Known exploited vulnerabilities

Attackers on the internet can join the company remote-access VPN on certain Check Point devices without a user password, and this has already been used in real…

A weakly protected test feature in an AI traffic proxy could let any logged-in user run their own programs on the server, putting company AI keys and connected…

Attackers can remotely crash vulnerable SolarWinds file-transfer servers, disrupting business file exchanges until the software is updated or protected

Attackers can take over vulnerable online stores by sending a specially crafted browser cookie, so affected sites should be updated and checked for compromise…

Attackers can use this Android flaw to turn limited access on a phone or tablet into much deeper control of the device if it has not been updated

A flaw in some Linux systems can let someone with limited access take full control of the machine, especially when containers are configured too permissively

A flaw in Oracle WebLogic can let an outside attacker read sensitive information from affected servers without needing a password

A flaw in affected VPN systems can let outsiders connect as if they were legitimate remote users, creating a serious risk of break-ins and ransomware

A briefly published malicious developer tool update could let attackers steal code and credentials from machines where it was installed

A trusted software installer from the official DAEMON Tools website was secretly modified so installing it could put malware on Windows computers

A trusted software package source was abused to distribute malicious updates that could steal company credentials from systems that installed them

Attackers can abuse a vulnerable hosting control panel plugin to gain powerful access to servers and potentially take over hosted websites

A widely used website platform has a flaw that lets outsiders read and change information in the site’s database without logging in, and attackers are already…

An attacker who already controls the security management server could abuse it to send malicious software to the computers it manages

A malicious website can steal a logged-in user’s session and use it to take over the application and run commands on the server

A bug in Microsoft’s built-in antivirus can be tripped by software already running on a PC, briefly knocking that antivirus offline and leaving the device less…

A flaw in Microsoft Defender can let someone who already has basic access to a computer gain much higher control over it

Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute…

Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows…

Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code…

Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows…

The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote…

A hole in the company’s email web login can let criminals trick a staff member into opening a bad link so the criminals can impersonate that person and read or…

A flaw in Cisco SD-WAN controllers can let an outside attacker take control of network management functions without a password, potentially disrupting or…

An unpatched AI gateway can be tricked into handing over or changing the secret keys it stores, letting outsiders use your paid AI services and data as if they…

A compromised administrator account could let an attacker take over the mobile-device management server and disrupt or manipulate managed devices

An exposed firewall login portal can be taken over remotely, allowing attackers to control the firewall and potentially disrupt or access the network it…

A bug in Linux’s built-in encryption interface can let someone who already has limited access on a computer take complete control of it

Attackers can break into affected hosting control panels over the internet without a password and may use that access to steal, alter, or lock up hosted…

Windows can show files and network items as safer or more familiar than they really are, which may trick people into sharing information they would otherwise…

Attackers can abuse vulnerable ScreenConnect servers to break out of intended file locations and potentially take control of the remote support system and the…

Some D-Link routers can be taken over by someone who has access to their admin page, putting network connectivity and traffic at risk

A flaw in SimpleHelp can let a basic support user become a full administrator, potentially giving attackers remote access to many systems the support tool…

A flaw in SimpleHelp can let an attacker with administrator access place malicious files on the server and take it over, and it is already being used in…

Attackers with limited access can abuse affected MagicINFO servers to write files where they should not, potentially taking over the server or disrupting…

An unpatched notebook app can let anyone who can reach it on the network take full control of that computer without logging in, so it must be updated or taken…

Attackers who already get onto a Windows machine can use this flaw to gain much higher control and potentially turn off protections or deploy ransomware

A weakness in Cisco’s SD-WAN management software can let an already-privileged user read sensitive system information that could help them compromise more of…

Attackers can steal a built-in management password from vulnerable network management systems and use it to gain unauthorized access

A low-privileged account could be misused to alter files on the SD-WAN management system, potentially giving an attacker control over important network…

A flaw in this systems management tool can let an outsider log in as an administrator and take control of the platform used to manage company computers

A malicious email can run hidden code when opened in Zimbra webmail, potentially letting attackers read or misuse the victim’s mailbox

A flaw in Kentico Xperience can let a logged-in attacker upload a malicious file and take control of the website server

Attackers can break into vulnerable TeamCity build servers over the network and use them to steal credentials, disrupt releases, or tamper with software…

Attackers can access sensitive PaperCut print-management systems without logging in, which could expose business information and support ransomware attacks

Attackers who can log into the messaging server’s admin web page can run their own programs on that server and steal, change, or stop business messages until…

Attackers can abuse a SharePoint validation weakness to make fraudulent network requests look legitimate, potentially exposing or altering information on…

Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word, Excel, and…

A booby-trapped PDF can take over a user’s computer if opened in an outdated Adobe PDF reader. CVE-2026-34621 is rated high (CVSS 8.6), is listed in CISA KEV…

A flaw in Fortinet’s endpoint management server could let an outsider take control of it and disrupt or weaken endpoint security across the organization