Verdict
Confirmed exploited in the wild
CISA has evidence of active exploitation. This is not theoretical risk — someone has already used it against someone. 732 vulnerabilities in this band.
- CVE-2026-48356 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability Adobe · Commerce and Magento
- CVE-2026-114625 Arista VeloCloud Orchestrator SQL Injection Vulnerability Arista · VeloCloud Orchestrator
- CVE-2026-110447 Collabora Online – Built-in CODE Server OS Command Injection Vulnerability Collabora · Collabora Online – Built-in CODE Server
- CVE-2026-106931 EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability EG Secure Solutions · SiteGuard Server Edition
- CVE-2026-96656 Plex Media Server External Control of File Name or Path Vulnerability Plex · Media Server
- CVE-2026-96655 Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability Plex · Media Server
- CVE-2026-96654 Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability Plex · Media Server
- CVE-2026-96652 Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability Plex · Media Server
- CVE-2026-110936 Siemens Software Center Uncontrolled Search Path Element Vulnerability Siemens · Software Center
- CVE-2026-102764 BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability BeyondTrust · Remote Support
- CVE-2025-61624 Fortinet Multiple Products Path Traversal Vulnerability Fortinet · Multiple Products
- CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Cisco · Secure Email Gateway
- CVE-2026-0322 Palo Alto Networks PAN-OS Code Injection Vulnerability Palo Alto Networks · PAN-OS
- CVE-2026-96951 Microsoft Windows Command Injection Vulnerability Microsoft · Windows
- CVE-2023-22894 Strapi Cleartext Storage of Sensitive Information Vulnerability Strapi · Strapi
- CVE-2021-3199 ONLYOFFICE Docs Server Path Traversal Vulnerability ONLYOFFICE · Docs
- CVE-2026-88779 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Citrix · NetScaler
- CVE-2026-102490 Zammad GmbH Zammad Improper Privilege Management Vulnerability Zammad GmbH · Zammad
- CVE-2026-102489 Zammad GmbH Zammad Session Fixation Vulnerability Zammad GmbH · Zammad
- CVE-2026-104286 Fortinet FortiMail Path Traversal Vulnerability Fortinet · FortiMail
- CVE-2026-76504 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Cisco · Catalyst SD-WAN Manager
- CVE-2026-86950 Apple Multiple Products Out-of-Bounds Write Vulnerability Apple · Multiple Products
- CVE-2026-67279 Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability MikroTik · RouterOS
- CVE-2026-65660 Microsoft SharePoint Code Injection Vulnerability Microsoft · SharePoint
- CVE-2026-5430 WSO2 Multiple Products Path Traversal Vulnerability WSO2 · Multiple Products
- CVE-2026-93952 Arista VeloCloud Orchestrator Improper Input Validation Vulnerability Arista · VeloCloud Orchestrator
- CVE-2026-94127 F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability F5 · BIG-IP APM
- CVE-2026-7273 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability Zyxel · GS1900 Series Switches
- CVE-2025-39964 Linux Kernel Race Condition Vulnerability Linux · Kernel
- CVE-2026-53266 Linux Kernel Out-of-Bounds Write Vulnerability Linux · Kernel
- CVE-2025-39682 Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability Linux · Kernel
- CVE-2026-58704 Google Pixel Improper Authorization Vulnerability Google · Pixel
- CVE-2026-87886 Acronis Backup Incorrect Default Permissions Vulnerability Acronis · Backup
- CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability Cisco · Secure Email Gateway
- CVE-2026-84869 ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability ConnectWise · ScreenConnect
- CVE-2026-42016 JFrog Artifactory Incorrect Authorization Vulnerability JFrog · Artifactory
- CVE-2026-42018 JFrog Artifactory Improper Authentication Vulnerability JFrog · Artifactory
- CVE-2026-86060 MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability MikroTik · RouterOS
- CVE-2026-67277 MikroTik RouterOS Missing Authentication for Critical Function Vulnerability MikroTik · RouterOS
- CVE-2026-19490 Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability Citrix · NetScaler
- CVE-2025-25249 Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability Fortinet · Multiple Products
- CVE-2026-87491 Google Chromium V8 Out of Bounds Write Vulnerability Google · Chromium V8
- CVE-2026-75650 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Adobe · Commerce and Magento
- CVE-2026-81963 Microsoft Windows Link Following Vulnerability Microsoft · Windows
- CVE-2026-86218 N-able N-central Static Code Injection Vulnerability N-able · N-central
- CVE-2026-85880 Microsoft Windows Heap-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2026-85046 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2026-59822 BerriAI LiteLLM Improper Authentication Vulnerability BerriAI · LiteLLM
- CVE-2026-49869 Kestra OSS OS Command Injection Vulnerability Kestra · Kestra OSS
- CVE-2026-82329 JFrog Artifactory Improper Authentication Vulnerability JFrog · Artifactory
- CVE-2026-9586 Sangoma Switchvox SQL Injection Vulnerability Sangoma · Switchvox
- CVE-2026-83548 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability SonicWall · SMA1000 Appliances
- CVE-2026-83549 SonicWall SMA1000 Appliances OS Command Injection Vulnerability SonicWall · SMA1000 Appliances
- CVE-2023-49105 ownCloud Improper Authentication Vulnerability ownCloud · ownCloud
- CVE-2026-53362 Linux Kernel Unspecified Vulnerability Linux · Kernel
- CVE-2026-66384 JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability JFrog · Artifactory
- CVE-2022-0995 Linux Kernel Out-of-Bounds Write Vulnerability Linux · Kernel
- CVE-2026-8452 Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Citrix · NetScaler ADC and NetScaler Gateway
- CVE-2026-60004 Gitea Code Injection Vulnerability Gitea · Gitea
- CVE-2026-72530 TrueConf Server Code Injection Vulnerability TrueConf · Server
- CVE-2026-72529 TrueConf Server Missing Authentication for Critical Function Vulnerability TrueConf · Server
- CVE-2026-64849 MLflow Server-Side Request Forgery Vulnerability MLflow · MLflow
- CVE-2026-65400 Apple macOS Improper Authentication Vulnerability Apple · macOS
- CVE-2026-20349 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability Cisco · Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)
- CVE-2026-68820 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability Microsoft · Windows Ancillary Function Driver for WinSock
- CVE-2026-18556 N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability N-able · N-central
- CVE-2026-9198 IBM Langflow Code Injection Vulnerability IBM · Langflow
- CVE-2026-18577 N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability N-able · N-central
- CVE-2025-68686 Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Fortinet · FortiOS
- CVE-2026-16812 Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability Arista · VeloCloud Orchestrator
- CVE-2026-16232 Check Point SmartConsole Improper Authentication Vulnerability Check Point · SmartConsole
- CVE-2026-50522 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft · SharePoint
- CVE-2026-60137 WordPress Core SQL Injection Vulnerability WordPress · Core
- CVE-2026-63030 WordPress Core Interpretation Conflict Vulnerability WordPress · Core
- CVE-2021-27137 DD-WRT Stack-Based Buffer Overflow Vulnerability DD-WRT · DD-WRT
- CVE-2026-58644 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft · SharePoint
- CVE-2026-46817 Oracle E-Business Suite Improper Privilege Management Vulnerability Oracle · E-Business Suite
- CVE-2023-4346 KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability KNX Association · KNX Protocol Connection Authorization Option 1
- CVE-2026-56155 Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability Microsoft · Active Directory Federation Services
- CVE-2026-56164 Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability Microsoft · SharePoint Server
- CVE-2008-4128 Cisco IOS Cross-Site Request Forgery Vulnerability Cisco · IOS
- CVE-2026-56291 Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability Balbooa · Forms
- CVE-2026-48939 iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability iCagenda · iCagenda
- CVE-2026-55255 Langflow Authorization Bypass Through User-Controlled Key Vulnerability Langflow · Langflow
- CVE-2026-56290 Joomlack Page Builder Improper Access Control Vulnerability Joomlack · Page Builder
- CVE-2026-48282 Adobe ColdFusion Path Traversal Vulnerability Adobe · ColdFusion
- CVE-2025-67038 Lantronix EDS5000 Code Injection Vulnerability Lantronix · EDS5000
- CVE-2026-54420 LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability LiteSpeed · cPanel Plugin
- CVE-2026-20262 Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability Cisco · Catalyst SD-WAN Manager
- CVE-2026-11645 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability Google · Chromium V8
- CVE-2026-7473 Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability Arista · Extensible Operating System
- CVE-2026-20245 Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability Cisco · Catalyst SD-WAN Manager
- CVE-2026-28318 SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability SolarWinds · Serv-U
- CVE-2026-45247 Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability Mirasvit · Mirasvit Full Page Cache Warmer
- CVE-2022-0492 Linux Kernel Improper Authentication Vulnerability Linux · Kernel
- CVE-2025-48595 Android Framework Integer Overflow Vulnerability Android · Framework
- CVE-2026-8398 Daemon Tools Lite Embedded Malicious Code Vulnerability Daemon · Daemon Tools Lite
- CVE-2026-48172 LiteSpeed cPanel Plugin Privilege Escalation Vulnerability LiteSpeed · cPanel Plugin
- CVE-2026-34926 Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability Trend Micro · Apex One
- CVE-2026-41091 Microsoft Defender Link Following Vulnerability Microsoft · Defender
- CVE-2026-6973 Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2026-0300 Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability Palo Alto Networks · PAN-OS
- CVE-2026-20122 Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability Cisco · Catalyst SD-WAN Manger
- CVE-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Cisco · Catalyst SD-WAN Manager
- CVE-2025-2749 Kentico Xperience Path Traversal Vulnerability Kentico · Kentico Xperience
- CVE-2025-48700 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2026-20128 Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability Cisco · Catalyst SD-WAN Manager
- CVE-2025-32975 Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability Quest · KACE Systems Management Appliance (SMA)
- CVE-2009-0238 Microsoft Office Remote Code Execution Microsoft · Office
- CVE-2026-32201 Microsoft SharePoint Server Improper Input Validation Vulnerability Microsoft · SharePoint Server
- CVE-2012-1854 Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability Microsoft · Visual Basic for Applications (VBA)
- CVE-2023-36424 Microsoft Windows Out-of-Bounds Read Vulnerability Microsoft · Windows
- CVE-2020-9715 Adobe Acrobat Use-After-Free Vulnerability Adobe · Acrobat
- CVE-2026-34621 Adobe Acrobat and Reader Prototype Pollution Vulnerability Adobe · Acrobat and Reader
- CVE-2026-3502 TrueConf Client Download of Code Without Integrity Check Vulnerability TrueConf · Client
- CVE-2026-5281 Google Dawn Use-After-Free Vulnerability Google · Dawn
- CVE-2025-53521 F5 BIG-IP Stack-Based Buffer Overflow Vulnerability F5 · BIG-IP
- CVE-2025-43510 Apple Multiple Products Improper Locking Vulnerability Apple · Multiple Products
- CVE-2025-43520 Apple Multiple Products Classic Buffer Overflow Vulnerability Apple · Multiple Products
- CVE-2025-31277 Apple Multiple Products Buffer Overflow Vulnerability Apple · Multiple Products
Nothing on this page matches that filter.