CVEs: Public PoC, page 4
907 CVEs with public proof-of-concept code on GitHub that meets the quality bar, sorted by threat level then EPSS. Showing 361-480. Use search to combine filters.
Public proof-of-concept code can be fake or malicious. Verify before running, and only in an isolated lab. A PoC means exploit code is public, not that the CVE is exploited in the wild.
HIGH 7.8Ransomware
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-29824Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
Microsoft · Windows · EPSS 13.90% · Threat 63CRITICAL 9.2
Exploited in the wild · CISA KEVExploit-DBPublic PoCATT&CK inferred
CVE-2026-86060MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
MikroTik · RouterOS · EPSS 6.39% · Threat 63CRITICAL 9.3
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2026-42208BerriAI LiteLLM SQL Injection Vulnerability
BerriAI · LiteLLM · EPSS 5.77% · Threat 63CRITICAL 9.3
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2026-3055Citrix NetScaler Out-of-Bounds Read Vulnerability
Citrix · NetScaler · EPSS 4.04% · Threat 63CRITICAL 9.4
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-8875N-able N-Central Insecure Deserialization Vulnerability
N-able · N-Central · EPSS 1.90% · Threat 63CRITICAL 9.4
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-33634Aquasecurity Trivy Embedded Malicious Code Vulnerability
Aquasecurity · Trivy · EPSS 1.75% · Threat 63MEDIUM 5.9
Public PoCATT&CK inferred
CVE-2023-48795CVE-2023-48795: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 an…
openbsd · openssh · EPSS 93.55% · Threat 62HIGH 7.5
Public PoCATT&CK inferred
CVE-2025-55184CVE-2025-55184: A pre-authentication denial of service vulnerability exists in React Server Components ver…
facebook · react · EPSS 66.88% · Threat 62CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-1492CVE-2026-1492: The User Registration & Membership – Custom Registration Form Builder, Custom Login Form, …
Unknown · · EPSS 28.54% · Threat 62CRITICAL 10
Public PoCATT&CK inferred
CVE-2026-22557CVE-2026-22557: A malicious actor with access to the network could exploit a Path Traversal vulnerability …
Unknown · · EPSS 28.12% · Threat 62HIGH 7.8
Exploited in the wild · CISA KEVExploit-DBPublic PoCATT&CK inferred
CVE-2024-49138Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
Microsoft · Windows · EPSS 26.21% · Threat 62HIGH 7.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-20245Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
Cisco · Catalyst SD-WAN Manager · EPSS 25.32% · Threat 62HIGH 7.8
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2024-35250Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability
Microsoft · Windows · EPSS 25.22% · Threat 62HIGH 8.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2024-23222Apple Multiple Products WebKit Type Confusion Vulnerability
Apple · Multiple Products · EPSS 10.59% · Threat 62HIGH 8.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-43529Apple Multiple Products Use-After-Free WebKit Vulnerability
Apple · Multiple Products · EPSS 8.76% · Threat 62CRITICAL 9.3
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-94127F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
F5 · BIG-IP APM · EPSS 2.23% · Threat 62CRITICAL 9.4
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-102489Zammad GmbH Zammad Session Fixation Vulnerability
Zammad GmbH · Zammad · EPSS 1.26% · Threat 62CRITICAL 9.3
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-102764BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
BeyondTrust · Remote Support · EPSS 1.18% · Threat 62MEDIUM 5.6
Public PoCATT&CK inferred
CVE-2025-27636CVE-2025-27636: Bypass/Injection vulnerability in Apache Camel components under particular conditions. Th…
apache · camel · EPSS 97.06% · Threat 61HIGH 7.5
Public PoCATT&CK inferred
CVE-2025-55752CVE-2025-55752: Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced …
apache · tomcat · EPSS 64.41% · Threat 61HIGH 7.5
Public PoCATT&CK inferred
CVE-2025-62168CVE-2025-62168: Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact …
squid-cache · squid · EPSS 63.36% · Threat 61MEDIUM 5.4
Exploited in the wild · CISA KEVExploit-DBPublic PoCCTID-mapped
CVE-2025-24054Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability
Microsoft · Windows · EPSS 62.27% · Threat 61HIGH 7.5
Metasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2025-2011CVE-2025-2011: The Slider & Popup Builder by Depicter plugin for WordPress is vulnerable to generic SQL I…
Unknown · · EPSS 45.75% · Threat 61HIGH 8.7
Public PoCATT&CK inferred
CVE-2024-52301CVE-2024-52301: Laravel is a web application framework. When the register_argc_argv php directive is set t…
laravel · framework · EPSS 44.76% · Threat 61HIGH 8.2
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-68664CVE-2025-68664: LangChain is a framework for building agents and LLM-powered applications. Prior to versio…
langchain · langchain core · EPSS 42.93% · Threat 61CRITICAL 9.3
Public PoCATT&CK inferred
CVE-2024-42008CVE-2024-42008: A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() in Roundcube through…
roundcube · webmail · EPSS 34.21% · Threat 61HIGH 8.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-1097CVE-2025-1097: A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-ng…
Unknown · · EPSS 33.24% · Threat 61HIGH 7.5
Exploited in the wild · CISA KEVExploit-DBPublic PoCCTID-mapped
CVE-2025-30397Microsoft Windows Scripting Engine Type Confusion Vulnerability
Microsoft · Windows · EPSS 27.26% · Threat 61CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2025-6934CVE-2025-6934: The Opal Estate Pro – Property Management and Submission plugin for WordPress, used by the…
Unknown · · EPSS 25.37% · Threat 61HIGH 8.8
Exploited in the wild · CISA KEVPublic PoCCTID-mapped
CVE-2025-5419Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
Google · Chromium V8 · EPSS 7.82% · Threat 61MEDIUM 6.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2023-40028CVE-2023-40028: Ghost is an open source content management system. Versions prior to 5.59.1 are subject to…
ghost · ghost · EPSS 68.95% · Threat 60HIGH 7.3
Public PoCATT&CK inferred
CVE-2024-50340CVE-2024-50340: symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP ap…
Unknown · · EPSS 63.60% · Threat 60HIGH 8.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2019-13024CVE-2019-13024: Centreon 18.x before 18.10.6, 19.x before 19.04.3, and Centreon web before 2.8.29 allows t…
centreon · centreon · EPSS 31.64% · Threat 60CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2025-2005CVE-2025-2005: The Front End Users plugin for WordPress is vulnerable to arbitrary file uploads due to mi…
etoilewebdesign · front end users · EPSS 21.81% · Threat 60HIGH 8.1
Exploited in the wild · CISA KEVPublic PoCCTID-mapped
CVE-2025-6554Google Chromium V8 Type Confusion Vulnerability
Google · Chromium V8 · EPSS 14.14% · Threat 60HIGH 7.8Ransomware
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-60710Microsoft Windows Link Following Vulnerability
Microsoft · Windows · EPSS 4.61% · Threat 60HIGH 8.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-11645Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
Google · Chromium V8 · EPSS 2.44% · Threat 60HIGH 7.5
Public PoCATT&CK inferred
CVE-2024-46982CVE-2024-46982: Next.js is a React framework for building full-stack web applications. By sending a crafte…
vercel · next.js · EPSS 59.18% · Threat 59HIGH 8.8
Public PoCATT&CK inferred
CVE-2025-25064CVE-2025-25064: SQL injection vulnerability in the ZimbraSync Service SOAP endpoint in Zimbra Collaboratio…
synacor · zimbra collaboration suite · EPSS 36.73% · Threat 59CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-23550CVE-2026-23550: Incorrect Privilege Assignment vulnerability in Modular DS Modular DS modular-connector al…
Unknown · · EPSS 21.39% · Threat 59CRITICAL 10
Public PoCATT&CK inferred
CVE-2025-20265CVE-2025-20265: A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management…
cisco · secure firewall management center · EPSS 15.82% · Threat 59HIGH 8.3
Exploited in the wild · CISA KEVExploit-DBPublic PoCCTID-mapped
CVE-2025-2783Google Chromium Mojo Sandbox Escape Vulnerability
Google · Chromium Mojo · EPSS 9.24% · Threat 59CRITICAL 9.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-4631CVE-2026-4631: Cockpit's remote login feature passes user-supplied hostnames and usernames from the web i…
Unknown · · EPSS 9.22% · Threat 59CRITICAL 9.9
Exploit-DBPublic PoCATT&CK inferred
CVE-2024-39930CVE-2024-39930: The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/s…
gogs · gogs · EPSS 7.74% · Threat 59HIGH 8.6
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-34621Adobe Acrobat and Reader Prototype Pollution Vulnerability
Adobe · Acrobat and Reader · EPSS 2.18% · Threat 59HIGH 8.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-86950Apple Multiple Products Out-of-Bounds Write Vulnerability
Apple · Multiple Products · EPSS 1.24% · Threat 59HIGH 8.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-8452Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Citrix · NetScaler ADC and NetScaler Gateway · EPSS 1.01% · Threat 59HIGH 8.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-5281Google Dawn Use-After-Free Vulnerability
Google · Dawn · EPSS 0.70% · Threat 59HIGH 8.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-48543Android Runtime Use-After-Free Vulnerability
Android · Runtime · EPSS 0.63% · Threat 59HIGH 7.8Ransomware
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-33825Microsoft Defender Insufficient Granularity of Access Control Vulnerability
Microsoft · Defender · EPSS 0.40% · Threat 59HIGH 7.5
Public PoCATT&CK inferred
CVE-2024-38819CVE-2024-38819: Applications serving static resources through the functional web frameworks WebMvc.fn or W…
Unknown · · EPSS 56.04% · Threat 58CRITICAL 9.1
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-64459CVE-2025-64459: An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. The…
djangoproject · django · EPSS 19.26% · Threat 58CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2025-4322CVE-2025-4322: The Motors theme for WordPress is vulnerable to privilege escalation via account takeover …
Unknown · · EPSS 15.20% · Threat 58CRITICAL 9.3
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-58138CVE-2026-58138: Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vu…
Unknown · · EPSS 14.69% · Threat 58HIGH 7.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2023-36424Microsoft Windows Out-of-Bounds Read Vulnerability
Microsoft · Windows · EPSS 12.09% · Threat 58HIGH 8.4
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-48595Android Framework Integer Overflow Vulnerability
Android · Framework · EPSS 1.71% · Threat 58HIGH 8.6
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-21479Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
Qualcomm · Multiple Chipsets · EPSS 0.84% · Threat 58HIGH 8.5
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-54420LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability
LiteSpeed · cPanel Plugin · EPSS 0.81% · Threat 58MEDIUM 6.1
Metasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2023-41425CVE-2023-41425: Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote atta…
wondercms · wondercms · EPSS 54.31% · Threat 57CRITICAL 9.2
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-109618CVE-2026-109618: PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort ha…
php · php · EPSS 11.84% · Threat 57HIGH 7.8
Exploited in the wild · CISA KEVExploit-DBPublic PoCCTID-mapped
CVE-2025-21333Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability
Microsoft · Windows · EPSS 10.07% · Threat 57HIGH 7.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2023-41992Apple Multiple Products Kernel Privilege Escalation Vulnerability
Apple · Multiple Products · EPSS 9.52% · Threat 57HIGH 7.8
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2022-0995Linux Kernel Out-of-Bounds Write Vulnerability
Linux · Kernel · EPSS 8.86% · Threat 57HIGH 7.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-41244Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability
Broadcom · VMware Aria Operations and VMware Tools · EPSS 8.63% · Threat 57CRITICAL 9.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-32746CVE-2026-32746: telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Se…
gnu · inetutils · EPSS 2.54% · Threat 57CRITICAL 9.9
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-38526CVE-2026-38526: An authenticated arbitrary file upload vulnerability in the /admin/tinymce/upload endpoint…
Unknown · · EPSS 2.35% · Threat 57MEDIUM 5
Metasploit modulePublic PoCATT&CK inferred
CVE-2007-6750CVE-2007-6750: The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (d…
apache · http server · EPSS 70.53% · Threat 56HIGH 8.8
Public PoCATT&CK inferred
CVE-2025-53772CVE-2025-53772: Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute c…
microsoft · web deploy 4.0 · EPSS 27.75% · Threat 56HIGH 8.7
Public PoCATT&CK inferred
CVE-2025-59536CVE-2025-59536: Claude Code is an agentic coding tool. Versions before 1.0.111 were vulnerable to Code Inj…
anthropic · claude code · EPSS 27.21% · Threat 56HIGH 8.8
Public PoCATT&CK inferred
CVE-2025-54136CVE-2025-54136: Cursor is a code editor built for programming with AI. In versions 1.2.4 and below, attack…
anysphere · cursor · EPSS 26.73% · Threat 56HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-27654CVE-2026-27654: NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_dav_module module th…
f5 · nginx plus · EPSS 25.94% · Threat 56HIGH 8.8
Public PoCATT&CK inferred
CVE-2025-54918CVE-2025-54918: Improper authentication in Windows NTLM allows an authorized attacker to elevate privilege…
microsoft · windows 10 1507 · EPSS 25.28% · Threat 56CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2025-54123CVE-2025-54123: Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, the middlewa…
hoverfly · hoverfly · EPSS 10.54% · Threat 56CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2024-21534CVE-2024-21534: All versions of the package jsonpath-plus are vulnerable to Remote Code Execution (RCE) du…
Unknown · · EPSS 9.02% · Threat 56CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-19632CVE-2026-19632: The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress…
Unknown · · EPSS 8.96% · Threat 56HIGH 7.8
Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped
CVE-2023-0386Linux Kernel Improper Ownership Management Vulnerability
Linux · Kernel · EPSS 7.88% · Threat 56HIGH 7.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-24990Microsoft Windows Untrusted Pointer Dereference Vulnerability
Microsoft · Windows · EPSS 6.37% · Threat 56HIGH 7.8
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2022-0492Linux Kernel Improper Authentication Vulnerability
Linux · Kernel · EPSS 5.53% · Threat 56CRITICAL 9.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-48909CVE-2026-48909: SP LMS (com_splms) < 4.1.4 by JoomShaper deserializes user-controlled cookie data without …
Unknown · · EPSS 4.94% · Threat 56HIGH 8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-48384Git Link Following Vulnerability
Git · Git · EPSS 4.38% · Threat 56CRITICAL 9
Metasploit modulePublic PoCATT&CK inferred
CVE-2026-75604CVE-2026-75604: Next.js is a React framework for building full-stack web applications. From 13.4.0 until 1…
Unknown · · EPSS 2.10% · Threat 56HIGH 7.2
Exploit-DBPublic PoCATT&CK inferred
CVE-2020-14008CVE-2020-14008: Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user…
zohocorp · manageengine applications manager · EPSS 39.57% · Threat 55HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-25253CVE-2026-25253: OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a quer…
openclaw · openclaw · EPSS 24.43% · Threat 55HIGH 8.7
Public PoCATT&CK inferred
CVE-2024-53691CVE-2024-53691: A link following vulnerability has been reported to affect several QNAP operating system v…
qnap · qts · EPSS 23.76% · Threat 55HIGH 7.8
Metasploit modulePublic PoCATT&CK inferred
CVE-2024-48990CVE-2024-48990: Qualys discovered that needrestart, before version 3.8, allows local attackers to execute …
needrestart project · needrestart · EPSS 21.27% · Threat 55CRITICAL 9.1
Public PoCATT&CK inferred
CVE-2025-61686CVE-2025-61686: React Router is a router for React. In @react-router/node versions 7.0.0 through 7.9.3, @r…
shopify · react-router\/node · EPSS 17.35% · Threat 55CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-6279CVE-2026-6279: The Avada Builder (fusion-builder) plugin for WordPress is vulnerable to Unauthenticated R…
Unknown · · EPSS 7.22% · Threat 55CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2025-6058CVE-2025-6058: The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing f…
iqonic · wpbookit · EPSS 6.22% · Threat 55CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-15748CVE-2026-15748: The Forminator Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all ve…
Unknown · · EPSS 6.14% · Threat 55CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2025-3515CVE-2025-3515: The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerab…
codedropz · drag and drop multiple file upload - contact form 7 · EPSS 6.03% · Threat 55CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-14894CVE-2026-14894: The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary…
Unknown · · EPSS 5.09% · Threat 55CRITICAL 9.3
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-80428CVE-2026-80428: ILIAS before versions 9.22, 10.10, and 11.3 contains an unauthenticated PHP object injecti…
Unknown · · EPSS 4.67% · Threat 55CRITICAL 9.9
Public PoCATT&CK inferred
CVE-2024-0402CVE-2024-0402: An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.…
gitlab · gitlab · EPSS 3.78% · Threat 55HIGH 7.8
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2026-31431Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
Linux · Kernel · EPSS 3.44% · Threat 55CRITICAL 10
Public PoCATT&CK inferred
CVE-2026-57827CVE-2026-57827: Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.…
rsjoomla · rsfiles\! · EPSS 2.33% · Threat 55CRITICAL 10
Public PoCATT&CK inferred
CVE-2026-82222CVE-2026-82222: Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Ob…
Unknown · · EPSS 2.25% · Threat 55CRITICAL 10
Public PoCATT&CK inferred
CVE-2026-49777CVE-2026-49777: Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Prod…
Unknown · · EPSS 2.02% · Threat 55HIGH 8.8
Metasploit modulePublic PoCATT&CK inferred
CVE-2026-43503CVE-2026-43503: In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagat…
linux · linux kernel · EPSS 1.99% · Threat 55HIGH 7.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-11001CVE-2025-11001: 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulne…
7-zip · 7-zip · EPSS 27.39% · Threat 54MEDIUM 6.1
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-68461RoundCube Webmail Cross-site Scripting Vulnerability
Roundcube · Webmail · EPSS 26.84% · Threat 54HIGH 8.5
Public PoCATT&CK inferred
CVE-2025-31644CVE-2025-31644: When running in Appliance mode, a command injection vulnerability exists in an undisclosed…
f5 · big-ip access policy manager · EPSS 24.30% · Threat 54HIGH 8.8
Public PoCATT&CK inferred
CVE-2025-24801CVE-2025-24801: GLPI is a free asset and IT management software package. An authenticated user can upload …
glpi-project · glpi · EPSS 21.15% · Threat 54MEDIUM 6.5Ransomware
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2019-6693Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability
Fortinet · FortiOS · EPSS 6.64% · Threat 54HIGH 7.5
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-34486Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
Apache · Tomcat · EPSS 6.56% · Threat 54CRITICAL 9.1
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-18963CVE-2026-18963: A flaw was found in the reset-credentials flow of the keycloak-services component, which i…
Unknown · · EPSS 6.41% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2024-8381CVE-2024-8381: A potentially exploitable type confusion could be triggered when looking up a property nam…
mozilla · firefox · EPSS 4.40% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2024-47533CVE-2024-47533: Cobbler, a Linux installation server that allows for rapid setup of network installation e…
Unknown · · EPSS 4.00% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-3844CVE-2026-3844: The Breeze Cache plugin for WordPress is vulnerable to arbitrary file uploads due to missi…
Unknown · · EPSS 3.76% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-42589CVE-2026-42589: Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.31.0, Gotenberg's /f…
thecodingmachine · gotenberg · EPSS 3.67% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-19598CVE-2026-19598: The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege…
Unknown · · EPSS 3.52% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-90817CVE-2026-90817: An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough…
Unknown · · EPSS 3.32% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2024-32022CVE-2024-32022: Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to comman…
bmaltais · kohya ss · EPSS 3.11% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2024-54756CVE-2024-54756: A remote code execution (RCE) vulnerability in the ZScript function of ZDoom Team GZDoom v…
Unknown · · EPSS 3.09% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-8181CVE-2026-8181: The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative)…
Unknown · · EPSS 3.01% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-12227CVE-2026-12227: The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclu…
Unknown · · EPSS 2.87% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-44825CVE-2026-44825: Hardcoded credentials in the Basic Authentication setup tool (bin/solr auth enable) in Apa…
apache · solr · EPSS 2.84% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-20896CVE-2026-20896: Gitea Docker image versions up to and including 1.26.2 use REVERSE_PROXY_TRUSTED_PROXIES=*…
Unknown · · EPSS 2.76% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2025-4334CVE-2025-4334: The Simple User Registration plugin for WordPress is vulnerable to Privilege Escalation in…
najeebmedia · memberhero · EPSS 2.59% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-33032CVE-2026-33032: Nginx UI is a web user interface for the Nginx web server. In versions 2.3.5 and prior, th…
nginxui · nginx ui · EPSS 2.52% · Threat 54CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2022-46364