Latest public exploits (page 17)

Page 17 of 20 of CVEs with public exploit evidence (CISA KEV, Metasploit, CVE-specific PoCs), newest evidence first.

CVEs with public exploits, newest evidence first (page 17 of 20)

CVESeverityExploitation evidenceEvidence dateSummary
CVE-2026-72714Medium 6.31 PoCRocq Prover does not restore the universe graph's copy of the universe checking flag when a module that locally disabled the check is closed.
CVE-2026-72705Medium 6.31 PoCThe guard checker in Rocq Prover does not follow recursive calls made through a fixpoint's own arguments.
CVE-2026-72704Medium 6.31 PoCThe guard checker in Rocq Prover does not recheck the recursive tree representation of an inductive type parameter after that parameter has been changed by transport.
CVE-2026-72711Medium 6.31 PoCThe Lean 4 kernel does not check that the body of an opaque declaration is closed.
CVE-2026-72703Medium 6.31 PoCThe guard checker in Rocq Prover treats a parameter of a nested mutual fixpoint as uniform without examining calls between the different bodies of that fixpoint.
CVE-2026-25262Medium 6.92 PoCsMemory corruption while processing a crafted ELF file in the Primary Bootloader.
CVE-2026-21627—2 PoCsThe vulnerability was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s com_ajax entry point.
CVE-2023-21752High 7.13 PoCsWindows Backup Service Elevation of Privilege Vulnerability
CVE-2020-37268Medium 6.31 PoCPrint Assumptions does not report that a definition was produced while universe checking was disabled when that definition reaches the caller through Parameter Inline in a module type.
CVE-2020-25213Critical 10.0CISA KEV, Metasploit, 13 PoCsThe File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to hav…
CVE-2026-99999Critical 9.315 PoCsIn the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_che…
CVE-2026-72708High 7.52 PoCsSPIP before 4.4.18 contains an unauthenticated blind SQL injection vulnerability in the SQL escaping layer that allows unauthenticated attackers to inject arbitrary SQL by supplying a crafted annee p…
CVE-2024-45409Critical 10.02 PoCsThe Ruby SAML library is for implementing the client side of a SAML authorization.
CVE-2026-88009High 8.21 PoCTraefik is an open source HTTP reverse proxy and load balancer.
CVE-2026-86076High 8.81 PoCn8n is an open source workflow automation platform.
CVE-2026-85595Critical 9.81 PoCTraefik versions before v2.11.55 and versions v3.0.0 through v3.7.10 contain an authentication bypass vulnerability in the digestAuth middleware where unknown usernames receive an empty secret instea…
CVE-2026-85168High 8.81 PoCn8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution vulnerability in the Git node.
CVE-2026-44848High 8.82 PoCsPortainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments.
CVE-2021-31166Critical 9.8CISA KEV, Metasploit, 18 PoCsHTTP Protocol Stack Remote Code Execution Vulnerability
CVE-2026-38526Critical 9.917 PoCsAn authenticated arbitrary file upload vulnerability in the /admin/tinymce/upload endpoint of Webkul Krayin CRM v2.2.x allows attackers to execute arbitrary code via uploading a crafted PHP file.
CVE-2026-116012Low 3.61 PoCGhidra before 12.2 contains a numeric truncation vulnerability in PackedDecode::skipAttribute and skipAttributeRemaining in marshal.cc that stores 64-bit string lengths in 32-bit variables.
CVE-2026-116011High 7.51 PoCCrow before 1.3.4 contains an uncontrolled recursion vulnerability in crow::json::load() that allows remote unauthenticated attackers to crash the server by sending deeply nested JSON.
CVE-2026-110152Critical 9.61 PoCBuffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-1096Medium 6.41 PoCThe Best-wp-google-map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'latitude' and 'longitudinal' parameters of the 'google_map_view' shortcode in all versions up to, and…
CVE-2024-45490High 7.51 PoCAn issue was discovered in libexpat before 2.6.3.
CVE-2023-41991Medium 5.5CISA KEV, 5 PoCsA certificate validation issue was addressed.
CVE-2026-59774Critical 9.8Metasploit, 3 PoCsGitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files.
CVE-2026-114102High 7.52 PoCsadm-zip before 0.6.1 contains a denial of service vulnerability that allows unauthenticated attackers to crash the Node.js process via a malformed ZIP file, because inflateAsync in methods/inflater.j…
CVE-2026-114101Medium 4.02 PoCsCoraza before 3.8.1 extracts multipart upload filenames with Go's mime.ParseMediaType, which silently ignores RFC 5987 filename* parameters whose charset is not utf-8 or us-ascii.
CVE-2026-110922High 8.81 PoCUse after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
CVE-2026-94293Critical 9.81 PoCAn unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints.
CVE-2026-68136Critical 9.81 PoCIn the Linux kernel, the following vulnerability has been resolved: net: gro: fix double aggregation of flush-marked skbs Commit 0ab03f353d36 ("net-gro: Fix GRO flush when receiving a GSO packet.")…
CVE-2026-54668—1 PoCKitodo.Production is a workflow management tool for mass digitization and is part of the Kitodo Digital Library Suite.
CVE-2026-112398Critical 9.81 PoCPillow is a Python imaging library.
CVE-2025-32440Critical 10.01 PoCNetAlertX is a network, presence scanner and alert framework.
CVE-2026-76504Critical 9.8CISA KEV, 3 PoCsA vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the…
CVE-2026-76183Critical 9.81 PoCAuthentication Bypass by Alternate Name vulnerability in Apache Tomcat allowed the security constraints for any WebSocket endpoint to be bypassed.
CVE-2025-36911High 7.114 PoCsIn key-based pairing, there is a possible ID due to a logic error in the code.
CVE-2025-24071Medium 6.532 PoCsExposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-0411High 7.0CISA KEV, 9 PoCs7-Zip Mark-of-the-Web Bypass Vulnerability.
CVE-2026-8933High 7.82 PoCsA local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure execution environment for snap applicat…
CVE-2026-112403Critical 9.81 PoCPillow is a Python imaging library.
CVE-2026-108551Critical 9.81 PoCopenapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated…
CVE-2025-7771—17 PoCsThrottleStop.sys, a legitimate driver, exposes two IOCTL interfaces that allow arbitrary read and write access to physical memory via the MmMapIoSpace function.
CVE-2022-24707High 7.43 PoCsAnuko Time Tracker is an open source, web-based time tracking application written in PHP.
CVE-2019-7304Critical 9.86 PoCsCanonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root.
CVE-2026-86476High 8.41 PoCA flaw was found in gst-plugins-base.
CVE-2026-71362Critical 9.1CISA KEV, 2 PoCsAdobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation.
CVE-2026-34717Critical 9.91 PoCOpenProject is an open-source, web-based project management software.
CVE-2025-10263Critical 9.11 PoCArm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C…