https://cveradar.org/Exploited vulnerabilities, mapped to MITRE ATT&CK, with fixes you can act on.en-us https://cveradar.org/blog/daily-brief-2026-10-25/https://cveradar.org/blog/daily-brief-2026-10-25/Sun, 25 Oct 2026 12:00:00 GMT6 vulnerabilities on today's radar, explained for business owners and MSPs. https://cveradar.org/blog/daily-brief-2026-10-24/https://cveradar.org/blog/daily-brief-2026-10-24/Sat, 24 Oct 2026 12:00:00 GMT6 vulnerabilities on today's radar, explained for business owners and MSPs. https://cveradar.org/blog/cve-2026-110447/https://cveradar.org/blog/cve-2026-110447/Fri, 23 Oct 2026 12:00:00 GMTCVE-2026-110447 affects Collabora Online – Built-in CODE Server; exploited in the wild. What it is, who is affected, and the steps to fix and verify it. https://cveradar.org/blog/cve-2026-114625/https://cveradar.org/blog/cve-2026-114625/Fri, 23 Oct 2026 12:00:00 GMTCVE-2026-114625 affects Arista VeloCloud Orchestrator; exploited in the wild. What it is, who is affected, and the steps to fix and verify it. https://cveradar.org/blog/cve-2026-109618/https://cveradar.org/blog/cve-2026-109618/Thu, 22 Oct 2026 12:00:00 GMTCVE-2026-109618 affects php; public exploit code is on Exploit-DB. What it is, who is affected, and the steps to fix and verify it. https://cveradar.org/blog/daily-brief-2026-10-22/https://cveradar.org/blog/daily-brief-2026-10-22/Thu, 22 Oct 2026 12:00:00 GMT6 vulnerabilities on today's radar, explained for business owners and MSPs. https://cveradar.org/blog/cve-2024-26503/https://cveradar.org/blog/cve-2024-26503/Wed, 21 Oct 2026 12:00:00 GMTCVE-2024-26503 affects openeclass; public exploit code is on Exploit-DB. What it is, who is affected, and the steps to fix and verify it. https://cveradar.org/blog/cve-2026-18963/https://cveradar.org/blog/cve-2026-18963/Wed, 21 Oct 2026 12:00:00 GMTCVE-2026-18963 affects CVE-2026-18963; public exploit code is on Exploit-DB. What it is, who is affected, and the steps to fix and verify it. https://cveradar.org/blog/cve-2026-106931/https://cveradar.org/blog/cve-2026-106931/Tue, 20 Oct 2026 12:00:00 GMTCVE-2026-106931 affects EG Secure Solutions SiteGuard Server Edition; exploited in the wild. What it is, who is affected, and the steps to fix and verify it. https://cveradar.org/blog/cve-2026-110936/https://cveradar.org/blog/cve-2026-110936/Tue, 20 Oct 2026 12:00:00 GMTCVE-2026-110936 affects Siemens Software Center; exploited in the wild. What it is, who is affected, and the steps to fix and verify it. https://cveradar.org/blog/cve-2026-96652/https://cveradar.org/blog/cve-2026-96652/Tue, 20 Oct 2026 12:00:00 GMTCVE-2026-96652 affects Plex Media Server; exploited in the wild. What it is, who is affected, and the steps to fix and verify it. https://cveradar.org/blog/cve-2026-96654/https://cveradar.org/blog/cve-2026-96654/Tue, 20 Oct 2026 12:00:00 GMTCVE-2026-96654 affects Plex Media Server; exploited in the wild. What it is, who is affected, and the steps to fix and verify it. https://cveradar.org/blog/cve-2026-96655/https://cveradar.org/blog/cve-2026-96655/Tue, 20 Oct 2026 12:00:00 GMTCVE-2026-96655 affects Plex Media Server; exploited in the wild. What it is, who is affected, and the steps to fix and verify it. https://cveradar.org/blog/cve-2026-96656/https://cveradar.org/blog/cve-2026-96656/Tue, 20 Oct 2026 12:00:00 GMTCVE-2026-96656 affects Plex Media Server; exploited in the wild. What it is, who is affected, and the steps to fix and verify it. https://cveradar.org/blog/cve-2025-61624/https://cveradar.org/blog/cve-2025-61624/Fri, 16 Oct 2026 12:00:00 GMTCVE-2025-61624 affects Fortinet Multiple Products; exploited in the wild. What it is, who is affected, and the steps to fix and verify it. https://cveradar.org/blog/cve-2026-102764/https://cveradar.org/blog/cve-2026-102764/Fri, 16 Oct 2026 12:00:00 GMTCVE-2026-102764 affects BeyondTrust Remote Support; exploited in the wild. What it is, who is affected, and the steps to fix and verify it. https://cveradar.org/blog/cve-2026-21589/https://cveradar.org/blog/cve-2026-21589/Thu, 15 Oct 2026 12:00:00 GMTCVE-2026-21589 affects Atlassian Multiple Products; exploited in the wild. What it is, who is affected, and the steps to fix and verify it. https://cveradar.org/blog/cve-2026-0322/https://cveradar.org/blog/cve-2026-0322/Wed, 14 Oct 2026 12:00:00 GMTCVE-2026-0322 affects Palo Alto Networks PAN-OS; exploited in the wild. What it is, who is affected, and the steps to fix and verify it. https://cveradar.org/blog/cve-2026-105133/https://cveradar.org/blog/cve-2026-105133/Wed, 14 Oct 2026 12:00:00 GMTCVE-2026-105133 affects AhsayCBS; exploited in the wild. What it is, who is affected, and the steps to fix and verify it. https://cveradar.org/blog/cve-2026-105134/https://cveradar.org/blog/cve-2026-105134/Wed, 14 Oct 2026 12:00:00 GMTCVE-2026-105134 affects AhsayCBS; exploited in the wild. What it is, who is affected, and the steps to fix and verify it. https://cveradar.org/cve/CVE-2026-110447/https://cveradar.org/cve/CVE-2026-110447/Sat, 24 Oct 2026 12:00:00 GMTCollabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66 https://cveradar.org/cve/CVE-2026-115806/https://cveradar.org/cve/CVE-2026-115806/Sat, 24 Oct 2026 12:00:00 GMTThe Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.2.1 via deserialization of untrusted input in the migration search-and-replace rou https://cveradar.org/cve/CVE-2026-114625/https://cveradar.org/cve/CVE-2026-114625/Sat, 24 Oct 2026 12:00:00 GMTVeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confi https://cveradar.org/cve/CVE-2022-51022/https://cveradar.org/cve/CVE-2022-51022/Sat, 24 Oct 2026 12:00:00 GMTYiShaAdmin 2.2 through 3.1, fixed in commit 025b062, contains an unauthenticated path traversal vulnerability in the /admin/File/DownloadFile endpoint that allows attackers to read and delete arbitrary files via the file https://cveradar.org/cve/CVE-2026-83938/https://cveradar.org/cve/CVE-2026-83938/Sat, 24 Oct 2026 12:00:00 GMTMissing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network. https://cveradar.org/cve/CVE-2022-51026/https://cveradar.org/cve/CVE-2022-51026/Sat, 24 Oct 2026 12:00:00 GMTBytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user. The flaw stems from trusting client-supplied GitLab provider configuration in the https://cveradar.org/cve/CVE-2026-97785/https://cveradar.org/cve/CVE-2026-97785/Sat, 24 Oct 2026 12:00:00 GMTImproper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network. https://cveradar.org/cve/CVE-2021-48016/https://cveradar.org/cve/CVE-2021-48016/Sat, 24 Oct 2026 12:00:00 GMTDedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg() where the HTTP Referer header is written into a DedeTemplate string and included. Unauthenticated attackers can send a crafted Referer t https://cveradar.org/cve/CVE-2026-115375/https://cveradar.org/cve/CVE-2026-115375/Sat, 24 Oct 2026 12:00:00 GMTIncus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a path traversal vulnerability that allows clients able to create instances to write files on the host. The flaw stems from unvalidated dependent custom volume nam https://cveradar.org/cve/CVE-2026-115377/https://cveradar.org/cve/CVE-2026-115377/Sat, 24 Oct 2026 12:00:00 GMTIncus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability that allows malicious migration sources to write host files by planting symlinks in transferred volumes. Attac https://cveradar.org/cve/CVE-2026-115384/https://cveradar.org/cve/CVE-2026-115384/Sat, 24 Oct 2026 12:00:00 GMTWasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a stack buffer overflow vulnerability that allows malicious guests to write ~16KB to the native stack via unvalidated async callback result types. Attackers https://cveradar.org/cve/CVE-2026-115995/https://cveradar.org/cve/CVE-2026-115995/Sat, 24 Oct 2026 12:00:00 GMTA security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the function set_volume of the file gpt_thread.py of the component chat_go. Such manipulation of the argu https://cveradar.org/cve/CVE-2026-114575/https://cveradar.org/cve/CVE-2026-114575/Thu, 22 Oct 2026 12:00:00 GMTA flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function UploadCustomModule of the file lib/cste_modules/product.so. Executing a manipulation of the argument FileMd5 can lea https://cveradar.org/cve/CVE-2026-111497/https://cveradar.org/cve/CVE-2026-111497/Thu, 22 Oct 2026 12:00:00 GMTA buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, dis https://cveradar.org/cve/CVE-2026-110264/https://cveradar.org/cve/CVE-2026-110264/Thu, 22 Oct 2026 12:00:00 GMTAn issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 th https://cveradar.org/cve/CVE-2026-91403/https://cveradar.org/cve/CVE-2026-91403/Thu, 22 Oct 2026 12:00:00 GMTVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11. https://cveradar.org/cve/CVE-2026-114220/https://cveradar.org/cve/CVE-2026-114220/Thu, 22 Oct 2026 12:00:00 GMTNT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerability. Unauthenticated network-adjacent attackers can perform a man-in-the-middle attack by failing to validate the server certifica https://cveradar.org/cve/CVE-2025-53770/https://cveradar.org/cve/CVE-2025-53770/Wed, 21 Oct 2026 12:00:00 GMTDeserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Micro https://cveradar.org/cve/CVE-2021-26086/https://cveradar.org/cve/CVE-2021-26086/Wed, 21 Oct 2026 12:00:00 GMTAffected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path traversal vulnerability in the /WEB-INF/web.xml endpoint. The affected versions are before version 8.5 https://cveradar.org/cve/CVE-2024-7593/https://cveradar.org/cve/CVE-2024-7593/Wed, 21 Oct 2026 12:00:00 GMTIncorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel. https://cveradar.org/cve/CVE-2024-23897/https://cveradar.org/cve/CVE-2024-23897/Wed, 21 Oct 2026 12:00:00 GMTJenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthentic https://cveradar.org/cve/CVE-2024-3400/https://cveradar.org/cve/CVE-2024-3400/Wed, 21 Oct 2026 12:00:00 GMTA command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an u https://cveradar.org/cve/CVE-2024-21893/https://cveradar.org/cve/CVE-2024-21893/Wed, 21 Oct 2026 12:00:00 GMTA server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access certain restricted resou https://cveradar.org/cve/CVE-2023-35082/https://cveradar.org/cve/CVE-2023-35082/Wed, 21 Oct 2026 12:00:00 GMTAn authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of the application without proper authentication. This vulnerability is uni https://cveradar.org/cve/CVE-2024-21887/https://cveradar.org/cve/CVE-2024-21887/Wed, 21 Oct 2026 12:00:00 GMTA command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send specially crafted requests and execute arbitrar https://cveradar.org/cve/CVE-2023-1671/https://cveradar.org/cve/CVE-2023-1671/Wed, 21 Oct 2026 12:00:00 GMTA pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code. https://cveradar.org/cve/CVE-2023-22518/https://cveradar.org/cve/CVE-2023-22518/Wed, 21 Oct 2026 12:00:00 GMTAll versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an unauthenticated attacker to reset Confluence and create a Confluence i https://cveradar.org/cve/CVE-2023-4966/https://cveradar.org/cve/CVE-2023-4966/Wed, 21 Oct 2026 12:00:00 GMTSensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA  virtual server. https://cveradar.org/cve/CVE-2023-44487/https://cveradar.org/cve/CVE-2023-44487/Wed, 21 Oct 2026 12:00:00 GMTThe HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. https://cveradar.org/cve/CVE-2023-32315/https://cveradar.org/cve/CVE-2023-32315/Wed, 21 Oct 2026 12:00:00 GMTOpenfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This https://cveradar.org/cve/CVE-2023-35078/https://cveradar.org/cve/CVE-2023-35078/Wed, 21 Oct 2026 12:00:00 GMTAn authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication. https://cveradar.org/cve/CVE-2023-1389/https://cveradar.org/cve/CVE-2023-1389/Wed, 21 Oct 2026 12:00:00 GMTTP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form of the /cgi-bin/luci;stok=/locale endpoint on the web management interface. Speci https://cveradar.org/cve/CVE-2023-27350/https://cveradar.org/cve/CVE-2023-27350/Wed, 21 Oct 2026 12:00:00 GMTThis vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists wi https://cveradar.org/cve/CVE-2023-0669/https://cveradar.org/cve/CVE-2023-0669/Wed, 21 Oct 2026 12:00:00 GMTFortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was https://cveradar.org/cve/CVE-2022-26134/https://cveradar.org/cve/CVE-2022-26134/Wed, 21 Oct 2026 12:00:00 GMTIn affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The https://cveradar.org/cve/CVE-2014-0160/https://cveradar.org/cve/CVE-2014-0160/Wed, 21 Oct 2026 12:00:00 GMTThe (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted pa https://cveradar.org/cve/CVE-2022-29464/https://cveradar.org/cve/CVE-2022-29464/Wed, 21 Oct 2026 12:00:00 GMTCertain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under t https://cveradar.org/cve/CVE-2017-9841/https://cveradar.org/cve/CVE-2017-9841/Wed, 21 Oct 2026 12:00:00 GMTUtil/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site w https://cveradar.org/cve/CVE-2015-1635/https://cveradar.org/cve/CVE-2015-1635/Wed, 21 Oct 2026 12:00:00 GMTHTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remo https://cveradar.org/cve/CVE-2014-6271/https://cveradar.org/cve/CVE-2014-6271/Wed, 21 Oct 2026 12:00:00 GMTGNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vec https://cveradar.org/cve/CVE-2021-44228/https://cveradar.org/cve/CVE-2021-44228/Wed, 21 Oct 2026 12:00:00 GMTApache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other J https://cveradar.org/cve/CVE-2021-40438/https://cveradar.org/cve/CVE-2021-40438/Wed, 21 Oct 2026 12:00:00 GMTA crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier. https://cveradar.org/cve/CVE-2017-5638/https://cveradar.org/cve/CVE-2017-5638/Wed, 21 Oct 2026 12:00:00 GMTThe Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to ex https://cveradar.org/cve/CVE-2018-13379/https://cveradar.org/cve/CVE-2018-13379/Wed, 21 Oct 2026 12:00:00 GMTAn Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0. https://cveradar.org/cve/CVE-2019-0708/https://cveradar.org/cve/CVE-2019-0708/Wed, 21 Oct 2026 12:00:00 GMTA remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, a https://cveradar.org/cve/CVE-2019-11510/https://cveradar.org/cve/CVE-2019-11510/Wed, 21 Oct 2026 12:00:00 GMTIn Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading vulnera https://cveradar.org/cve/CVE-2019-19781/https://cveradar.org/cve/CVE-2019-19781/Wed, 21 Oct 2026 12:00:00 GMTAn issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal. https://cveradar.org/cve/CVE-2020-5902/https://cveradar.org/cve/CVE-2020-5902/Wed, 21 Oct 2026 12:00:00 GMTIn BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has a Remote Code E https://cveradar.org/cve/CVE-2021-1498/https://cveradar.org/cve/CVE-2021-1498/Wed, 21 Oct 2026 12:00:00 GMTMultiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information a https://cveradar.org/cve/CVE-2021-21985/https://cveradar.org/cve/CVE-2021-21985/Wed, 21 Oct 2026 12:00:00 GMTThe vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. A malicious actor with netw