Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: rce Clear

ID	Title	Severity	Tags	Detected
CVE-2026-43947	Authorization Flaw in fuxa-server (CVE-2026-43947) vulnerability in fuxa-server (CVE-2026-43947). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/runscript`. Mitigation: upgrade to `1.3.1` or later.		Remote Code Execution Cwe 863	3 months ago
CVE-2026-43945	Code Injection in @frangoteam/fuxa (CVE-2026-43945) code injection in @frangoteam/fuxa (CVE-2026-43945). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.1` or later.		Remote Code Execution Cwe 94 Cwe 284 Cwe 288 +1	3 months ago
CVE-2026-9584	A security vulnerability has been detected in code-projects Project Management System 1.0.... A security vulnerability has been detected in code-projects Project Management System 1.0....	High	PHP SQL Injection Cwe 74 Cwe 89 +2	3 months ago
CVE-2026-5260	A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret... A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret...	High	Cwe 1284 TLS/SSL Remote Code Execution Cwe 126	3 months ago
CVE-2026-8855	Code Injection in dos (CVE-2026-8855) code injection in dos (CVE-2026-8855). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Denial of Service Cwe 94 Ibm +7	3 months ago
CVE-2026-8633	Code Injection in ibm (CVE-2026-8633) code injection in ibm (CVE-2026-8633). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 94 Ibm Websphere Application Server	3 months ago
CVE-2026-9170	Code Injection in dos (CVE-2026-9170) code injection in dos (CVE-2026-9170). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Denial of Service Cwe 444 Cwe 94 +2	3 months ago
CVE-2026-46624	OS Command Injection in sqli (CVE-2026-46624) OS command injection in sqli (CVE-2026-46624). Successful exploitation can lead to full system takeover.	Critical	JavaScript Remote Code Execution SQL Injection Cwe 78 +2	3 months ago
CVE-2026-4480	OS Command Injection in redhat (CVE-2026-4480) OS command injection in redhat (CVE-2026-4480). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 78 Redhat Openshift Container Platform +2	3 months ago
CVE-2026-45247 KEV	[KEV] Unsafe Deserialization in Mirasvit full-page-cache-warmer (CVE-2026-45247) vulnerability in Mirasvit full-page-cache-warmer (CVE-2026-45247). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	PHP Remote Code Execution Cwe 502 Mirasvit +1	3 months ago
CVE-2026-42785	Code Injection in CVE-2026-42785 (CVE-2026-42785) code injection in CVE-2026-42785 (CVE-2026-42785). Successful exploitation can lead to full system takeover.	High	Java Remote Code Execution Cwe 94	3 months ago
CVE-2026-40034	Command Injection in gix (CVE-2026-40034) command injection in gix (CVE-2026-40034). Successful exploitation can lead to full system takeover. Exploitable via ``update``. Mitigation: upgrade to `0.83.0` or later.	High	Remote Code Execution Cwe 77	3 months ago
CVE-2026-40033	Vulnerability in freerdp (CVE-2026-40033) vulnerability in freerdp (CVE-2026-40033). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 122 Freerdp Cwe 787	3 months ago
CVE-2026-4372	Vulnerability in transformers (CVE-2026-4372) vulnerability in transformers (CVE-2026-4372). Successful exploitation can lead to full system takeover. Exploitable via ``_attn_implementation_internal``. Mitigation: upgrade to `5.3.0` or later.	High	Python Remote Code Execution Insecure Deserialization Cwe 1066 +3	3 months ago
CVE-2026-3515	Vulnerability in prefect (CVE-2026-3515) vulnerability in prefect (CVE-2026-3515). Confidential information can be exposed externally. Exploitable via ``GitHubRepository``.	High	C Remote Code Execution Server-Side Request Forgery Cwe 88	3 months ago
CVE-2018-25357	Code Injection in dolibarr/dolibarr (CVE-2018-25357) code injection in dolibarr/dolibarr (CVE-2018-25357). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.0.8` or later.	Critical	PHP Remote Code Execution Cwe 94 Dolibarr +1	3 months ago
CVE-2026-44417	Vulnerability in org.apache.cxf:cxf-rt-transports-jms (CVE-2026-44417) vulnerability in org.apache.cxf:cxf-rt-transports-jms (CVE-2026-44417). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.6.11` or later.	High	Apache Remote Code Execution Cwe 20 Cwe 15 +1	3 months ago
CVE-2026-47125	Vulnerability in github.com/getarcaneapp/arcane/backend (CVE-2026-47125) vulnerability in github.com/getarcaneapp/arcane/backend (CVE-2026-47125). Successful exploitation can lead to full system takeover. Exploitable via `PUT /api/environments/{id}/templates/variables`. Mitigation: upgrade to `1.19.2` or later.	High	Remote Code Execution Cwe 862	3 months ago
CVE-2026-9264	Code Injection in CVE-2026-9264 (CVE-2026-9264) code injection in CVE-2026-9264 (CVE-2026-9264). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cross-Site Scripting Cwe 94	3 months ago
CVE-2026-6960	Unrestricted File Upload in wordpress (CVE-2026-6960) vulnerability in wordpress (CVE-2026-6960). Successful exploitation can lead to full system takeover.	Critical	WordPress Remote Code Execution Cwe 434	3 months ago
CVE-2026-8421	Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-8421) vulnerability in concrete5/concrete5 (CVE-2026-8421). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.	High	PHP Remote Code Execution Cross-Site Request Forgery Cwe 352 +2	3 months ago
CVE-2026-8426	Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-8426) vulnerability in concrete5/concrete5 (CVE-2026-8426). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.	High	PHP Remote Code Execution Cross-Site Request Forgery Cwe 352 +3	3 months ago
CVE-2026-8134	Vulnerability in concrete5/concrete5 (CVE-2026-8134) vulnerability in concrete5/concrete5 (CVE-2026-8134). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.	High	PHP Remote Code Execution Path Traversal Cwe 23 +4	3 months ago
CVE-2026-8135	Unsafe Deserialization in concrete5/concrete5 (CVE-2026-8135) vulnerability in concrete5/concrete5 (CVE-2026-8135). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.	High	PHP Remote Code Execution Insecure Deserialization Cwe 502 +2	3 months ago
CVE-2026-46517	Code Injection in lmdeploy (CVE-2026-46517) code injection in lmdeploy (CVE-2026-46517). Successful exploitation can lead to full system takeover. Exploitable via ``get_model_arch``.	High	Remote Code Execution Cwe 94 Cwe 915 Cwe 1188	3 months ago
CVE-2026-2740	Zohocorp ManageEngine ADSelfService Plus version before 6525, DataSecurity Plus before 6264 and... Zohocorp ManageEngine ADSelfService Plus version before 6525, DataSecurity Plus before 6264 and...	High	Remote Code Execution Cwe 77	3 months ago
CVE-2026-5433	Command Injection in CVE-2026-5433 (CVE-2026-5433) command injection in CVE-2026-5433 (CVE-2026-5433). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 77	3 months ago
CVE-2026-6279	Vulnerability in wordpress (CVE-2026-6279) vulnerability in wordpress (CVE-2026-6279). Successful exploitation can lead to full system takeover. Exploitable via ``wp_conditional_tags``.	Critical	PHP JavaScript WordPress Remote Code Execution +1	3 months ago
CVE-2026-9102	Path Traversal in path-traversal (CVE-2026-9102) path traversal in path-traversal (CVE-2026-9102). Risk of unauthorized operations or information disclosure.		Remote Code Execution Path Traversal Denial of Service Cwe 22 +1	3 months ago
CVE-2026-39311	Cross-Site Scripting (XSS) in CVE-2026-39311 (CVE-2026-39311) cross-site scripting in CVE-2026-39311 (CVE-2026-39311). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Remote Code Execution Cwe 79 Cwe 94	3 months ago
CVE-2026-8467	Code Injection in phoenix_storybook (CVE-2026-8467) code injection in phoenix_storybook (CVE-2026-8467). Risk of unauthorized operations or information disclosure. Exploitable via ``Kernel``. Mitigation: upgrade to `1.1.0` or later.		Remote Code Execution Cwe 94	3 months ago
CVE-2026-33278	Use-After-Free in dos (CVE-2026-33278) vulnerability in dos (CVE-2026-33278). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Denial of Service Cwe 416 Cwe 672 +2	3 months ago
CVE-2026-6555	Unrestricted File Upload in wordpress (CVE-2026-6555) vulnerability in wordpress (CVE-2026-6555). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress Remote Code Execution Cwe 434	3 months ago
CVE-2026-35593	Path Traversal in CVE-2026-35593 (CVE-2026-35593) path traversal in CVE-2026-35593 (CVE-2026-35593). Confidential information can be exposed externally.	Medium	Remote Code Execution Cwe 22 Cwe 73	3 months ago
CVE-2026-34234	OS Command Injection in CVE-2026-34234 (CVE-2026-34234) OS command injection in CVE-2026-34234 (CVE-2026-34234). Successful exploitation can lead to full system takeover.	Critical	PHP Remote Code Execution Cwe 78 Cwe 284	3 months ago
CVE-2026-34216	Vulnerability in CVE-2026-34216 (CVE-2026-34216) vulnerability in CVE-2026-34216 (CVE-2026-34216). Successful exploitation can lead to full system takeover.	Medium	PHP Remote Code Execution Cwe 470	3 months ago
CVE-2026-6009	Unsafe Deserialization in net.sf.jasperreports:jasperreports (CVE-2026-6009) vulnerability in net.sf.jasperreports:jasperreports (CVE-2026-6009). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.7` or later.		Java Remote Code Execution Cwe 502	3 months ago
CVE-2026-33633	Vulnerability in dos (CVE-2026-33633) vulnerability in dos (CVE-2026-33633). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Denial of Service Cwe 122 Kovidgoyal +1	3 months ago
CVE-2026-31072	Unsafe Deserialization in apscheduler (CVE-2026-31072) vulnerability in apscheduler (CVE-2026-31072). Successful exploitation can lead to full system takeover.	Critical	Python Remote Code Execution Insecure Deserialization Cwe 502	3 months ago
CVE-2026-2586	Code Injection in org.glassfish.main.admingui:console-common (CVE-2026-2586) code injection in org.glassfish.main.admingui:console-common (CVE-2026-2586). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.2` or later.	Critical	Remote Code Execution Cwe 94 Cwe 917 Eclipse +1	3 months ago
CVE-2026-2587	Vulnerability in org.glassfish.main.admingui:admingui (CVE-2026-2587) vulnerability in org.glassfish.main.admingui:admingui (CVE-2026-2587). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.2` or later.	Critical	Remote Code Execution Cwe 917 Eclipse Glassfish	3 months ago
CVE-2026-45721	Vulnerability in github.com/xyproto/algernon (CVE-2026-45721) vulnerability in github.com/xyproto/algernon (CVE-2026-45721). Successful exploitation can lead to full system takeover. Exploitable via ``DirPage``. Mitigation: upgrade to `1.17.7` or later.	Critical	Remote Code Execution Cwe 20 Cwe 426 Cwe 552	3 months ago
CVE-2026-47323	Vulnerability in org.apache.camel:camel-cxf-rest (CVE-2026-47323) vulnerability in org.apache.camel:camel-cxf-rest (CVE-2026-47323). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.18.2` or later.	Critical	Apache Remote Code Execution Cwe 178 Camel +4	3 months ago
CVE-2026-42099	Vulnerability in sparxsystems (CVE-2026-42099) vulnerability in sparxsystems (CVE-2026-42099). Successful exploitation can lead to full system takeover.	High	PHP Remote Code Execution Cwe 362 Sparxsystems +1	3 months ago
CVE-2026-4883	Unrestricted File Upload in wordpress (CVE-2026-4883) vulnerability in wordpress (CVE-2026-4883). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress Remote Code Execution Cwe 434	3 months ago
CVE-2026-46725	Unsafe Deserialization in mmc/ceselector (CVE-2026-46725) vulnerability in mmc/ceselector (CVE-2026-46725). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.0.3` or later.		PHP Remote Code Execution Cwe 502	3 months ago
CVE-2026-8727	Unsafe Deserialization in tomasnorre/crawler (CVE-2026-8727) vulnerability in tomasnorre/crawler (CVE-2026-8727). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.0.13` or later.		PHP Remote Code Execution Cwe 502	3 months ago
CVE-2026-45434	Authentication Bypass in apache (CVE-2026-45434) authentication bypass in apache (CVE-2026-45434). Successful exploitation can lead to full system takeover.	Critical	Apache Remote Code Execution Cwe 287 Ofbiz	3 months ago
CVE-2026-4885	Unrestricted File Upload in wordpress (CVE-2026-4885) vulnerability in wordpress (CVE-2026-4885). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress Remote Code Execution Cwe 434	3 months ago
CVE-2026-27648	in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre... in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre...	High	Cwe 787 Remote Code Execution	3 months ago

Vulnerabilities

🍪 About cookies