Vulnerabilities
5,595 CVEs: everything published in the past eight days, plus every flaw the exploited list, the news or an actor profile points at. Ranked by force, not by score alone.
| CVE | Affected | CVSS | EPSS | Force |
|---|---|---|---|---|
| CVE-2026-109619 | PHP Group PHP PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed.… | 9.2 | 100% | 11 |
| CVE-2026-109618 | PHP Group PHP PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The… | 9.2 | 100% | 11 |
| CVE-2025-53770 | Microsoft Microsoft SharePoint Enterprise… Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a… | 9.8 | 100% | 11 |
| CVE-2017-7921 | Hikvision Cameras An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125,… | 9.8 | 100% | 11 |
| CVE-2026-10520 | Ivanti Sentry An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution | 10.0 | 100% | 11 |
| CVE-2026-8037 | Progress Software LoadMaster OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints | 9.6 | 100% | 11 |
| CVE-2025-32432 | Craftcms Cms Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17, Craft is vulnerable to remote code execution.… | 10.0 | 100% | 11 |
| CVE-2025-49113 | Roundcube Webmail Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the _from parameter in a URL is not validated in program/actions/settings/upload.php, leading to PHP Object Deserialization. | 9.9 | 100% | 11 |
| CVE-2015-3306 | ProFTPD ProFTPD The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands. | 10.0 | 100% | 11 |
| CVE-2025-31324 | SAP_SE SAP NetWeaver (Visual Composer… SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the… | 10.0 | 99% | 11 |
| CVE-2026-75650 | Adobe Adobe Commerce Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute… | 10.0 | 99% | 11 |
| CVE-2025-68613 | N8n-Io N8n n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution (RCE) vulnerability in their workflow expression evaluation system. Under certain… | 10.0 | 99% | 11 |
| CVE-2008-4250 | Microsoft Windows The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path… | 9.8 | 99% | 11 |
| CVE-2026-41940 | WebPros CPanel cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel. | 9.3 | 99% | 11 |
| CVE-2026-72898 | Metabase Metabase Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance. | 10.0 | 98% | 11 |
| CVE-2026-85706 | GitLab GitLab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an unauthenticated user could have read… | 10.0 | 97% | 11 |
| CVE-2026-20253 | Splunk Splunk Enterprise In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or truncate arbitrary files through a PostgreSQL sidecar service endpoint. The vulnerability exists because the PostgreSQL sidecar service… | 9.8 | 97% | 11 |
| CVE-2026-35273 | Oracle Corporation PeopleSoft Enterprise… Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with… | 9.8 | 97% | 11 |
| CVE-2026-63077 | JetBrains TeamCity In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol | 9.8 | 95% | 11 |
| CVE-2026-93616 | Checkpoint Quantum Security Management A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server. | 9.8 | 92% | 11 |
| CVE-2026-20182 | Cisco Cisco Catalyst SD-WAN Controller May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the was disclosed in February 2026. This new advisory is for a new vulnerability in the control connection handshaking. The… | 10.0 | 91% | 11 |
| CVE-2025-26399 | SolarWinds Web Help Desk SolarWinds Web Help Desk was found to be susceptible to an unauthenticated AjaxProxy deserialization remote code execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. This vulnerability is a patch bypass of… | 9.8 | 91% | 11 |
| CVE-2026-34910 | Ubiquiti Inc UniFi OS Server A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. | 10.0 | 90% | 11 |
| CVE-2026-9082 | Drupal Drupal Core Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Drupal core allows SQL Injection. This issue affects Drupal core: from 8.9.0 before 10.4.10, from 10.5.0 before 10.5.10, from 10.6.0 before 10.6.9,… | 9.8 | 89% | 11 |
| CVE-2026-48908 | Joomshaper.Net SP Page Builder Extension For… A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code. | 10.0 | 89% | 11 |
| CVE-2026-34908 | Ubiquiti Inc UniFi OS Server A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system. | 10.0 | 89% | 11 |
| CVE-2026-20079 | Cisco Cisco Secure Firewall Management Center… A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying… | 10.0 | 89% | 11 |
| CVE-2026-20127 | Cisco Cisco Catalyst SD-WAN Manager A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated,… | 10.0 | 88% | 11 |
| CVE-2026-48907 | Joomlacontenteditor.Net Joomla Content Editor… A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution. | 10.0 | 85% | 11 |
| CVE-2026-50751 | Checkpoint Quantum Security Gateway A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password. | 9.3 | 85% | 11 |
| CVE-2026-111497 | Google Brotli A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause… | 9.2 | 83% | 11 |
| CVE-2026-88771 | Citrix NetScaler ADC Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before… | 9.5 | 82% | 11 |
| CVE-2026-105134 | Ahsay AhsayCBS A flaw has been found in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os… | 10.0 | 82% | 11 |
| CVE-2026-48558 | SimpleHelp SimpleHelp SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during login are accepted without verifying… | 9.5 | 80% | 11 |
| CVE-2026-45659 | Microsoft Microsoft SharePoint Enterprise… Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 8.8 | 80% | 11 |
| CVE-2026-33824 | Microsoft Windows 10 Version 1607 Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. | 9.8 | 77% | 11 |
| CVE-2026-88772 | Citrix NetScaler ADC Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to… | 9.5 | 77% | 11 |
| CVE-2026-76460 | Cisco Cisco Identity Services Engine Software A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this… | 10.0 | 76% | 11 |
| CVE-2026-21962 | Oracle Corporation Oracle HTTP Server, Oracle… Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Proxy Plug-in for IIS). Supported versions that are affected… | 10.0 | 73% | 11 |
| CVE-2026-97229 | GitLab GitLab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab… | 10.0 | 69% | 11 |
| CVE-2024-57726 | SimpleHelp SimpleHelp SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role. | 9.9 | 66% | 11 |
| CVE-2021-22681 | Rockwell Automation Studio 5000 Logix… Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560,… | 9.8 | 64% | 11 |
| CVE-2026-0770 | Langflow Langflow Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to… | 9.8 | 63% | 11 |
| CVE-2026-59310 | VMware Cloud Foundation VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code. | 9.8 | 62% | 11 |
| CVE-2026-85102 | Checkpoint Quantum Security Gateway Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway. | 9.8 | 54% | 11 |
| CVE-2026-20131 | Cisco Cisco Secure Firewall Management Center… A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device. This vulnerability is due to… | 10.0 | 44% | 11 |
| CVE-2023-49105 | OwnCloud OwnCloud An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file without authentication if the username of a victim is known, and the victim has no signing-key configured. This occurs because pre-signed… | 9.8 | 43% | 11 |
| CVE-2026-48282 | Adobe ColdFusion 2025 ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation of… | 10.0 | 42% | 11 |
| CVE-2026-76461 | Cisco Cisco Secure Email A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to… | 9.8 | 40% | 11 |
| CVE-2026-76504 | Cisco Cisco Catalyst SD-WAN Manager A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user. This vulnerability is due to improper handling… | 9.8 | 39% | 11 |
| CVE-2026-56290 | Joomlack.Fr JoomlaCK.Fr Page Builder CK… Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE. | 10.0 | 31% | 11 |
| CVE-2025-14733 | WatchGuard Fireware OS An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when… | 9.3 | 29% | 11 |
| CVE-2026-9198 | IBM Langflow OSS IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments | 9.8 | 29% | 11 |
| CVE-2026-94127 | F5 BIG-IP When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution (RCE). This vulnerability is only present when BIG-IP APM is configured as an OAuth Authorization Server.… | 9.8 | 27% | 11 |
| CVE-2026-60004 | Gitea Gitea Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation. | 9.8 | 24% | 11 |
| CVE-2026-5430 | WSO2 WSO2 Universal Gateway The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows an attacker to craft a JWT with an unsupported algorithm, which is then incorrectly validated, leading to unauthorized… | 10.0 | 22% | 11 |
| CVE-2025-67038 | Lantronix EDS5000 Series An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authentication fails. The username is directly concatenated with the command without any sanitization. This allow attackers to… | 9.8 | 21% | 11 |
| CVE-2026-48939 | Icagenda.Com ICagenda Extension For Joomla A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution. | 10.0 | 20% | 11 |
| CVE-2026-123158 | Openbsd Openssh sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). For some configurations of accounts, any… | 8.1 | 19% | 11 |
| CVE-2026-65400 | Apple MacOS An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to authenticate to… | 9.8 | 18% | 11 |
| CVE-2026-48172 | LiteSpeed Technologies CPanel Plugin LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE "cpanel_jsonapi_func=redisAble" /var/cpanel/logs /usr/local/cpanel/logs/… | 10.0 | 18% | 11 |
| CVE-2026-86218 | N-Able N-Central N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14. | 10.0 | 15% | 11 |
| CVE-2026-56291 | Balbooa.Com Balbooa.Com Balbooa Forms… Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE. | 10.0 | 15% | 11 |
| CVE-2026-82329 | Jfrog Artifactory JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges. | 9.8 | 14% | 11 |
| CVE-2026-46817 | Oracle Corporation Oracle Payments Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to… | 9.8 | 12% | 11 |
| CVE-2026-63030 | WordPress WordPress WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the author__not_in WP_Query SQL Injection (CVE-2026-60137), could allow an attacker to perform SQL Injection and achieve… | 9.8 | 11% | 11 |
| CVE-2026-116606 | Barracuda Networks Barracuda Email Security… An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive, resulting in unauthorized… | 9.3 | 8.9% | 11 |
| CVE-2026-83548 | SonicWall SMA1000 A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive… | 10.0 | 8.0% | 11 |
| CVE-2026-15409 | SonicWall SMA1000 A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location. | 10.0 | 6.8% | 11 |
| CVE-2026-45321 | @Tanstack Arktype-Adapter On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for… | 9.6 | 3.3% | 11 |
| CVE-2026-116779 | Freeswitch Freeswitch FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.3, sofia_presence_handle_sip_i_message() split the To user of… | 9.8 | 2.5% | 11 |
| CVE-2026-39987 | Marimo-Team Marimo marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability. The terminal WebSocket endpoint /terminal/ws lacks authentication validation, allowing an unauthenticated attacker to obtain a full PTY shell and execute… | 9.3 | 100% | 10 |
| CVE-2021-22054 | VMware Workspace ONE UEM Console VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain an SSRF vulnerability. This issue may allow a malicious actor with network access to UEM to send their… | 7.5 | 100% | 10 |
| CVE-2026-21589 | Atlassian Bamboo Data Center This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible and Fisheye. This Arbitrary File Access vulnerability allows an… | 9.3 | 100% | 10 |
| CVE-2015-5477 | ISC BIND named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries. | 7.5 | 100% | 10 |
| CVE-2026-1340 | Ivanti Endpoint Manager Mobile A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution. | 9.8 | 99% | 10 |
| CVE-2026-34486 | Apache Software Foundation Apache Tomcat Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. Users are recommended to upgrade to version… | 7.5 | 99% | 10 |
| CVE-2026-34197 | Apache Software Foundation Apache ActiveMQ… Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default… | 8.8 | 98% | 10 |
| CVE-2026-31431 | Linux Linux In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in… | 7.8 | 98% | 10 |
| CVE-2026-21643 | Fortinet FortiClientEMS An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests. | 9.1 | 98% | 10 |
| CVE-2026-33017 | Langflow-Ai Langflow Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the POST /api/v1/build_public_tmp/{flow_id}/flow endpoint allows building public flows without requiring authentication. When the optional data… | 9.3 | 96% | 10 |
| CVE-2025-54068 | Livewire Livewire Livewire is a full-stack framework for Laravel. In Livewire v3 up to and including v3.6.3, a vulnerability allows unauthenticated attackers to achieve remote command execution in specific scenarios. The issue stems from how certain component property updates… | 9.2 | 96% | 10 |
| CVE-2026-87902 | WordPress WordPress An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active theme directories. If relevant pre-conditions for both the server and the active theme are met, this can lead… | 8.1 | 96% | 10 |
| CVE-2026-0257 | Palo Alto Networks Cloud NGFW Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by… | 7.8 | 96% | 10 |
| CVE-2024-1708 | ConnectWise ScreenConnect ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker the ability to execute remote code or directly impact confidential data or critical systems. | 8.4 | 95% | 10 |
| CVE-2026-35616 | Fortinet FortiClientEMS A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests. | 9.1 | 94% | 10 |
| CVE-2020-7796 | Synacor Zimbra Collaboration Suite Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled. | 9.8 | 94% | 10 |
| CVE-2025-34291 | Langflow Langflow Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration (allow_origins='*' with allow_credentials=True) combined with a refresh token cookie… | 9.4 | 93% | 10 |
| CVE-2026-39808 | Fortinet FortiSandbox A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.8 may allow attacker to execute unauthorized code or commands via <insert attack vector here> | 9.1 | 93% | 10 |
| CVE-2024-7399 | Samsung Electronics MagicINFO 9 Server Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority. | 8.8 | 92% | 10 |
| CVE-2010-0249 | Microsoft Internet Explorer Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote… | 8.8 | 92% | 10 |
| CVE-2026-71362 | Adobe Adobe Commerce Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive resources. Exploitation of this issue does not require user… | 9.1 | 92% | 10 |
| CVE-2026-3055 | NetScaler ADC Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread | 9.3 | 91% | 10 |
| CVE-2026-42271 | BerriAI Litellm LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server before saving it — POST /mcp-rest/test/connection and POST… | 8.7 | 91% | 10 |
| CVE-2026-42208 | BerriAI Litellm LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before version 1.83.7, a database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing… | 9.3 | 89% | 10 |
| CVE-2026-104935 | Ivanti Connect Secure Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior. | 8.6 | 89% | 10 |
| CVE-2026-20230 | Cisco Cisco Unified Communications Manager A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks… | 8.6 | 89% | 10 |
| CVE-2026-1603 | Ivanti Endpoint Manager An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data. | 8.6 | 88% | 10 |
| CVE-2009-3459 | Adobe Acrobat And Reader Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as exploited in the wild in October 2009.… | 8.8 | 87% | 10 |
| CVE-2026-81578 | PaperCut PaperCut MF/NG An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to the completion… | 8.8 | 85% | 10 |