Latest public exploits (page 4)

Page 4 of 20 of CVEs with public exploit evidence (CISA KEV, Metasploit, CVE-specific PoCs), newest evidence first.

CVEs with public exploits, newest evidence first (page 4 of 20)

CVESeverityExploitation evidenceEvidence dateSummary
CVE-2026-62367—1 PoCVikunja is an open-source self-hosted task management platform.
CVE-2026-55797High 8.81 PoCArgo CD is a declarative, GitOps continuous delivery tool for Kubernetes.
CVE-2026-54017High 7.71 PoCOpen WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.
CVE-2026-39883High 7.01 PoCOpenTelemetry-Go is the Go implementation of OpenTelemetry.
CVE-2026-31864Medium 6.81 PoCJumpServer is an open source bastion host and an operation and maintenance security audit system.
CVE-2026-2835Critical 9.11 PoCAn HTTP Request Smuggling vulnerability (CWE-444) has been found in Pingora's parsing of HTTP/1.0 and Transfer-Encoding requests.
CVE-2026-26189Medium 5.91 PoCTrivy Action runs Trivy as GitHub action to scan a Docker container image for vulnerabilities.
CVE-2026-23813Critical 9.82 PoCsA vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication control…
CVE-2026-124552Medium 4.81 PoCWebmin through 2.670 contains a stored cross-site scripting vulnerability in the Shorewall and Shorewall6 modules' list.cgi, which renders table fields and COMMENT lines unescaped.
CVE-2026-124450Critical 9.91 PoCOpenEMR before 8.3.0 contains a broken access control and path traversal vulnerability in the fax/sms module disposeDocument action via an unvalidated file_path parameter.
CVE-2026-123488Critical 9.84 PoCsCraft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an unauthenticated SQL injection vulnerability in the element search endpoint because the attribute parameter is concatenated into the q…
CVE-2026-119200Medium 6.51 PoCNuxt is an open-source web development framework for Vue.js.
CVE-2026-118669—1 PoCOAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+.
CVE-2026-118650High 7.51 PoCEcho is a Go web framework.
CVE-2026-118378High 7.81 PoCTabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that allows MCP clients to execute stacked statements by supplying a crafted table_name to the describe_table tool.
CVE-2026-116580High 7.31 PoCSeroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities.
CVE-2026-115878High 7.81 PoCStanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages.
CVE-2026-114140—1 PoCThe nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates.
CVE-2026-112936Medium 6.11 PoCfilelock is a platform-independent file lock for Python.
CVE-2026-112900Critical 9.84 PoCsPillow is a Python imaging library.
CVE-2026-110634Critical 9.81 PoCgit-diff before 2.0.7 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted strings to the gitDiff API.
CVE-2026-109372High 8.71 PoCZITADEL 4.x before 4.19.2 and 3.x through 3.4.15 contains an authentication bypass in the SAML identity-provider intent callback, which verifies the assertion signature using the provider named in th…
CVE-2026-108360Medium 6.41 PoCPhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files.
CVE-2026-107720High 7.41 PoCfast-jwt provides fast JSON Web Token (JWT) implementation.
CVE-2026-106451—1 PoCyawkat LZ4 Java provides LZ4 compression for Java.
CVE-2026-104851High 8.81 PoCfsspec is a specification and Python implementation framework for filesystem interfaces.
CVE-2026-102422High 8.12 PoCsshell-quote's `quote()` function emits a `{ comment }` token as `#` followed by its text, which comments out the rest of the shell line, including the opening quote of any later string token.
CVE-2026-102268Critical 9.12 PoCsPyJWT is a Python implementation of JSON Web Token standards.
CVE-2025-27840Medium 6.86 PoCsEspressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).
CVE-2024-53027High 7.53 PoCsTransient DOS may occur while processing the country IE.
CVE-2024-38063Critical 9.848 PoCsWindows TCP/IP Remote Code Execution Vulnerability
CVE-2023-4863High 8.8CISA KEV, 19 PoCsHeap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
CVE-2023-45866Medium 6.316 PoCsBluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting inject…
CVE-2023-0286High 7.43 PoCsThere is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName.
CVE-2021-3711Critical 9.81 PoCIn order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt().
CVE-2020-8927Medium 5.31 PoCA buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happ…
CVE-2015-7547High 8.112 PoCsMultiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a den…
CVE-2016-1834High 7.81 PoCHeap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attac…
CVE-2026-96889High 7.811 PoCsA flaw was found in librsvg.
CVE-2026-122051Critical 10.01 PoCA flaw has been found in Edimax BR-6208AC 1.32.
CVE-2026-116567High 7.51 PoCFreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.
CVE-2025-48583High 7.81 PoCIn multiple functions of BaseBundle.java, there is a possible way to execute arbitrary code due to a logic error in the code.
CVE-2026-6952High 7.21 PoCA post-authentication command injection vulnerability in the "LogServer" field of the syslog component in Zyxel AX7501-B1 firmware versions through 5.17(ABPC.7.2)C0 could allow an authenticated attac…
CVE-2026-19553—3 PoCsssl.SSLContext.wrap_bio() didn't require the server_hostname argument to not be None if ssl.SSLContext.check_hostname was set.
CVE-2026-113386High 7.11 PoCRoundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection.
CVE-2025-59845High 8.21 PoCApollo Studio Embeddable Explorer & Embeddable Sandbox are website embeddable software solutions from Apollo GraphQL.
CVE-2026-102895Critical 9.8CISA KEVGPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning.
CVE-2026-98499High 8.11 PoCIn the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() The 'wacom_wac_pen_serial_enforce()' function may calculate and pass a…
CVE-2026-98258High 7.82 PoCsIn the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list Kijo analyzed another race in the POSIX CPU timer co…
CVE-2026-97798High 7.84 PoCsImproper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.