CVEs.

Matching CVEs

1. 6.5Med

   CVE-2026-124194 ↗ (opens in a new tab)Known exploited

   Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

   M3Microsoft 365· Nov 10, 2026

2. 8.1High

   CVE-2026-119977 ↗ (opens in a new tab)Known exploited

   WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessible staging paths used during full-package core upgrades. This makes it possible for unauthenticated attackers to execute code on the server during the upgrade window.

   WCWordPress.com (Automattic)· Oct 31, 2026

3. 9.2Crit

   CVE-2026-111497 ↗ (opens in a new tab)Known exploited

   A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.

   CCClickHouse Cloud· Oct 22, 2026

4. 9.2Crit

   CVE-2026-111497 ↗ (opens in a new tab)Known exploited

   A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.

   ANAnthropic (Claude)· Oct 22, 2026

5. 9.2Crit

   CVE-2026-109619 ↗ (opens in a new tab)Known exploited

   PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).

   PAPalo Alto Networks· Oct 21, 2026

6. 9.2Crit

   CVE-2026-109618 ↗ (opens in a new tab)Known exploited

   PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).

   PAPalo Alto Networks· Oct 21, 2026

7. 8.6High

   CVE-2026-0322 ↗ (opens in a new tab)Known exploited

   A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS

   PAPalo Alto Networks· Oct 14, 2026

8. 8.8High

   CVE-2026-96951 ↗ (opens in a new tab)Known exploited

   Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

   M3Microsoft 365· Oct 13, 2026

9. 10.0Crit

   CVE-2026-97229 ↗ (opens in a new tab)Known exploited

   GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.

   GIGitLab· Oct 13, 2026

10. 9.3Crit

    CVE-2026-21589 ↗ (opens in a new tab)Known exploited

    This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible and Fisheye. This Arbitrary File Access vulnerability allows an unauthenticated attacker to access specific files within the web application root directory in affected versions. Exploitation requires prior knowledge of the target file's exact name and path; this vulnerability does not allow attackers to enumerate or list directory contents. In some configurations, there may be some sensitive files that make thi

    COConfluence· Oct 5, 2026

11. 9.3Crit

    CVE-2026-21589 ↗ (opens in a new tab)Known exploited

    This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible and Fisheye. This Arbitrary File Access vulnerability allows an unauthenticated attacker to access specific files within the web application root directory in affected versions. Exploitation requires prior knowledge of the target file's exact name and path; this vulnerability does not allow attackers to enumerate or list directory contents. In some configurations, there may be some sensitive files that make thi

    JSJira Service Management· Oct 5, 2026

12. 9.3Crit

    CVE-2026-21589 ↗ (opens in a new tab)Known exploited

    This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible and Fisheye. This Arbitrary File Access vulnerability allows an unauthenticated attacker to access specific files within the web application root directory in affected versions. Exploitation requires prior knowledge of the target file's exact name and path; this vulnerability does not allow attackers to enumerate or list directory contents. In some configurations, there may be some sensitive files that make thi

    BIBitbucket· Oct 5, 2026

13. 9.3Crit

    CVE-2026-21589 ↗ (opens in a new tab)Known exploited

    This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible and Fisheye. This Arbitrary File Access vulnerability allows an unauthenticated attacker to access specific files within the web application root directory in affected versions. Exploitation requires prior knowledge of the target file's exact name and path; this vulnerability does not allow attackers to enumerate or list directory contents. In some configurations, there may be some sensitive files that make thi

    JIJira· Oct 5, 2026

14. 8.1High

    CVE-2026-87902 ↗ (opens in a new tab)Known exploited

    An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active theme directories. If relevant pre-conditions for both the server and the active theme are met, this can lead to RCE.

    WCWordPress.com (Automattic)· Sep 22, 2026

15. 10.0Crit

    CVE-2026-85706 ↗ (opens in a new tab)Known exploited

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an unauthenticated user could have read arbitrary files from the GitLab server due to improper path confinement and missing authentication enforcement in the repository commits API.

    GIGitLab· Sep 12, 2026

16. 9.8Crit

    CVE-2026-82329 ↗ (opens in a new tab)Known exploited

    JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.

    JFJFrog· Aug 28, 2026

17. 7.5High

    CVE-2026-42018 ↗ (opens in a new tab)Known exploited

    JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.

    JFJFrog· Aug 12, 2026

18. 5.3Med

    CVE-2026-66384 ↗ (opens in a new tab)Known exploited

    An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.

    JFJFrog· Aug 12, 2026

19. 8.8High

    CVE-2026-65660 ↗ (opens in a new tab)Known exploited

    Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    M3Microsoft 365· Aug 11, 2026

20. 10.0Crit

    CVE-2026-72898 ↗ (opens in a new tab)Known exploited

    Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.

    MCMetabase Cloud· Aug 10, 2026

21. 8.8High

    CVE-2026-42016 ↗ (opens in a new tab)Known exploited

    JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.

    JFJFrog· Jul 27, 2026

22. 9.8Crit

    CVE-2026-63030 ↗ (opens in a new tab)Known exploited

    WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the author__not_in WP_Query SQL Injection (CVE-2026-60137), could allow an attacker to perform SQL Injection and achieve Remote Code Execution.

    WCWordPress.com (Automattic)· Jul 17, 2026

23. 5.9Med

    CVE-2026-60137 ↗ (opens in a new tab)Known exploited

    WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection when a plugin or theme passes untrusted input to the parameter.

    WCWordPress.com (Automattic)· Jul 17, 2026

24. 9.1Crit

    CVE-2026-55040 ↗ (opens in a new tab)Known exploited

    Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.

    M3Microsoft 365· Jul 14, 2026

25. 9.8Crit

    CVE-2026-58644 ↗ (opens in a new tab)Known exploited

    Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

    M3Microsoft 365· Jul 14, 2026

26. 9.8Crit

    CVE-2026-56164 ↗ (opens in a new tab)Known exploited

    Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

    M3Microsoft 365· Jul 14, 2026

27. 9.8Crit

    CVE-2026-50522 ↗ (opens in a new tab)Known exploited

    Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

    M3Microsoft 365· Jul 14, 2026

28. 8.8High

    CVE-2026-45659 ↗ (opens in a new tab)Known exploited

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    M3Microsoft 365· May 22, 2026

29. 6.7Med

    CVE-2026-34926 ↗ (opens in a new tab)Known exploited

    A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations. This vulnerability is only exploitable on the on-premise version of Apex One and a potential attacker must have access to the Apex One Server and already obtained administrative credentials to the server via some other method to exploit this vulnerability.

    TMTrend Micro· May 21, 2026

30. 6.1Med

    CVE-2026-42897 ↗ (opens in a new tab)Known exploited

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

    M3Microsoft 365· May 14, 2026

31. 7.8High

    CVE-2026-0257 ↗ (opens in a new tab)Known exploited

    Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by these issues.

    PAPalo Alto Networks· May 13, 2026

32. 9.6Crit

    CVE-2026-45321 ↗ (opens in a new tab)Known exploited

    On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/router, but the publish workflow itself was not modified. The attacker chained three known vulnerability classes — a pull_request_target "Pwn Request" misconfiguration, GitHub Actions cache poisoning across the fork↔base trust boundary, and runtime memory extraction of the OIDC token from the Actions runner process — to publish credential-s

    MAMistral AI· May 12, 2026

33. 9.3Crit

    CVE-2026-0300 ↗ (opens in a new tab)Known exploited

    A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. The risk of this issue is greatly reduced if you secure access to the User-ID™ Authentication Portal per the best practice guidelines https://knowledgebase.paloaltonetworks.com/KCSArticleDetail by restricting access to only trusted internal IP addresses. Prisma Access, Cloud NGFW and Panorama applianc

    PAPalo Alto Networks· May 6, 2026

34. 6.5Med

    CVE-2026-32201 ↗ (opens in a new tab)Known exploited

    Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

    M3Microsoft 365· Apr 14, 2026

35. 9.3Crit

    CVE-2026-39987 ↗ (opens in a new tab)Known exploited

    marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability. The terminal WebSocket endpoint /terminal/ws lacks authentication validation, allowing an unauthenticated attacker to obtain a full PTY shell and execute arbitrary system commands. Unlike other WebSocket endpoints (e.g., /ws) that correctly call validate_auth() for authentication, the /terminal/ws endpoint only checks the running mode and platform support before accepting connections, completely skipping authentication verification. This vulnerability is fixed in 0.23.0.

    COCoreWeave· Apr 9, 2026

36. 9.4Crit

    CVE-2026-33634 ↗ (opens in a new tab)Known exploited

    Trivy is a security scanner. On March 19, 2026, a threat actor used compromised credentials to publish a malicious Trivy v0.69.4 release, force-push 76 of 77 version tags in `aquasecurity/trivy-action` to credential-stealing malware, and replace all 7 tags in `aquasecurity/setup-trivy` with malicious commits. This incident is a continuation of the supply chain attack that began in late February 2026. Following the initial disclosure on March 1, credential rotation was performed but was not atomic (not all credentials were revoked simultaneously). The attacker could have use a valid token to ex

    TETelnyx· Mar 23, 2026

37. 7.8High

    CVE-2026-21514 ↗ (opens in a new tab)Known exploited

    Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

    M3Microsoft 365· Feb 10, 2026

38. 7.8High

    CVE-2026-21509 ↗ (opens in a new tab)Known exploited

    Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.

    M3Microsoft 365· Jan 26, 2026

39. 9.8Crit

    CVE-2026-20963 ↗ (opens in a new tab)Known exploited

    Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

    M3Microsoft 365· Jan 13, 2026

40. 8.7High

    CVE-2025-14847 ↗ (opens in a new tab)Known exploited

    Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an unauthenticated client. This issue affects all MongoDB Server v7.0 prior to 7.0.28 versions, MongoDB Server v8.0 versions prior to 8.0.17, MongoDB Server v8.2 versions prior to 8.2.3, MongoDB Server v6.0 versions prior to 6.0.27, MongoDB Server v5.0 versions prior to 5.0.32, MongoDB Server v4.4 versions prior to 4.4.30, MongoDB Server v4.2 versions greater than or equal to 4.2.0, MongoDB Server v4.0 versions greater than or equal to 4.0.0, and MongoDB Server v3.6 versions greater th

    MAMongoDB Atlas· Dec 19, 2025

41. 9.3Crit

    CVE-2025-14733 ↗ (opens in a new tab)Known exploited

    An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a dynamic gateway peer. If the Firebox was previously configured with the mobile user VPN with IKEv2 or a branch office VPN using IKEv2 to a dynamic gateway peer, and both of those configurations have since been deleted, that Firebox may still be vulnerable if a branch office VPN to a static gateway peer is still configured.

    WAWatchGuard· Dec 19, 2025

42. 10.0Crit

    CVE-2025-55182 ↗ (opens in a new tab)Known exploited

    A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vulnerable code unsafely deserializes payloads from HTTP requests to Server Function endpoints.

    VEVercel· Dec 3, 2025

43. 9.4Crit

    CVE-2025-62593 ↗ (opens in a new tab)Known exploited

    Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient guard against browser-based attacks, as the current defense uses the User-Agent header starting with the string "Mozilla" as a defense mechanism. This defense is insufficient as the fetch specification allows the User-Agent header to be modified. Combined with a DNS rebinding attack against the browser, and this vulnerability is exploitable against a developer ru

    ANAnyscale· Nov 26, 2025

44. 9.8Crit

    CVE-2025-11953 ↗ (opens in a new tab)Known exploited

    The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and run arbitrary executables. On Windows, the attackers can also execute arbitrary shell commands with fully controlled arguments.

    JFJFrog· Nov 3, 2025

45. 9.3Crit

    CVE-2025-9242 ↗ (opens in a new tab)Known exploited

    An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a dynamic gateway peer. If the Firebox was previously configured with the mobile user VPN with IKEv2 or a branch office VPN using IKEv2 to a dynamic gateway peer, and both of those configurations have since been deleted, that Firebox may still be vulnerable if a branch office VPN to a static gateway peer is still configured.

    WAWatchGuard· Sep 17, 2025

46. 9.8Crit

    CVE-2025-54948 ↗ (opens in a new tab)Known exploited

    A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.

    TMTrend Micro· Aug 5, 2025

47. 9.8Crit

    CVE-2025-53770 ↗ (opens in a new tab)Known exploited

    Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a comprehensive update to address this vulnerability. In the meantime, please make sure that the mitigation provided in this CVE documentation is in place so that you are protected from exploitation.

    M3Microsoft 365· Jul 20, 2025

48. 6.5Med

    CVE-2025-49706 ↗ (opens in a new tab)Known exploited

    Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

    M3Microsoft 365· Jul 8, 2025

49. 8.8High

    CVE-2025-49704 ↗ (opens in a new tab)Known exploited

    Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    M3Microsoft 365· Jul 8, 2025

50. 7.1High

    CVE-2025-0111 ↗ (opens in a new tab)Known exploited

    An authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user. You can greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practices deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue does

    PAPalo Alto Networks· Feb 12, 2025