PoCATT&CK inferred
CVE-2024-42008CVE-2024-42008: A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() in Roundcube through…
roundcube · webmail · EPSS 34.21% · Threat 61HIGH 8.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-1097CVE-2025-1097: A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-ng…
Unknown · · EPSS 33.24% · Threat 61HIGH 7.5
Exploited in the wild · CISA KEVExploit-DBPublic PoCCTID-mapped
CVE-2025-30397Microsoft Windows Scripting Engine Type Confusion Vulnerability
Microsoft · Windows · EPSS 27.26% · Threat 61CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2025-6934CVE-2025-6934: The Opal Estate Pro – Property Management and Submission plugin for WordPress, used by the…
Unknown · · EPSS 25.37% · Threat 61HIGH 8.8
Metasploit moduleATT&CK inferred
CVE-2025-34510CVE-2025-34510: Sitecore Experience Manager (XM), Experience Platform (XP), and Experience Commerce (XC) v…
sitecore · experience commerce · EPSS 24.83% · Threat 61HIGH 8.1
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-22719Broadcom VMware Aria Operations Command Injection Vulnerability
Broadcom · VMware Aria Operations · EPSS 18.32% · Threat 61HIGH 8.1
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2021-44207Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability
Acclaim Systems · USAHERDS · EPSS 17.58% · Threat 61CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2023-26602CVE-2023-26602: ASUS ASMB8 iKVM firmware through 1.14.51 allows remote attackers to execute arbitrary code…
asus · asmb8-ikvm firmware · EPSS 17.40% · Threat 61CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2025-4094CVE-2025-4094: The DIGITS: WordPress Mobile Number Signup and Login WordPress plugin before 8.4.6.1 does …
unitedover · digits · EPSS 16.43% · Threat 61HIGH 8.8
Exploited in the wild · CISA KEVPublic PoCCTID-mapped
CVE-2025-5419Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
Google · Chromium V8 · EPSS 7.82% · Threat 61CRITICAL 9.8
Metasploit moduleATT&CK inferred
CVE-2026-29058CVE-2026-29058: AVideo is a video-sharing Platform software. Prior to version 7.0, an unauthenticated atta…
wwbn · avideo-encoder · EPSS 6.92% · Threat 61CRITICAL 9.8
Metasploit moduleATT&CK inferred
CVE-2024-55964CVE-2024-55964: An issue was discovered in Appsmith before 1.52. An incorrectly configured PostgreSQL inst…
appsmith · appsmith · EPSS 6.75% · Threat 61CRITICAL 9.8
Metasploit moduleATT&CK inferred
CVE-2026-93674CVE-2026-93674: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary c…
langflow · langflow · EPSS 6.24% · Threat 61CRITICAL 9.8
Metasploit moduleATT&CK inferred
CVE-2024-12029CVE-2024-12029: A remote code execution vulnerability exists in invoke-ai/invokeai versions 5.3.1 through …
Unknown · · EPSS 5.98% · Threat 61CRITICAL 9.8
Metasploit moduleExploit-DBATT&CK inferred
CVE-2026-29053CVE-2026-29053: Ghost is a Node.js content management system. From version 0.7.2 to 6.19.0, specifically c…
ghost · ghost · EPSS 5.10% · Threat 61HIGH 8.2Ransomware
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-22225VMware ESXi Arbitrary Write Vulnerability
VMware · ESXi · EPSS 1.02% · Threat 61MEDIUM 6.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2023-40028CVE-2023-40028: Ghost is an open source content management system. Versions prior to 5.59.1 are subject to…
ghost · ghost · EPSS 68.95% · Threat 60HIGH 7.3
Public PoCATT&CK inferred
CVE-2024-50340CVE-2024-50340: symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP ap…
Unknown · · EPSS 63.60% · Threat 60HIGH 8.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2019-13024CVE-2019-13024: Centreon 18.x before 18.10.6, 19.x before 19.04.3, and Centreon web before 2.8.29 allows t…
centreon · centreon · EPSS 31.64% · Threat 60HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2025-24514CVE-2025-24514: A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-ng…
Unknown · · EPSS 30.45% · Threat 60CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2025-2005CVE-2025-2005: The Front End Users plugin for WordPress is vulnerable to arbitrary file uploads due to mi…
etoilewebdesign · front end users · EPSS 21.81% · Threat 60HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2012-1854Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability
Microsoft · Visual Basic for Applications (VBA) · EPSS 20.87% · Threat 60CRITICAL 9.4
Exploit-DBATT&CK inferred
CVE-2024-6298CVE-2024-6298: Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series …
abb · aspect-ent-12 firmware · EPSS 19.01% · Threat 60HIGH 8.2
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-18577N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
N-able · N-central · EPSS 14.62% · Threat 60HIGH 8.1
Exploited in the wild · CISA KEVPublic PoCCTID-mapped
CVE-2025-6554Google Chromium V8 Type Confusion Vulnerability
Google · Chromium V8 · EPSS 14.14% · Threat 60CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2021-33216CVE-2021-33216: An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. An Undocum…
commscope · ruckus iot controller · EPSS 13.77% · Threat 60HIGH 7.2Ransomware
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-15410SonicWall SMA1000 Appliances Code Injection Vulnerability
SonicWall · SMA1000 Appliances · EPSS 11.79% · Threat 60CRITICAL 9.4
Metasploit moduleATT&CK inferred
CVE-2026-19681CVE-2026-19681: An authenticated command injection vulnerability exists in Security Center related to file…
tenable · security center · EPSS 9.94% · Threat 60HIGH 8.7
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-25108Soliton Systems K.K FileZen OS Command Injection Vulnerability
Soliton Systems K.K · FileZen · EPSS 5.25% · Threat 60HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-13223Google Chromium V8 Type Confusion Vulnerability
Google · Chromium V8 · EPSS 4.90% · Threat 60CRITICAL 9.8
Metasploit moduleATT&CK inferred
CVE-2026-27960CVE-2026-27960: OpenCTI is an open source platform for managing cyber threat intelligence knowledge and ob…
citeum · opencti · EPSS 4.68% · Threat 60HIGH 7.8Ransomware
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-60710Microsoft Windows Link Following Vulnerability
Microsoft · Windows · EPSS 4.61% · Threat 60CRITICAL 9.8
Metasploit moduleATT&CK inferred
CVE-2025-62521CVE-2025-62521: ChurchCRM is an open-source church management system. Prior to version 5.21.0, a pre-authe…
churchcrm · churchcrm · EPSS 4.51% · Threat 60HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2023-43000Apple Multiple products Use-After-Free Vulnerability
Apple · Multiple Products · EPSS 4.04% · Threat 60HIGH 8.8
Exploited in the wild · CISA KEVCTID-mapped
CVE-2024-20953Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
Oracle · Agile Product Lifecycle Management (PLM) · EPSS 3.93% · Threat 60HIGH 7.8Ransomware
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2021-43226Microsoft Windows Privilege Escalation Vulnerability
Microsoft · Windows · EPSS 3.28% · Threat 60HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2022-48503Apple Multiple Products Unspecified Vulnerability
Apple · Multiple Products · EPSS 3.21% · Threat 60HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-87491Google Chromium V8 Out of Bounds Write Vulnerability
Google · Chromium V8 · EPSS 3.14% · Threat 60CRITICAL 9.9
Metasploit moduleATT&CK inferred
CVE-2026-19295CVE-2026-19295: IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrar…
langflow · langflow · EPSS 3.00% · Threat 60CRITICAL 9.8
Metasploit moduleATT&CK inferred
CVE-2026-27966CVE-2026-27966: Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to ve…
langflow · langflow · EPSS 2.81% · Threat 60HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-7273Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
Zyxel · GS1900 Series Switches · EPSS 2.50% · Threat 60HIGH 8.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-11645Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
Google · Chromium V8 · EPSS 2.44% · Threat 60HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-3909Google Skia Out-of-Bounds Write Vulnerability
Google · Skia · EPSS 2.34% · Threat 60CRITICAL 9.8
Metasploit moduleATT&CK inferred
CVE-2026-77647CVE-2026-77647: SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as e…
Unknown · · EPSS 2.29% · Threat 60HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-65660Microsoft SharePoint Code Injection Vulnerability
Microsoft · SharePoint · EPSS 2.10% · Threat 60HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-27920Srimax Output Messenger Directory Traversal Vulnerability
Srimax · Output Messenger · EPSS 1.86% · Threat 60CRITICAL 10
Metasploit moduleATT&CK inferred
CVE-2026-10134CVE-2026-10134: IBM Langflow OSS 1.0.0 through 1.9.3 allows an attacker to read every secret available to …
langflow · langflow · EPSS 1.60% · Threat 60CRITICAL 10
Metasploit moduleATT&CK inferred
CVE-2026-45087CVE-2026-45087: Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2…
Unknown · · EPSS 1.39% · Threat 60CRITICAL 9.9
Metasploit moduleATT&CK inferred
CVE-2026-7873CVE-2026-7873: IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary …
langflow · langflow · EPSS 1.07% · Threat 60HIGH 7.5
Public PoCATT&CK inferred
CVE-2024-46982CVE-2024-46982: Next.js is a React framework for building full-stack web applications. By sending a crafte…
vercel · next.js · EPSS 59.18% · Threat 59HIGH 8.8
Public PoCATT&CK inferred
CVE-2025-25064CVE-2025-25064: SQL injection vulnerability in the ZimbraSync Service SOAP endpoint in Zimbra Collaboratio…
synacor · zimbra collaboration suite · EPSS 36.73% · Threat 59HIGH 8.7
Exploit-DBATT&CK inferred
CVE-2024-55661CVE-2024-55661: Laravel Pulse is a real-time application performance monitoring tool and dashboard for Lar…
laravel · pulse · EPSS 29.54% · Threat 59CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-23550CVE-2026-23550: Incorrect Privilege Assignment vulnerability in Modular DS Modular DS modular-connector al…
Unknown · · EPSS 21.39% · Threat 59HIGH 8.5
Metasploit moduleExploit-DBATT&CK inferred
CVE-2025-49619CVE-2025-49619: Skyvern through 0.1.85 is vulnerable to server-side template injection (SSTI) in the Promp…
Unknown · · EPSS 20.42% · Threat 59CRITICAL 9.4
Exploit-DBATT&CK inferred
CVE-2024-6209CVE-2024-6209: Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series …
abb · aspect-ent-12 firmware · EPSS 17.16% · Threat 59CRITICAL 9.3
Exploit-DBATT&CK inferred
CVE-2025-0868CVE-2025-0868: A vulnerability, that could result in Remote Code Execution (RCE), has been found in DocsG…
Unknown · · EPSS 17.09% · Threat 59CRITICAL 10
Public PoCATT&CK inferred
CVE-2025-20265CVE-2025-20265: A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management…
cisco · secure firewall management center · EPSS 15.82% · Threat 59CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2025-4524CVE-2025-4524: The Madara – Responsive and modern WordPress theme for manga sites theme for WordPress is …
Unknown · · EPSS 10.56% · Threat 59CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2026-28517CVE-2026-28517: openDCIM version 23.04, through commit 4467e9c4, contains an OS command injection vulnerab…
opendcim · opendcim · EPSS 9.40% · Threat 59CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2026-0926CVE-2026-0926: The Prodigy Commerce plugin for WordPress is vulnerable to Local File Inclusion in all ver…
Unknown · · EPSS 9.30% · Threat 59HIGH 8.3
Exploited in the wild · CISA KEVExploit-DBPublic PoCCTID-mapped
CVE-2025-2783Google Chromium Mojo Sandbox Escape Vulnerability
Google · Chromium Mojo · EPSS 9.24% · Threat 59CRITICAL 9.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-4631CVE-2026-4631: Cockpit's remote login feature passes user-supplied hostnames and usernames from the web i…
Unknown · · EPSS 9.22% · Threat 59CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2023-33362CVE-2023-33362: Piwigo 13.6.0 is vulnerable to SQL Injection via in the "profile" function.
piwigo · piwigo · EPSS 9.06% · Threat 59CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2018-11736CVE-2018-11736: An issue was discovered in Pluck before 4.7.7-dev2. /data/inc/images.php allows remote att…
pluck-cms · pluck · EPSS 8.44% · Threat 59CRITICAL 9.3
Metasploit moduleExploit-DBATT&CK inferred
CVE-2026-24479CVE-2026-24479: HUSTOF is an open source online judge based on PHP/C++/MySQL/Linux for ACM/ICPC and NOIP t…
hustoj · hustoj · EPSS 8.13% · Threat 59CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2025-2611CVE-2025-2611: The ICTBroadcast application unsafely passes session cookie data to shell processing, allo…
Unknown · · EPSS 8.10% · Threat 59CRITICAL 9.9
Exploit-DBPublic PoCATT&CK inferred
CVE-2024-39930CVE-2024-39930: The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/s…
gogs · gogs · EPSS 7.74% · Threat 59CRITICAL 9.9
Exploit-DBATT&CK inferred
CVE-2026-34156CVE-2026-34156: NocoBase is an AI-powered no-code/low-code platform for building business applications and…
nocobase · nocobase · EPSS 6.79% · Threat 59HIGH 8.6
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-30154reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability
reviewdog · action-setup GitHub Action · EPSS 2.48% · Threat 59HIGH 8.7
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-3928Commvault Web Server Unspecified Vulnerability
Commvault · Web Server · EPSS 2.48% · Threat 59HIGH 8.6
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-34621Adobe Acrobat and Reader Prototype Pollution Vulnerability
Adobe · Acrobat and Reader · EPSS 2.18% · Threat 59HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-31277Apple Multiple Products Buffer Overflow Vulnerability
Apple · Multiple Products · EPSS 1.66% · Threat 59HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-67277MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
MikroTik · RouterOS · EPSS 1.56% · Threat 59HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-96951Microsoft Windows Command Injection Vulnerability
Microsoft · Windows · EPSS 1.51% · Threat 59CRITICAL 9.8
Metasploit moduleATT&CK inferred
CVE-2026-28501CVE-2026-28501: WWBN AVideo is an open source video platform. Prior to version 24.0, an unauthenticated SQ…
wwbn · avideo · EPSS 1.45% · Threat 59HIGH 8.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-86950Apple Multiple Products Out-of-Bounds Write Vulnerability
Apple · Multiple Products · EPSS 1.24% · Threat 59HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-3910Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability
Google · Chromium V8 · EPSS 1.07% · Threat 59HIGH 8.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-8452Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Citrix · NetScaler ADC and NetScaler Gateway · EPSS 1.01% · Threat 59HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-59822BerriAI LiteLLM Improper Authentication Vulnerability
BerriAI · LiteLLM · EPSS 0.84% · Threat 59HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-53266Linux Kernel Out-of-Bounds Write Vulnerability
Linux · Kernel · EPSS 0.83% · Threat 59HIGH 8.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-5281