All CVEs, page 8
1724 CVEs, sorted by threat level then EPSS. Showing 841-960. Use search to combine filters.
CRITICAL 9.1
Public PoCATT&CK inferred
CVE-2025-61686CVE-2025-61686: React Router is a router for React. In @react-router/node versions 7.0.0 through 7.9.3, @r…
shopify · react-router\/node · EPSS 17.35% · Threat 55HIGH 7.2
Exploited in the wild · CISA KEVCTID-mapped
CVE-2024-12686BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability
BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS) · EPSS 13.70% · Threat 55HIGH 8.1
Metasploit moduleExploit-DBATT&CK inferred
CVE-2025-50286CVE-2025-50286: A Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authenticated ad…
getgrav · grav · EPSS 13.64% · Threat 55HIGH 7.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-42018JFrog Artifactory Improper Authentication Vulnerability
JFrog · Artifactory · EPSS 9.80% · Threat 55HIGH 7.4
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBATT&CK inferred
CVE-2015-3246Red Hat Libuser Race Condition Vulnerability
Red Hat · Libuser · EPSS 8.50% · Threat 55HIGH 7.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-20128Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
Cisco · Catalyst SD-WAN Manager · EPSS 7.32% · Threat 55CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-6279CVE-2026-6279: The Avada Builder (fusion-builder) plugin for WordPress is vulnerable to Unauthenticated R…
Unknown · · EPSS 7.22% · Threat 55CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2025-6058CVE-2025-6058: The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing f…
iqonic · wpbookit · EPSS 6.22% · Threat 55CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-15748CVE-2026-15748: The Forminator Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all ve…
Unknown · · EPSS 6.14% · Threat 55CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2025-3515CVE-2025-3515: The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerab…
codedropz · drag and drop multiple file upload - contact form 7 · EPSS 6.03% · Threat 55CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-14894CVE-2026-14894: The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary…
Unknown · · EPSS 5.09% · Threat 55CRITICAL 9.3
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-80428CVE-2026-80428: ILIAS before versions 9.22, 10.10, and 11.3 contains an unauthenticated PHP object injecti…
Unknown · · EPSS 4.67% · Threat 55HIGH 8.8
Metasploit moduleATT&CK inferred
CVE-2025-30004CVE-2025-30004: Xorcom CompletePBX is vulnerable to command injection in the administrator Task Scheduler …
xorcom · completepbx · EPSS 4.31% · Threat 55HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-21533Microsoft Windows Improper Privilege Management Vulnerability
Microsoft · Windows · EPSS 4.15% · Threat 55HIGH 7.8
Exploited in the wild · CISA KEVCTID-mapped
CVE-2024-53197Linux Kernel Out-of-Bounds Access Vulnerability
Linux · Kernel · EPSS 4.12% · Threat 55HIGH 7.8
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-24985Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability
Microsoft · Windows · EPSS 3.89% · Threat 55CRITICAL 9.4
Exploit-DBATT&CK inferred
CVE-2026-44262CVE-2026-44262: Scramble generates API documentation for Laravel project. From 0.13.2 to before 0.13.22, w…
Unknown · · EPSS 3.87% · Threat 55CRITICAL 9.9
Public PoCATT&CK inferred
CVE-2024-0402CVE-2024-0402: An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.…
gitlab · gitlab · EPSS 3.78% · Threat 55CRITICAL 9.3
Exploit-DBATT&CK inferred
CVE-2026-49952CVE-2026-49952: Discuz! X5.0 releases 20260320 through 20260501 contains an authentication bypass vulnerab…
Unknown · · EPSS 3.65% · Threat 55HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-85880Microsoft Windows Heap-Based Buffer Overflow Vulnerability
Microsoft · Windows · EPSS 3.62% · Threat 55HIGH 7.8
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2026-31431Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
Linux · Kernel · EPSS 3.44% · Threat 55HIGH 7.8
Exploited in the wild · CISA KEVCTID-mapped
CVE-2024-53104Linux Kernel Out-of-Bounds Write Vulnerability
Linux · Kernel · EPSS 3.40% · Threat 55HIGH 8.8
Metasploit moduleATT&CK inferred
CVE-2024-48594CVE-2024-48594: File Upload vulnerability in Prison Management System v.1.0 allows a remote attacker to ex…
fast5 · prison management system · EPSS 3.37% · Threat 55HIGH 8.8
Metasploit moduleATT&CK inferred
CVE-2022-2297CVE-2022-2297: A vulnerability, which was classified as critical, was found in SourceCodester Clinics Pat…
oretnom23 · clinic\'s patient management system · EPSS 3.37% · Threat 55HIGH 8.8
Metasploit moduleATT&CK inferred
CVE-2026-34413CVE-2026-34413: Xerte Online Toolkits versions 3.15 and earlier contain a missing authentication vulnerabi…
Unknown · · EPSS 3.07% · Threat 55HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-59230Microsoft Windows Improper Access Control Vulnerability
Microsoft · Windows · EPSS 2.66% · Threat 55HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-62221Microsoft Windows Use After Free Vulnerability
Microsoft · Windows · EPSS 2.50% · Threat 55HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-21519Microsoft Windows Type Confusion Vulnerability
Microsoft · Windows · EPSS 2.48% · Threat 55HIGH 8.8
Metasploit moduleATT&CK inferred
CVE-2026-27636CVE-2026-27636: FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior t…
freescout · freescout · EPSS 2.36% · Threat 55HIGH 7.8
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-32706Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
Microsoft · Windows · EPSS 2.33% · Threat 55CRITICAL 10
Public PoCATT&CK inferred
CVE-2026-57827CVE-2026-57827: Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.…
rsjoomla · rsfiles\! · EPSS 2.33% · Threat 55HIGH 8.8
Metasploit moduleATT&CK inferred
CVE-2025-69516CVE-2025-69516: A Server-Side Template Injection (SSTI) vulnerability in the /reporting/templates/preview/…
amidaware · tactical rmm · EPSS 2.31% · Threat 55CRITICAL 10
Public PoCATT&CK inferred
CVE-2026-82222CVE-2026-82222: Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Ob…
Unknown · · EPSS 2.25% · Threat 55HIGH 7.8
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-24993Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability
Microsoft · Windows · EPSS 2.22% · Threat 55CRITICAL 10
Public PoCATT&CK inferred
CVE-2026-49777CVE-2026-49777: Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Prod…
Unknown · · EPSS 2.02% · Threat 55HIGH 8.8
Metasploit modulePublic PoCATT&CK inferred
CVE-2026-43503CVE-2026-43503: In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagat…
linux · linux kernel · EPSS 1.99% · Threat 55HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2023-41974Apple iOS and iPadOS Use-After-Free Vulnerability
Apple · iOS and iPadOS · EPSS 1.96% · Threat 55HIGH 7.8
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-30400Microsoft Windows DWM Core Library Use-After-Free Vulnerability
Microsoft · Windows · EPSS 1.92% · Threat 55HIGH 7.8
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-32709Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
Microsoft · Windows · EPSS 1.82% · Threat 55HIGH 8.8
Metasploit moduleATT&CK inferred
CVE-2026-18729CVE-2026-18729: IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execu…
langflow · langflow · EPSS 1.78% · Threat 55CRITICAL 9.4
Exploit-DBATT&CK inferred
CVE-2025-8311CVE-2025-8311: dotCMS versions 24.03.22 and after, identified a Boolean-based blind SQLi vulnerability in…
Unknown · · EPSS 1.71% · Threat 55CRITICAL 9
Metasploit moduleATT&CK inferred
CVE-2025-62368CVE-2025-62368: Taiga is an open source project management platform. In versions 6.8.3 and earlier, a remo…
Unknown · · EPSS 1.55% · Threat 55CRITICAL 9
Metasploit moduleATT&CK inferred
CVE-2025-12548CVE-2025-12548: A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticate…
Unknown · · EPSS 1.30% · Threat 55HIGH 7.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-11001CVE-2025-11001: 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulne…
7-zip · 7-zip · EPSS 27.39% · Threat 54MEDIUM 6.1
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-68461RoundCube Webmail Cross-site Scripting Vulnerability
Roundcube · Webmail · EPSS 26.84% · Threat 54HIGH 8.5
Public PoCATT&CK inferred
CVE-2025-31644CVE-2025-31644: When running in Appliance mode, a command injection vulnerability exists in an undisclosed…
f5 · big-ip access policy manager · EPSS 24.30% · Threat 54HIGH 8.8
Public PoCATT&CK inferred
CVE-2025-24801CVE-2025-24801: GLPI is a free asset and IT management software package. An authenticated user can upload …
glpi-project · glpi · EPSS 21.15% · Threat 54MEDIUM 6.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2023-50224TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability
TP-Link · TL-WR841N · EPSS 20.02% · Threat 54HIGH 8.5
Exploit-DBATT&CK inferred
CVE-2024-9054CVE-2024-9054: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…
microchip · timeprovider 4100 firmware · EPSS 15.63% · Threat 54HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2026-27483CVE-2026-27483: MindsDB is a platform for building artificial intelligence from enterprise data. Prior to …
mindsdb · mindsdb · EPSS 9.83% · Threat 54HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2025-52089CVE-2025-52089: A hidden remote support feature protected by a static secret in TOTOLINK N300RB firmware v…
totolink · n300rb firmware · EPSS 9.69% · Threat 54MEDIUM 6.5Ransomware
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2019-6693Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability
Fortinet · FortiOS · EPSS 6.64% · Threat 54HIGH 7.5
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-34486Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
Apache · Tomcat · EPSS 6.56% · Threat 54CRITICAL 9.1
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-18963CVE-2026-18963: A flaw was found in the reset-credentials flow of the keycloak-services component, which i…
Unknown · · EPSS 6.41% · Threat 54CRITICAL 9.1
Exploit-DBATT&CK inferred
CVE-2024-30896CVE-2024-30896: InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default…
Unknown · · EPSS 5.31% · Threat 54HIGH 7.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-54313Prettier eslint-config-prettier Embedded Malicious Code Vulnerability
Prettier · eslint-config-prettier · EPSS 5.13% · Threat 54HIGH 7.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2023-45727North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability
North Grid · Proself · EPSS 4.82% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2024-8381CVE-2024-8381: A potentially exploitable type confusion could be triggered when looking up a property nam…
mozilla · firefox · EPSS 4.40% · Threat 54CRITICAL 9.1
Exploit-DBATT&CK inferred
CVE-2026-25643CVE-2026-25643: Frigate is a network video recorder (NVR) with realtime local object detection for IP came…
frigate · frigate · EPSS 4.16% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2024-47533CVE-2024-47533: Cobbler, a Linux installation server that allows for rapid setup of network installation e…
Unknown · · EPSS 4.00% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-3844CVE-2026-3844: The Breeze Cache plugin for WordPress is vulnerable to arbitrary file uploads due to missi…
Unknown · · EPSS 3.76% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-42589CVE-2026-42589: Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.31.0, Gotenberg's /f…
thecodingmachine · gotenberg · EPSS 3.67% · Threat 54CRITICAL 9.2
Exploit-DBATT&CK inferred
CVE-2026-58480CVE-2026-58480: Blocksy Companion Pro plugin for WordPress before 2.1.47 contains an unauthenticated arbit…
Unknown · · EPSS 3.57% · Threat 54CRITICAL 9.1
Exploit-DBATT&CK inferred
CVE-2026-36356CVE-2026-36356: The GoAhead web server on MeiG Smart FORGE_SLT711 devices (firmware MDM9607.LE.1.0-00110-S…
Unknown · · EPSS 3.56% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-19598CVE-2026-19598: The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege…
Unknown · · EPSS 3.52% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-90817CVE-2026-90817: An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough…
Unknown · · EPSS 3.32% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2024-32022CVE-2024-32022: Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to comman…
bmaltais · kohya ss · EPSS 3.11% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2024-54756CVE-2024-54756: A remote code execution (RCE) vulnerability in the ZScript function of ZDoom Team GZDoom v…
Unknown · · EPSS 3.09% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-8181CVE-2026-8181: The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative)…
Unknown · · EPSS 3.01% · Threat 54CRITICAL 9.3
Exploit-DBATT&CK inferred
CVE-2026-26335CVE-2026-26335: Calero VeraSMART versions prior to 2022 R1 use static ASP.NET/IIS machineKey values config…
calero · verasmart · EPSS 2.90% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-12227CVE-2026-12227: The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclu…
Unknown · · EPSS 2.87% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-44825CVE-2026-44825: Hardcoded credentials in the Basic Authentication setup tool (bin/solr auth enable) in Apa…
apache · solr · EPSS 2.84% · Threat 54CRITICAL 9.3
Exploit-DBATT&CK inferred
CVE-2024-48839CVE-2024-48839: Improper Input Validation vulnerability allows Remote Code Execution. Affected products: …
abb · aspect-ent-2 firmware · EPSS 2.83% · Threat 54HIGH 8.7
Metasploit moduleATT&CK inferred
CVE-2025-66294CVE-2025-66294: Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a Server-Side Template Injectio…
getgrav · grav · EPSS 2.82% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-20896CVE-2026-20896: Gitea Docker image versions up to and including 1.26.2 use REVERSE_PROXY_TRUSTED_PROXIES=*…
Unknown · · EPSS 2.76% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2025-4334CVE-2025-4334: The Simple User Registration plugin for WordPress is vulnerable to Privilege Escalation in…
najeebmedia · memberhero · EPSS 2.59% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-33032CVE-2026-33032: Nginx UI is a web user interface for the Nginx web server. In versions 2.3.5 and prior, th…
nginxui · nginx ui · EPSS 2.52% · Threat 54CRITICAL 9.3
Exploit-DBATT&CK inferred
CVE-2026-65008CVE-2026-65008: Grav 2.0.4 (fixed in 2.0.7) contains a remote code execution vulnerability in Blueprint::d…
Unknown · · EPSS 2.49% · Threat 54CRITICAL 9.3
Exploit-DBATT&CK inferred
CVE-2026-61459CVE-2026-61459: MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structu…
suyogs · mcp-server-kubernetes · EPSS 2.36% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2022-46364CVE-2022-46364: A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in vers…
apache · cxf · EPSS 2.31% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2025-24204CVE-2025-24204: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. A…
apple · macos · EPSS 2.29% · Threat 54CRITICAL 9.3
Exploit-DBATT&CK inferred
CVE-2024-48840CVE-2024-48840: Unauthorized Access vulnerabilities allow Remote Code Execution. Affected products: ABB…
abb · aspect-ent-2 firmware · EPSS 2.06% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2025-29384CVE-2025-29384: In Tenda AC9 v1.0 V15.03.05.14_multi, the wanMTU parameter of /goform/AdvSetMacMtuWan has …
tenda · ac9 firmware · EPSS 1.94% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-8732CVE-2026-8732: The WP Maps Pro plugin for WordPress is vulnerable to Privilege Escalation via Administrat…
Unknown · · EPSS 1.86% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2024-51793CVE-2024-51793: Unrestricted Upload of File with Dangerous Type vulnerability in Ateeq Rafeeq RepairBuddy …
webfulcreations · computer repair shop · EPSS 1.85% · Threat 54CRITICAL 9.3
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-9074CVE-2025-9074: A vulnerability was identified in Docker Desktop that allows local running Linux container…
Unknown · · EPSS 1.83% · Threat 54CRITICAL 9.3
Exploit-DBATT&CK inferred
CVE-2024-48845CVE-2024-48845: Weak Password Reset Rules vulnerabilities where found providing a potiential for the stor…
abb · aspect-ent-2 firmware · EPSS 1.82% · Threat 54CRITICAL 9.3
Exploit-DBATT&CK inferred
CVE-2024-51550CVE-2024-51550: Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsan…
abb · aspect-ent-12 firmware · EPSS 1.81% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-33937CVE-2026-33937: Handlebars provides the power necessary to let users build semantic templates. In versions…
handlebarsjs · handlebars · EPSS 1.80% · Threat 54HIGH 7.7
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-15556Notepad++ Download of Code Without Integrity Check Vulnerability
Notepad++ · Notepad++ · EPSS 1.77% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2025-12735CVE-2025-12735: The expr-eval library is a JavaScript expression parser and evaluator designed to safely e…
jorenbroekema · javascript expression evaluator · EPSS 1.76% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-4408CVE-2026-4408: A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file …
redhat · openshift container platform · EPSS 1.75% · Threat 54HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-21514Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability
Microsoft · Office · EPSS 1.59% · Threat 54HIGH 7.8
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-21334Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
Microsoft · Windows · EPSS 1.57% · Threat 54HIGH 7.8
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-21418Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability
Microsoft · Windows · EPSS 1.57% · Threat 54HIGH 7.8
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-32701Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
Microsoft · Windows · EPSS 1.42% · Threat 54HIGH 7.8
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-21335Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
Microsoft · Windows · EPSS 1.40% · Threat 54CRITICAL 9.3
Exploit-DBATT&CK inferred
CVE-2026-44225CVE-2026-44225: Pulpy is a lightweight, cross-platform desktop application packager for web apps. Prior to…
Unknown · · EPSS 1.40% · Threat 54HIGH 7.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-20700Apple Multiple Buffer Overflow Vulnerability
Apple · Multiple Products · EPSS 1.39% · Threat 54HIGH 7.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-38352Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability
Linux · Kernel · EPSS 1.36% · Threat 54HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-21385Qualcomm Multiple Chipsets Memory Corruption Vulnerability
Qualcomm · Multiple Chipsets · EPSS 1.29% · Threat 54CRITICAL 9.4
Exploit-DBATT&CK inferred
CVE-2026-61876CVE-2026-61876: LuCI versions fail to properly encode DHCPv6 lease hostnames before rendering in status ta…
Unknown · · EPSS 1.28% · Threat 54HIGH 8.8
Metasploit modulePublic PoCATT&CK inferred
CVE-2024-32019CVE-2024-32019: Netdata is an open source observability tool. In affected versions the `ndsudo` tool shipp…
Unknown · · EPSS 1.17% · Threat 54CRITICAL 9.3
Exploit-DBATT&CK inferred
CVE-2024-6516CVE-2024-6516: Cross Site Scripting vulnerabilities where found providing a potential for malicious scrip…
abb · aspect-ent-2 firmware · EPSS 1.08% · Threat 54CRITICAL 9.4
Exploit-DBATT&CK inferred
CVE-2025-62360CVE-2025-62360: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language u…
wegia · wegia · EPSS 0.89% · Threat 54CRITICAL 9.9
Public PoCATT&CK inferred
CVE-2026-67401CVE-2026-67401: A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution a…
Unknown · · EPSS 0.86% · Threat 54CRITICAL 10
Public PoCATT&CK inferred
CVE-2026-58231CVE-2026-58231: SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication cl…
Unknown · · EPSS 0.85% · Threat 54CRITICAL 9.9
Public PoCATT&CK inferred
CVE-2026-32710CVE-2026-32710: MariaDB server is a community developed fork of MySQL server. An authenticated user can cr…
mariadb · mariadb · EPSS 0.83% · Threat 54CRITICAL 9.4
Exploit-DBATT&CK inferred
CVE-2026-25047CVE-2026-25047: deepHas provides a test for the existence of a nested object key and optionally returns th…
sharpred · deephas · EPSS 0.81% · Threat 54CRITICAL 10
Public PoCATT&CK inferred
CVE-2026-22686CVE-2026-22686: Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to…
agentfront · enclave · EPSS 0.75% · Threat 54HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-53362Linux Kernel Unspecified Vulnerability
Linux · Kernel · EPSS 0.71% · Threat 54CRITICAL 10
Public PoCATT&CK inferred
CVE-2025-29009CVE-2025-29009: Unrestricted Upload of File with Dangerous Type vulnerability in Webkul Medical Prescripti…
Unknown · · EPSS 0.62% · Threat 54CRITICAL 10
Public PoCATT&CK inferred
CVE-2026-110264CVE-2026-110264: An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.…
Unknown · · EPSS 0.51% · Threat 54CRITICAL 10
Public PoCATT&CK inferred
CVE-2026-102255CVE-2026-102255: A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interfa…
Unknown · · EPSS 0.48% · Threat 54HIGH 7.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-41091Microsoft Defender Link Following Vulnerability
Microsoft · Defender · EPSS 0.44% · Threat 54CRITICAL 9.9
Public PoCATT&CK inferred
CVE-2026-60206CVE-2026-60206: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component…
oracle · weblogic server · EPSS 0.43% · Threat 54HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-81963Microsoft Windows Link Following Vulnerability
Microsoft · Windows · EPSS 0.39% · Threat 54HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-43510Apple Multiple Products Improper Locking Vulnerability
Apple · Multiple Products · EPSS 0.36% · Threat 54HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-56155Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
Microsoft · Active Directory Federation Services · EPSS 0.35% · Threat 54HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-3502