Vulnerabilities
Fixes & KEVSeverity
OctNovDecJanFebMarAprMayJunJulAugSep
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
CyStack continuously tracks the latest global threats and develops solutions that help identify new vulnerabilities across your websites and systems.
Data is updated in the system
Data is updated in the CyStack VulnScan system.Learn more
| Vulnerability | Exploitation status | Fix | Provider | Affected product | Published | Severity |
|---|---|---|---|---|---|---|
CVE-2026-67277Kernel memory disclosure and denial of service in MikroTik RouterOS btest service | Exploitation statusKEV | FixYes | ProviderMikroTik | Affected productRouterOS | Published09/05/2026 | SeverityHigh |
CVE-2026-86060SSH session privilege manipulation via a crafted username in Mikrotik RouterOS | Exploitation statusKEV | FixYes | ProviderMikroTik | Affected productRouterOS | Published09/05/2026 | SeverityCritical |
CVE-2026-20079Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability | Exploitation statusKEV | FixNot confirmed | ProviderCisco | Affected productCisco Secure Firewall Management Center (FMC) | Published03/04/2026 | SeverityCritical |
CVE-2026-9586Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB | Exploitation statusKEV | FixYes | ProviderSangoma | Affected productSwitchvox SMB Edition | Published07/17/2026 | SeverityCritical |
CVE-2026-73570 | Exploitation statusKEV | FixYes | ProviderZimbra | Affected productCollaboration | Published08/13/2026 | SeverityHigh |
CVE-2026-5153Tenda CH22 WriteFacMac FormWriteFacMac command injection | Exploitation statusPublic exploit | FixNot confirmed | ProviderTenda | Affected productCH22 | Published03/30/2026 | SeverityMedium |
CVE-2019-1068 | Exploitation statusKEV | FixYes | ProviderMicrosoft | Affected productMicrosoft SQL Server | Published07/15/2019 | SeverityHigh |
CVE-2026-53266netfilter: bridge: make ebt_snat ARP rewrite writable | Exploitation statusKEV | FixYes | ProviderLinux | Affected productLinux | Published06/25/2026 | SeverityHigh |
CVE-2026-53362ipv6: account for fraggap on the paged allocation path | Exploitation statusKEV | FixYes | ProviderLinux | Affected productLinux | Published07/04/2026 | SeverityHigh |
CVE-2021-27691 | Exploitation statusNot confirmed | FixNot confirmed | Providertendacn | Affected productg0_firmware | Published04/15/2021 | SeverityCritical |
CVE-2023-37569OS Command Injection Vulnerability in Emagic Data Center Management Suite | Exploitation statusPublic exploit | FixYes | ProviderESDS | Affected productEmagic Data Center Management Suite | Published08/08/2023 | SeverityHigh |
CVE-2023-39470PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | ProviderPaperCut | Affected productNG | Published11/22/2024 | SeverityHigh |
CVE-2019-12725 | Exploitation statusPublic exploit | FixNot confirmed | Providerzeroshell | Affected productzeroshell | Published07/19/2019 | SeverityCritical |
CVE-2015-5287 | Exploitation statusKEV | FixYes | Provideroracle | Affected productlinux | Published12/07/2015 | SeverityHigh |
CVE-2026-58457Shenzhen Aitemi M300 MT02 Unauthenticated OS Command Injection via protocol.csp | Exploitation statusPublic exploit | FixNot confirmed | ProviderShenzhen Aitemi E Commerce Co. Ltd. | Affected productM300 Wi-Fi Repeater | Published07/01/2026 | SeverityCritical |
CVE-2026-1547Totolink A7000R cstecgi.cgi setUnloadUserData command injection | Exploitation statusPublic exploit | FixNot confirmed | ProviderTotolink | Affected productA7000R | Published01/28/2026 | SeverityMedium |
CVE-2026-58704 | Exploitation statusNot known exploited | FixNot confirmed | ProviderGoogle | Affected productAndroid | Published09/15/2026 | SeverityHigh |
CVE-2026-59822LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback | Exploitation statusKEV | FixYes | ProviderBerriAI | Affected productlitellm | Published07/08/2026 | SeverityHigh |
CVE-2026-60004 | Exploitation statusKEV | FixYes | ProviderGitea | Affected productGitea | Published08/26/2026 | SeverityCritical |
CVE-2024-58374Hongjing e-HR Unauthenticated SQL Injection via getSdutyTree | Exploitation statusPublic exploit | FixNot confirmed | ProviderHongjing Century | Affected producte-HR | Published08/13/2026 | SeverityHigh |
CVE-2023-49105 | Exploitation statusKEV | FixNot confirmed | Providerowncloud | Affected productowncloud_server | Published11/21/2023 | SeverityCritical |
CVE-2026-19490NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490 | Exploitation statusKEV | FixYes | ProviderNetScaler | Affected productADC | Published08/19/2026 | SeverityCritical |
CVE-2015-3246 | Exploitation statusKEV | FixYes | Providerlibuser_project | Affected productlibuser | Published08/11/2015 | SeverityMedium |
CVE-2026-66384Authenticated users may write data outside the intended Docker cache path | Exploitation statusKEV | FixYes | Providerjfrog | Affected productartifactory | Published08/12/2026 | SeverityMedium |
CVE-2026-67276SSH user impersonation possible in Mikrotik RouterOS | Exploitation statusPublic exploit | FixYes | ProviderMikroTik | Affected productRouterOS | Published09/05/2026 | SeverityCritical |
CVE-2025-10164lmsys sglang update_weights_from_tensor main deserialization | Exploitation statusPublic exploit | FixNot confirmed | Providerlmsys | Affected productsglang | Published09/09/2025 | SeverityMedium |
CVE-2025-14208D-Link DIR-823X set_wan_settings sub_415028 command injection | Exploitation statusPublic exploit | FixNot confirmed | ProviderD-Link | Affected productDIR-823X | Published12/08/2025 | SeverityMedium |
CVE-2021-23758Deserialization of Untrusted Data | Exploitation statusKEV | FixYes | Providerajaxpro.2_project | Affected productAjaxPro.2 | Published12/03/2021 | SeverityHigh |
CVE-2025-25249 | Exploitation statusKEV | FixYes | ProviderFortinet | Affected productFortiOS | Published01/13/2026 | SeverityHigh |
CVE-2026-75650Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) | Exploitation statusKEV | FixYes | ProviderAdobe | Affected productAdobe Commerce | Published09/07/2026 | SeverityCritical |
CVE-2026-76460Cisco Identity Services Engine Authentication Bypass Vulnerability | Exploitation statusNot confirmed | FixNot confirmed | ProviderCisco | Affected productCisco Identity Services Engine Software | Published09/16/2026 | SeverityCritical |
CVE-2026-76461Cisco Secure Email Gateway SQL Injection Vulnerability | Exploitation statusKEV | FixNot confirmed | ProviderCisco | Affected productCisco Secure Email | Published09/14/2026 | SeverityCritical |
CVE-2026-76904GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers | Exploitation statusNot known exploited | FixNot confirmed | Providergeotools | Affected productgeotools | Published08/21/2026 | SeverityCritical |
CVE-2022-0995 | Exploitation statusKEV | FixYes | ProviderLinux | Affected productKernel | Published03/25/2022 | SeverityHigh |
CVE-2023-7330Ruijie Networks NBR Routers Unauthenticated Arbitrary File Upload via fileupload.php | Exploitation statusPublic exploit | FixNot confirmed | ProviderBeijing Star-Net Ruijie Network Technology Co., Ltd. | Affected productNBR Series Routers | Published11/24/2025 | SeverityCritical |
CVE-2024-0250Analytics Insights for Google Analytics 4 < 6.3 - Open Redirect | Exploitation statusPublic exploit | FixYes | Providerdeconf | Affected productAnalytics Insights for Google Analytics 4 (AIWP) | Published02/12/2024 | SeverityMedium |
CVE-2026-78141Tenda CH22 exeCommand formexeCommand command injection | Exploitation statusPublic exploit | FixNot confirmed | ProviderTenda | Affected productCH22 | Published08/23/2026 | SeverityMedium |
CVE-2026-81578PaperCut MF/NG: Authentication Bypass | Exploitation statusKEV | FixYes | ProviderPaperCut | Affected productPaperCut MF/NG | Published08/28/2026 | SeverityHigh |
CVE-2026-81963Windows Update Stack Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | ProviderMicrosoft | Affected productWindows 11 Version 23H2 | Published09/08/2026 | SeverityHigh |
CVE-2026-82078PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector | Exploitation statusKEV | FixYes | ProviderPaperCut | Affected productPaperCut MF/NG | Published08/28/2026 | SeverityCritical |
CVE-2026-82329Potential authentication bypass leading to administrative access in Artifactory | Exploitation statusKEV | FixYes | Providerjfrog | Affected productartifactory | Published08/28/2026 | SeverityCritical |
CVE-2026-83548 | Exploitation statusKEV | FixNot confirmed | ProviderSonicWall | Affected productSMA1000 | Published09/01/2026 | SeverityCritical |
CVE-2026-83549 | Exploitation statusKEV | FixNot confirmed | ProviderSonicWall | Affected productSMA1000 | Published09/01/2026 | SeverityHigh |
CVE-2025-39682tls: fix handling of zero-length records on the rx_list | Exploitation statusPublic exploit | FixYes | ProviderLinux | Affected productLinux | Published09/05/2025 | SeverityCritical |
CVE-2026-84869ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions | Exploitation statusKEV | FixYes | ProviderConnectWise | Affected productScreenConnect | Published09/08/2026 | SeverityCritical |
CVE-2026-85046 | Exploitation statusKEV | FixYes | ProviderGoogle | Affected productChrome | Published09/03/2026 | SeverityHigh |
CVE-2026-85706Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab | Exploitation statusKEV | FixYes | ProviderGitLab | Affected productGitLab | Published09/12/2026 | SeverityCritical |
CVE-2026-85880Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | Exploitation statusKEV | FixYes | ProviderMicrosoft | Affected productWindows 10 Version 1607 | Published09/08/2026 | SeverityHigh |
CVE-2025-39964crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg | Exploitation statusKEV | FixYes | ProviderLinux | Affected productLinux | Published10/13/2025 | SeverityHigh |
CVE-2024-12912 | Exploitation statusNot known exploited | FixNot confirmed | ProviderASUS | Affected productRouter | Published01/02/2025 | SeverityHigh |
CVE-2026-86218pre-authentication remote code execution | Exploitation statusKEV | FixYes | ProviderN-able | Affected productN-central | Published09/06/2026 | SeverityCritical |
CVE-2019-10655 | Exploitation statusPublic exploit | FixNot confirmed | ProviderGrandstream | Affected productgac2500_firmware | Published03/30/2019 | SeverityCritical |
CVE-2026-87491 | Exploitation statusKEV | FixYes | ProviderGoogle | Affected productChrome | Published09/09/2026 | SeverityHigh |
CVE-2025-55583 | Exploitation statusPublic exploit | FixNot confirmed | Providerdlink | Affected productdir-868l_firmware | Published08/28/2025 | SeverityCritical |
CVE-2026-87886 | Exploitation statusNot confirmed | FixYes | ProviderAcronis | Affected productAcronis Backup extension for Plesk | Published09/17/2026 | SeverityHigh |
CVE-2025-6068FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting | Exploitation statusNot known exploited | FixYes | Providerfooplugins | Affected productGallery by FooGallery | Published07/11/2025 | SeverityMedium |
CVE-2026-42016Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation | Exploitation statusNot known exploited | FixYes | Providerjfrog | Affected productartifactory | Published07/27/2026 | SeverityHigh |
CVE-2025-60687 | Exploitation statusPublic exploit | FixNot confirmed | ProviderTotolink | Affected productlr1200gb_firmware | Published11/13/2025 | SeverityMedium |
CVE-2026-42018Anonymous user token generation exposure in JFrog Artifactory | Exploitation statusNot known exploited | FixYes | Providerjfrog | Affected productartifactory | Published08/12/2026 | SeverityHigh |
CVE-2025-60698 | Exploitation statusPublic exploit | FixNot confirmed | Providerdlink | Affected productdir-882_firmware | Published11/13/2025 | SeverityHigh |
CVE-2025-60702 | Exploitation statusPublic exploit | FixNot confirmed | ProviderTotolink | Affected producta950rg_firmware | Published11/13/2025 | SeverityMedium |
CVE-2026-48710Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks | Exploitation statusKEV | FixYes | ProviderKludex | Affected productstarlette | Published05/26/2026 | SeverityMedium |
CVE-2026-49869Kestra: Unauthenticated Remote Code Execution via Authentication Bypass in `AuthenticationFilter` | Exploitation statusKEV | FixYes | Providerkestra-io | Affected productkestra | Published06/26/2026 | SeverityCritical |
CVE-2026-0768Langflow code Code Injection Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | ProviderLangflow | Affected productLangflow | Published01/23/2026 | SeverityCritical |
CVE-2026-0769Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | ProviderLangflow | Affected productLangflow | Published01/23/2026 | SeverityCritical |
CVE-2026-1125D-Link DIR-823X set_wifidog_settings sub_412E7C command injection | Exploitation statusPublic exploit | FixNot confirmed | ProviderD-Link | Affected productDIR-823X | Published01/18/2026 | SeverityMedium |
CVE-2026-14894Super Forms <= 6.3.313 - Unauthenticated Arbitrary File Upload via 'data' Parameter (datauristring / value) | Exploitation statusNot known exploited | FixYes | ProviderWebRehab | Affected productSuper Forms – Drag & Drop Form Builder | Published07/10/2026 | SeverityCritical |
CVE-2026-18963Unauthenticated account takeover via password-reset bypass in Red Hat Build of Keycloak and Siemens Industrial Edge Management | Exploitation statusNot known exploited | FixYes | ProviderRed Hat | Affected productRed Hat build of Keycloak 26.4 | Published08/18/2026 | SeverityCritical |
CVE-2026-19478Improper Control of Generation of Code ('Code Injection') in GitLab | Exploitation statusPublic exploit | FixYes | ProviderGitLab | Affected productGitLab | Published08/17/2026 | SeverityCritical |
CVE-2026-19598Pods <= 3.3.9 - Unauthenticated Privilege Escalation via Authorization Bypass to Admin Methods via 'pods_admin' AJAX Router | Exploitation statusNot known exploited | FixYes | Providersc0ttkclark | Affected productPods – Custom Content Types and Fields | Published08/15/2026 | SeverityCritical |
CVE-2026-20316Cisco Secure Firewall Management Center Software Static Credential Vulnerability | Exploitation statusKEV | FixNot confirmed | ProviderCisco | Affected productCisco Secure Firewall Management Center (FMC) | Published07/29/2026 | SeverityMedium |
CVE-2026-21962 | Exploitation statusKEV | FixYes | ProviderOracle Corporation | Affected productOracle HTTP Server, Oracle Weblogic Server Proxy Plug-in | Published01/20/2026 | SeverityCritical |
CVE-2026-23536Feast: unauthenticated arbitrary file read | Exploitation statusNot known exploited | FixNot confirmed | ProviderRed Hat | Affected productRed Hat OpenShift AI (RHOAI) | Published03/20/2026 | SeverityHigh |
CVE-2026-2614Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow | Exploitation statusPublic exploit | FixYes | Providermlflow | Affected productmlflow/mlflow | Published05/11/2026 | SeverityHigh |
CVE-2026-27540WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Arbitrary File Upload vulnerability | Exploitation statusNot known exploited | FixYes | ProviderRymera Web Co Pty Ltd. | Affected productWoocommerce Wholesale Lead Capture | Published03/19/2026 | SeverityCritical |
CVE-2026-27971Qwik affected by unauthenticated RCE via server$ Deserialization | Exploitation statusNot known exploited | FixYes | ProviderQwikDev | Affected productqwik | Published03/03/2026 | SeverityCritical |
CVE-2026-29059Windmill: SUPERADMIN_SECRET (rarely used) can be accessed publicly | Exploitation statusPublic exploit | FixYes | Providerwindmill-labs | Affected productwindmill | Published03/06/2026 | SeverityMedium |
CVE-2026-32255Kan is Vulnerable to Unauthenticated SSRF via Attachment Download Endpoint | Exploitation statusNot known exploited | FixYes | Providerkanbn | Affected productkan | Published03/18/2026 | SeverityHigh |
CVE-2026-32475Unauthenticated arbitrary file upload leading to remote code execution in Elementor's Elementor Pro plugin | Exploitation statusNot known exploited | FixYes | ProviderElementor | Affected productElementor Pro | Published08/19/2026 | SeverityCritical |
CVE-2026-32882libheif: Heap Buffer OOB Read in overlay compositing due to wrong alpha stride | Exploitation statusPublic exploit | FixYes | Providerstrukturag | Affected productlibheif | Published05/19/2026 | SeverityHigh |
CVE-2026-39364Vite has a `server.fs.deny` bypass with queries | Exploitation statusPublic exploit | FixYes | Providervitejs | Affected productvite | Published04/07/2026 | SeverityHigh |
CVE-2026-40242Arcane Unauthenticated SSRF with Conditional Response Reflection in Template Fetch Endpoint | Exploitation statusPublic exploit | FixYes | Providergetarcaneapp | Affected productarcane | Published04/10/2026 | SeverityHigh |
CVE-2014-3704 | Exploitation statusPublic exploit | FixYes | ProviderDebian | Affected productdebian_linux | Published10/16/2014 | SeverityHigh |
CVE-2026-42031CKAN: Unauthenticated SQL Injection and Authorization Bypass in `datastore_search_sql` | Exploitation statusNot known exploited | FixYes | Providerckan | Affected productckan | Published05/13/2026 | SeverityHigh |
CVE-2026-42796Arelle < 2.39.10 Unauthenticated RCE via /rest/configure | Exploitation statusNot known exploited | FixYes | ProviderArelle | Affected productArelle | Published05/04/2026 | SeverityCritical |
CVE-2026-45695Kopia: Unauthenticated RCE via SSH ProxyCommand Injection when --insecure --without-password is used | Exploitation statusNot known exploited | FixYes | Providerkopia | Affected productkopia | Published07/16/2026 | SeverityCritical |
CVE-2026-51990 | Exploitation statusNot known exploited | FixYes | ProviderNot confirmed | Affected productNot confirmed | Published09/16/2026 | SeverityCritical |
CVE-2026-54196WordPress JetFormBuilder plugin <= 3.6.1 - Privilege Escalation vulnerability | Exploitation statusNot known exploited | FixYes | Providerjetmonsters | Affected productJetFormBuilder | Published06/17/2026 | SeverityMedium |
CVE-2026-5430Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover | Exploitation statusNot known exploited | FixYes | ProviderWSO2 | Affected productWSO2 API Control Plane | Published08/06/2026 | SeverityCritical |
CVE-2026-55786 | Exploitation statusNot confirmed | FixNot confirmed | ProviderNot confirmed | Affected productNot confirmed | Published— | SeverityUnknown |
CVE-2026-57739WordPress AcyMailing SMTP Newsletter plugin <= 10.11.0 - SQL Injection vulnerability | Exploitation statusNot known exploited | FixYes | ProviderAcyMailing Newsletter Team | Affected productAcyMailing SMTP Newsletter | Published07/13/2026 | SeverityCritical |
CVE-2026-58400GeoNetwork vulnerable to Remote Code Execution via unsafe Saxon XSLT processor configuration in formatter | Exploitation statusNot known exploited | FixYes | Providergeonetwork | Affected productcore-geonetwork | Published09/03/2026 | SeverityCritical |
CVE-2026-58644Microsoft SharePoint Remote Code Execution Vulnerability | Exploitation statusKEV | FixYes | ProviderMicrosoft | Affected productMicrosoft SharePoint Enterprise Server 2016 | Published07/14/2026 | SeverityCritical |
CVE-2026-61511vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php | Exploitation statusPublic exploit | FixNot confirmed | ProvidervBulletin | Affected productvBulletin | Published07/27/2026 | SeverityCritical |
CVE-2026-63219Unauthenticated file upload via missing authorization on formatter upload endpoint | Exploitation statusNot known exploited | FixYes | Providergeonetwork | Affected productcore-geonetwork | Published09/03/2026 | SeverityHigh |
CVE-2026-63520Microsoft SharePoint Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | ProviderMicrosoft | Affected productMicrosoft SharePoint Enterprise Server 2016 | Published08/11/2026 | SeverityHigh |
CVE-2026-65400 | Exploitation statusKEV | FixYes | ProviderApple | Affected productmacOS | Published08/06/2026 | SeverityCritical |
CVE-2026-69255Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified | Exploitation statusPublic exploit | FixYes | ProviderFlowiseAI | Affected productFlowise | Published08/04/2026 | SeverityCritical |
CVE-2026-71362Adobe Commerce | Incorrect Authorization (CWE-863) | Exploitation statusNot known exploited | FixYes | ProviderAdobe | Affected productAdobe Commerce | Published08/11/2026 | SeverityCritical |
CVE-2026-72529 | Exploitation statusKEV | FixYes | ProviderTrueConf | Affected productTrueConf Server | Published08/19/2026 | SeverityCritical |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
Review CyStack's security rating and practical recommendations for websites and edge assets.
Explore cybersecurity research from our team of security specialists.
Browse practical cybersecurity knowledge across CyStack's articles and guides.
.svg){kind=icon}
.svg){kind=icon}
