Quick links
Press Enter to search, Esc to close
Threat Library
Software flaws that attackers have used in real attacks: who is affected and what to do about them.
Vulnerability 2026
CVE-2026-48282
CVE-2026-48282 is a critical path traversal flaw in Adobe ColdFusion 2025 and 2023 that can lead to arbitrary code execution.
Open
Vulnerability 2026
CVE-2026-82907
CVE-2026-82907 is an authentication bypass in Apache OFBiz before 24.09.08.
Open
Vulnerability 2026
CVE-2026-86950
CVE-2026-86950 is an out-of-bounds write (CWE-787) in Apple CoreGraphics.
Open
Vulnerability 2024
CVE-2024-27834
CVE-2024-27834 is a WebKit flaw that lets an attacker with arbitrary read and write capability bypass Pointer Authentication on Apple devices.
Open
Vulnerability 2026
CVE-2026-93952
CVE-2026-93952 is an improper input validation flaw (CWE-20) in Arista VeloCloud Orchestrator (VCO), the management server for VeloCloud SD-WAN.
Open
Vulnerability 2026
CVE-2026-16812
CVE-2026-16812 is an OS command injection flaw (CWE-78) in Arista VeloCloud Orchestrator (VCO), the management server for VeloCloud SD-WAN.
Open
Vulnerability 2026
CVE-2026-119923
CVE-2026-119923 is a heap-based buffer overflow in the TDS prelogin parser inside the Babelfish for PostgreSQL extension, including Amazon Aurora PostgreSQL's managed Babelfish feature.
Open
Vulnerability 2026
CVE-2026-111560
CVE-2026-111560 is improper neutralization of shell metacharacters (CWE-78) in the timezone configuration field used by common code across several Barracuda appliance products.
Open
Vulnerability 2026
CVE-2026-116606
CVE-2026-116606 is an authentication bypass (CWE-288).
Open
Vulnerability 2026
CVE-2026-1731
CVE-2026-1731 is a critical flaw in BeyondTrust Remote Support (RS) and some older versions of Privileged Remote Access (PRA), tools used to reach and manage systems remotely.
Open
Vulnerability 2026
CVE-2026-102764
CVE-2026-102764 is a flaw in BeyondTrust Remote Support, a tool that support teams use to reach and control other computers.
Open
Vulnerability 2026
CVE-2026-119757
CVE-2026-119757 is an information disclosure flaw in BTCPay Server before 2.4.2.
Open
Vulnerability 2026
CVE-2026-112816
CVE-2026-112816 is a critical authentication bypass in the HTTPS API of Canonical LXD and MicroCloud.
Open
Vulnerability 2026
CVE-2026-50751
CVE-2026-50751 is a flaw in Check Point Security Gateway remote access VPN that lets an outsider open a VPN session without a valid password.
Open
Vulnerability 2026
CVE-2026-20182
CVE-2026-20182 is a critical authentication bypass in the peering authentication of Cisco Catalyst SD-WAN Controller, Manager and Validator.
Open
Vulnerability 2023
CVE-2023-20198
CVE-2023-20198 is a flaw in the web management page of Cisco IOS XE, the software that runs many Cisco routers and switches.
Open
Vulnerability 2026
CVE-2026-20127
CVE-2026-20127 is a flaw in the way Cisco Catalyst SD-WAN systems check the identity of other devices that connect to them.
Open
Vulnerability 2026
CVE-2026-76519
CVE-2026-76519 is a critical arbitrary file write flaw in the Advanced Malware Protection feature of Cisco Secure Email Gateway.
Open
Vulnerability 2026
CVE-2026-20079
CVE-2026-20079 is a critical authentication bypass in the web interface of Cisco Secure Firewall Management Center (FMC).
Open
Vulnerability 2023
CVE-2023-3519
CVE-2023-3519 is a flaw in NetScaler ADC and NetScaler Gateway, formerly Citrix ADC and Gateway.
Open
Vulnerability 2023
CVE-2023-4966
CVE-2023-4966, nicknamed Citrix Bleed, is a flaw in NetScaler ADC and NetScaler Gateway, the Citrix products that give staff remote access.
Open
Vulnerability 2025
CVE-2025-5777
CVE-2025-5777 is a flaw in NetScaler ADC and NetScaler Gateway where weak input checking lets the device read and return memory it should not.
Open
Vulnerability 2024
CVE-2024-50623
CVE-2024-50623 is a flaw in three Cleo managed file transfer products: Harmony, VLTrader and LexiCom.
Open
Vulnerability 2026
CVE-2026-116366
CVE-2026-116366 is a remote code execution flaw in ClickHouse Server.
Open
Vulnerability 2026
CVE-2026-110447
CVE-2026-110447 is an unauthenticated OS command injection in the Built-in CODE Server app (richdocumentscode) for Nextcloud.
Open
Vulnerability 2023
CVE-2023-22515
CVE-2023-22515 is a broken access control flaw in Atlassian Confluence Data Center and Server.
Open
Vulnerability 2026
CVE-2026-123488
CVE-2026-123488 is an unauthenticated SQL injection flaw in Craft CMS's element search endpoint.
Open
Vulnerability 2025
CVE-2025-31161
CVE-2025-31161 is a flaw in CrushFTP, a file transfer server, that lets an outsider sign in as another user without a password.
Open
Vulnerability 2026
CVE-2026-76418
CVE-2026-76418 is a denial-of-service flaw in Cisco Secure Firewall ASA and Threat Defense (FTD).
Open
Vulnerability 2026
CVE-2026-93857
CVE-2026-93857 is a stack-based buffer overflow in the WatchGuard Fireware OS SIP proxy.
Open
Vulnerability 2026
CVE-2026-98432
CVE-2026-98432 is a Linux kernel use-after-free in TCP and IPv4 option handling.
Open
Vulnerability 2026
CVE-2026-86384
CVE-2026-86384 is a hard-coded cryptographic key flaw in Dell PowerProtect Data Domain.
Open
Vulnerability 2026
CVE-2026-90717
CVE-2026-90717 is an authentication bypass by spoofing in Dell PowerProtect Data Domain Management Center.
Open
Vulnerability 2026
CVE-2026-103799
CVE-2026-103799 is a missing authorization flaw in Dell PowerProtect Data Domain Management Center.
Open
Vulnerability 2026
CVE-2026-103792
CVE-2026-103792 is an SQL injection in Dell PowerProtect Data Domain Management Center.
Open
Vulnerability 2026
CVE-2026-103780
CVE-2026-103780 is a stack-based buffer overflow in Dell PowerProtect Data Domain.
Open
Vulnerability 2026
CVE-2026-86397
CVE-2026-86397 is an improper authentication flaw in Dell PowerProtect Data Domain.
Open
Vulnerability 2026
CVE-2026-86400
CVE-2026-86400 is an improper authentication flaw in Dell PowerProtect Data Domain.
Open
Vulnerability 2026
CVE-2026-108097
CVE-2026-108097 is a remote code execution flaw in the Field UI module of Drupal core.
Open
Vulnerability 2026
CVE-2026-118264
CVE-2026-118264 is a Critical access control bypass in the Echo Go web framework.
Open
Vulnerability 2026
CVE-2026-112362
CVE-2026-112362 is a Critical middleware bypass in @fastify/express 4.0.5 through 4.0.8.
Open
Vulnerability 2024
CVE-2024-47575
CVE-2024-47575 is a missing authentication flaw in the FortiManager service that talks to managed firewalls.
Open
Vulnerability 2025
CVE-2025-61624
CVE-2025-61624 is a path traversal flaw in the command line of FortiOS, FortiPAM, FortiProxy and FortiSwitchManager.
Open
Vulnerability 2026
CVE-2026-21643
CVE-2026-21643 is a critical SQL injection in the web interface of Fortinet FortiClientEMS 7.4.4.
Open
Vulnerability 2026
CVE-2026-107656
CVE-2026-107656 is an authentication bypass (CWE-288) in the web interface of Fortinet FortiSandbox.
Open
Vulnerability 2026
CVE-2026-106173
CVE-2026-106173 is a path traversal flaw (CWE-22) in the phQueryMaster gRPC service of Fortinet FortiSIEM.
Open
Vulnerability 2024
CVE-2024-55591
CVE-2024-55591 is an authentication bypass flaw in FortiOS and FortiProxy.
Open
Vulnerability 2024
CVE-2024-21762
CVE-2024-21762 is an out-of-bounds write flaw in the SSL VPN service of FortiOS and in FortiProxy.
Open
Vulnerability 2022
CVE-2022-42475
CVE-2022-42475 is a heap-based buffer overflow in the FortiOS SSL-VPN service.
Open
Vulnerability 2026
CVE-2026-97229
CVE-2026-97229 is a critical integer overflow in the CI/CD regular expression compiler of GitLab Community Edition and Enterprise Edition.
Open
Vulnerability 2026
CVE-2026-110264
CVE-2026-110264 is a critical GitLab vulnerability: an integer overflow in the regular expression compiler of GitLab Community Edition and Enterprise Edition.
Open
Vulnerability 2026
CVE-2026-85706
CVE-2026-85706 is a critical flaw in GitLab Community and Enterprise Edition that lets an unauthenticated user read arbitrary files from the server through the repository commits API.
Open
Vulnerability 2026
CVE-2026-52848
CVE-2026-52848 is a two-factor authentication bypass in GLPI 11.0.0 through 11.0.7.
Open
Vulnerability 2026
CVE-2026-24061
CVE-2026-24061 is a critical authentication bypass in the telnetd server of GNU Inetutils 1.9.3 through 2.7.
Open
Vulnerability 2025
CVE-2025-10035
CVE-2025-10035 is a flaw in the License Servlet of Fortra GoAnywhere MFT, a managed file transfer product.
Open
Vulnerability 2023
CVE-2023-0669
CVE-2023-0669 is a flaw in GoAnywhere MFT, a managed file transfer product from Fortra.
Open
Vulnerability 2026
CVE-2026-79844
HPE Networking's bulletin HPESBNW05162 of 22 October 2026 fixes 72 flaws in ArubaOS, the software of Aruba Mobility Conductors, Controllers, Gateways and access points (AOS-8 and AOS-10).
Open
Vulnerability 2026
CVE-2026-17362
CVE-2026-17362 is a missing-authorization flaw in IBM API Connect V12 On-Prem.
Open
Vulnerability 2026
CVE-2026-123218
CVE-2026-123218 is a missing-authorization flaw in IBM Aspera Faspex, a managed file-transfer product.
Open
Vulnerability 2026
CVE-2026-94300
CVE-2026-94300 is a memory corruption flaw in the GSS-TSIG handling of the BIND 9 name server.
Open
Vulnerability 2023
CVE-2023-46805
CVE-2023-46805 is an authentication bypass in the web component of Ivanti Connect Secure and Ivanti Policy Secure.
Open
Vulnerability 2024
CVE-2024-21887
CVE-2024-21887 is a command injection flaw in the web components of Ivanti Connect Secure and Ivanti Policy Secure.
Open
Vulnerability 2025
CVE-2025-22457
CVE-2025-22457 is a stack-based buffer overflow in Ivanti Connect Secure, Policy Secure and ZTA Gateways.
Open
Vulnerability 2026
CVE-2026-104935
CVE-2026-104935 is a flaw in Ivanti Connect Secure, a VPN gateway that lets staff reach company systems from outside.
Open
Vulnerability 2025
CVE-2025-0282
CVE-2025-0282 is a stack-based buffer overflow in Ivanti Connect Secure, Policy Secure and Neurons for ZTA gateways.
Open
Vulnerability 2026
CVE-2026-1281
CVE-2026-1281 is a critical code injection flaw in Ivanti Endpoint Manager Mobile (EPMM) that lets an attacker run code on the server without logging in.
Open
Vulnerability 2026
CVE-2026-1340
CVE-2026-1340 is a critical code injection flaw in Ivanti Endpoint Manager Mobile (EPMM) that lets an attacker run code on the server without logging in.
Open
Vulnerability 2026
CVE-2026-110879
CVE-2026-110879 is a Critical jackson-databind vulnerability that can bypass type checks when an app reads untrusted JSON.
Open
Vulnerability 2026
CVE-2026-117625
CVE-2026-117625 is a missing permission check in Jenkins 2.587 and earlier and LTS 2.580.1 and earlier.
Open
Vulnerability 2026
CVE-2026-123831
CVE-2026-123831 is a flaw in JetBrains CLion where opening a project in Safe Mode still allowed code execution through the project's Meson build settings.
Open
Vulnerability 2026
CVE-2026-123837
CVE-2026-123837 is a command injection flaw in JetBrains IntelliJ IDEA's Tomcat run configurations on Windows Subsystem for Linux (WSL).
Open
Vulnerability 2026
CVE-2026-48907
CVE-2026-48907 is an unauthenticated remote code execution flaw in the JCE editor extension for Joomla, versions before 2.9.99.5.
Open
Vulnerability 2026
CVE-2026-103406
CVE-2026-103406 is an OS command injection flaw in the AutomatedProvisioner of Juniper Networks Session Smart Conductor.
Open
Vulnerability 2026
CVE-2026-103409
CVE-2026-103409 is a missing-authentication flaw in Juniper Networks Session Smart Router (SSR).
Open
Vulnerability 2026
CVE-2026-86044
CVE-2026-86044 is a flaw in JupyterLab Desktop's background IPC method, getServerInfo.
Open
Vulnerability 2026
CVE-2026-117691
CVE-2026-117691 is a signature bypass in the SAML HTTP-Redirect binding of Keycloak, as shipped in Red Hat Build of Keycloak.
Open
Vulnerability 2026
CVE-2026-77596
CVE-2026-77596 is a missing authorization flaw in the upload endpoints of the Kubeflow Pipelines API server in multi-user mode.
Open
Vulnerability 2025
CVE-2025-3248
CVE-2025-3248 is a flaw in Langflow, an open-source tool for building AI workflows.
Open
Vulnerability 2026
CVE-2026-114509
CVE-2026-114509 is an authentication bypass in the built-in TokenGuard of laravel/framework.
Open
Vulnerability 2021
CVE-2021-44228
Log4Shell (CVE-2021-44228) is a remote code execution flaw in Log4j 2, a widely used Java logging library from the Apache Software Foundation.
Open
Vulnerability 2026
CVE-2026-72898
CVE-2026-72898 is an unauthenticated SQL injection in Metabase, reached through the password reset endpoint, that can give an attacker administrator access.
Open
Vulnerability 2023
CVE-2023-34362
CVE-2023-34362 is the MOVEit Transfer SQL injection flaw, in Progress MOVEit Transfer, software that companies use to exchange files.
Open
Vulnerability 2026
CVE-2026-86218
CVE-2026-86218 is a critical pre-authentication remote code execution flaw in N-able N-central, caused by static code injection (CWE-96).
Open
Vulnerability 2026
CVE-2026-3055
CVE-2026-3055 is a flaw in NetScaler ADC and NetScaler Gateway where weak input checking lets the device read and return memory it should not.
Open
Vulnerability 2026
CVE-2026-96889
CVE-2026-96889 is a critical flaw in the Next.js Image Optimization API.
Open
Vulnerability
GHSA-673q-mjm6-r5xr
GHSA-673q-mjm6-r5xr is a critical flaw in Next.js 16 applications that use the App Router with Cache Components.
Open
Vulnerability 2026
CVE-2026-111497
CVE-2026-111497, called Node2Shell by researchers and also HTTP2Shell or Broccoli2Shell in later posts, including Wiz Research's, is an out-of-bounds write in the Brotli decoder bundled with Node.js.
Open
Vulnerability 2026
CVE-2026-48027
CVE-2026-48027 is not a coding bug in Nx Console.
Open
Vulnerability 2026
CVE-2026-108551
CVE-2026-108551 is a code injection flaw (CWE-94) in openapi-typescript-codegen, an npm tool that turns an OpenAPI document into a TypeScript client.
Open
Vulnerability 2026
CVE-2026-123025
CVE-2026-123025 is an OS command injection in the Google Cloud DNS validation module of the OPNsense os-acme-client plugin.
Open
Vulnerability 2026
CVE-2026-101767
CVE-2026-101767 is a flaw in the Core component of Oracle Application Object Library, part of Oracle E-Business Suite (EBS).
Open
Vulnerability 2025
CVE-2025-61882
CVE-2025-61882 is a flaw in the BI Publisher Integration part of Oracle Concurrent Processing, which is a component of Oracle E-Business Suite (EBS), a business software suite for finance and operations.
Open
Vulnerability 2026
CVE-2026-91403
CVE-2026-91403 is a critical vulnerability in the JSSE component of Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition.
Open
Vulnerability 2026
CVE-2026-35273
CVE-2026-35273 is a critical flaw in Oracle PeopleSoft PeopleTools 8.61 and 8.62 that lets an unauthenticated attacker take over the system over HTTP.
Open
Vulnerability 2026
CVE-2026-0322
CVE-2026-0322 is a flaw in the management interface of Palo Alto Networks PAN-OS, the software that runs its firewalls and Panorama management servers.
Open
Vulnerability 2026
CVE-2026-0257
CVE-2026-0257 is a flaw in the GlobalProtect VPN portal and gateway of Palo Alto Networks PAN-OS firewalls.
Open
Vulnerability 2024
CVE-2024-3400
CVE-2024-3400 is a flaw in the GlobalProtect feature of Palo Alto Networks PAN-OS firewalls.
Open
Vulnerability 2023
CVE-2023-27350
CVE-2023-27350 is a flaw in PaperCut NG and PaperCut MF, print management software.
Open
Vulnerability 2026
CVE-2026-116241
CVE-2026-116241 is a critical OS command injection in the Import/Export Data tool of pgAdmin 4, the open source admin tool for PostgreSQL.
Open
Vulnerability 2026
CVE-2026-109618
CVE-2026-109618 is a critical PHP flaw that PHP titles "RCE via OOM corruption".
Open
Vulnerability 2026
CVE-2026-109619
CVE-2026-109619 is a critical PHP flaw that PHP titles "RCE via stale global state".
Open
Vulnerability 2026
CVE-2026-115560
CVE-2026-115560 is a remote code execution path in PHP session upload progress.
Open
Vulnerability 2026
CVE-2026-112900
CVE-2026-112900 is a flaw in Pillow, the widely used Python imaging library.
Open
Vulnerability 2026
CVE-2026-112398
CVE-2026-112398 is a heap buffer overflow in the FlashPix (FPX) reader of Pillow, the Python imaging library.
Open
Vulnerability 2026
CVE-2026-96656
CVE-2026-96656 is an arbitrary file write flaw in Plex Media Server before build 1.43.3.10861.
Open
Vulnerability 2026
CVE-2026-96654
CVE-2026-96654 is an improper neutralization of encoded URI schemes (CWE-84) in Plex Media Server before build 1.43.3.10861.
Open
Vulnerability 2026
CVE-2026-96652
CVE-2026-96652 is a server-side request forgery in the /player/timeline endpoint of Plex Media Server before build 1.43.3.10861.
Open
Vulnerability 2026
CVE-2026-96655
CVE-2026-96655 is a server-side request forgery in the /video/:/transcode/universal endpoint of Plex Media Server before build 1.43.3.10861.
Open
Vulnerability 2026
CVE-2026-115770
CVE-2026-115770 is a verification flaw in Pocket ID, an OIDC passkey provider, from 2.2.0 up to 2.12.0.
Open
Vulnerability 2026
CVE-2026-63017
CVE-2026-63017 is an incorrect authorization flaw in Subnet Solutions PowerSYSTEM Center, and CVE-2026-63774 is an SQL injection flaw in its report designer.
Open
Vulnerability 2021
CVE-2021-26855
CVE-2021-26855 is a flaw in on-premises Microsoft Exchange Server, the first link in the attack chain called ProxyLogon.
Open
Vulnerability 2026
CVE-2026-92190
CVE-2026-92190 is a critical deserialization of untrusted data flaw in the baseRmiServiceExporter bean of Quest Foglight for Databases.
Open
Vulnerability 2026
CVE-2026-92189
CVE-2026-92189 is a critical external control of file path flaw in the writeTopologySectionToFile method of Quest Foglight for Databases.
Open
Vulnerability 2026
CVE-2026-92188
CVE-2026-92188 is a critical missing authentication flaw in the ForgeMBeanServerSupport module of Quest Foglight for Databases.
Open
Vulnerability 2025
CVE-2025-55182
CVE-2025-55182 is a flaw in React Server Components.
Open
Vulnerability 2025
CVE-2025-31324
CVE-2025-31324 is a flaw in the Visual Composer part of SAP NetWeaver.
Open
Vulnerability 2024
CVE-2024-1709
CVE-2024-1709 is a flaw in ConnectWise ScreenConnect, a tool IT teams use to control computers remotely.
Open
Vulnerability 2026
CVE-2026-100109
CVE-2026-100109 is a missing-authorization flaw in the Security For WooCommerce WordPress plugin, versions 1.0.10 to 1.0.16, that lets an unauthenticated visitor create an administrator account.
Open
Vulnerability 2025
CVE-2025-53770
CVE-2025-53770 is a flaw in on-premises Microsoft SharePoint Server that lets an unauthorized attacker run code over a network.
Open
Vulnerability 2026
CVE-2026-110936
CVE-2026-110936 is a DLL side-loading flaw in Siemens Software Center, fixed in version 4.0.9.8.
Open
Vulnerability 2026
CVE-2026-48558
CVE-2026-48558 is a critical authentication bypass in SimpleHelp, the remote support server.
Open
Vulnerability 2024
CVE-2024-57727
CVE-2024-57727 is a path traversal flaw in SimpleHelp, remote support software that IT teams and service providers use to manage computers.
Open
Vulnerability 2026
CVE-2026-24423
CVE-2026-24423 is a flaw in SmarterTools SmarterMail, a mail server.
Open
Vulnerability 2026
CVE-2026-83548
CVE-2026-83548 is a critical pre-authentication server-side request forgery in the Work Place interface of SonicWall SMA1000 appliances.
Open
Vulnerability 2026
CVE-2026-15409
CVE-2026-15409 is a critical server-side request forgery in the Work Place interface of SonicWall SMA1000 appliances.
Open
Vulnerability 2024
CVE-2024-40766
CVE-2024-40766 is an access control flaw in SonicOS, the software on SonicWall firewalls.
Open
Vulnerability 2024
CVE-2024-53704
CVE-2024-53704 is an authentication bypass in the SSLVPN service of SonicWall SonicOS, the operating system of SonicWall firewalls.
Open
Vulnerability 2026
CVE-2026-118633
CVE-2026-118633 is a path traversal flaw in Sophos UTM, a product Sophos no longer supports.
Open
Vulnerability 2026
CVE-2026-18450
CVE-2026-18450 is a critical flaw in the IPMI service of Supermicro BMC firmware.
Open
Vulnerability 2026
CVE-2026-13684
CVE-2026-13684 is a critical flaw in the SCGI component of Synology DSM, the operating system for Synology's DiskStation NAS devices.
Open
Vulnerability 2026
CVE-2026-45321
CVE-2026-45321 is not a flaw in TanStack's router code.
Open
Vulnerability 2026
CVE-2026-63077
CVE-2026-63077 is a flaw in JetBrains TeamCity On-Premises, a server that builds and ships software (a CI/CD tool).
Open
Vulnerability 2024
CVE-2024-27198
CVE-2024-27198 is a flaw in JetBrains TeamCity On-Premises, a tool software teams use to build and ship code.
Open
Vulnerability 2026
CVE-2026-111585
CVE-2026-111585 is an integer overflow in the remote-control screen processing of TeamViewer clients.
Open
Vulnerability 2026
CVE-2026-78403
CVE-2026-78403 is a critical stack-based buffer overflow in Thales Sentinel Keys Server on Windows.
Open
Vulnerability 2026
CVE-2026-97631
CVE-2026-97631 is a buffer overflow in the PXE driver of TianoCore EDK II, the open source base of much UEFI firmware.
Open
Vulnerability 2026
CVE-2026-33634
CVE-2026-33634 is not a coding bug in Trivy.
Open
Vulnerability 2026
CVE-2026-34910
CVE-2026-34910 is a critical command injection in UniFi OS, the operating system of Ubiquiti gateways, recorders, storage units and UniFi OS Server.
Open
Vulnerability 2026
CVE-2026-34908
CVE-2026-34908 is a critical improper access control flaw in UniFi OS, the operating system of Ubiquiti gateways, recorders, storage units and UniFi OS Server.
Open
Vulnerability 2026
CVE-2026-108142
CVE-2026-108142 is an authorization bypass in the CDP Coordinator Service of Veeam Backup & Replication 13.
Open
Vulnerability 2026
CVE-2026-106076
CVE-2026-106076 is a SQL injection flaw in Veeam Backup for Microsoft 365.
Open
Vulnerability 2026
CVE-2026-107671
CVE-2026-107671 is a multi-factor authentication bypass in Veeam ONE 13.1.
Open
Vulnerability 2026
CVE-2026-114625
CVE-2026-114625 is a critical flaw in Arista VeloCloud Orchestrator (VCO) On-Prem, the management server for VeloCloud SD-WAN.
Open
Vulnerability 2026
CVE-2026-41709
CVE-2026-41709 is an insufficient logging flaw in VMware ESX, the hypervisor behind vSphere and VMware Cloud Foundation.
Open
Vulnerability 2025
CVE-2025-22225
CVE-2025-22225 is a flaw in VMware ESXi, the hypervisor that runs virtual machines on a server.
Open
Vulnerability 2026
CVE-2026-59310
CVE-2026-59310 is a directory traversal flaw in the Syslog server of VMware vCenter, the console used to manage virtualised servers.
Open
Vulnerability 2025
CVE-2025-14733
CVE-2025-14733 is an out-of-bounds write in the iked process of WatchGuard Fireware OS, the software of Firebox firewalls.
Open
Vulnerability 2025
CVE-2025-8088
CVE-2025-8088 is a path traversal flaw in WinRAR for Windows.
Open
Vulnerability 2026
CVE-2026-119977
CVE-2026-119977 is a race condition in the WordPress core upgrade process that lets an unauthenticated attacker run code on the server during the upgrade window.
Open
Vulnerability 2025
CVE-2025-11969
CVE-2025-11969 is a broken access control flaw (CWE-285) in the System REST APIs of several WSO2 products.
Open
Nothing matches. Try another word or filter.
Counts as of 7 November 2026
Brandefense
Take control of your digital security with an exclusive demo of our AI-driven threat intelligence platform.
