Latest public exploits (page 18)
Page 18 of 20 of CVEs with public exploit evidence (CISA KEV, Metasploit, CVE-specific PoCs), newest evidence first.
CVEs with public exploits, newest evidence first (page 18 of 20)
| CVE | Severity | Exploitation evidence | Evidence date | Summary |
|---|---|---|---|---|
CVE-2026-93687 | High 7.5 | 4 PoCs | braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. | |
CVE-2026-92209 | High 7.8 | 1 PoC | NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability. | |
CVE-2026-92208 | High 8.8 | 1 PoC | NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability. | |
CVE-2026-92162 | — | 1 PoC | Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. | |
CVE-2026-83531 | High 8.8 | 1 PoC | Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') vulnerability in Apac… | |
CVE-2026-80344 | High 8.2 | 1 PoC | Server-Side Request Forgery (SSRF) vulnerability in Apache Camel AS2 component. | |
CVE-2026-80343 | High 8.2 | 1 PoC | Improper Handling of Case Sensitivity vulnerability in Apache Camel Netty HTTP component. | |
CVE-2026-80312 | High 8.2 | 1 PoC | Improper Authentication vulnerability in Apache Camel OAuth component. | |
CVE-2026-79986 | High 7.4 | 1 PoC | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Azure Files component. | |
CVE-2026-79985 | High 7.4 | 1 PoC | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel SMB component. | |
CVE-2026-79984 | High 7.4 | 1 PoC | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Mina SFTP component. | |
CVE-2026-79983 | High 7.4 | 1 PoC | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel FTP component. | |
CVE-2026-78851 | Medium 6.5 | 1 PoC | Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method. | |
CVE-2026-78850 | Medium 5.0 | 1 PoC | An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via the SiteContentDetector / SitesManager component. | |
CVE-2026-78165 | High 8.8 | 1 PoC | Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component. | |
CVE-2026-78164 | High 8.2 | 1 PoC | Improper Neutralization of Special Elements Used in a Template Engine and Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP, Netty HTTP, Undertow and Vert… | |
CVE-2026-78163 | Medium 5.9 | 1 PoC | Server-Side Request Forgery (SSRF), Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') and Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apac… | |
CVE-2026-78162 | Critical 9.8 | 1 PoC | Deserialization of Untrusted Data vulnerability in Apache Camel. | |
CVE-2026-57155 | Critical 9.9 | 1 PoC | OPNsense is a FreeBSD based firewall and routing platform. | |
CVE-2026-53995 | High 8.2 | 1 PoC | MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem paths by submitting a crafted trace ID… | |
CVE-2026-53582 | High 7.1 | 1 PoC | OPNsense is a FreeBSD based firewall and routing platform. | |
CVE-2026-51954 | High 8.1 | 2 PoCs | An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitrary code via a crafted OAuth authorization URL with an arbitrary redirect_uri. | |
CVE-2026-36436 | High 7.5 | 1 PoC | An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the administrative configuration interface. | |
CVE-2026-113872 | High 7.5 | 1 PoC | multer is a middleware for Node.js that handles multipart/form-data file uploads. | |
CVE-2026-109715 | High 8.1 | 1 PoC | Incorrect boundary conditions in the JavaScript Engine component. | |
CVE-2026-109255 | Medium 6.8 | 1 PoC | FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in license_check_stream_length that allows a malicious RDP server to trigger a heap buffer overflow on 32-bit clients. | |
CVE-2026-104586 | Critical 9.8 | 1 PoC | AUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi. | |
CVE-2026-104068 | High 7.2 | 1 PoC | JetBackup plugin for WordPress before 3.1.24.10 contains a symlink-based arbitrary file write vulnerability that allows an authenticated WordPress administrator to write attacker-controlled file cont… | |
CVE-2026-102607 | High 8.8 | 1 PoC | ZoneMinder is a free, open source closed-circuit television software application. | |
CVE-2025-52097 | Medium 5.4 | 1 PoC | Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to execute arbitrary code via reflecting un-sanitized input from query string parameters directly int… | |
CVE-2026-27739 | — | 2 PoCs | The Angular SSR is a server-rise rendering tool for Angular applications. | |
CVE-2026-12080 | High 7.3 | 1 PoC | A flaw was found in the QEMU Guest Agent (qga). | |
CVE-2026-107692 | Medium 4.8 | 1 PoC | The War Thunder game client transmits its authentication bearer token (auth_jwt) in the very first data packet after the TCP handshake, using only LZ4 compression rather than encryption. | |
CVE-2026-107079 | Medium 4.3 | 1 PoC | An issue in Systrome Validation & Certification 1.0 allows an attacker to cause a denial of service via the t URL parameter in the qrcode_auth.html component | |
CVE-2025-4275 | High 7.8 | 3 PoCs | A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating a non-authenticated… | |
CVE-2024-30084 | High 7.0 | 1 PoC | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | |
CVE-2020-8203 | High 7.4 | 1 PoC | Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20. | |
CVE-2019-0205 | High 7.5 | 1 PoC | In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. | |
CVE-2018-7600 | Critical 9.8 | CISA KEV, Metasploit, 70 PoCs | Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or co… | |
CVE-2020-4949 | High 8.2 | 1 PoC | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. | |
CVE-2026-94000 | Medium 6.6 | 1 PoC | A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. | |
CVE-2026-86478 | Critical 9.8 | 2 PoCs | In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account takeover via a self-asserted email address | |
CVE-2026-63077 | Critical 9.8 | CISA KEV, Metasploit, 7 PoCs | In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol | |
CVE-2025-54309 | Critical 9.0 | CISA KEV, 11 PoCs | CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used, mishandles AS2 validation and consequently allows remote attackers to obtain admin access via HTTPS, as expl… | |
CVE-2024-43093 | High 7.3 | CISA KEV, 3 PoCs | In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode normalization. | |
CVE-2024-36401 | Critical 9.8 | CISA KEV, Metasploit, 32 PoCs | GeoServer is an open source server that allows users to share and edit geospatial data. | |
CVE-2026-97206 | High 7.5 | 1 PoC | NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC (DoQ) lifetime bug reachable by a remote DoQ client under multi-threaded operation. | |
CVE-2026-12523 | High 7.5 | 1 PoC | Summary Cloudflare quiche's HTTP/3 layer was discovered to be vulnerable to resource exhaustion (i.e., memory) by means of specially crafted HTTP/3 frames. | |
CVE-2025-64702 | Medium 5.3 | 1 PoC | quic-go is an implementation of the QUIC protocol in Go. | |
CVE-2024-10005 | High 8.1 | 1 PoC | A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using URL paths in L7 traffic intentions could bypass HTTP request path-based access rules. |