Being exploited right now

GPUStack (open-source GPU cluster manager for model serving) before 2.2.0 — exploitation observed against 2.1.1

Authentication bypass by trusted loopback source (CWE-287/290/346): a same-host reverse-proxy peer or a forged X-GPUStack-Real-IP: 127.0.0.1 header makes the request the built-in administrator; persistent admin API keys and code execution on workers via POST /v2/inference-backends/from-yaml

SignalWire FreeSWITCH 1.11.2 and earlier (mod_sofia / mod_verto chat api proto; chat on by default unless enable-chat=false)

Command injection via the SIP MESSAGE 'api' chat proto (CWE-77/78/749) — remote execution of FreeSWITCH API commands by any one registered account on the profile, or by anyone where a passwordless directory user (stock 'default') remains

OpenBSD OpenSSH Portable before 10.6p2 on Linux built with musl libc and PAM disabled — in practice Alpine Linux openssh-server (sshhole.com also names OpenWrt, Buildroot, Yocto and many container images built on musl without PAM; the CVE record calls Alpine 'An example') (all releases 3.16–3.24 and edge), or openssh-server-pam with UsePAM no, with PasswordAuthentication yes; glibc distributions, PAM builds (UsePAM yes), OpenBSD and Dropbear are not affected

Authentication bypass (CWE-394, unexpected status code or return value): musl crypt() returns '*' for keys over 256 bytes and sshd accepted it as a match for an account whose shadow field is '*'; needs one other account with a $5$ / $6$ hash on the host; unauthenticated, network

SonicWall SonicOS SSLVPN with SAML enabled for SSLVPN logins — Gen7 TZ/NSa/NSsp/NSv 7.3.3-7015 and older; Gen8 TZ/NSa/NSv 8.2.2-8015 and older (Gen6 not listed)

Use of single-factor authentication (CWE-308): valid credentials for an alternate authentication method (LDAP / RADIUS / TACACS+) bypass SAML authentication and SAML-enforced MFA on the SSLVPN service

Apple iOS / iPadOS before 17.5 (and before 16.7.8 on the 16.x line: iPhone 8, 8 Plus, X, iPad 5th gen, iPad Pro 9.7-inch and 12.9-inch 1st gen); macOS Sonoma before 14.5; Safari before 17.5 on macOS Monterey and Ventura; tvOS before 17.5; watchOS before 10.5

WebKit Pointer Authentication (PAC) bypass — an attacker who already has arbitrary read/write in the WebContent process can defeat PAC and reach code execution (CWE-287 per CISA-ADP; Apple names no weakness class)

WordPress Core 4.7 through 7.1.3 (every branch from 4.7.0–4.7.38 to 7.1.0–7.1.3)

Time-of-check time-of-use race (CWE-367) on predictable, web-accessible staging paths during full-package core upgrades → unauthenticated remote code execution during the upgrade window

Ivanti Connect Secure 25.1.1.2 and prior, 22.8R2.5 and prior. Not affected: 25.1.3.0 and later, 22.7.x and earlier

Missing authentication for a critical function (CWE-306/862/345) — dsinvoked broker trusts DSCache configuration data; local authenticated privilege escalation to root, chained with CVE-2026-104935 and CVE-2026-118527

Drupal Commerce Core (contributed module) before 8.x-2.41, and 3.0.0 before 3.3.13

Missing authorization / forceful browsing (CWE-862) — access bypass on certain routes and entity fields with possible financial impact on the store

Ivanti Connect Secure 25.1.1.2 and prior, 22.8R2.5 and prior. Not affected: 25.1.3.0 and later, 22.7.x and earlier

Use of predictable filenames (CWE-340) — authenticated upload of attacker-controlled files to a known path (likely the wu.cgi write Volexity describes — our mapping); chained with CVE-2026-104935 and CVE-2026-111357

GitLab Community Edition and Enterprise Edition, self-managed: 19.2 before 19.2.8, 19.3 before 19.3.5, 19.4 before 19.4.2. GitLab.com patched; GitLab Dedicated no action needed

Integer overflow in the CI/CD regular-expression compiler (CWE-190) — remote code execution on the GitLab server as the git user; per Rapid7 requires committing a crafted .gitlab-ci.yml to a public project (trivial where self-registration is open)

Cisco Secure Firewall ASA Software and Secure Firewall Threat Defense (FTD) Software with Remote Access SSL VPN enabled and secondary authentication configured on a tunnel group (including DefaultWEBVPNGroup). Not affected: CDFW, cdFMC, Secure Access, Secure FMC

Unchecked return value to NULL pointer dereference (CWE-690) in Remote Access SSL VPN tunnel processing — unauthenticated remote device reload (DoS); no VPN login needed

Linux kernel 3.9 and later before 5.10.257 / 5.15.208 / 6.1.174 / 6.6.141 / 6.12.91 / 6.18.33 / 7.0.10 / 7.1 (net/core/skbuff.c; ESP/XFRM receive path) — every distribution kernel built from an affected stable line

Missing initialization / lost shared-frag marker during TCP receive coalescing (CWE-456; NVD CWE-787) — ESP decrypts in place over page-cache frags; local write into the page cache of read-only files, privilege escalation to root

Broadcom VMware ESX 9.1.x, 9.0.x and 8.0; VMware Cloud Foundation 9.1.x, 9.0.x, 5.x; vSphere Foundation 9.x; Telco Cloud Platform 5.0.x / 5.1.x. No ESX 7.0 entry for this CVE

Insufficient logging (CWE-778) — an administrator can perform certain operations without them being logged

Adobe Commerce 2.4.4–2.4.9, Adobe Commerce B2B 1.3.3–1.5.3, Magento Open Source 2.4.6–2.4.9, Adobe Commerce Events 1.6.0–1.20.0

CWE-434 unrestricted upload of a dangerous file type → code execution in the current user's context; needs user interaction (crafted URL / compromised page); scope changed

Google Brotli 1.0.3–1.2.0 (fixed 1.0.10 / 1.1.1 / 1.2.1); Node.js 22.x / 24.x / 26.x bundling it (fixed 22.23.4 / 24.22.1 / 26.12.1); Microsoft .NET 8/9/10/11-RC (fixed 8.0.33 / 9.0.22 / 10.0.14 / 11.0.0-rc.3.26522.148), PowerShell 7.4/7.5/7.6, Visual Studio 2019/2022/2026; any other product statically linking an affected Brotli

Out-of-bounds write in the Brotli streaming decoder (an invalid block switch treated as 'need more input') → memory corruption, memory disclosure, possible RCE from a crafted compressed stream

PHP — php-src 8.2 < 8.2.35, 8.3 < 8.3.36, 8.4 < 8.4.27, 8.5 < 8.5.12 (CNA ranges); 8.1 and older end-of-life (source backports for 7.4/8.0/8.1 only); all SAPIs serving web requests, risk highest for Apache mod_php; also bundled in Quest KACE SMA and SDA appliances (all versions, per Quest); and in TrueConf Server up to 5.5.7 (per TrueConf)

Out-of-memory longjmp() leaves request memory uninitialized; request shutdown then uses it — unauthenticated remote code execution as the web worker (CWE-416/755/824/1325/1419)

PHP — php-src 8.2 < 8.2.35, 8.3 < 8.3.36, 8.4 < 8.4.27, 8.5 < 8.5.12 (CNA ranges); 8.1 and older end-of-life (source backports for 7.4/8.0/8.1 only); validated against mod_php and FPM; also bundled in Quest KACE SMA and SDA appliances (all versions, per Quest); and in TrueConf Server up to 5.5.7 (per TrueConf)

Request-owned state left in worker globals is used by the next request on the same worker before initialization — use-after-free, memory disclosure and unauthenticated remote code execution (CWE-416/755/824/1325/1419)

Arista VeloCloud Orchestrator (VCO) On-Prem 5.2.x < 5.2.3.18, 6.1.x < 6.1.3.10, 6.4.x < 6.4.2.12 (hosted/Dedicated VCO already patched by Arista)

SQL injection (CWE-89) → any authenticated tenant user (minimum role Enterprise Read Only) gains operator privileges as the local 'superuser operator'

Collabora Online - Built-in CODE Server (Nextcloud app richdocumentscode) before 26.4.303. Standalone Collabora Online servers not affected

Unauthenticated OS command injection (CWE-78) in proxy.php, exploitable while the built-in CODE server is not running (restart, upgrade, crash); runs as the web server user

EG Secure Solutions SiteGuard Server Edition — Apache httpd / Nginx / IIS editions Ver2.20 to < Ver8.00 Update 5 (IIS Ver3.10–Ver4.00 Update 4 not affected); FreeBSD Apache httpd / Nginx Ver2.20 to < Ver7.00 Update 6; only when the statistics feature is enabled (the default)

OS command injection (CWE-78) in the statistics feature of a host-based WAF — local, low-privileged attacker runs OS commands as root (Unix) or SYSTEM (Windows)

Plex Media Server before 1.43.3.10861 (all platforms incl. NAS packages and Docker)

External control of file name or path (CWE-73) — TranscoderH264Options injected into x264 options writes arbitrary files; unsigned .so files in the Codecs folder load at startup → code execution as the Plex process (RCE step of the plex2shell chain)

Siemens Software Center before V4.0.9.8 (legitimate installs auto-update on next start); the campaign also brings its own signed copy (3.5.8.7, then the latest version) onto machines that never had it

Uncontrolled search path / DLL sideloading (CWE-427) — the application loads attacker DLLs (archive.dll) from its own folder; exploited by the Romulus ClickFix campaign using a genuine signed copy

Plex Media Server before 1.43.3.10861

Improper neutralization of encoded URI schemes (CWE-84) in searchOne — unauthenticated caller invokes other plugins' internal (loopback-only) agent functions with chosen parameters; part of the plex2shell RCE chain

Plex Media Server before 1.43.3.10861

Server-side request forgery (CWE-918) in /player/timeline — any token value plus a full URL in 'protocol' makes the server POST to an attacker-chosen destination; part of the plex2shell RCE chain

Plex Media Server before 1.43.3.10861

Server-side request forgery (CWE-918) via the /video/:/transcode/universal path parameter (CVE record); Plex describes the impact as disclosure of the server owner's admin token — the step that enables the admin-only file write (CVE-2026-96656)

BeyondTrust Remote Support (RS), self-hosted, all versions <= 26.2.3 (SaaS patched 2026-10-09). Privileged Remote Access shares the code — patched as a precaution, no known exploit path

Improper origin validation in an internal messaging component (CWE-290, authentication bypass by spoofing) — unauthenticated remote file operations on the appliance, used for webshell upload and root

Fortinet FortiOS 7.6.0–7.6.4, 7.4.0–7.4.9, 7.2/7.0/6.4 all; FortiProxy 7.6.0–7.6.4, 7.4.0–7.4.11, 7.2/7.0 all; FortiPAM 1.7.0, 1.0–1.6 all; FortiSwitchManager 7.2.0–7.2.7, 7.0.0–7.0.6

Path traversal in the CLI (CWE-22) — authenticated read-write admin can write or delete arbitrary files; escalation of privilege

Atlassian Data Center / self-managed: Jira Software, Jira Service Management, Confluence, Bitbucket, Bamboo, Crowd, Crucible, Fisheye — all versions below the fixed builds. Atlassian Cloud already patched

Path traversal — unauthenticated arbitrary file read within the web application root (exact path required; no directory listing)

Ahsay AhsayCBS — CVE record: up to 10.3.2; vendor and Huntress: 10.3.4.0 and v9.15.2.59 also not fully fixed

OS command injection (CWE-78) in the Replication Receiver /rps/api/json/UpdateReceivers.do 'random' argument — remote code execution as SYSTEM, reached unauthenticated via CVE-2026-105133

Cisco Secure Email Gateway (AsyncOS for ESA), physical and virtual — vulnerable when File Reputation (AMP) is enabled and assigned to a mail policy AND Content Scanner Tools < 25.3.0.5525. Not affected: Secure Email and Web Manager, Secure Web Appliance. Cloud Gateway mitigated by Cisco

Relative path traversal (CWE-23) in AMP attachment handling — unauthenticated arbitrary file write leading to root command execution, triggered by an inbound email

Palo Alto Networks PAN-OS on PA-Series and VM-Series firewalls and Panorama (virtual and M-Series) — branches 10.2, 11.1, 11.2, 12.1, 12.2. Not affected: Cloud NGFW, Prisma Access

Code injection (CWE-94) in the management interface — authenticated attacker with network access executes code as root

Ahsay AhsayCBS — CVE record: up to 10.3.2; vendor and Huntress: 10.3.4.0 and v9.15.2.59 also not fully fixed. Affected v7/v8/v9/v10 lines per Ahsay's notice

Improper authentication (CWE-287) in the API checkSysPwd function — remote authentication bypass, chained with CVE-2026-105134 for unauthenticated SYSTEM command execution

Microsoft Windows — Windows 10 1607 / 1809 / 21H2 / 22H2; Windows 11 23H2 / 24H2 / 25H2 / 26H1 / 26H2; Windows Server 2012 R2, 2016, 2019, 2022, 2025 (incl. Server Core). Server 2012 (non-R2) not listed

Security feature bypass — command injection (CWE-77) in Windows Shell lets a crafted file evade Mark of the Web; user interaction required

Ivanti Connect Secure — CISA: 25.1.1.1 and prior, 25.1.2.2 and prior, 22.8R2.4 and prior. CVE record unaffected: 25.1.3.0, 25.1.3.1, 22.8R2.5, 22.7R2.14 and earlier. Policy Secure / ZTA / Neurons not named in the CVE record

Authentication bypass by spoofing (CWE-290) + RCE via wu.cgi file write — unauthenticated command execution; chained with the dsinvoked/DSCache privilege escalation to root (CVE-2026-111357, fixed 2026-10-29 in 25.1.1.3 / 22.8R2.6)

ProFTPD — 1.3.5 with mod_copy loaded

Missing authentication on mod_copy SITE CPFR/CPTO — unauthenticated arbitrary file read/write (CWE-284)

ONLYOFFICE Document Server (ONLYOFFICE Docs) before 5.6.3

Path traversal in /upload image parameters (CWE-22) → remote code execution

Apache Struts 2.3.20 – 2.3.28 (except 2.3.20.3 and 2.3.24.3), with Dynamic Method Invocation enabled

OGNL expression injection via the method: prefix with DMI enabled (CWE-77) — unauthenticated RCE

ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 (and appliances bundling them)

Reachable assertion on TKEY query handling — unauthenticated remote denial of service of named

Strapi — v3.2.1 and later before 4.8.0 (Strapi disclosure); 3.x end of life with no fix

Sensitive data exposure via private-field filtering (CWE-312) — admin password hashes and reset tokens; chains with CVE-2023-22621 to RCE (per KEV)

Citrix NetScaler ADC and NetScaler Gateway 14.1 before 14.1-73.41, 13.1 before 13.1-64.28; NetScaler ADC 14.1-FIPS before 14.1-73.41 FIPS; NetScaler ADC 13.1-FIPS and 13.1-NDcPP before 13.1-37.282 — only when configured as SAML SP or SAML IdP; Secure Private Access hybrid NetScaler instances also affected; customer-managed only

CWE-119 memory overflow — unauthenticated denial of service against SAML SP/IdP-configured appliances

Zammad GmbH — Zammad 6.3.0 to 6.5.x (exploitable; end of support); code present but not exploitable in 7.0.0–7.1.3 per DIVD and Zammad; hardened in 7.2.0

Session hijack / fixation leading to remote code execution as the zammad user (first stage of the DIVD-2026-00015 chain)

Zammad GmbH — Zammad DEB and RPM packages (packager.io), all released packaged versions <= 7.2.1 (GHSA-p97w-927q-8vxq, 2026-10-08); source installs and official container images NOT affected

Local privilege escalation from the zammad service user to root (second stage of the DIVD-2026-00015 chain)

Fortinet FortiMail 8.0.0–8.0.1, 7.6.0–7.6.6, 7.4.0–7.4.8, 7.2.0–7.2.9 (per advisory FG-IR-26-175; the CVE record's affected list differs and also names 7.0.0–7.0.9)

CWE-22 path traversal + CWE-158 NULL-byte neutralization — unauthenticated arbitrary file write via crafted HTTP/HTTPS (IBE web path)

Cisco Catalyst SD-WAN Manager (vManage), all configurations — on-prem releases below the fixed builds; Cisco SD-WAN Cloud (Cisco Managed) fixed in 20.15.605 with no user action

CWE-177 improper handling of URL (hex) encoding — unauthenticated authentication bypass to the API as the admin user

Apple iOS and iPadOS before 26.7.1 (iPhone 11 and later; iPad Pro 12.9-inch 3rd gen+, iPad Pro 11-inch 1st gen+, iPad Air 3rd gen+, iPad 8th gen+, iPad mini 5th gen+); macOS Sequoia before 15.8.1; macOS Tahoe before 26.7.1; iOS / iPadOS 18.x before 18.7.11 (iPhone XS, XS Max, XR; iPad 7th gen)

CWE-787 out-of-bounds write in CoreGraphics — arbitrary code execution when processing a crafted file

Citrix NetScaler ADC and NetScaler Gateway 14.1 and 13.1, NetScaler ADC 14.1-FIPS and 13.1-FIPS/NDcPP — customer-managed only; Citrix-managed cloud and Adaptive Authentication are patched by Cloud Software Group

CWE-20 improper input validation — unauthenticated arbitrary command execution, default configuration

Citrix NetScaler ADC and NetScaler Gateway 14.1 and 13.1, NetScaler ADC 14.1-FIPS and 13.1-FIPS/NDcPP, with DTLS enabled (default on VPN vservers) — customer-managed only

Pre-authentication memory overflow in DTLS handshake reassembly (CWE-119 per NVD; the CNA record carries no CWE) — RCE or denial of service

WordPress Core 4.7 through 7.1.1 (all branches)

CWE-98 PHP file inclusion — get_page_template() resolves an attacker-chosen readable local .php outside the theme directories; RCE when the theme has a page-* top-level directory and a usable target (e.g. pearcmd.php with register_argc_argv) exists

Microsoft SharePoint Server — Subscription Edition, 2019, Enterprise Server 2016 (per MSRC). SharePoint 2013: researcher claims affected, MSRC does not list it, out of support

CWE-94 code injection — ToolPane Register-directive reconstruction bypasses SafeControls, reaching XamlServices.Parse() → authenticated (low-privilege) RCE; observed attempts reportedly chained with an anonymous delivery bug

MikroTik RouterOS 6.0.0–<6.49.21, 7.0.0–<7.23.4, 7.24–<7.24.2

CWE-841 improper enforcement of behavioral workflow — SSH pre-authentication rekey drops into the connection protocol, allowing unauthenticated session/exec; entry point for the CVE-2026-86060 admin-takeover chain

WSO2 API Manager 4.1.0–4.6.0, API Control Plane 4.5.0/4.6.0, Traffic Manager 4.5.0/4.6.0, Universal Gateway 4.5.0/4.6.0

CWE-347 improper signature verification — JWT algorithm mismatch accepted, unauthenticated token forgery → administrative account takeover (NOT path traversal/file upload as the KEV entry text states)

Adobe Commerce 2.4.4–2.4.9, Adobe Commerce B2B 1.3.3–1.5.3, Magento Open Source 2.4.6–2.4.9

CWE-863 incorrect authorization — unauthenticated customer session switching to another customer's account (account takeover, customer data exposure)

Arista — VeloCloud Orchestrator (VCO), ON-PREMISES only. Affected: 5.2.3.15 and below; 6.1.3.7 and below; 6.4.2.7 and below; 7.0.0.2 and below. Hosted and Dedicated VCO instances were impacted and have ALREADY been patched by Arista

Improper input validation allowing a remote attacker to access privileged internal functionality and impact the VCO host → compromise of the orchestrator and the data it manages

Check Point Quantum Security Gateway and Spark Firewall (locally and centrally managed) — R80 through R82.10 inclusive, EXCLUDING R82.20; named: R81.20, R82, R82.10 and legacy end-of-support releases

Improper certificate trust validation during VPN negotiation → unauthenticated remote code execution on the Gateway

Check Point — Security Management Server, Multi-Domain Security Management Server, Log Server, Multi-Domain Log Server, SmartEvent. Affected: R82.20; R82.10 Jumbo Take 44 or lower; R82 Jumbo Take 126 or lower; R81.20 Jumbo Take 166 or lower; R81.10 Jumbo Take 190 or lower (EoS); R80/R80.10/R80.20/R80.30/R80.40/R81 (all EoS). NOT affected: Check Point Firewall Appliances, Spark Firewall, Smart-1 Cloud (fix already applied)

Directory traversal + file upload on the Management Web Service → unauthenticated arbitrary script execution on the Management Server

F5 — BIG-IP APM only. Affected branches: 21.x (21.1.0), 17.x (17.5.0-17.5.1 and 17.1.0-17.1.3). Evaluated NOT vulnerable: BIG-IP Next CNF, BIG-IP Next for Kubernetes, BIG-IP all other modules, BIG-IQ Centralized Management, F5 Distributed Cloud, NGINX One Console, NGINX all products, F5OS/F5OS-A/F5OS-C, F5 AI Gateway

CWE-122 heap-based buffer overflow in APM OAuth → unauthenticated remote code execution (data plane only; no control plane exposure). Present ONLY where APM is configured as an OAuth Authorization Server

Zyxel — GS1900 series smart-managed switches. TEN models affected per the vendor advisory: GS1900-8, GS1900-8HP, GS1900-10HP, GS1900-16, GS1900-24, GS1900-24E, GS1900-24EP, GS1900-24HPv2, GS1900-48, GS1900-48HPv2. NVD's description names only GS1900-48HPv2 — the vendor table is broader and is authoritative

Stack-based buffer overflow in the CGI program → LAN-based unauthenticated OS command execution via a crafted HTTP request

Linux — kernel, kTLS (tls) receive path. Versions below 6.0 unaffected per the Linux CNA

Improper check for unusual or exceptional conditions — mishandling of zero-length records on the kTLS rx_list after zero-copy decrypt

Linux kernel — netfilter bridge ebtables SNAT target (ebt_snat). Affected from 5.10; versions prior to 5.10 are NOT affected

Out-of-bounds write — the optional ARP sender-hardware-address rewrite calls skb_store_bits() into a range that skb_header_pointer() made readable but not writable, so a nonlinear skb fragment backed by a splice-imported file page is written through directly

Linux kernel — crypto user-space API (af_alg / AF_ALG sockets), af_alg_sendmsg. Introduced in 2.6.38; affected until the stable releases listed below

Race condition — concurrent writes to the same af_alg socket interleave and can leave internal socket state inconsistent; reachable by any local process able to open an AF_ALG socket, which is unprivileged on a stock kernel

Cisco Identity Services Engine (ISE) 3.1, 3.2, 3.3, 3.4, 3.5

Authentication bypass — insufficient authentication control on an API endpoint, reachable pre-auth, leading to administrative/root-level access

Google Pixel — cellular modem (Modem component); fixed at Android security patch level 2026-09-05

Improper authorization / permission bypass from a logic error in the cellular modem — remote (proximal/adjacent) elevation of privilege, no user interaction, no additional execution privileges

Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021; Acronis Backup extension for Plesk (Linux) before build 1.8.11.638

Local privilege escalation via insecure file permissions (CWE-276) — low-privileged local account to elevated/arbitrary code execution on Linux

Cisco AsyncOS Software for Cisco Secure Email Gateway — physical and virtual appliances, all affected configurations

Injection in email parsing (crafted SQL statements in a message) → unauthenticated remote command execution as root

GitLab — Community Edition and Enterprise Edition, self-managed. GitLab.com and GitLab Dedicated already patched

Path traversal (CNA: CWE-22; KEV lists CWE-35) plus missing authentication in the repository commits API → unauthenticated arbitrary file read

ConnectWise ScreenConnect — client prior to 26.6.5. ScreenConnect servers are explicitly NOT impacted per the vendor bulletin

Improper privilege management / missing authorization → files transferred and executed through an active remote session without Host confirmation

JFrog Artifactory (Self-Hosted) before 7.133.11

Incorrect authorization — token validation checks the signature/issuer but not the token's scope, allowing privilege escalation

JFrog Artifactory — affected < 7.111.20, 7.117.0-7.117.27, 7.125.0-7.125.19, 7.133.0-7.133.28, 7.146.0-7.146.8

Improper authentication — an internal anonymous-user token can be returned to an unauthenticated caller while anonymous access is disabled

MikroTik RouterOS — fixed in 6.49.21 (Long-term), 7.23.4 (Long-term), 7.24.2 (Stable), 7.25 beta 3; earlier builds in those trains affected. Vendor states 'Most configurations are not at risk' without enumerating which

Improper neutralization of argument delimiters in a command — a username beginning with a prohibited character alters the trusted RouterOS policy mask via the SSH login helper, leading to privilege escalation

MikroTik RouterOS — fixed in 6.49.21 (Long-term), 7.23.4 (Long-term), 7.24.2 (Stable), 7.25 beta 3; earlier builds in those trains affected

Missing authentication for a critical function — a 'related' btest connection is accepted before the primary session authenticates; with random-data=false the sender leaks an uninitialized kernel packet-buffer tail, and an unchecked inverted packet-size interval causes unsigned integer underflow, oversized fragmented output and a kernel restart

Cisco Secure Firewall Management Center (FMC) Software and Security Cloud Control (SCC) Firewall Management — trains 7.0, 7.2, 7.4, 7.6, 7.7, 10.0

Authentication bypass via an alternate path/channel — an improper boot-time system process lets crafted HTTP requests run scripts/commands as root on the underlying OS

Fortinet FortiOS 7.6.0-7.6.3, 7.4.0-7.4.8, 7.2.0-7.2.11, 7.0.0-7.0.17, 6.4 (all versions); FortiSwitchManager 7.2.0-7.2.6, 7.0.0-7.0.5. Affected component: the cw_acd (CAPWAP control) daemon

Heap-based buffer overflow (CWE-122) in the cw_acd daemon -> remote unauthenticated arbitrary code or command execution via crafted requests

Citrix NetScaler ADC and NetScaler Gateway — 14.1 before 14.1-73.32; 13.1 before 13.1-63.21; NetScaler ADC FIPS before 14.1-73.32 FIPS; NetScaler ADC FIPS and NDcPP before 13.1-37.277

Authentication bypass using an alternate path or channel

Google Chrome before 153.0.8010.36 (V8); every Chromium-based browser and Electron runtime embedding the affected V8 until independently rebuilt

Out-of-bounds write in V8 → arbitrary code execution inside the renderer sandbox via a crafted HTML page

Adobe Commerce 2.4.4–2.4.9 (2026-aug patch level and earlier), Adobe Commerce B2B 1.3.3 / 1.3.4 / 1.4.2 / 1.5.2 / 1.5.3 (2026-aug and earlier), Magento Open Source 2.4.6–2.4.9 (2026-aug and earlier) — all platforms

Improper neutralization of special elements used in a template engine (CWE-1336) → unauthenticated remote arbitrary code execution, scope changed. Unauthenticated per the vector (PR:N) — NVD's 'in the context of the current user' describes the resulting execution context, not a precondition

N-able N-central, self-hosted — every build before 2026.3.1.14 (NVD: all < 2026.3, plus 2026.3 base, Hotfix 1, Hotfix 2, Hotfix 3); hosted N-central (NCOD) already patched by N-able, no customer action

Static code injection (CWE-96) → unauthenticated remote code execution on the N-central server

Microsoft Windows — Windows 11 Version 23H2, Windows 11 Version 24H2, Windows 11 Version 25H2, Windows 11 Version 26H1, Windows Server 2025 (MSRC affected-product list, 10 entries — Windows 11 23H2+ and Server 2025 ONLY; no Windows 10, no Server 2012–2022 entries). DISJOINT from CVE-2026-85880's footprint — zero products in common; no single machine needs both updates

Improper link resolution before file access (link following, CWE-59 class) in the Windows Update Stack → local elevation of privilege to SYSTEM

Microsoft Windows — Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, Windows Server 2019, Windows Server 2022 (MSRC affected-product list, 20 entries — Windows 10 1607→22H2 and Server 2012→2022 ONLY, incl. 2012 / 2012 R2 ESU; no Windows 11, no Server 2025 entries; DISJOINT from CVE-2026-81963's footprint — zero products in common, no single machine needs both updates)

Heap-based buffer overflow (CWE-122 class) in Windows Advanced Local Procedure Call (ALPC) → local elevation of privilege

Google Chrome (Desktop: Windows, Mac, Linux) before 152.0.7977.82 — V8 before 15.3.48; every Chromium-based browser and Electron runtime embedding the affected V8 until rebuilt

Type confusion in V8 (CWE-843) → arbitrary code execution inside the renderer sandbox via a crafted HTML page

Kestra OSS — all versions < 1.0.45, and 1.1.0 – 1.3.20 (advisory range <= 1.3.20)

Authentication bypass via suffix-match path whitelist in AuthenticationFilter (CWE-287/184) → unauthenticated flow creation and execution → OS command injection (CWE-78) as root in the worker container

SonicWall SMA1000 (models 6210 / 7210 / 8200v) — SMA 100 Series and firewall SSL-VPN NOT affected

Pre-auth SSRF via unintended alternate access path acting as a forward proxy (CVE-2026-83548) chained with post-auth OS command injection in the Appliance Management Console (CVE-2026-83549) → remote code execution

JFrog Artifactory Self-Managed — 7.111.4–7.111.20, 7.117.0–7.117.27, 7.125.0–7.125.19, 7.133.0–7.133.28, 7.146.0–7.146.37, 7.161.0–7.161.19 (union of JFrog's advisory table and NVD's CPE ranges; SaaS not addressed on the page)

Improper authentication (CWE-287) under default configuration → unauthenticated administrative access to Artifactory

Sangoma Switchvox (SMB Edition; on-prem and cloud builds) — 8.2.2.1 through 8.4.0.1 per NVD; SRA tested 8.3 (build 104997)

Unauthenticated SQL injection (CWE-89) in the /pa phone-notification endpoint, executed as the PostgreSQL superuser → OS command execution via COPY … TO PROGRAM → remote code execution

BerriAI LiteLLM (proxy / AI gateway) — every version before 1.84.0, when MCP routes are enabled

Improper authentication / missing authentication (CWE-287, CWE-306) in the MCP auth handler's OAuth2 passthrough fallback → any Bearer token yields an authenticated MCP session → tool enumeration and invocation

Kludex Starlette (ASGI framework; underlies FastAPI and many Python services) — versions <= 1.0.0; also vendored/bundled copies (Red Hat errata RHSA-2026:22992/22993/23346/24866 and others)

Missing Host-header validation → request.url.path reconstructed from a malformed Host differs from the routed path → bypass of path-based security checks in middleware/endpoints (CWE-1289; request-smuggling class CWE-444)

PaperCut MF and PaperCut NG — web management interface

Improper access control → unauthenticated remote requests trigger administrative backend actions

PaperCut MF and PaperCut NG — database connection utilities, specifically the external card/ID user lookup feature

Unsafe dynamic class loading — database driver classes instantiated from configurable driver names without validation

WooCommerce Wholesale Lead Capture (Rymera Web Co Pty Ltd) — versions up to and including 2.0.3.1; approximately 6,000 active installations

Unrestricted upload of file with dangerous type — server honours client-supplied file-type settings instead of enforcing them server-side → PHP webshell upload → unauthenticated site takeover

ownCloud core (WebDAV pre-signed link handling)

improper authentication (CWE-287) → unauthenticated file read/write/delete over WebDAV

Linux kernel (IPv6 networking subsystem, __ip6_append_data). CISA notes this affects multiple downstream products including SUSE and Red Hat

out-of-bounds write / heap overflow (CWE-787, CWE-122) → local privilege escalation → container escape to host root

JFrog Artifactory (self-managed; container-image remote-cache handling)

improper limitation of a pathname to a restricted directory (CWE-22) → write outside the Docker cache path → container-image cache poisoning (execution was the aim, not observed)

Ajax.NET Professional (AjaxPro.2 all versions; <21.10.30.1) · Red Hat ABRT <2.7.1 (RHEL 6/7, Oracle Linux 7) · Linux kernel 5.8–5.10.105, 5.11–5.15.28, 5.16–5.16.4, 5.17-rc (incl. NetApp H-series) · Red Hat libuser <0.56.13-8 and 0.60 <0.60-7

Untrusted deserialization → RCE (23758); symlink attack on a predictable filename → local privilege escalation (5287); watch_queue out-of-bounds write → local privilege escalation (0995); direct /etc/passwd modification via userhelper → inconsistent file state, race condition per CISA (3246)

Citrix NetScaler ADC and NetScaler Gateway 14.1 <72.61, 13.1 <63.18; NetScaler ADC 13.1-FIPS/NDcPP <37.272 and 14.1-FIPS <72.61 — only when configured as a Gateway (VPN vserver, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

Memory overflow (improper restriction of operations within the bounds of a memory buffer) → unpredictable behaviour / denial of service

Gitea — versions 1.17 through 1.27.0 inclusive; requires Git 2.32 or newer on the host

Improper access control in the diffpatch API → add/add collision writes hooks/post-index-change in a bare clone → remote code execution as the Gitea service account

Oracle HTTP Server / Oracle WebLogic Server Proxy Plug-in (for Apache HTTP Server, for IIS) — affected: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 (Proxy Plug-in for IIS: 12.2.1.4.0 only)

Unauthenticated remote access-control flaw, scope change, C/I high (CWE-284 (CISA-ADP via NVD; CNA none))

Zimbra Collaboration (ZCS) - optional zimbra-snmp package — affected: ZCS before 10.1.20 when zimbra-snmp installed and SNMP notifications enabled

Unauthenticated OS command injection (as zimbra user) via crafted SMTP input processed by SNMP notifications (CWE-78)

TrueConf Server (video conferencing; Windows and Linux) — affected: All versions before 5.3; 5.3.x before 5.3.9; 5.4.x before 5.4.9; 5.5.x before 5.5.5 (vendor table, Kaspersky, CVE record)

Missing authentication -> arbitrary script execution via undocumented function on 4307/TCP (CWE-306)

TrueConf Server (video conferencing; Windows and Linux) — affected: Vendor table: <5.3.9; 5.4.x <5.4.9; 5.5.x <5.5.5. Kaspersky/CVE record: all before 5.3; 5.3.x before 5.3.9; 5.4.x before 5.4.9; 5.5.x before 5.5.5

Sandbox escape / code injection -> arbitrary code on host OS (CWE-94)

MLflow Tracking Server (pip mlflow) — affected: >= 3.3.0, < 3.15.0

Unauthenticated SSRF: webhook URL guard bypassed via HTTP redirects / DNS rebinding, with /webhooks/{id}/test reflecting the response body (CWE-918)

Microsoft Windows — Internet Key Exchange (IKE) Service Extensions

Double free (CWE-415) in the Windows IKE Extension → unauthenticated remote code execution over the network

Broadcom/VMware — vCenter Server, and the Cloud Foundation / vSphere Foundation / Telco Cloud Infrastructure and Platform lines that embed it (VMSA-2026-0006)

Directory traversal in the vCenter Syslog Server (CWE-22) — an actor with network access to vCenter may execute arbitrary code

Microsoft — SharePoint Server 2016 / 2019 / Subscription Edition (on-premises only; SharePoint Online not affected)

Weak authentication (CWE-1390) — forged JWT via alg:none + x5t certificate reference + trusted-service bypass → impersonation of any site user or administrator

Ray (anyscale/ray-project; pip ray), Dashboard/Jobs API — affected: < 2.52.0

Browser-driven RCE: DNS rebinding plus User-Agent spoof (Firefox/Safari fetch) bypasses the 'deny browser requests' guard, reaching the unauthenticated /api/jobs (CWE-94; CWE-352)

Metabase OSS 0.58.0–0.63.x and Enterprise 1.58.0–1.63.x before the fixed patch for each line (x.58.24 / x.59.21 / x.60.17 / x.61.11 / x.62.9 / x.63.5); below 58 not affected; Metabase Cloud upgraded by Metabase

SQL injection (CWE-89) in the password-reset endpoint into the Metabase application database — unauthenticated admin takeover, then stored data-source credential theft and data export

Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software — Remote Access SSL VPN — affected: ASA/FTD running a vulnerable release with SSL listen sockets enabled by: IKEv2 RA VPN with client services, SSL VPN (webvpn enable <if>), or Zero Trust Network Access (FTD only). FMC not affected.

crafted HTTP request to RA SSL VPN -> device reload (DoS); unauthenticated, network (CWE-244)

Microsoft Windows Ancillary Function Driver for WinSock (afd.sys) — Windows 10 1607/1809/21H2/22H2, Windows 11 23H2/24H2/25H2/26H1, Windows Server 2012 / 2012 R2 / 2016 / 2019 / 2022 / 2025 (x64, x86, ARM64)

Use-after-free race condition in a kernel-mode network driver → local privilege escalation to SYSTEM

Progress Kemp LoadMaster (also ECS Connection Manager, ObjectScale Connection Manager, MOVEit WAF per CNA record) — affected: LoadMaster GA 7.2.63.1 and older; LTSF 7.2.54.17 and older (CNA: 7.2.60.0-<7.2.63.2, 7.2.54.12-<7.2.54.18; other three products 7.2.60.0-<7.2.63.2)

OS command injection in API command endpoints -> unauthenticated command execution (CWE-77)

JetBrains TeamCity On-Premises — affected: All TeamCity On-Premises versions (vendor); NVD CPE: <2025.11.7 and 2026.1 to <2026.1.3

Unauthenticated RCE - deserialization (XStream) via agent polling protocol; OS command exec as TeamCity server process (CWE-502)

IBM Langflow OSS / Langflow (pip langflow) — affected: Langflow OSS 1.0.0 through 1.10.0

Unauthenticated RCE chain: /api/v1/auto_login mints SUPERUSER token, then /api/v1/validate/code exec() (CWE-94)

Apache Tomcat (clustering / Apache Tribes EncryptInterceptor) — affected: 11.0.20, 10.1.53, 9.0.116 only

Encryption bypass of EncryptInterceptor (regression from fix for CVE-2026-29146, CBC padding-oracle) (CWE-311)

N-able N-central

Authentication bypass via alternate path or channel (CWE-288) → unauthenticated admin console takeover; CVE-2026-18577 is an incomplete patch for CVE-2026-18556

Cisco Secure Firewall Management Center (FMC) Software (formerly Firepower Management Center) — affected: Secure FMC Software regardless of device configuration. Not affected: cdFMC, FDM, ASA, FTD, Security Cloud Control.

static (hard-coded) low-priv account login on web interface -> sensitive data access, chainable to priv-esc (SIR High); unauthenticated, network (CWE-259)

Arista VeloCloud Orchestrator (VCO) On-Prem (rev 1.1 also added VCO Hosted) — affected: VCO 5.2.x <5.2.3.14; 6.1.x <6.1.3.4; 6.4.x <6.4.2.4; 7.0.x <7.0.0.1. EoS versions not assessed.

OS command injection via internal-only functionality reachable remotely (CWE-78)

Fortinet FortiOS SSL-VPN — affected: FortiOS 7.6.0-7.6.1; 7.4.0-7.4.6; 7.2 all; 7.0 all; 6.4 all. Products that never had SSL-VPN enabled not impacted.

information disclosure / persistence-patch bypass (symlink persistence) (CWE-200)

Microsoft — SharePoint Enterprise Server 2016 / Server 2019 / Subscription Edition (on-premises)

Deserialization of untrusted data (CWE-502) → unauthenticated remote code execution; observed follow-on theft of SharePoint machine keys for persistence that survives patching

Check Point — Security Management Server and Multi-Domain Security Management Server (MDS)

Authentication bypass — attacker-supplied SIC distinguished name accepted in place of the authenticated peer certificate identity (CWE-287)

Langflow (pip langflow) — affected: CVE record: version 1.4.2 (defaultStatus unknown). GitHub advisory GHSA-g22f-v6f7-2hrh and NVD CPE: <= 1.7.3.

Unauthenticated RCE via exec_globals parameter to the validate endpoint (CWE-829)

WordPress Core

REST API batch endpoint route confusion (CWE-436) chained with WP_Query author__not_in SQL injection (CWE-89) → unauthenticated RCE

Microsoft SharePoint

Unsafe deserialization of untrusted data → unauthenticated RCE

Fortinet FortiSandbox / FortiSandbox Cloud / FortiSandbox PaaS

OS command injection via crafted HTTP requests → unauthenticated RCE

Oracle E-Business Suite — Oracle Payments

Unauthenticated remote compromise over HTTP (improper privilege management)

SonicWall SMA1000 (models 6210/7210/8200v, vCMS)

Pre-auth wsproxy bypass (CVE-2026-15409) chained with code injection (CVE-2026-15410) and removehotfix path traversal → unauthenticated root

Microsoft — SharePoint Enterprise Server 2016 / Server 2019 / Subscription Edition (on-premises)

Missing authentication for critical function (CWE-306) → unauthenticated privilege escalation over the network

Unauthenticated arbitrary file upload → PHP web shell / RCE

Adobe ColdFusion 2025 / 2023 — affected: ColdFusion 2025 Update 9 and earlier; ColdFusion 2023 Update 20 and earlier (all platforms)

Unauthenticated path traversal leading to arbitrary code execution (CWE-22)

JoomShaper SP Page Builder extension for Joomla — affected: 1.0.0 - 6.6.1 (CNA); vendor staff: SPPB 3.8.10 lacks the custom-icon upload feature

Unrestricted file upload (custom icon upload, asset.uploadCustomIcon) -> PHP RCE (CWE-434)

Joomlack Page Builder CK extension for Joomla — affected: CNA affected range '1.0-3.6.0' but CNA title says '< 3.6.0'; vendor: versions before 3.6.0

Unauthenticated arbitrary file upload -> RCE (CWE-434 (CNA/NVD); KEV lists CWE-284)

Langflow (pip langflow) — affected: < 1.9.1

IDOR / authorization bypass: /api/v1/responses (and helper get_flow_by_id_or_endpoint_name) executes another user's flow by UUID (CWE-639)

SimpleHelp remote support server (OIDC / Entra ID login) — affected: SimpleHelp 5.5.15 and earlier, and 6.0 pre-release (vendor notice); CNA record: 5.5.0 to <5.5.16 and 6.0 to <6.0 RC2

Authentication bypass - OIDC ID-token signature not verified; forged token yields technician session (can bypass MFA) (CWE-347)

PTC Windchill PDMLink and FlexPLM (releases prior to 11.0 M030)

Deserialization of untrusted data (CWE-502/CWE-20) → unauthenticated RCE → JSP webshell → data theft + extortion

Cisco Unified Communications Manager (Unified CM) and Unified CM Session Management Edition (Unified CM SME) — affected: Unified CM and Unified CM SME releases 14 and 15 with the WebDialer service enabled (WebDialer is disabled by default).

SSRF via crafted HTTP request -> file write on OS, later root (SIR Critical); unauthenticated, network (CWE-918)

Ubiquiti UniFi OS (Cloud Gateways, Dream Machines/Routers, NVRs, UNAS, Cloud Keys, EFG, UniFi OS Server) — affected: UCG-Industrial <=5.0.13; UDM, UDM-Pro, UDM-SE, UDM-Pro-Max, EFG, UDW, UDR, UDR7, Express 7, UNVR, UNVR-Pro, UNVR-Instant, ENVR, UCG-Ultra, UCG-Max, UCG-Fiber <=5.0.16; UDR-5G, ENVR-Core, UCKP, UCK, UCK-Enterprise <=5.0.17; UniFi OS Server <=5.0.6; UNVR-G2, UNVR-G2-Pro <=5.1.11; UDM-Beast, UNAS-2/4/Pro/Pro-4/Pro-8 <=5.1.8

Improper access control (unauthenticated unauthorized system changes) (CWE-284)

Ubiquiti UniFi OS (Cloud Gateways, Dream Machines/Routers, NVRs, UNAS, Cloud Keys, EFG, UniFi OS Server) — affected: UCG-Industrial <=5.0.13; UDM, UDM-Pro, UDM-SE, UDM-Pro-Max, EFG, UDW, UDR, UDR7, Express 7, UNVR, UNVR-Pro, UNVR-Instant, ENVR, UCG-Ultra, UCG-Max, UCG-Fiber <=5.0.16; UDR-5G, ENVR-Core, UCKP, UCK, UCK-Enterprise <=5.0.17; UniFi OS Server <=5.0.6; UNVR-G2, UNVR-G2-Pro <=5.1.11; UDM-Beast, UNAS-2/4/Pro/Pro-4/Pro-8 <=5.1.8; Express <=4.0.13 (added in v1.1, 34909 only)

Path traversal (file access -> underlying account access) (CWE-22)

Ubiquiti UniFi OS (Cloud Gateways, Dream Machines/Routers, NVRs, UNAS, Cloud Keys, EFG, UniFi OS Server) — affected: UCG-Industrial <=5.0.13; UDM, UDM-Pro, UDM-SE, UDM-Pro-Max, EFG, UDW, UDR, UDR7, Express 7, UNVR, UNVR-Pro, UNVR-Instant, ENVR, UCG-Ultra, UCG-Max, UCG-Fiber <=5.0.16; UDR-5G, ENVR-Core, UCKP, UCK, UCK-Enterprise <=5.0.17; UniFi OS Server <=5.0.6; UNVR-G2, UNVR-G2-Pro <=5.1.11; UDM-Beast, UNAS-2/4/Pro/Pro-4/Pro-8 <=5.1.8

OS command injection via improper input validation (CWE-20)

Lantronix EDS5000 series (also G520, X300, E210, E220 per CNA/ICSA Update A/B) — affected: EDS5000 <=2.1.0.0R3; G520 <2.6.0.4R6; X300 <2.6.0.4R6; E210 <3.21.0.0R1; E220 <3.21.0.0R1

OS command injection in HTTP RPC auth-failure logging (username param) -> root (CWE-78)

Splunk Enterprise (splunkd PostgreSQL sidecar) — affected: 10.2.0 to 10.2.3; 10.0.0 to 10.0.6 (10.4, 9.4 and earlier not affected; Splunk Cloud not affected)

Missing authentication: unauthenticated arbitrary file creation/truncation via PostgreSQL sidecar endpoint (CWE-306)

Widget Factory JCE (Joomla Content Editor) extension for Joomla — affected: 1.0.0 - 2.9.99.4 (CNA); vendor: 'all earlier versions' than 2.9.99.5; 2.6.x stated not affected in default config (unverified by vendor)

Improper access control -> unauthenticated editor-profile import -> PHP upload/RCE (CWE-284)

LiteSpeed user-end cPanel plugin (bundled with LiteSpeed WHM plugin) — affected: cPanel user-end plugin < 2.4.8 (vendor: 'all user-end plugin versions prior to 2.4.8'); CVE: 2.3-<2.4.8

Symlink following -> local privilege escalation to root on CloudLinux/CageFS shared hosting (CWE-61)

Cisco Catalyst SD-WAN Manager (formerly SD-WAN vManage) — web UI — affected: Catalyst SD-WAN Manager regardless of device configuration, all deployment types (at time of publication).

path traversal in file upload (AnyConnect profile upload) -> arbitrary file create/overwrite, WAR deploy, later root; authenticated, network (CWE-22)

Oracle PeopleSoft Enterprise PeopleTools 8.61 and 8.62 (component: Updates Environment Management / PSEMHUB) — exposure requires PSEMHUB deployed and reachable

CWE-306 missing authentication for a critical function — unauthenticated takeover via Java deserialization in the PSEMHUB hub servlet (per GTIG)

Ivanti Sentry (formerly MobileIron Sentry) before R10.5.2, R10.6.x before R10.6.2, R10.7.0 (fixed R10.5.2 / R10.6.2 / R10.7.1 per Ivanti's CNA record)

OS command injection (CWE-78) — remote unauthenticated root-level code execution when the appliance's endpoints are externally reachable (unmanaged state)

Cisco Catalyst SD-WAN Controller (formerly vSmart), Catalyst SD-WAN Manager (formerly vManage), Catalyst SD-WAN Validator (formerly vBond) — CLI — affected: Controller, Manager, Validator regardless of device configuration; all deployment types. Requires netadmin privileges.

CLI command injection via crafted uploaded file -> root; authenticated (netadmin), local (CWE-116)

Arista EOS (switches with tunnel decapsulation config: VXLAN, decap-groups, GRE, IP-in-IP, GUE) — affected: All EOS trains (<=4.30 through 4.36 and newer per advisory). Fully affected: 7020R, 7280R/R2, 7500R/R2; limited (IP-in-IPv6, GUEv6 only): 7280R3, 7500R3, 7800R3

tunnel-protocol confusion / unexpected decapsulation and forwarding (filter bypass) (CWE-1023)

Check Point Security Gateway — Remote Access and Mobile Access certificate validation in the DEPRECATED IKEv1 key exchange

Logic-flow weakness in certificate validation → authentication bypass, unauthenticated remote-access VPN session

SolarWinds Serv-U (Windows, Linux) — affected: Serv-U 15.5.4 and below

Unauthenticated denial of service (service crash via Content-Encoding: deflate POST) (CWE-400)

Mirasvit Full Page Cache Warmer for Magento 2 (mirasvit/module-cache-warmer) — affected: < 1.11.12

PHP object injection (unserialize of CacheWarmer cookie) -> RCE via Magento gadget chains (CWE-502)

Oracle WebLogic Server (Fusion Middleware, component Core) — affected: 12.2.1.4.0, 14.1.1.0.0

Unauthenticated remote confidentiality compromise via T3/IIOP

Palo Alto Networks PAN-OS (GlobalProtect portal and gateway)

Authentication bypass (CWE-565) → unauthenticated SSL VPN session → Qilin ransomware deployment

LiteSpeed user-end cPanel plugin (bundled with LiteSpeed WHM plugin) — affected: cPanel user-end plugin v2.3 - v2.4.4 (vendor); CVE record: cPanel plugin 2.3-<2.4.7 and WHM plugin <5.3.1.0

Privilege escalation (lsws.redisAble function) -> arbitrary scripts as root (CWE-266)

Drupal core — affected: >=8.9.0 <10.4.10; 10.5.0-<10.5.10; 10.6.0-<10.6.9; 11.0.0-<11.1.10; 11.2.0-<11.2.12; 11.3.0-<11.3.10 — only sites using PostgreSQL are exposed to the SQLi

SQL injection (database abstraction API) -> info disclosure, in some cases privesc/RCE (CWE-89)

Langflow (pip langflow) — affected: <= 1.6.9

CORS misconfiguration (allow_origins='*' plus credentials) and SameSite=None refresh cookie, enabling cross-origin token theft, account takeover and RCE (CWE-346)

Trend Micro (TrendAI) Apex One 2019 on-prem server — affected: Apex One 2019 (on-prem) server and agent builds below 17079 (Windows); CVE record also lists Apex One as a Service / Vision One SEP SaaS agent < 14.0.20731

Server directory traversal to modify key table and push malicious code to managed agents (CWE-23)

Cisco Catalyst SD-WAN Controller (formerly vSmart), Catalyst SD-WAN Manager (formerly vManage), Catalyst SD-WAN Validator (formerly vBond) — affected: Controller, Manager and Validator regardless of system configuration; all deployment types (On-Prem, Cloud-Pro, Cisco Managed Cloud, FedRAMP).

peering-auth bypass in control-connection handshake to internal high-priv non-root account + NETCONF (fabric config control); unauthenticated, network (CWE-287)

BerriAI LiteLLM proxy (pip litellm) — affected: >= 1.81.16, < 1.83.7

Unauthenticated SQL injection in proxy API-key verification (via crafted Authorization header on any LLM route, error-handling path) (CWE-89)

Ivanti Endpoint Manager Mobile (EPMM), on-prem only — affected: Ivanti Endpoint Manager Mobile (on-prem) 12.8.0.0 and prior; Ivanti Neurons for MDM, cloud products and Sentry not affected

improper input validation -> authenticated RCE (CWE-20)

Palo Alto Networks PAN-OS (PA-Series and VM-Series firewalls); User-ID Authentication Portal (Captive Portal) — affected: PAN-OS 12.1 <12.1.7; 11.2 <11.2.12; 11.1 <11.1.15; 10.2 <10.2.18-h6 (hotfix exceptions listed). Only if Auth Portal enabled AND response pages enabled on an L3 interface in an untrusted zone. Prisma Access, Cloud NGFW, Panorama not affected.

buffer overflow (out-of-bounds write) -> unauthenticated RCE as root (CWE-787)

Linux kernel — algif_aead (AF_ALG crypto user-space interface). Fixed across stable trees; distribution kernels inherit the fix via their own stable-tree rebases

Incorrect resource transfer between spheres (CWE-669, also CWE-1288) in algif_aead — in-place operation across distinct source/destination mappings; upstream fix reverts to out-of-place operation. Local privilege escalation

WebPros — cPanel & WHM (including DNSOnly) and WP2 / WordPress Squared. Affected: ALL versions after 11.40

CWE-306 missing authentication for a critical function — authentication bypass in the cPanel login flow granting unauthenticated remote access to the control panel; public exploit chain to RCE

ConnectWise ScreenConnect (on-premise server) — affected: ScreenConnect 23.9.7 and prior (on-premise). Cloud (screenconnect.com, hostedrmm.com) remediated by vendor.

Path traversal -> RCE / data impact (CWE-22)

SimpleHelp remote support server — affected: SimpleHelp 5.5.7 and all earlier releases (vendor KB; CVE record; NVD CPE <5.5.8)

Missing authorization - privilege escalation (technician -> server admin via over-privileged API keys) (CWE-862 (CISA-ADP/KEV); NVD primary NVD-CWE-noinfo)

Samsung MagicINFO 9 Server (Windows digital-signage management server) — affected: MagicINFO 9 Server versions before 21.1050 (CVE record, Samsung PSIRT CNA; platform Windows)

Path traversal / arbitrary file write as SYSTEM (-> JSP upload RCE) (CWE-22, CWE-434 (CNA); NVD lists CWE-22 only)

SimpleHelp remote support server — affected: SimpleHelp 5.5.7 and all earlier releases (vendor KB; CVE record 'v5.5.7 and before'; NVD CPE <5.5.8)

Zip-slip path traversal (arbitrary file write) -> RCE as SimpleHelp server user (CWE-22 (CISA-ADP/KEV); NVD primary CWE-59)

D-Link DIR-823X wireless router — affected: DIR-823X firmware 240126 and 240802 (per CVE record description; NVD CPEs list the same two builds). D-Link SAP10469: all hardware revisions / all firmware versions are EoL/EoS

Authenticated command injection (POST /goform/set_prohibiting) (CWE-77)

marimo notebook (pip marimo) — affected: < 0.23.0 (CVE/GHSA package range). Advisory body text says 'Marimo <= 0.20.4'.

Missing authentication on /terminal/ws WebSocket, giving pre-auth RCE (shell) (CWE-306)

Quest KACE Systems Management Appliance (SMA) — affected: KACE Systems Management Appliance through 14.1 (Quest lists SMA, Asset Management Appliance, Service Desk and KACE as a Service at 13.1.79, 13.1.80, 13.2, 14.0, 14.1)

Authentication bypass in SSO authentication handling -> impersonate any user / full admin takeover (CWE-287)

Cisco Catalyst SD-WAN Manager (formerly SD-WAN vManage), Data Collection Agent (DCA) feature — affected: Catalyst SD-WAN Manager releases earlier than 20.18; vendor: 'releases 20.18 and later are not affected by this vulnerability'.

recoverable stored DCA credential file readable via crafted HTTP request -> DCA user privileges on other affected systems; disputed auth/vector (CWE-257)

JetBrains TeamCity On-Premises — affected: All TeamCity On-Premises versions through 2023.11.3 (vendor); CNA: <2023.11.4

Relative path traversal -> limited admin actions without authentication (CWE-23 (CNA); NVD primary CWE-22)

Kentico Xperience 13 (Staging module) — affected: Vendor: 13.0.177 and lower; CVE record: through 13.0.178

Path traversal / arbitrary file upload via Staging Sync Server -> RCE (CWE-22, CWE-434)

Cisco Catalyst SD-WAN Manager (formerly SD-WAN vManage) — affected: Catalyst SD-WAN Manager, regardless of device configuration; releases per Fixed Software table.

information disclosure (read sensitive OS files via API, insufficient file-system access restrictions); network; auth disputed (see conflicts) (CWE-200)

Zimbra Collaboration (ZCS) Classic UI — affected: ZCS 8.8.15, 9.0, 10.0, 10.1 (CVE record; no version bounds in CNA affected block)

Stored/email-borne XSS in Classic UI (crafted HTML incl. @import); triggers on viewing a crafted e-mail (CWE-79)

Cisco Catalyst SD-WAN Manager (formerly SD-WAN vManage) — affected: Catalyst SD-WAN Manager, regardless of device configuration; releases per Fixed Software table. Attacker must have valid read-only credentials with API access.

arbitrary file overwrite via API upload (smartLicensing/uploadAck path traversal) to vmanage-user code exec; authenticated (read-only API), network (CWE-648)

Apache ActiveMQ Classic (activemq-broker / activemq-all / apache-activemq) — affected: before 5.19.4; 6.0.0 before 6.2.3

Authenticated RCE via Jolokia (/api/jolokia/) exec of BrokerService.addNetworkConnector/addConnector loading remote Spring XML (CWE-20, CWE-94)

Fortinet FortiClientEMS (on-prem; FortiEMS Cloud removed from scope, not affected) — affected: FortiClientEMS 7.4.4 only (7.2 and 8.0 not affected)

SQL injection in administrative interface (GUI) -> unauthorized code/command execution (CWE-89)

Fortinet FortiClient EMS 7.4.5 through 7.4.6. Not affected: 7.2, 8.0

Improper access control — unauthenticated execution of unauthorized code or commands via crafted API requests

n8n (0.211.0 up to 1.120.4 / 1.121.1 / 1.122.0)

Improper control of dynamically-managed code resources (CWE-913) in workflow expression evaluation → authenticated RCE as the n8n process

Apple iOS / iPadOS before 18.7.3 (iPhone XS, XS Max, XR, iPad 7th gen and the other devices Apple serves on the 18.x line) and before 26.2 (iPhone 11 and later); macOS Tahoe before 26.2; Safari before 26.2 on macOS Sonoma and Sequoia; tvOS, watchOS (Series 6+) and visionOS before 26.2

CWE-416 use-after-free in WebKit — arbitrary code execution in the WebContent process from crafted web content; the renderer stage of APT29's Poisoned Source iOS chains (Class A with CVE-2024-27834; Class B with CVE-2026-20700 / 2025-14174 / 2025-43510 / 2025-43520) and of the DarkSword kit

Meta React Server Components (react-server-dom-webpack / -turbopack / -parcel 19.0.0, 19.1.0, 19.1.1, 19.2.0) and Vercel Next.js 15.0.0–16.0.7 incl. canary builds

Unsafe deserialization of HTTP request payloads at Server Function endpoints → pre-authentication remote code execution

RARLAB WinRAR for Windows, up to and including 7.12

Path traversal in archive extraction — a crafted RAR writes a payload outside the extraction folder (here the Startup folder), giving code execution at next sign-in; user must open the archive

Citrix NetScaler ADC and Gateway

Pre-auth session token leak → MFA bypass / session hijack (CitrixBleed 2)

SonicWall SMA100 series (SMA 200/210/400/410/500v, firmware ≤10.2.1.9-57sv) AND Apache HTTP Server 2.4.0–2.4.59 — the Apache half is exploitable wherever it runs, not only inside the appliance

mod_rewrite output-escaping flaw → unintended filesystem mapping and admin session-token hijack (CVE-2024-38475), chained into authenticated OS command injection as 'nobody' (CVE-2023-44221) → unauthenticated arbitrary command execution

Fortinet FortiOS 7.0.0–7.0.16; FortiProxy 7.0.0–7.0.19 and 7.2.0–7.2.12

Authentication bypass via an alternate path in the Node.js websocket module (CWE-288) → super-admin privileges on the device

Cisco IOS XE Software with the Web UI (HTTP/HTTPS server) enabled, internet-facing or reachable from untrusted networks

Privilege escalation in the IOS XE Web UI — unauthenticated creation of a level-15 account (device takeover)

Atlassian Confluence Data Center and Server 8.0.0 through 8.5.1. Versions prior to 8.0.0 are NOT affected. Atlassian Cloud sites (accessed via an atlassian.net domain) are NOT affected

Broken access control reachable pre-auth on the /setup/* endpoints — permits creation of an unauthorized account in the confluence-administrators group

Progress MOVEit Transfer (all before 2021.0.7; 2021.1.0–2021.1.4; 2022.0.0–2022.0.4; 2022.1.0–2022.1.5; 2023.0.0–2023.0.1) and MOVEit Cloud ≤14.1.6.97 / ≤15.0.2.38

Unauthenticated SQL injection in the MOVEit Transfer web application → database access, then web shell deployment and mass exfiltration

Cisco IOS/IOS XE (Smart Install); TP-Link TL-WR841N

Edge-device exploitation — Smart Install RCE over TCP 4786; router compromise

Sogou (Tencent) Sogou Input Method / Sogou Pinyin for Windows before 16.10 (SGTool.exe configuration retrieval over HTTP)

Cleartext-HTTP configuration retrieval (SGTool.exe) → DNS-hijacked response instructs arbitrary-path file download → DLL side-loading of the DarkVigil implant; nation-state surveillance campaign