Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Medium6.5FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.CVE-2026-104106 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Oct 14, 2026
Medium5.3Gotify: Insufficiently Protected Password Change endpointCVE-2026-102603 · gotify · server · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSSEPSS 0.3%Oct 13, 2026
Medium5.1The administrator password can be changed without knowledge of the current password.CVE-2025-70082 · lantronix · eds3016ps1ns firmware · NIST NVDMar 11, 2026
High8.6An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2.CVE-2025-67041 · lantronix · eds3016ps1ns firmware · NIST NVDMar 11, 2026
High7.1SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication vulnerability that allows authenticated users to change account passwords without…CVE-2026-27757 · sodola-network · sl902-swtgw124as firmware · NIST NVDFeb 27, 2026
High8.6EventSentry versions prior to 6.0.1.20 contain an unverified password change vulnerability in the account management functionality of the Web Reports interface.CVE-2026-24443 · netikus · eventsentry · NIST NVDFeb 24, 2026
Medium6.8An unverified password change vulnerability [CWE-620] vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 through 7.5.1, FortiSOAR PaaS…CVE-2025-59808 · fortinet · fortisoar · CVE.org · FIRST EPSS · NIST NVD · FortinetEPSS 0.2%Dec 9, 2025