The 60 largest of 217 PHP2Shell (CVE-2026-109618/CVE-2026-109619) - Active Crash Detection CVE-2026-109618 60 PHP 8.2 < 8.2.35, 8.3 < 8.3.36, 8.4 < 8.4.27, 8.5 < 8.5.12 - Use-After-Free Remote Code Execution CVE-2026-109619 59 A remote code execution vulnerability exists due to improper input validation, which can allow an unauthentic… CVE-2026-88771 29 Memory overflow vulnerability leading to Remote Code Execution or Denial of Service CVE-2026-88772 29 Out-of-Bounds Write in Google Brotli Decoder CVE-2026-111497 26 Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary c… CVE-2026-85046 26 PaperCut NG/MF <=26.0.4 - Unauthenticated ConfigEditor Access via Tapestry Complex-Direct CVE-2026-81578 24 PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector CVE-2026-82078 23 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability CVE-2026-85880 22 Ivanti Connect Secure <= 22.8R2.4 - Authentication Bypass via X-DSCGI-PATH Header CVE-2026-104935 21 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.11… CVE-2026-86950 17 Microsoft Outlook Spoofing Vulnerability CVE-2026-124194 15 Atlassian Jira/Confluence/Bitbucket - Pre-Auth Arbitrary File Read CVE-2026-21589 15 sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password… CVE-2026-123158 14 GitLab CE/EE < 19.2.8 / 19.3.5 / 19.4.2 - Unauthenticated RCE via Onigmo Integer Overflow CVE-2026-97229 14 Windows Update Stack Elevation of Privilege Vulnerability CVE-2026-81963 14 BeyondTrust Remote Support <= 26.2.3 - Origin Validation File Upload CVE-2026-102764 13 Windows Shell Security Feature Bypass Vulnerability CVE-2026-96951 13 GitLab CE/EE <=19.1.7/19.2.5/19.3.1 - Arbitrary File Read CVE-2026-85706 12 Zimbra Collaboration Suite < 10.1.20 - OS Command Injection CVE-2026-73570 12 An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gat… CVE-2026-65400 12 N-able N-central <2026.3.1.14 - Pre-Authentication Remote Code Execution CVE-2026-86218 11 A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions throu… CVE-2026-7273 11 Oracle PeopleSoft PeopleTools PSEMHUB - Pre-Auth Java Deserialization RCE CVE-2026-35273 11 Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitr… CVE-2026-87491 11 AhsayCBS - JSON API Authentication Bypass CVE-2026-105133 10 Plex Media Server < 1.43.3.10861 - Server Side Request Forgery CVE-2026-96654 10 Plex Media Server < 1.43.3.10861 - Arbitrary File Write to Code Execution CVE-2026-96656 10 Memory overflow vulnerability leading to Denial of Service CVE-2026-88779 10 Cisco Secure Email Gateway SQL Injection Vulnerability CVE-2026-76461 10 SonicWall SMA1000 WorkPlace - Unauthenticated SSRF to CouchDB CVE-2026-83548 10 Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'… CVE-2026-83549 10 Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service CVE-2026-8452 10 Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability CVE-2026-76504 10 WordPress Core - PHP Template Path Traversal CVE-2026-87902 10 BIG-IP APM OAuth vulnerability CVE-2026-94127 10 JFrog Artifactory Access Blank Join Key Authentication Bypass CVE-2026-82329 10 Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary… CVE-2026-125350 9 OS Command Injection in Barracuda Appliances CVE-2026-111560 9 Barracuda Email Security Gateway - Authentication Bypass CVE-2026-116606 9 AhsayCBS <= 10.3.4 - Unauthenticated RCE CVE-2026-105134 9 Palo Alto Networks PAN-OS - Authentication Bypass CVE-2026-0257 9 Plex Media Server < 1.43.3.10861 - Unauthenticated SSRF via Companion Protocol (plex2shell) CVE-2026-96652 9 Plex Media Server < 1.43.3.10861 - SSRF via Transcoder CVE-2026-96655 9 Adobe Commerce/Magento <= 2.4.9 - StyleSmuggler Unauthenticated RCE via SSTI CVE-2026-75650 9 Cisco Secure Email Gateway Arbitrary File Write Vulnerability CVE-2026-76519 9 Undisclosed RCE in Zammad v6.3 and higher CVE-2026-102489 9 Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package CVE-2026-102490 9 Microsoft SharePoint Server - JWT Authentication Bypass CVE-2026-55040 9 NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490 CVE-2026-19490 9 Cisco Secure Firewall Management Center - Authentication Bypass CVE-2026-20079 9 A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing o… CVE-2019-1068 9 Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access S… CVE-2026-76418 8 Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configurati… CVE-2026-111357 8 Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote a… CVE-2026-118527 8 Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434) CVE-2026-48356 8 Security Advisory 0199 CVE-2026-114625 8 In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to… CVE-2026-58704 8 Cisco Identity Services Engine - ise-kong API Gateway Authentication Bypass CVE-2026-76460 8 Improper Certificate Validation in Quantum Security Gateway CVE-2026-85102 8 SSH session privilege manipulation via a crafted username in Mikrotik RouterOS CVE-2026-86060 8 JFrog Artifactory - Unauthenticated Admin Token Minting via Token Scope Bypass CVE-2026-42016 8 Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability CVE-2026-33824 8 ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions CVE-2026-84869 7 A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthentica… CVE-2026-20320 7 GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP hea… CVE-2026-102895 7 FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands CVE-2026-116779 7 Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to exec… CVE-2026-11645 7 Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary… CVE-2026-2441 7 Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out… CVE-2026-3909 7 Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execu… CVE-2026-3910 7 Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised… CVE-2026-5281 7 The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.… CVE-2024-27834 7 net: skbuff: preserve shared-frag marker during coalescing CVE-2026-46300 7 vCenter directory-traversal vulnerability CVE-2026-59310 7 Collabora Built-in CODE Server < 26.4.303 - OS Command Injection CVE-2026-110447 7 An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in F… CVE-2025-61624 7 JFrog Artifactory - Anonymous Token Disclosure via Trailing Slash Auth Bypass CVE-2026-42018 7 Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middle… CVE-2026-21962 7 Deserialization of Untrusted Data CVE-2021-23758 7 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability CVE-2026-20127 6 An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials… CVE-2026-19868 6 Security Advisory 0183 CVE-2026-93952 6 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface CVE-2026-0322 6 An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet F… CVE-2026-104286 6 SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS CVE-2026-67279 6 Cisco Secure Firewall Management Center Software Static Credential Vulnerability CVE-2026-20316 6 Gitea <= 1.27.0 - Pre-Auth Remote Code Execution CVE-2026-60004 6 A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to… CVE-2026-72529 6 A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to… CVE-2026-72530 6 Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict th… CVE-2026-111793 5 IBM Aspera Faspex Authorization Bypass CVE-2026-123218 5 SonicWall SMA1000 - Server-Side Request Forgery CVE-2026-15409 5 JetBrains TeamCity < 2026.1.3, 2025.11.7 - Remote Code Execution CVE-2026-63077 5 ESX insufficient logging vulnerability CVE-2026-41709 5 Oracle E-Business Suite 12.2.3–12.2.14 – Remote Code Execution CVE-2025-61882 5 A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected applic… CVE-2026-110936 5 A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, Forti… CVE-2024-47575 5 Metabase - Unauthenticated SQL Injection CVE-2026-72898 5 ProFTPd - Remote Code Execution CVE-2015-3306 5 named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial o… CVE-2015-5477 5 Apache S2-032 Struts - Remote Code Execution CVE-2016-3081 5 Microsoft SharePoint Server Remote Code Execution Vulnerability CVE-2026-65660 5 crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg CVE-2025-39964 5 netfilter: bridge: make ebt_snat ARP rewrite writable CVE-2026-53266 5 A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4… CVE-2025-25249 5 libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, d… CVE-2015-3246 5 The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with c… CVE-2015-5287 5 An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsy… CVE-2022-0995 5 MLflow Webhook SSRF - Unauthenticated Full-Read via Redirect Bypass CVE-2026-64849 5 Local privilege escalation to root in the DynamicCLI daemon via local world-writable control socket CVE-2026-123039 4 WordPress Core 6.9-7.0.1 - Pre-Auth Batch-Route Confusion CVE-2026-63030 4 WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution CVE-2026-119977 4 A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS… CVE-2025-43529 4 Path traversal vulnerability in WinRAR CVE-2025-8088 4 Adobe Commerce - Authentication Bypass CVE-2025-54236 4 SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execu… CVE-2026-106931 4 Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.… CVE-2021-3199 4 Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by… CVE-2023-22894 4 Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover CVE-2026-5430 4 Adobe Commerce/Magento - Customer Session Identity Switch CVE-2026-71362 4 Check Point Security Management - Unauthenticated Directory Traversal to RCE CVE-2026-93616 4 ipv6: account for fraggap on the paged allocation path CVE-2026-53362 4 Ray < 2.52.0 - Remote Code Execution CVE-2025-62593 4 React Server Components - Remote Code Execution CVE-2025-55182 3 Remote Code Execution (RCE) vulnerability in Windchill PDMlink CVE-2026-12569 3 WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query CVE-2026-60137 3 N-able N-central < 2026.3.1.10 - Authentication Bypass CVE-2026-18577 3 Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacke… CVE-2025-14174 3 Dahua IPC/VTH/VTO - Authentication Bypass CVE-2021-33044 3 Dahua IPC/VTH/VTO - Authentication Bypass CVE-2021-33045 3 SimpleHelp <= 5.5.7 - Unauthenticated Path Traversal CVE-2024-57727 3 FortiClient EMS - Authentication Bypass CVE-2026-35616 3 BeyondTrust Remote Support - Unauthenticated WebSocket RCE CVE-2026-1731 3 tls: fix handling of zero-length records on the rx_list CVE-2025-39682 3 Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Bac… CVE-2026-87886 3 Kernel memory disclosure and denial of service in MikroTik RouterOS btest service CVE-2026-67277 3 BigIP APM Vulnerability CVE-2025-53521 3 Sangoma Switchvox < 8.4.0.2 - Unauthenticated SQL Injection CVE-2026-9586 3 An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete a… CVE-2023-49105 3 Authenticated users may write data outside the intended Docker cache path CVE-2026-66384 3 The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag… CVE-2026-114713 2 GlobalProtect - OS Command Injection CVE-2024-3400 2 A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2… CVE-2025-43510 2 A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and… CVE-2025-43520 2 A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and i… CVE-2026-20700 2 Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access S… CVE-2026-20349 2 VeloCloud Orchestrator OS Command Injection CVE-2026-16812 2 Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Suppo… CVE-2026-46817 2 FortiWeb - Authentication Bypass CVE-2025-64446 2 Fortinet - Authentication Bypass CVE-2024-55591 2 Fortinet FortiWeb - SQL Injection CVE-2025-25257 2 The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewIn… CVE-2014-8361 2 LiteLLM - Command Injection CVE-2026-42271 2 A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services w… CVE-2019-0708 2 telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER e… CVE-2026-24061 1 Qlik Sense Enterprise - HTTP Request Smuggling CVE-2023-41265 1 Qlik Sense Enterprise - Path Traversal CVE-2023-41266 1 Apache ActiveMQ - Remote Code Execution CVE-2023-46604 1 Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, ak… CVE-2023-48365 1 Veeam Backup & Replication - Unauthenticated CVE-2024-40711 1 SAP NetWeaver Visual Composer Metadata Uploader - Deserialization CVE-2025-31324 1 Liferay Portal Unauthenticated < 7.2.1 CE GA2 - Remote Code Execution CVE-2020-7961 1 Cisco IOS XE Web UI - Command Injection CVE-2023-20198 1 Use After Free in Graphics CVE-2025-27038 1 Microsoft SharePoint Server - Remote Code Execution (ToolShell) CVE-2025-53770 1 cPanel & WHM - Authentication Bypass via Session-File CRLF Injection CVE-2026-41940 1 Drupal Core - Anonymous SQL Injection via PostgreSQL Entity Query CVE-2026-9082 1 Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Cont… CVE-2019-19006 1 FreePBX - Remote Code Execution CVE-2025-57819 1 The Versa Director GUI provides an option to customize the look and feel of the user interface. This option i… CVE-2024-39717 1 Adobe Commerce & Magento - CosmicSting CVE-2024-34102 1 Hikvision - Authentication Bypass CVE-2017-7921 1 Hikvision IP camera/NVR - Remote Command Execution CVE-2021-36260 1 LiteLLM - SQL Injection CVE-2026-42208 1 Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow… CVE-2019-6693 1 Microsoft Office Security Feature Bypass Vulnerability CVE-2026-21509 1 A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a… CVE-2021-4034 1 Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identifi… CVE-2026-15410 1 Fortinet FortiSandbox - Command Injection CVE-2026-39808 1 Joomla SP Page Builder <= 6.6.1 - Unauthenticated Arbitrary File Upload RCE CVE-2026-48908 1 An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue i… CVE-2025-24201 1 A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and… CVE-2025-31200 1 GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment var… CVE-2014-6278 1 Pulse Connect Secure SSL VPN Arbitrary File Read CVE-2019-11510 1 GitLab CE/EE - Remote Code Execution CVE-2021-22205 1 Check Point IKEv1 Remote-Access VPN - Certificate Authentication Bypass CVE-2026-50751 1 TP-Link Archer AX21 (AX1800) - Unauthenticated Command Injection CVE-2023-1389 1 Ivanti ICS - Authentication Bypass CVE-2023-46805 1 Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) - Command Injection CVE-2024-21887 1 RealTek AP Router SDK - Arbitrary Command Injection CVE-2021-35394 1 Apache Struts 2 - Remote Command Execution CVE-2017-5638 1 Microsoft SharePoint Server Spoofing Vulnerability CVE-2026-32201 1 Microsoft SharePoint Remote Code Execution Vulnerability CVE-2026-50522 1 Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCE CVE-2026-58644 1 Samsung MagicINFO 9 Server - File Upload & Remote Code Execution CVE-2025-4632 1 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability CVE-2026-20182 1 Langflow AI - Unauthenticated Remote Code Execution CVE-2025-3248 1 An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.8.4 and iP… CVE-2025-24200 1 A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to proper… CVE-2020-0688 1 Shares articles with