Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: rce Clear

ID	Title	Severity	Tags	Detected
CVE-2026-11419	Path Traversal in path-traversal (CVE-2026-11419) path traversal in path-traversal (CVE-2026-11419). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Path Traversal Denial of Service Cwe 22 +3	1 month ago
CVE-2026-5411	The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the... The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the...	High	PHP WordPress Remote Code Execution Cwe 434	1 month ago
CVE-2026-46394	OS Command Injection in CVE-2026-46394 (CVE-2026-46394) OS command injection in CVE-2026-46394 (CVE-2026-46394). Risk of unauthorized operations or information disclosure.		PHP JavaScript Remote Code Execution Cwe 78	1 month ago
CVE-2026-46392	HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0 of HAX CMS PHP, the `saveFile` endpoint validates upload extensions case-insensitively and writes the filen... HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0 of HAX CMS PHP, the `saveFile` endpoint validates upload extensions case-insensitively and writes the filename to disk verbatim, but the `.htaccess` rule that forces `Content-Disposition: attachment` on HTML...	High	PHP JavaScript Cwe 178 Cwe 434 +1	1 month ago
CVE-2026-45746	Vulnerability in termix (CVE-2026-45746) vulnerability in termix (CVE-2026-45746). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 284 Cwe 639 Termix	1 month ago
CVE-2026-10732	Vulnerability in path-traversal (CVE-2026-10732) vulnerability in path-traversal (CVE-2026-10732). Data can be tampered with by attackers.	Medium	JavaScript Remote Code Execution Path Traversal Cwe 29 +1	1 month ago
CVE-2026-7763	Vulnerability in c (CVE-2026-7763) vulnerability in c (CVE-2026-7763). Successful exploitation can lead to full system takeover.	Critical	C Remote Code Execution Denial of Service	1 month ago
CVE-2026-7762	Vulnerability in dos (CVE-2026-7762) vulnerability in dos (CVE-2026-7762). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Denial of Service	1 month ago
CVE-2026-25550	Vulnerability in csharp (CVE-2026-25550) vulnerability in csharp (CVE-2026-25550). Successful exploitation can lead to full system takeover.	Critical	C# Remote Code Execution Cwe 306 Cwe 502	1 month ago
CVE-2026-8037	Command Injection in CVE-2026-8037 (CVE-2026-8037) command injection in CVE-2026-8037 (CVE-2026-8037). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 77	1 month ago
CVE-2026-41065	Vulnerability in CVE-2026-41065 (CVE-2026-41065) vulnerability in CVE-2026-41065 (CVE-2026-41065). Risk of unauthorized operations or information disclosure.		Python Remote Code Execution Cwe 1336	1 month ago
CVE-2026-45431	OS Command Injection in CVE-2026-45431 (CVE-2026-45431) OS command injection in CVE-2026-45431 (CVE-2026-45431). Risk of unauthorized operations or information disclosure.		Remote Code Execution Cwe 78	1 month ago
CVE-2026-41283	Authorization Flaw in CVE-2026-41283 (CVE-2026-41283) vulnerability in CVE-2026-41283 (CVE-2026-41283). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 863 Cwe 749	1 month ago
CVE-2026-10777	A vulnerability was identified in ealpha072 Student-Management-System up to... A vulnerability was identified in ealpha072 Student-Management-System up to...	High	PHP Cwe 287 Remote Code Execution	1 month ago
CVE-2026-44016	Code Injection in docling (CVE-2026-44016) code injection in docling (CVE-2026-44016). Confidential information can be exposed externally. Exploitable via ``enable_remote_fetch``. Mitigation: upgrade to `2.91.0` or later.	High	JavaScript Remote Code Execution Server-Side Request Forgery Cwe 94 +2	1 month ago
CVE-2026-44017	Path Traversal in docling (CVE-2026-44017) path traversal in docling (CVE-2026-44017). Successful exploitation can lead to full system takeover. Exploitable via ``SecurityError``. Mitigation: upgrade to `2.91.0` or later.	High	Python Remote Code Execution Path Traversal Cwe 22 +1	1 month ago
CVE-2026-5241	Vulnerability in huggingface (CVE-2026-5241) vulnerability in huggingface (CVE-2026-5241). Successful exploitation can lead to full system takeover. Exploitable via ``trust_remote_code``.	Critical	Python Remote Code Execution Cwe 829 Hugging Face +1	1 month ago
CVE-2026-49143	Code Injection in browserstack-runner (CVE-2026-49143) code injection in browserstack-runner (CVE-2026-49143). Successful exploitation can lead to full system takeover. Exploitable via ``context``.	High	JavaScript Remote Code Execution Cwe 94	1 month ago
CVE-2026-42211	React Router's vendored turbo-stream v2 allows arbitrary constructor invocation via TYPE_ERROR deserialization leading to Unauth RCE React Router's vendored turbo-stream v2 allows arbitrary constructor invocation via TYPE_ERROR deserialization leading to Unauth RCE	High	React Remote Code Execution Cwe 502 Remote Code Execution +3	1 month ago
CVE-2026-1829	The Content Visibility for Divi Builder plugin for WordPress is vulnerable to Remote Code... The Content Visibility for Divi Builder plugin for WordPress is vulnerable to Remote Code...	High	WordPress Remote Code Execution Cwe 94 PHP	1 month ago
CVE-2026-0611	Vulnerability in csharp (CVE-2026-0611) vulnerability in csharp (CVE-2026-0611). Successful exploitation can lead to full system takeover.	Critical	C# Remote Code Execution Cwe 306	1 month ago
CVE-2026-47117	Code Injection in openmed (CVE-2026-47117) code injection in openmed (CVE-2026-47117). Successful exploitation can lead to full system takeover. Exploitable via ``model_name``. Mitigation: upgrade to `1.5.2` or later.	Critical	Remote Code Execution Cwe 94	1 month ago
CVE-2026-7313	CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from... CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from...	High	Cwe 522 Remote Code Execution PHP Progress +1	1 month ago
CVE-2026-7195	CWE-20: Improper Input Validation in web services in Progress Sitefinity 14.1.x through 14.3.x,... CWE-20: Improper Input Validation in web services in Progress Sitefinity 14.1.x through 14.3.x,...	High	Cwe 20 Web Services Remote Code Execution PHP +2	1 month ago
CVE-2026-39553	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File... Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File...	High	PHP Cwe 98 WordPress Remote Code Execution	1 month ago
CVE-2026-39552	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File... Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File...	High	PHP Cwe 98 WordPress Remote Code Execution +1	1 month ago
CVE-2025-68886	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File... Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File...	High	PHP Cwe 98 WordPress Remote Code Execution	1 month ago
CVE-2026-34906	Vulnerability in CVE-2026-34906 (CVE-2026-34906) vulnerability in CVE-2026-34906 (CVE-2026-34906). Risk of unauthorized operations or information disclosure.		Remote Code Execution Cwe 1336	1 month ago
CVE-2026-9330	Unsafe Deserialization in deserialization (CVE-2026-9330) vulnerability in deserialization (CVE-2026-9330). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Insecure Deserialization Cwe 502 Ibm +1	1 month ago
CVE-2026-9311	Code Injection in ibm (CVE-2026-9311) code injection in ibm (CVE-2026-9311). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 94 Ibm Websphere Application Server	1 month ago
CVE-2026-9319	Unsafe Deserialization in deserialization (CVE-2026-9319) vulnerability in deserialization (CVE-2026-9319). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Insecure Deserialization Cwe 502 Ibm +1	1 month ago
CVE-2026-7770	Vulnerability in CVE-2026-7770 (CVE-2026-7770) vulnerability in CVE-2026-7770 (CVE-2026-7770). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 74	1 month ago
CVE-2026-49121	Unsafe Deserialization in amd (CVE-2026-49121) vulnerability in amd (CVE-2026-49121). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 502 Amd Aiter	1 month ago
CVE-2026-8931	Code Injection in CVE-2026-8931 (CVE-2026-8931) code injection in CVE-2026-8931 (CVE-2026-8931). Risk of unauthorized operations or information disclosure.		Remote Code Execution Cwe 94	1 month ago
CVE-2026-0826	Vulnerability in CVE-2026-0826 (CVE-2026-0826) vulnerability in CVE-2026-0826 (CVE-2026-0826). Risk of unauthorized operations or information disclosure.		Remote Code Execution Cwe 121	1 month ago
CVE-2026-10532	Unsafe Deserialization in privilege-escalation (CVE-2026-10532) vulnerability in privilege-escalation (CVE-2026-10532). Risk of unauthorized operations or information disclosure.		Remote Code Execution Privilege Escalation Insecure Deserialization Cwe 502	1 month ago
CVE-2026-7858	Unsafe Deserialization in deserialization (CVE-2026-7858) vulnerability in deserialization (CVE-2026-7858). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Insecure Deserialization Cwe 502	1 month ago
CVE-2026-42359	Unsafe Deserialization in apache-airflow (CVE-2026-42359) vulnerability in apache-airflow (CVE-2026-42359). Successful exploitation can lead to full system takeover. Exploitable via `PATCH /api/v2/xcomEntries/{key}`. Mitigation: upgrade to `3.2.2` or later.	High	Apache Remote Code Execution Cwe 502 Airflow	1 month ago
CVE-2024-21182 KEV	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)... Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...	High	Oracle Weblogic Remote Code Execution Cwe 94 C +2	1 month ago
CVE-2018-25412	Vulnerability in deltasql-project (CVE-2018-25412) vulnerability in deltasql-project (CVE-2018-25412). Successful exploitation can lead to full system takeover.	Critical	PHP Remote Code Execution Cwe 306 Deltasql Project +1	1 month ago
CVE-2026-7465	Privilege Escalation in wordpress (CVE-2026-7465) vulnerability in wordpress (CVE-2026-7465). Successful exploitation can lead to full system takeover.	High	WordPress Remote Code Execution Cwe 269	1 month ago
CVE-2026-44421	FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client by sending crafted RDPGFX PDUs.... FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client by sending crafted RDPGFX PDUs. The bug is in gdi_CacheToSurface: it validates a destination rectangle that is clamped to UINT16_MAX...	High	Cwe 122 Freerdp Remote Code Execution Heap Buffer Overflow +1	1 month ago
CVE-2026-49373	Vulnerability in jetbrains (CVE-2026-49373) vulnerability in jetbrains (CVE-2026-49373). Confidential information can be exposed externally.	High	Remote Code Execution Cwe 88 Jetbrains Teamcity	1 month ago
CVE-2026-49367	In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account	High	Cwe 862 Intellij Idea Guest Account Remote Code Execution +1	1 month ago
CVE-2026-45668	Path Traversal in path-traversal (CVE-2026-45668) path traversal in path-traversal (CVE-2026-45668). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.102.2` or later.		JavaScript Remote Code Execution Cross-Site Scripting Path Traversal +2	1 month ago
CVE-2026-45661	Path Traversal in path-traversal (CVE-2026-45661) path traversal in path-traversal (CVE-2026-45661). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Path Traversal Cwe 22 Cwe 35	1 month ago
CVE-2026-45632	OS Command Injection in CVE-2026-45632 (CVE-2026-45632) OS command injection in CVE-2026-45632 (CVE-2026-45632). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 78 Cwe 269 Cwe 862	1 month ago
CVE-2026-39292	Unrestricted File Upload in CVE-2026-39292 (CVE-2026-39292) vulnerability in CVE-2026-39292 (CVE-2026-39292). Risk of unauthorized operations or information disclosure.	High	Remote Code Execution Cwe 434	1 month ago
CVE-2026-10042	Unsafe Deserialization in deserialization (CVE-2026-10042) vulnerability in deserialization (CVE-2026-10042). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Insecure Deserialization Cwe 502	1 month ago
CVE-2026-45615	Vulnerability in c (CVE-2026-45615) vulnerability in c (CVE-2026-45615). Risk of unauthorized operations or information disclosure. Exploitable via ``INTEGER_decode_oer``.	High	C Denial of Service Cwe 20 Cwe 125 +5	1 month ago

Vulnerabilities

🍪 About cookies