Verdict
Weaponised and widely attempted
Reliable public exploit code exists, or mass exploitation attempts are probable. Patch inside days, not weeks. 667 vulnerabilities in this band.
- CVE-2026-111497 Google Brotli Unchecked Return Value Vulnerability Google · Brotli
- CVE-2026-109618 PHP Memory Corruption Vulnerability PHP Group · PHP
- CVE-2026-109619 PHP Stale Internal Request-State Vulnerability PHP Group · PHP
- CVE-2026-21589 Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability Atlassian · Multiple Products
- CVE-2026-105134 Ahsay AhsayCBS Command Injection Vulnerability Ahsay · AhsayCBS
- CVE-2026-105133 Ahsay AhsayCBS Improper Authentication Vulnerability Ahsay · AhsayCBS
- CVE-2026-104935 Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability Ivanti · Connect Secure
- CVE-2015-5477 ISC BIND Data Processing Errors Vulnerability ISC · BIND
- CVE-2016-3081 Apache Struts Command Injection Vulnerability Apache · Struts
- CVE-2015-3306 ProFTPD Improper Access Control Vulnerability ProFTPD · ProFTPD
- CVE-2026-88772 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Citrix · NetScaler
- CVE-2026-88771 Citrix NetScaler Improper Input Validation Vulnerability Citrix · NetScaler
- CVE-2026-87902 WordPress Core Remote File Inclusion Vulnerability WordPress · Core
- CVE-2026-71362 Adobe Commerce and Magento Incorrect Authorization Vulnerability Adobe · Commerce and Magento
- CVE-2026-93616 Check Point Multiple Products Path Traversal Vulnerability Check Point · Multiple Products
- CVE-2026-85102 Check Point Multiple Products Improper Certificate Validation Vulnerability Check Point · Multiple Products
- CVE-2026-76460 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Cisco · Identity Services Engine
- CVE-2026-85706 GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability GitLab · Community Edition and Enterprise Edition
- CVE-2026-20079 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Cisco · Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management
- CVE-2026-48710 Kludex Starlette HTTP Request/Response Smuggling Vulnerability Kludex · Starlette
- CVE-2026-82078 PaperCut NG/MF Unsafe Reflection Vulnerability PaperCut · NG/MF
- CVE-2026-81578 PaperCut NG/MF Missing Authentication for Critical Function Vulnerability PaperCut · NG/MF
- CVE-2021-23758 Ajax.NET Professional Deserialization of Untrusted Data Vulnerability Ajax.NET Professional · Ajax.NET Professional
- CVE-2015-3246 Red Hat Libuser Race Condition Vulnerability Red Hat · Libuser
- CVE-2015-5287 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability Red Hat · Automatic Bug Reporting Tool
- CVE-2019-1068 Microsoft SQL Server Remote Code Execution Vulnerability Microsoft · SQL Server
- CVE-2026-21962 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability Oracle · HTTP Server and Oracle Weblogic Server Proxy Plug-in
- CVE-2026-73570 Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2026-33824 Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability Microsoft · Internet Key Exchange (IKE) Service Extensions
- CVE-2026-55040 Microsoft SharePoint Weak Authentication Vulnerability Microsoft · SharePoint
- CVE-2025-62593 Ray-Project Ray Code Injection Vulnerability Ray-Project · Ray
- CVE-2026-72898 Metabase SQL Injection Vulnerability Metabase · Metabase
- CVE-2026-8037 Progress LoadMaster Command Injection Vulnerability Progress · LoadMaster
- CVE-2026-34486 Apache Tomcat Missing Encryption of Sensitive Data Vulnerability Apache · Tomcat
- CVE-2026-0770 Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability Langflow · Langflow
- CVE-2026-25089 Fortinet FortiSandbox OS Command Injection Vulnerability Fortinet · FortiSandbox
- CVE-2026-39808 Fortinet FortiSandbox OS Command Injection Vulnerability Fortinet · FortiSandbox
- CVE-2026-48908 JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability JoomShaper · SP Page Builder
- CVE-2026-48558 SimpleHelp Authentication Bypass Vulnerability SimpleHelp · SimpleHelp
- CVE-2026-20230 Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability Cisco · Unified Communications Manager
- CVE-2026-34910 Ubiquiti UniFi OS Improper Input Validation Vulnerability Ubiquiti · UniFi OS
- CVE-2026-34909 Ubiquiti UniFi OS Path Traversal Vulnerability Ubiquiti · UniFi OS
- CVE-2026-34908 Ubiquiti UniFi OS Improper Access Control Vulnerability Ubiquiti · UniFi OS
- CVE-2026-20253 Splunk Enterprise Missing Authentication for Critical Function Vulnerability Splunk · Enterprise
- CVE-2026-48907 Widget Factory Joomla Content Editor Improper Access Control Vulnerability Widget Factory · Joomla Content Editor
- CVE-2026-10520 Ivanti Sentry OS Command Injection Vulnerability Ivanti · Sentry
- CVE-2026-42271 BerriAI LiteLLM Command Injection Vulnerability BerriAI · LiteLLM
- CVE-2024-21182 Oracle WebLogic Server Unspecified Vulnerability Oracle · WebLogic Server
- CVE-2026-9082 Drupal Core SQL Injection Vulnerability Drupal · Core
- CVE-2025-34291 Langflow Origin Validation Error Vulnerability Langflow · Langflow
- CVE-2008-4250 Microsoft Windows Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2009-1537 Microsoft DirectX NULL Byte Overwrite Vulnerability Microsoft · DirectX
- CVE-2009-3459 Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability Adobe · Acrobat and Reader
- CVE-2010-0249 Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft · Internet Explorer
- CVE-2010-0806 Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft · Internet Explorer
- CVE-2026-45498 Microsoft Defender Denial of Service Vulnerability Microsoft · Defender
- CVE-2026-42897 Microsoft Exchange Server Cross-Site Scripting Vulnerability Microsoft · Microsoft
- CVE-2026-20182 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability Cisco · Catalyst SD-WAN
- CVE-2026-42208 BerriAI LiteLLM SQL Injection Vulnerability BerriAI · LiteLLM
- CVE-2026-31431 Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability Linux · Kernel
- CVE-2026-32202 Microsoft Windows Protection Mechanism Failure Vulnerability Microsoft · Windows
- CVE-2025-29635 D-Link DIR-823X Command Injection Vulnerability D-Link · DIR-823X
- CVE-2024-7399 Samsung MagicINFO 9 Server Path Traversal Vulnerability Samsung · MagicINFO 9 Server
- CVE-2026-39987 Marimo Remote Code Execution Vulnerability Marimo · Marimo
- CVE-2026-34197 Apache ActiveMQ Improper Input Validation Vulnerability Apache · ActiveMQ
- CVE-2026-21643 Fortinet FortiClient EMS SQL Injection Vulnerability Fortinet · FortiClient EMS
- CVE-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2026-35616 Fortinet FortiClient EMS Improper Access Control Vulnerability Fortinet · FortiClient EMS
- CVE-2026-3055 Citrix NetScaler Out-of-Bounds Read Vulnerability Citrix · NetScaler
- CVE-2026-33634 Aquasecurity Trivy Embedded Malicious Code Vulnerability Aquasecurity · Trivy
- CVE-2026-33017 Langflow Code Injection Vulnerability Langflow · Langflow
- CVE-2025-32432 Craft CMS Code Injection Vulnerability Craft CMS · Craft CMS
- CVE-2025-54068 Laravel Livewire Code Injection Vulnerability Laravel · Livewire
- CVE-2025-47813 Wing FTP Server Information Disclosure Vulnerability Wing FTP Server · Wing FTP Server
- CVE-2025-68613 n8n Improper Control of Dynamically-Managed Code Resources Vulnerability n8n · n8n
- CVE-2021-22054 Omnissa Workspace ONE Server-Side Request Forgery Omnissa · Workspace One UEM
- CVE-2026-1603 Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability Ivanti · Endpoint Manager (EPM)
- CVE-2017-7921 Hikvision Multiple Products Improper Authentication Vulnerability Hikvision · Multiple Products
- CVE-2021-22681 Rockwell Multiple Products Insufficient Protected Credentials Vulnerability Rockwell · Multiple Products
- CVE-2026-20127 Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability Cisco · Catalyst SD-WAN Controller and Manager
- CVE-2025-49113 RoundCube Webmail Deserialization of Untrusted Data Vulnerability Roundcube · Webmail
- CVE-2021-22175 GitLab Server-Side Request Forgery (SSRF) Vulnerability GitLab · GitLab
- CVE-2020-7796 Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability Synacor · Zimbra Collaboration Suite
- CVE-2008-0015 Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2026-2441 Google Chromium CSS Use-After-Free Vulnerability Google · Chromium
- CVE-2024-43468 Microsoft Configuration Manager SQL Injection Vulnerability Microsoft · Configuration Manager
- CVE-2025-40536 SolarWinds Web Help Desk Security Control Bypass Vulnerability SolarWinds · Web Help Desk
- CVE-2026-21510 Microsoft Windows Shell Protection Mechanism Failure Vulnerability Microsoft · Windows
- CVE-2025-11953 React Native Community CLI OS Command Injection Vulnerability React Native Community · CLI
- CVE-2025-64328 Sangoma FreePBX OS Command Injection Vulnerability Sangoma · FreePBX
- CVE-2019-19006 Sangoma FreePBX Improper Authentication Vulnerability Sangoma · FreePBX
- CVE-2025-40551 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability SolarWinds · Web Help Desk
- CVE-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2026-24858 Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability Fortinet · Multiple Products
- CVE-2026-24061 GNU InetUtils Argument Injection Vulnerability GNU · InetUtils
- CVE-2026-21509 Microsoft Office Security Feature Bypass Vulnerability Microsoft · Office
- CVE-2025-34026 Versa Concerto Improper Authentication Vulnerability Versa · Concerto
- CVE-2025-31125 Vite Vitejs Improper Access Control Vulnerability Vite · Vitejs
- CVE-2025-8110 Gogs Path Traversal Vulnerability Gogs · Gogs
- CVE-2009-0556 Microsoft Office PowerPoint Code Injection Vulnerability Microsoft · Office
- CVE-2025-37164 Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability Hewlett Packard Enterprise (HPE) · OneView
- CVE-2025-14847 MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability MongoDB · MongoDB and MongoDB Server
- CVE-2023-52163 Digiever DS-2105 Pro Missing Authorization Vulnerability Digiever · DS-2105 Pro
- CVE-2025-59718 Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability Fortinet · Multiple Products
- CVE-2025-14611 Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability Gladinet · CentreStack and Triofox
- CVE-2025-14174 Google Chromium Out of Bounds Memory Access Vulnerability Google · Chromium
- CVE-2025-58360 OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability OSGeo · GeoServer
- CVE-2025-6218 RARLAB WinRAR Path Traversal Vulnerability RARLAB · WinRAR
- CVE-2022-37055 D-Link Routers Buffer Overflow Vulnerability D-Link · Routers
- CVE-2025-61757 Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability Oracle · Fusion Middleware
- CVE-2025-58034 Fortinet FortiWeb OS Command Injection Vulnerability Fortinet · FortiWeb
- CVE-2025-64446 Fortinet FortiWeb Path Traversal Vulnerability Fortinet · FortiWeb
- CVE-2025-12480 Gladinet Triofox Improper Access Control Vulnerability Gladinet · Triofox
- CVE-2025-9242 WatchGuard Firebox Out-of-Bounds Write Vulnerability WatchGuard · Firebox
- CVE-2025-48703 CWP Control Web Panel OS Command Injection Vulnerability CWP · Control Web Panel
- CVE-2025-11371 Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability Gladinet · CentreStack and Triofox
- CVE-2025-24893 XWiki Platform Eval Injection Vulnerability XWiki · Platform
- CVE-2025-6204 Dassault Systèmes DELMIA Apriso Code Injection Vulnerability Dassault Systèmes · DELMIA Apriso
- CVE-2025-6205 Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability Dassault Systèmes · DELMIA Apriso
- CVE-2025-54236 Adobe Commerce and Magento Improper Input Validation Vulnerability Adobe · Commerce and Magento
Nothing on this page matches that filter.