Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

Critical9.3MLflow Server-Side Request Forgery VulnerabilityVuln · CVE-2026-64849 · lfprojects · mlflow · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 10.02%Aug 17, 2026
Unknownpodsfoundation pods Incorrect AuthorizationVuln · CVE-2026-19598 · sc0ttkclark · Pods – Custom Content Types and Fields · CVE.org · FIRST EPSS · VulnCheck KEV · WordPressPatch nowKEVEPSS 3.52%Aug 15, 2026
High8.9Zimbra Collaboration Suite (ZCS) OS Command Injection VulnerabilityVuln · CVE-2026-73570 · synacor · zimbra collaboration suite · CISA KEV · CVE.org · FIRST EPSS · ZimbraPatch nowKEVEPSS 71.66%Aug 13, 2026
UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Vuln · CVE-2024-58374 · Hongjing Century · e-HR · CVE.org · FIRST EPSS · VulnCheck KEVPatch nowKEVEPSS 0.74%Aug 13, 2026
UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Vuln · CVE-2019-25765 · ASP-CMS Project · ASP-CMS · CVE.org · FIRST EPSS · VulnCheck KEVPatch nowKEVEPSS 0.74%Aug 13, 2026
High8.6Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection VulnerabilityVuln · CVE-2026-20349 · Cisco · Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) · CISA KEV · Cisco Security Advisories · CVE.org · CiscoPatch nowKEVEPSS 1.01%Aug 11, 2026
UnknownWeaver e-cology Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Vuln · CVE-2022-50997 · Weaver Network Co., Ltd. · E-cology 9.0 · CVE.org · FIRST EPSS · VulnCheck KEVPatch nowKEVEPSS 0.62%Aug 11, 2026
UnknownImproper AuthenticationVuln · CVE-2026-15459 · wpmudev · WPMU DEV Dashboard · CVE.org · FIRST EPSS · VulnCheck KEV · WordPressPatch nowKEVEPSS 0.87%Aug 6, 2026
UnknownRapid7 Analysis: KindaRails2Shell (CVE-2026-66066)Vuln · CVE-2026-66066 · rubyonrails · rails · CVE.org · FIRST EPSS · Metasploit ModulesPatch nowKEVEPSS 27.86%Aug 3, 2026
UnknownServer-Side Request Forgery (SSRF)Vuln · CVE-2026-65442 · Subtle Web Inc · FormCraft · CVE.org · FIRST EPSS · VulnCheck KEVPatch nowKEVEPSS 0.58%Aug 3, 2026
High7.8traefik traefik Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Vuln · CVE-2026-65600 · traefik · traefik · CVE.org · FIRST EPSS · NIST NVDPatch nowKEVEPSS 0.62%Jul 22, 2026
Critical9.3Sangoma Switchvox SQL Injection VulnerabilityVuln · CVE-2026-9586 · sangoma · switchvox · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 18.98%Jul 17, 2026
Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityVuln · CVE-2026-15409 · SonicWall · SMA1000 Appliances · CISA KEV · CVE.org · FIRST EPSS · SonicWallPatch nowKEVEPSS 6.79%Jul 14, 2026
High8.8BerriAI LiteLLM Improper Authentication VulnerabilityVuln · CVE-2026-59822 · litellm · litellm · CISA KEV · CVE.org · FIRST EPSS · LiteLLMPatch nowKEVEPSS 0.84%Jul 8, 2026
UnknownFlowiseAI Flowise Missing Authentication for Critical FunctionVuln · CVE-2026-56270 · FlowiseAI · Flowise · CVE.org · FIRST EPSS · VulnCheck KEV · OktaPatch nowKEVEPSS 2.05%Jul 8, 2026
UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Vuln · CVE-2026-59800 · decolua · 9router · CVE.org · FIRST EPSS · VulnCheck KEVPatch nowKEVEPSS 2.04%Jul 7, 2026
High8.4Flyto2 Core is an execution kernel for automation and AI-agent workflows.Vuln · CVE-2026-55786 · FlytoHub · Flyto2 Core · CVE.org · FIRST EPSS · GitHub Advisory Database · PyPIPatch nowKEVEPSS 0.26%Jul 6, 2026
UnknownUnrestricted Upload of File with Dangerous TypeVuln · CVE-2024-14037 · Guangzhou Red Sea Cloud Computing Co., Ltd. · Red Sea Cloud eHR · CVE.org · FIRST EPSS · VulnCheck KEVPatch nowKEVEPSS 1.28%Jul 2, 2026
UnknownUnrestricted Upload of File with Dangerous TypeVuln · CVE-2022-50973 · Yonyou Network Technology Co., Ltd. · KSOA · CVE.org · FIRST EPSS · VulnCheck KEVPatch nowKEVEPSS 1.52%Jul 2, 2026
UnknownQuantumCloud wpbot Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Vuln · CVE-2026-13731 · QuantumCloud · wpbot · CVE.org · FIRST EPSS · VulnCheck KEV · WordPressPatch nowKEVEPSS 0.89%Jul 1, 2026
UnknownGogs Gogs Improper Neutralization of Special Elements used in a Command ('Command Injection')Vuln · CVE-2026-52806 · Gogs · Gogs · CVE.org · FIRST EPSS · Metasploit ModulesPatch nowKEVEPSS 7.93%Jun 28, 2026
Critical10.0Kestra kestra Improper Control of Generation of Code ('Code Injection')Vuln · CVE-2026-53576 · kestra · kestra · CVE.org · FIRST EPSS · NIST NVDPatch nowKEVEPSS 3.30%Jun 26, 2026
Critical10.0Kestra OSS OS Command Injection VulnerabilityVuln · CVE-2026-49869 · kestra · kestra · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 2.10%Jun 26, 2026
High8.4Langflow Authorization Bypass Through User-Controlled Key VulnerabilityVuln · CVE-2026-55255 · langflow · langflow · CISA KEV · CVE.org · FIRST EPSS · LangflowPatch nowKEVEPSS 0.89%Jun 23, 2026
High8.8Zyxel GS1900 Series Switches Stack-Based Buffer Overflow VulnerabilityVuln · CVE-2026-7273 · Zyxel · GS1900 Series Switches · CISA KEV · CVE.org · FIRST EPSS · ZyxelPatch nowKEVEPSS 2.50%Jun 15, 2026

Sort