CVEs.

Vulnerabilities published in the last two years in software made by the companies on the wall: clients, SDKs, agents and self-hosted editions. A CVE here does not mean the hosted service was affected or breached.

NVD data refreshed 1 h ago

Severity of matching CVEs

CVSS base severity, as scored in NVD

Critical: 401100%
High: 00%
Medium: 00%
Low or not scored: 00%

Matching CVEs: 401; Last two years
Critical: 401; CVSS 9.0 and above
High: 0; CVSS 7.0 to 8.9
Known exploited: 30; On CISA's KEV list

Matching CVEs published

By month, last two years

Peak 44 · August 2026

Most CVEs

In each company's software, last two years

Matching CVEs

9.9Crit
CVE-2026-24304 (opens in a new tab)
Improper access control in Azure Resource Manager allows an authorized attacker to elevate privileges over a network.
Microsoft Azure· Jan 23, 2026
9.8Crit
CVE-2026-24306 (opens in a new tab)
Improper access control in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.
Microsoft Azure· Jan 22, 2026
9.8Crit
CVE-2026-21227 (opens in a new tab)
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
Microsoft Azure· Jan 22, 2026
9.9Crit
CVE-2026-22844 (opens in a new tab)
A Command Injection vulnerability in Zoom Node Multimedia Routers (MMRs) before version 5.2.1716.0 may allow a meeting participant to conduct remote code execution of the MMR via network access.
Zoom· Jan 20, 2026
9.9Crit
CVE-2026-0863 (opens in a new tab)
Using string formatting and exception handling, an attacker may bypass n8n's python-task-executor sandbox restrictions and run arbitrary unrestricted Python code in the underlying operating system. The vulnerability can be exploited via the Code block by an authenticated user with basic permissions and can lead to a full n8n instance takeover on instances operating under "Internal" execution mode. If the instance is operating under the "External" execution mode (ex. n8n's official Docker image) - arbitrary code execution occurs inside a Sidecar container and not the main node, which significan
JFrog· Jan 18, 2026
9.4Crit
CVE-2025-67822 (opens in a new tab)
A vulnerability in the Provisioning Manager component of Mitel MiVoice MX-ONE 7.3 (7.3.0.0.50) through 7.8 SP1 (7.8.1.0.14) could allow an unauthenticated attacker to conduct an authentication bypass attack due to improper authentication mechanisms. A successful exploit could allow an attacker to gain unauthorized access to user or admin accounts in the system.
Mitel· Jan 15, 2026
9.8Crit
CVE-2026-20963 (opens in a new tab)Known exploited
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
Microsoft 365· Jan 13, 2026
9.1Crit
CVE-2025-61686 (opens in a new tab)
React Router is a router for React. In @react-router/node versions 7.0.0 through 7.9.3, @remix-run/deno prior to version 2.17.2, and @remix-run/node prior to version 2.17.2, if createFileSessionStorage() is being used from @react-router/node (or @remix-run/node/@remix-run/deno in Remix v2) with an unsigned cookie, it is possible for an attacker to cause the session to try to read/write from a location outside the specified session file directory. The success of the attack would depend on the permissions of the web server process to access those files. Read files cannot be returned directly to
Shopify· Jan 10, 2026
9.8Crit
CVE-2026-22584 (opens in a new tab)
Improper Control of Generation of Code ('Code Injection') vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0.
Salesforce· Jan 9, 2026
9.6Crit
CVE-2025-13761 (opens in a new tab)
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an unauthenticated user to execute arbitrary code in the context of an authenticated user's browser by convincing the legitimate user to visit a specially crafted webpage.
GitLab· Jan 9, 2026
9.8Crit
CVE-2025-69258 (opens in a new tab)
A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to execution of attacker-supplied code under the context of SYSTEM on affected installations.
Trend Micro· Jan 8, 2026
9.1Crit
CVE-2025-68665 (opens in a new tab)
LangChain is a framework for building LLM-powered applications. Prior to @langchain/core versions 0.3.80 and 1.1.8, and prior to langchain versions 0.3.37 and 1.2.3, a serialization injection vulnerability exists in LangChain JS's toJSON() method (and subsequently when string-ifying objects using JSON.stringify(). The method did not escape objects with 'lc' keys when serializing free-form data in kwargs. The 'lc' key is used internally by LangChain to mark serialized objects. When user-controlled data contains this key structure, it is treated as a legitimate LangChain object during deserializ
LangChain / LangSmith· Dec 23, 2025
9.8Crit
CVE-2025-33224 (opens in a new tab)
NVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with unnecessary privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure and data tampering.
NVIDIA· Dec 23, 2025
9.8Crit
CVE-2025-33223 (opens in a new tab)
NVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with unnecessary privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure and data tampering.
NVIDIA· Dec 23, 2025
9.8Crit
CVE-2025-33222 (opens in a new tab)
NVIDIA Isaac Launchable contains a vulnerability where an attacker could exploit a hard-coded credential issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, and data tampering.
NVIDIA· Dec 23, 2025
9.3Crit
CVE-2025-14733 (opens in a new tab)Known exploited
An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a dynamic gateway peer. If the Firebox was previously configured with the mobile user VPN with IKEv2 or a branch office VPN using IKEv2 to a dynamic gateway peer, and both of those configurations have since been deleted, that Firebox may still be vulnerable if a branch office VPN to a static gateway peer is still configured.
WatchGuard· Dec 19, 2025
9.6Crit
CVE-2025-64675 (opens in a new tab)
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Cosmos DB allows an unauthorized attacker to perform spoofing over a network.
Microsoft Azure· Dec 19, 2025
10.0Crit
CVE-2025-65037 (opens in a new tab)
Improper control of generation of code ('code injection') in Azure Container Apps allows an unauthorized attacker to execute code over a network.
Microsoft Azure· Dec 18, 2025
9.0Crit
CVE-2025-33210 (opens in a new tab)
NVIDIA Isaac Lab contains a deserialization vulnerability. A successful exploit of this vulnerability might lead to code execution.
NVIDIA· Dec 16, 2025
10.0Crit
CVE-2025-34394 (opens in a new tab)
Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service that is insufficiently protected against deserialization of arbitrary types. This can lead to remote code execution.
Barracuda Networks· Dec 10, 2025
10.0Crit
CVE-2025-34393 (opens in a new tab)
Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not correctly verify the name of an attacker-controlled WSDL service, leading to insecure reflection. This can result in remote code execution through either invocation of arbitrary methods or deserialization of untrusted types.
Barracuda Networks· Dec 10, 2025
10.0Crit
CVE-2025-34392 (opens in a new tab)
Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not verify the URL defined in an attacker-controlled WSDL that is later loaded by the application. This can lead to arbitrary file write and remote code execution via webshell upload.
Barracuda Networks· Dec 10, 2025
9.0Crit
CVE-2025-64672 (opens in a new tab)
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Microsoft 365· Dec 9, 2025
10.0Crit
CVE-2025-55182 (opens in a new tab)Known exploited
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vulnerable code unsafely deserializes payloads from HTTP requests to Server Function endpoints.
Vercel· Dec 3, 2025
9.9Crit
CVE-2025-12421 (opens in a new tab)
Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email address used when switching authentication methods and sending a request to the /users/login/sso/code-exchange endpoint. The vulnerability requires ExperimentalEnableAuthenticationTransfer to be enabled (default: enabled) and RequireEmailVerification to be disabled (default: disabled).
Mattermost Cloud· Nov 27, 2025
9.9Crit
CVE-2025-12419 (opens in a new tab)
Mattermost versions 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12, 11.0.x <= 11.0.3 fail to properly validate OAuth state tokens during OpenID Connect authentication which allows an authenticated attacker with team creation privileges to take over a user account via manipulation of authentication data during the OAuth completion flow. This requires email verification to be disabled (default: disabled), OAuth/OpenID Connect to be enabled, and the attacker to control two users in the SSO system with one of them never having logged into Mattermost.
Mattermost Cloud· Nov 27, 2025
9.4Crit
CVE-2025-62593 (opens in a new tab)Known exploited
Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient guard against browser-based attacks, as the current defense uses the User-Agent header starting with the string "Mozilla" as a defense mechanism. This defense is insufficient as the fetch specification allows the User-Agent header to be modified. Combined with a DNS rebinding attack against the browser, and this vulnerability is exploitable against a developer ru
Anyscale· Nov 26, 2025
9.8Crit
CVE-2025-64657 (opens in a new tab)
Stack-based buffer overflow in Azure Application Gateway allows an unauthorized attacker to elevate privileges over a network.
Microsoft Azure· Nov 26, 2025
9.8Crit
CVE-2025-64656 (opens in a new tab)
Out-of-bounds read in Application Gateway allows an unauthorized attacker to elevate privileges over a network.
Microsoft Azure· Nov 26, 2025
9.8Crit
CVE-2025-41115 (opens in a new tab)
SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage users and teams in Grafana by introducing automated user lifecycle management. In Grafana versions 12.x where SCIM provisioning is enabled and configured, a vulnerability in user identity handling allows a malicious or compromised SCIM client to provision a user with a numeric externalId, which in turn could allow to override internal user IDs and lead to impersonation or privilege escalation. This vulnerability applies only if all of the following conditions are met: - `enable
Grafana Cloud· Nov 21, 2025
9.8Crit
CVE-2025-13357 (opens in a new tab)
Vault’s Terraform Provider incorrectly set the default deny_null_bind parameter for the LDAP auth method to false by default, potentially resulting in an insecure configuration. If the underlying LDAP server allowed anonymous or unauthenticated binds, this could result in authentication bypass. This vulnerability, CVE-2025-13357, is fixed in Vault Terraform Provider v5.5.0.
HashiCorp (HCP / Terraform Cloud)· Nov 21, 2025
9.8Crit
CVE-2025-62207 (opens in a new tab)
Azure Monitor Elevation of Privilege Vulnerability
Microsoft Azure· Nov 20, 2025
9.8Crit
CVE-2025-59245 (opens in a new tab)
Microsoft SharePoint Online Elevation of Privilege Vulnerability
Microsoft 365· Nov 20, 2025
10.0Crit
CVE-2025-49752 (opens in a new tab)
Azure Bastion Elevation of Privilege Vulnerability
Microsoft Azure· Nov 20, 2025
9.8Crit
CVE-2025-62484 (opens in a new tab)
Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
Zoom· Nov 13, 2025
9.8Crit
CVE-2025-64741 (opens in a new tab)
Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
Zoom· Nov 13, 2025
9.8Crit
CVE-2025-60724 (opens in a new tab)
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
Microsoft 365· Nov 11, 2025
9.8Crit
CVE-2025-27918 (opens in a new tab)
An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. It has an integer overflow and resultant heap-based buffer overflow via a UDP packet during processing of an Identity user image within the Discovery feature, or when establishing a connection between any two clients.
AnyDesk· Nov 6, 2025
9.8Crit
CVE-2025-61304 (opens in a new tab)
OS command injection vulnerability in Dynatrace ActiveGate ping extension up to 1.016 via crafted ip address.
Dynatrace· Nov 5, 2025
9.8Crit
CVE-2025-11953 (opens in a new tab)Known exploited
The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and run arbitrary executables. On Windows, the attackers can also execute arbitrary shell commands with fully controlled arguments.
JFrog· Nov 3, 2025
9.8Crit
CVE-2025-59503 (opens in a new tab)
Server-side request forgery (ssrf) in Azure Compute Gallery allows an unauthorized attacker to elevate privileges over a network.
Microsoft Azure· Oct 23, 2025
9.8Crit
CVE-2025-59273 (opens in a new tab)
Improper access control in Azure Event Grid allows an unauthorized attacker to elevate privileges over a network.
Microsoft Azure· Oct 23, 2025
9.8Crit
CVE-2025-59247 (opens in a new tab)
Azure PlayFab Elevation of Privilege Vulnerability
Microsoft Azure· Oct 9, 2025
9.3Crit
CVE-2025-55321 (opens in a new tab)
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Monitor allows an unauthorized attacker to perform spoofing over a network.
Microsoft Azure· Oct 9, 2025
9.9Crit
CVE-2025-11539 (opens in a new tab)
Grafana Image Renderer is vulnerable to remote code execution due to an arbitrary file write vulnerability. This is due to the fact that the /render/csv endpoint lacked validation of the filePath parameter that allowed an attacker to save a shared object to an arbitrary location that is then loaded by the Chromium process. Instances are vulnerable if: 1. The default token ("authToken") is not changed, or is known to the attacker. 2. The attacker can reach the image renderer endpoint. This issue affects grafana-image-renderer: from 1.0.0 through 4.0.16.
Grafana Cloud· Oct 9, 2025
9.8Crit
CVE-2025-59944 (opens in a new tab)
Cursor is a code editor built for programming with AI. Versions 1.6.23 and below contain case-sensitive checks in the way Cursor IDE protects its sensitive files (e.g., */.cursor/mcp.json), which allows attackers to modify the content of these files through prompt injection and achieve remote code execution. A prompt injection can lead to full RCE through modifying sensitive files on case-insensitive fileystems. This issue is fixed in version 1.7.
Cursor· Oct 3, 2025
9.6Crit
CVE-2025-9642 (opens in a new tab)
An issue has been discovered in GitLab CE/EE affecting all versions from 14.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could allow an attacker to inject malicious content that may lead to account takeover.
GitLab· Sep 26, 2025
9.3Crit
CVE-2025-11005 (opens in a new tab)
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1458_B20250708.
Palo Alto Networks· Sep 25, 2025
9.3Crit
CVE-2025-52906 (opens in a new tab)
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1360_B20241207.
Palo Alto Networks· Sep 24, 2025
9.8Crit
CVE-2025-59717 (opens in a new tab)
In the @digitalocean/do-markdownit package through 1.16.1 (in npm), the callout and fence_environment plugins perform .includes substring matching if allowedClasses or allowedEnvironments is a string (instead of an array).
DigitalOcean· Sep 19, 2025

Public information only

Everything on this page was already published by the companies themselves or by public bodies. statuswall gathers it in one place, links every item to its original, and adds nothing from private or leaked sources.

Sources

National Vulnerability Database (opens in a new tab): CVE IDs, descriptions, publication dates and CVSS severity, published by the U.S. government (NIST)
CISA Known Exploited Vulnerabilities catalog (opens in a new tab): the "Known exploited" flag

How fresh it is

New and changed CVEs: pulled from NVD every two hours; last run 1 h ago
Known-exploited flags: updated from CISA in the same run
Window: the last two years; older entries drop off automatically

Source: the U.S. National Vulnerability Database, refreshed daily, with the known-exploited flag from CISA's KEV catalog. Descriptions are NVD's. A CVE is listed under a company when NVD names that company's product as affected, or when the company's own CVE authority assigned it; companies whose names are common words are matched only by explicit rules, so some CVEs will be missing. This product uses NVD data but is not endorsed or certified by the NVD. CVE is a registered trademark of The MITRE Corporation.

statuswall is independent and is not affiliated with, sponsored by or endorsed by any company named here. Company and product names are used only to identify whose public information is being referred to. The information is provided as is, for general reference, with no guarantee that it is complete, current or free of error; it is not security, legal or purchasing advice. Where this page and an official source differ, the official source is right.