Known exploited vulnerabilities

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and…

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, the unauthenticated POST…

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9…

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to…

Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network

A serious Windows networking flaw lets an outsider take over a computer over the network without logging in, attackers are already using it, and every affected…

A flaw in the Ray AI tool lets attackers take over a developer's computer if the developer simply visits a bad website while the tool is running

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally

A flaw in these load-balancing appliances lets attackers break in without a password and take control of systems that route important application traffic

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through…

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with…

A popular web server can send private user session information without protecting it, so attackers who can see that traffic may steal logins and personal data

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1

A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an…

VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact…

Attackers who already broke into a vulnerable network security device may be able to use it to steal sensitive configuration and access information

An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login…

A vulnerable Langflow server can be taken over remotely by anyone who can reach it, potentially exposing data and connected systems

Attackers can remotely take control of affected Fortinet sandbox systems unless they are updated or isolated. CVE-2026-25089 is rated critical (CVSS 9.8), is…

A malware-analysis appliance can be taken over over the network without a login, letting attackers run their own commands on a core security device

A flaw in Oracle’s payment processing software could let an outside attacker take control of payment functions without needing a password

Attackers can lock building automation devices so authorized staff may be unable to manage or restore them without costly manual recovery

Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console…

A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could…

A flaw in Microsoft’s sign-on server software can let someone who already has basic access to that server gain much more control over it, putting company login…

Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow…

Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla extension Balbooa Forms is vulnerable to an…

A vulnerable website calendar extension can let attackers upload a malicious file and take control of the website server

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability…

Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an…

A logged-in user could run another user's Langflow workflows without permission, potentially exposing sensitive results or triggering unintended actions

A flaw in a Joomla website-building add-on can let outsiders upload and run malicious code, giving them control of the website

A logged-in attacker can take over the company document server, steal files, and use that access to run ransomware, so the system must be updated and checked…

If a common single-sign-on option is turned on, outsiders can fake a login and take over the remote-support console without any password or employee action…

A flaw in PTC product management software can let outsiders take over important servers, so affected systems should be isolated and updated immediately

Attackers can abuse an optional Cisco phone-system web feature to tamper with server files and potentially take full control of the system

A flaw in widely used UniFi network and recording devices can let anyone who can reach them on the network break into the device itself and take it over, so…

Anyone who can reach these office network and camera appliances over the network may take them over and change how the network and recordings work, so they…

A critical flaw in Ubiquiti UniFi network and video devices lets anyone who can reach the device on the network take it over without a password, which can…

Attackers can take complete control of affected Lantronix device servers over the network by putting malicious text into a login name

Attackers can damage important Splunk files remotely without logging in, which can disrupt monitoring and security operations

A website editing plugin can be tricked by anyone on the internet into accepting a hidden program, which then lets them take over the whole site

Someone with even limited login access to the network management system could tamper with important files and potentially gain deeper control, so affected…

A flaw in a shared-hosting LiteSpeed plugin can let someone with access to one website account reach or change files they should never be able to access

Anyone who can reach an unpatched Oracle PeopleSoft system on the network can take it over and steal or lock employee and financial records, and attackers are…

A vulnerable Ivanti Sentry system can be taken over remotely without a password, so exposed systems must be updated or isolated immediately

A malicious web page can take control of an outdated Chrome browser, so affected systems should be updated immediately

Some Arista switches can mistakenly accept disguised network traffic and send it into places it should not be allowed to reach

A privileged SD-WAN administrator account can be abused to take full control of key network management systems and potentially change how branch network…