Verdict
Weaponised and widely attempted
Reliable public exploit code exists, or mass exploitation attempts are probable. Patch inside days, not weeks. 637 vulnerabilities in this band.
- CVE-2026-50522 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft · SharePoint
- CVE-2026-60137 WordPress Core SQL Injection Vulnerability WordPress · Core
- CVE-2026-63030 WordPress Core Interpretation Conflict Vulnerability WordPress · Core
- CVE-2026-0770 Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability Langflow · Langflow
- CVE-2026-25089 Fortinet FortiSandbox OS Command Injection Vulnerability Fortinet · FortiSandbox
- CVE-2026-39808 Fortinet FortiSandbox OS Command Injection Vulnerability Fortinet · FortiSandbox
- CVE-2026-15409 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability SonicWall · SMA1000 Appliances
- CVE-2026-15410 SonicWall SMA1000 Appliances Code Injection Vulnerability SonicWall · SMA1000 Appliances
- CVE-2026-56291 Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability Balbooa · Forms
- CVE-2026-48908 JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability JoomShaper · SP Page Builder
- CVE-2026-56290 Joomlack Page Builder Improper Access Control Vulnerability Joomlack · Page Builder
- CVE-2026-48282 Adobe ColdFusion Path Traversal Vulnerability Adobe · ColdFusion
- CVE-2026-20230 Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability Cisco · Unified Communications Manager
- CVE-2026-34910 Ubiquiti UniFi OS Improper Input Validation Vulnerability Ubiquiti · UniFi OS
- CVE-2026-34909 Ubiquiti UniFi OS Path Traversal Vulnerability Ubiquiti · UniFi OS
- CVE-2026-34908 Ubiquiti UniFi OS Improper Access Control Vulnerability Ubiquiti · UniFi OS
- CVE-2026-20253 Splunk Enterprise Missing Authentication for Critical Function Vulnerability Splunk · Enterprise
- CVE-2026-48907 Widget Factory Joomla Content Editor Improper Access Control Vulnerability Widget Factory · Joomla Content Editor
- CVE-2026-10520 Ivanti Sentry OS Command Injection Vulnerability Ivanti · Sentry
- CVE-2026-42271 BerriAI LiteLLM Command Injection Vulnerability BerriAI · LiteLLM
- CVE-2026-9082 Drupal Core SQL Injection Vulnerability Drupal · Core
- CVE-2025-34291 Langflow Origin Validation Error Vulnerability Langflow · Langflow
- CVE-2008-4250 Microsoft Windows Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2009-1537 Microsoft DirectX NULL Byte Overwrite Vulnerability Microsoft · DirectX
- CVE-2009-3459 Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability Adobe · Acrobat and Reader
- CVE-2010-0249 Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft · Internet Explorer
- CVE-2010-0806 Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft · Internet Explorer
- CVE-2026-45498 Microsoft Defender Denial of Service Vulnerability Microsoft · Defender
- CVE-2026-20182 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability Cisco · Catalyst SD-WAN
- CVE-2026-42208 BerriAI LiteLLM SQL Injection Vulnerability BerriAI · LiteLLM
- CVE-2026-31431 Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability Linux · Kernel
- CVE-2026-32202 Microsoft Windows Protection Mechanism Failure Vulnerability Microsoft · Windows
- CVE-2025-29635 D-Link DIR-823X Command Injection Vulnerability D-Link · DIR-823X
- CVE-2024-7399 Samsung MagicINFO 9 Server Path Traversal Vulnerability Samsung · MagicINFO 9 Server
- CVE-2026-39987 Marimo Remote Code Execution Vulnerability Marimo · Marimo
- CVE-2026-34197 Apache ActiveMQ Improper Input Validation Vulnerability Apache · ActiveMQ
- CVE-2026-21643 Fortinet FortiClient EMS SQL Injection Vulnerability Fortinet · FortiClient EMS
- CVE-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2026-35616 Fortinet FortiClient EMS Improper Access Control Vulnerability Fortinet · FortiClient EMS
- CVE-2026-3055 Citrix NetScaler Out-of-Bounds Read Vulnerability Citrix · NetScaler
- CVE-2026-33634 Aquasecurity Trivy Embedded Malicious Code Vulnerability Aquasecurity · Trivy
- CVE-2026-33017 Langflow Code Injection Vulnerability Langflow · Langflow
- CVE-2025-32432 Craft CMS Code Injection Vulnerability Craft CMS · Craft CMS
- CVE-2025-54068 Laravel Livewire Code Injection Vulnerability Laravel · Livewire
- CVE-2025-47813 Wing FTP Server Information Disclosure Vulnerability Wing FTP Server · Wing FTP Server
- CVE-2025-68613 n8n Improper Control of Dynamically-Managed Code Resources Vulnerability n8n · n8n
- CVE-2021-22054 Omnissa Workspace ONE Server-Side Request Forgery Omnissa · Workspace One UEM
- CVE-2025-26399 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability SolarWinds · Web Help Desk
- CVE-2026-1603 Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability Ivanti · Endpoint Manager (EPM)
- CVE-2017-7921 Hikvision Multiple Products Improper Authentication Vulnerability Hikvision · Multiple Products
- CVE-2021-22681 Rockwell Multiple Products Insufficient Protected Credentials Vulnerability Rockwell · Multiple Products
- CVE-2026-20127 Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability Cisco · Catalyst SD-WAN Controller and Manager
- CVE-2025-49113 RoundCube Webmail Deserialization of Untrusted Data Vulnerability Roundcube · Webmail
- CVE-2021-22175 GitLab Server-Side Request Forgery (SSRF) Vulnerability GitLab · GitLab
- CVE-2020-7796 Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability Synacor · Zimbra Collaboration Suite
- CVE-2008-0015 Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2024-43468 Microsoft Configuration Manager SQL Injection Vulnerability Microsoft · Configuration Manager
- CVE-2025-40536 SolarWinds Web Help Desk Security Control Bypass Vulnerability SolarWinds · Web Help Desk
- CVE-2025-11953 React Native Community CLI OS Command Injection Vulnerability React Native Community · CLI
- CVE-2025-64328 Sangoma FreePBX OS Command Injection Vulnerability Sangoma · FreePBX
- CVE-2025-40551 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability SolarWinds · Web Help Desk
- CVE-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2026-24858 Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability Fortinet · Multiple Products
- CVE-2026-24061 GNU InetUtils Argument Injection Vulnerability GNU · InetUtils
- CVE-2026-21509 Microsoft Office Security Feature Bypass Vulnerability Microsoft · Office
- CVE-2025-34026 Versa Concerto Improper Authentication Vulnerability Versa · Concerto
- CVE-2025-31125 Vite Vitejs Improper Access Control Vulnerability Vite · Vitejs
- CVE-2025-8110 Gogs Path Traversal Vulnerability Gogs · Gogs
- CVE-2009-0556 Microsoft Office PowerPoint Code Injection Vulnerability Microsoft · Office
- CVE-2025-37164 Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability Hewlett Packard Enterprise (HPE) · OneView
- CVE-2025-14847 MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability MongoDB · MongoDB and MongoDB Server
- CVE-2023-52163 Digiever DS-2105 Pro Missing Authorization Vulnerability Digiever · DS-2105 Pro
- CVE-2025-59718 Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability Fortinet · Multiple Products
- CVE-2025-14611 Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability Gladinet · CentreStack and Triofox
- CVE-2025-58360 OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability OSGeo · GeoServer
- CVE-2025-6218 RARLAB WinRAR Path Traversal Vulnerability RARLAB · WinRAR
- CVE-2022-37055 D-Link Routers Buffer Overflow Vulnerability D-Link · Routers
- CVE-2025-61757 Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability Oracle · Fusion Middleware
- CVE-2025-58034 Fortinet FortiWeb OS Command Injection Vulnerability Fortinet · FortiWeb
- CVE-2025-64446 Fortinet FortiWeb Path Traversal Vulnerability Fortinet · FortiWeb
- CVE-2025-12480 Gladinet Triofox Improper Access Control Vulnerability Gladinet · Triofox
- CVE-2025-9242 WatchGuard Firebox Out-of-Bounds Write Vulnerability WatchGuard · Firebox
- CVE-2025-48703 CWP Control Web Panel OS Command Injection Vulnerability CWP · Control Web Panel
- CVE-2025-11371 Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability Gladinet · CentreStack and Triofox
- CVE-2025-24893 XWiki Platform Eval Injection Vulnerability XWiki · Platform
- CVE-2025-6204 Dassault Systèmes DELMIA Apriso Code Injection Vulnerability Dassault Systèmes · DELMIA Apriso
- CVE-2025-6205 Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability Dassault Systèmes · DELMIA Apriso
- CVE-2025-54236 Adobe Commerce and Magento Improper Input Validation Vulnerability Adobe · Commerce and Magento
- CVE-2025-59287 Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability Microsoft · Windows
- CVE-2025-2746 Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability Kentico · Xperience CMS
- CVE-2025-2747 Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability Kentico · Xperience CMS
- CVE-2025-33073 Microsoft Windows SMB Client Improper Access Control Vulnerability Microsoft · Windows
- CVE-2025-54253 Adobe Experience Manager Forms Code Execution Vulnerability Adobe · Experience Manager (AEM) Forms
- CVE-2021-43798 Grafana Path Traversal Vulnerability Grafana Labs · Grafana
- CVE-2021-22555 Linux Kernel Heap Out-of-Bounds Write Vulnerability Linux · Kernel
- CVE-2010-3962 Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2013-3918 Microsoft Windows Out-of-Bounds Write Vulnerability Microsoft · Windows
- CVE-2011-3402 Microsoft Windows Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2010-3765 Mozilla Multiple Products Remote Code Execution Vulnerability Mozilla · Multiple Products
- CVE-2014-6278 GNU Bash OS Command Injection Vulnerability GNU · GNU Bash
- CVE-2017-1000353 Jenkins Remote Code Execution Vulnerability Jenkins · Jenkins
- CVE-2015-7755 Juniper ScreenOS Improper Authentication Vulnerability Juniper · ScreenOS
- CVE-2025-4008 Smartbedded Meteobridge Command Injection Vulnerability Smartbedded · Meteobridge
- CVE-2025-32463 Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability Sudo · Sudo
- CVE-2021-21311 Adminer Server-Side Request Forgery Vulnerability Adminer · Adminer
- CVE-2025-20362 Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense
- CVE-2025-5086 Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability Dassault Systèmes · DELMIA Apriso
- CVE-2025-57819 Sangoma FreePBX Authentication Bypass Vulnerability Sangoma · FreePBX
- CVE-2025-8088 RARLAB WinRAR Path Traversal Vulnerability RARLAB · WinRAR
- CVE-2013-3893 Microsoft Internet Explorer Resource Management Errors Vulnerability Microsoft · Internet Explorer
- CVE-2020-25078 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability D-Link · DCS-2530L and DCS-2670L Devices
- CVE-2020-25079 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability D-Link · DCS-2530L and DCS-2670L Devices
- CVE-2025-20337 Cisco Identity Services Engine Injection Vulnerability Cisco · Identity Services Engine
- CVE-2025-20281 Cisco Identity Services Engine Injection Vulnerability Cisco · Identity Services Engine
- CVE-2025-2776 SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability SysAid · SysAid On-Prem
- CVE-2025-54309 CrushFTP Unprotected Alternate Channel Vulnerability CrushFTP · CrushFTP
- CVE-2025-25257 Fortinet FortiWeb SQL Injection Vulnerability Fortinet · FortiWeb
- CVE-2025-47812 Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability Wing FTP Server · Wing FTP Server
- CVE-2019-9621 Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2019-5418 Rails Ruby on Rails Path Traversal Vulnerability Rails · Ruby on Rails
Nothing on this page matches that filter.