Verdict
Ransomware crews are using this
CISA has linked this vulnerability to known ransomware campaigns. Treat any exposed instance as an active incident, not a patching ticket. 332 vulnerabilities in this band.
- CVE-2026-12569 PTC Windchill and FlexPLM Improper Input Validation Vulnerability PTC · Windchill and FlexPLM
- CVE-2026-35273 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Oracle · PeopleSoft Enterprise PeopleTools
- CVE-2026-50751 Check Point Security Gateway Improper Authentication Vulnerability Check Point · Security Gateway
- CVE-2026-0257 Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Palo Alto Networks · PAN-OS
- CVE-2026-48027 Nx Console Embedded Malicious Code Vulnerability Nx · Nx Console
- CVE-2026-45321 TanStack Unspecified Vulnerability TanStack · TanStack
- CVE-2026-41940 WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability WebPros · cPanel & WHM and WP2 (WordPress Squared)
- CVE-2024-1708 ConnectWise ScreenConnect Path Traversal Vulnerability ConnectWise · ScreenConnect
- CVE-2024-57728 SimpleHelp Path Traversal Vulnerability SimpleHelp · SimpleHelp
- CVE-2024-57726 SimpleHelp Missing Authorization Vulnerability SimpleHelp · SimpleHelp
- CVE-2026-33825 Microsoft Defender Insufficient Granularity of Access Control Vulnerability Microsoft · Defender
- CVE-2023-27351 PaperCut NG/MF Improper Authentication Vulnerability PaperCut · NG/MF
- CVE-2024-27199 JetBrains TeamCity Relative Path Traversal Vulnerability JetBrains · TeamCity
- CVE-2023-21529 Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability Microsoft · Exchange Server
- CVE-2026-20131 Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability Cisco · Secure Firewall Management Center (FMC)
- CVE-2026-1731 BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability BeyondTrust · Remote Support (RS) and Privileged Remote Access (PRA)
- CVE-2026-24423 SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability SmarterTools · SmarterMail
- CVE-2025-52691 SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability SmarterTools · SmarterMail
- CVE-2026-23760 SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability SmarterTools · SmarterMail
- CVE-2025-55182 Meta React Server Components Remote Code Execution Vulnerability Meta · React Server Components
- CVE-2025-61884 Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability Oracle · E-Business Suite
- CVE-2025-61882 Oracle E-Business Suite Unspecified Vulnerability Oracle · E-Business Suite
- CVE-2025-10035 Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability Fortra · GoAnywhere MFT
- CVE-2025-49704 Microsoft SharePoint Code Injection Vulnerability Microsoft · SharePoint
- CVE-2025-49706 Microsoft SharePoint Improper Authentication Vulnerability Microsoft · SharePoint
- CVE-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft · SharePoint
- CVE-2025-5777 Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability Citrix · NetScaler ADC and Gateway
- CVE-2019-6693 Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability Fortinet · FortiOS
- CVE-2025-3248 Langflow Missing Authentication Vulnerability Langflow · Langflow
- CVE-2025-31324 SAP NetWeaver Unrestricted File Upload Vulnerability SAP · NetWeaver
- CVE-2025-29824 Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-31161 CrushFTP Authentication Bypass Vulnerability CrushFTP · CrushFTP
- CVE-2025-22457 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Ivanti · Connect Secure, Policy Secure, and ZTA Gateways
- CVE-2025-24472 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Fortinet · FortiOS and FortiProxy
- CVE-2025-26633 Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability Microsoft · Windows
- CVE-2025-22225 VMware ESXi Arbitrary Write Vulnerability VMware · ESXi
- CVE-2018-8639 Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability Microsoft · Windows
- CVE-2024-53704 SonicWall SonicOS SSLVPN Improper Authentication Vulnerability SonicWall · SonicOS
- CVE-2024-57727 SimpleHelp Path Traversal Vulnerability SimpleHelp · SimpleHelp
- CVE-2025-23006 SonicWall SMA1000 Appliances Deserialization Vulnerability SonicWall · SMA1000 Appliances
- CVE-2024-55591 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Fortinet · FortiOS and FortiProxy
- CVE-2023-48365 Qlik Sense HTTP Tunneling Vulnerability Qlik · Sense
- CVE-2025-0282 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Ivanti · Connect Secure, Policy Secure, and ZTA Gateways
- CVE-2024-55550 Mitel MiCollab Path Traversal Vulnerability Mitel · MiCollab
- CVE-2024-41713 Mitel MiCollab Path Traversal Vulnerability Mitel · MiCollab
- CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability Cleo · Multiple Products
- CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability Cleo · Multiple Products
- CVE-2024-51378 CyberPanel Incorrect Default Permissions Vulnerability CyberPersons · CyberPanel
- CVE-2024-11667 Zyxel Multiple Firewalls Path Traversal Vulnerability Zyxel · Multiple Firewalls
- CVE-2023-28461 Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability Array Networks · AG/vxAG ArrayOS
- CVE-2024-9474 Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability Palo Alto Networks · PAN-OS
- CVE-2024-0012 Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability Palo Alto Networks · PAN-OS
- CVE-2024-49039 Microsoft Windows Task Scheduler Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2024-51567 CyberPanel Incorrect Default Permissions Vulnerability CyberPersons · CyberPanel
- CVE-2024-38094 Microsoft SharePoint Deserialization Vulnerability Microsoft · SharePoint
- CVE-2024-40711 Veeam Backup and Replication Deserialization Vulnerability Veeam · Backup & Replication
- CVE-2024-9680 Mozilla Firefox Use-After-Free Vulnerability Mozilla · Firefox
- CVE-2024-30088 Microsoft Windows Kernel TOCTOU Race Condition Vulnerability Microsoft · Windows
- CVE-2024-6670 Progress WhatsUp Gold SQL Injection Vulnerability Progress · WhatsUp Gold
- CVE-2024-40766 SonicWall SonicOS Improper Access Control Vulnerability SonicWall · SonicOS
- CVE-2017-1000253 Linux Kernel PIE Stack Buffer Corruption Vulnerability Linux · Kernel
- CVE-2024-23897 Jenkins Command Line Interface (CLI) Path Traversal Vulnerability Jenkins · Jenkins Command Line Interface (CLI)
- CVE-2024-37085 VMware ESXi Authentication Bypass Vulnerability VMware · ESXi
- CVE-2024-26169 Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability Microsoft · Windows
- CVE-2024-4577 PHP-CGI OS Command Injection Vulnerability PHP Group · PHP
- CVE-2024-1086 Linux Kernel Use-After-Free Vulnerability Linux · Kernel
- CVE-2024-24919 Check Point Quantum Security Gateways Information Disclosure Vulnerability Check Point · Quantum Security Gateways
- CVE-2023-43208 NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability NextGen Healthcare · Mirth Connect
- CVE-2024-30051 Microsoft DWM Core Library Privilege Escalation Vulnerability Microsoft · DWM Core Library
- CVE-2024-3400 Palo Alto Networks PAN-OS Command Injection Vulnerability Palo Alto Networks · PAN-OS
- CVE-2023-24955 Microsoft SharePoint Server Code Injection Vulnerability Microsoft · SharePoint Server
- CVE-2021-44529 Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability Ivanti · Endpoint Manager Cloud Service Appliance (EPM CSA)
- CVE-2023-48788 Fortinet FortiClient EMS SQL Injection Vulnerability Fortinet · FortiClient EMS
- CVE-2024-27198 JetBrains TeamCity Authentication Bypass Vulnerability JetBrains · TeamCity
- CVE-2024-21338 Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability Microsoft · Windows
- CVE-2024-1709 ConnectWise ScreenConnect Authentication Bypass Vulnerability ConnectWise · ScreenConnect
- CVE-2020-3259 Cisco ASA and FTD Information Disclosure Vulnerability Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- CVE-2024-21412 Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2024-21762 Fortinet FortiOS Out-of-Bound Write Vulnerability Fortinet · FortiOS
- CVE-2024-21893 Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability Ivanti · Connect Secure, Policy Secure, and Neurons
- CVE-2023-22527 Atlassian Confluence Data Center and Server Template Injection Vulnerability Atlassian · Confluence Data Center and Server
- CVE-2023-35082 Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability Ivanti · Endpoint Manager Mobile (EPMM) and MobileIron Core
- CVE-2023-29357 Microsoft SharePoint Server Privilege Escalation Vulnerability Microsoft · SharePoint Server
- CVE-2023-46805 Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability Ivanti · Connect Secure and Policy Secure
- CVE-2024-21887 Ivanti Connect Secure and Policy Secure Command Injection Vulnerability Ivanti · Connect Secure and Policy Secure
- CVE-2023-29300 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Adobe · ColdFusion
- CVE-2023-38203 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Adobe · ColdFusion
- CVE-2023-41266 Qlik Sense Path Traversal Vulnerability Qlik · Sense
- CVE-2023-41265 Qlik Sense HTTP Tunneling Vulnerability Qlik · Sense
- CVE-2023-47246 SysAid Server Path Traversal Vulnerability SysAid · SysAid Server
- CVE-2023-22518 Atlassian Confluence Data Center and Server Improper Authorization Vulnerability Atlassian · Confluence Data Center and Server
- CVE-2023-46604 Apache ActiveMQ Deserialization of Untrusted Data Vulnerability Apache · ActiveMQ
- CVE-2023-46747 F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability F5 · BIG-IP Configuration Utility
- CVE-2023-4966 Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability Citrix · NetScaler ADC and NetScaler Gateway
- CVE-2023-22515 Atlassian Confluence Data Center and Server Broken Access Control Vulnerability Atlassian · Confluence Data Center and Server
- CVE-2023-40044 Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability Progress · WS_FTP Server
- CVE-2023-42793 JetBrains TeamCity Authentication Bypass Vulnerability JetBrains · TeamCity
- CVE-2017-6884 Zyxel EMG2926 Routers Command Injection Vulnerability Zyxel · EMG2926 Routers
- CVE-2021-3129 Laravel Ignition File Upload Vulnerability Laravel · Ignition
- CVE-2023-20269 Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability Cisco · Adaptive Security Appliance and Firepower Threat Defense
- CVE-2023-38831 RARLAB WinRAR Code Execution Vulnerability RARLAB · WinRAR
- CVE-2023-38035 Ivanti Sentry Authentication Bypass Vulnerability Ivanti · Sentry
- CVE-2023-27532 Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability Veeam · Backup & Replication
- CVE-2023-35078 Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2023-3519 Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability Citrix · NetScaler ADC and NetScaler Gateway
- CVE-2023-36884 Microsoft Windows Search Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2022-31199 Netwrix Auditor Insecure Object Deserialization Vulnerability Netwrix · Auditor
- CVE-2023-27997 Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability Fortinet · FortiOS and FortiProxy SSL-VPN
- CVE-2023-34362 Progress MOVEit Transfer SQL Injection Vulnerability Progress · MOVEit Transfer
- CVE-2021-45046 Apache Log4j2 Deserialization of Untrusted Data Vulnerability Apache · Log4j2
- CVE-2023-27350 PaperCut MF/NG Improper Access Control Vulnerability PaperCut · MF/NG
- CVE-2023-28252 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-27876 Veritas Backup Exec Agent File Access Vulnerability Veritas · Backup Exec Agent
- CVE-2021-27877 Veritas Backup Exec Agent Improper Authentication Vulnerability Veritas · Backup Exec Agent
- CVE-2021-27878 Veritas Backup Exec Agent Command Execution Vulnerability Veritas · Backup Exec Agent
- CVE-2019-1388 Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2017-7494 Samba Remote Code Execution Vulnerability Samba · Samba
- CVE-2023-24880 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2022-36537 ZK Framework AuUploader Unspecified Vulnerability ZK Framework · AuUploader
- CVE-2022-47986 IBM Aspera Faspex Code Execution Vulnerability IBM · Aspera Faspex
Nothing on this page matches that filter.