KEVIntel entry: Microsoft SharePoint Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition | CVSS: 8.8 (HIGH) | EPSS: 0.02781 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF | Affected: Progress Software / LoadMaster, ECS Connections Manager, Object Scale Connection Manager, MOVEit WAF | CVSS: 9.6 (CRITICAL) | EPSS: 0.0819 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Gogs: Path Traversal in organization name results in RCE through Git hooks | Affected: gogs / gogs | CVSS: 10.0 (CRITICAL) | EPSS: 0.01107 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission).  Supported versions that are affected are... | Affected: Oracle Corporation / Oracle Payments | CVSS: 9.8 (CRITICAL) | EPSS: 0.00418 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification | Affected: SimpleHelp / SimpleHelp | CVSS: 9.5 (CRITICAL) | EPSS: 0.00721 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Unauthenticated SQL Injection in dotCMS Publish Audit API | Affected: dotCMS / dotCMS Core | CVSS: 10.0 (CRITICAL) | EPSS: 0.01584 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The LearnPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order_by’ parameter in all versions up to, and including,... | Affected: thimpress / LearnPress – WordPress LMS Plugin | CVSS: 9.8 (CRITICAL) | EPSS: 0.51394 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Remote Code Execution (RCE) vulnerability in Windchill PDMlink | Affected: PTC / Windchill PDMLink, FlexPLM | CVSS: 9.3 (CRITICAL) | EPSS: 0.00499 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified... | Affected: Cisco / Cisco Unified Communications Manager | CVSS: 8.6 (HIGH) | EPSS: 0.20442 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authantication... | Affected: Lantronix / EDS5000 | EPSS: 0.00469 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Gravity SMTP <= 2.1.4 - Unauthenticated Sensitive Information Exposure via REST API | Affected: RocketGenius / Gravity SMTP | CVSS: 7.5 (HIGH) | EPSS: 0.0298 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5 | Affected: joomlacontenteditor.net / Joomla Content Editor (JCE) extension for Joomla | CVSS: 10.0 (CRITICAL) | EPSS: 0.06854 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attacker to... | Affected: Fortinet / FortiSandbox, FortiSandbox Cloud | CVSS: 9.1 (CRITICAL) | EPSS: 0.18703 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins deserialize arbitrary types defined in Jenkins... | Affected: Jenkins Project / Jenkins | CVSS: 8.8 (HIGH) | EPSS: 0.00368 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise | Affected: Splunk / Splunk Enterprise | CVSS: 9.8 (CRITICAL) | EPSS: 0.01731 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Linksys E2000 Ver.1.0.06 build 1 is vulnerable to authentication bypass via the position.js file. | Affected: Linksys / E2000 | CVSS: 8.8 (HIGH) | EPSS: 0.2646 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: /cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of "../.." using the FILECAMERA variable (sent by GET) to read files with root privileges.... | Affected: Boa / Boa Web Server | CVSS: 7.5 (HIGH) | EPSS: 0.67725 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Repetier Server through 1.4.10 allows ..%5c directory traversal for reading files that contain credentials, as demonstrated by connectionLost.php. | Affected: Repetier / Repetier Server | CVSS: 7.5 (HIGH) | EPSS: 0.05574 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Privilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user (not admin) to send a crafted request to the server... | Affected: PHP-Fusion / PHP-Fusion | CVSS: 8.8 (HIGH) | EPSS: 0.67516 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the req_id parameter. | Affected: f-logic / datacube3 | CVSS: 9.8 (CRITICAL) | EPSS: 0.1942 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/getCobrandingData endpoint to retrieve files. However, the application doesn't... | Affected: Rocket Software / TRUfusion Enterprise | CVSS: 8.6 (HIGH) | EPSS: 0.01773 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertConfigField.php. | Affected: CuppaCMS / CuppaCMS | CVSS: 7.8 (HIGH) | EPSS: 0.09966 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability | Affected: Cisco / Cisco Catalyst SD-WAN Manager | CVSS: 6.5 (MEDIUM) | EPSS: 0.01145 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: CyberPower PowerPanel Enterprise SQL Injection | Affected: CyberPower / CyberPower PowerPanel Enterprise | CVSS: 7.5 (HIGH) | EPSS: 0.04515 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Directory traversal vulnerability in public/examples/resources/getsource.php in Luracast Restler through 3.0.0, as used in the restler extension... | Affected: Luracast / Restler | CVSS: 7.5 (HIGH) | EPSS: 0.13649 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertLightbox.php. | Affected: CuppaCMS / CuppaCMS | CVSS: 7.8 (HIGH) | EPSS: 0.07927 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web... | Affected: LiteSpeed Technologies / cPanel Plugin | CVSS: 8.5 (HIGH) | EPSS: 0.00654 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: SQL injection vulnerability in the miniform module in WBCE CMS v.1.6.0 allows remote unauthenticated attacker to execute arbitrary code via the... | Affected: WBCE / WBCE CMS | CVSS: 9.8 (CRITICAL) | EPSS: 0.06096 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File Manager. | Affected: Cuppa CMS / Cuppa CMS | CVSS: 9.8 (CRITICAL) | EPSS: 0.0377 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through... | Affected: Fortinet / FortiSandbox, FortiSandbox PaaS | CVSS: 9.8 (CRITICAL) | EPSS: 0.66168 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Forced OGNL evaluation, when evaluated on raw not validated user input in tag attributes, may lead to RCE. | Affected: Apache Software Foundation / Apache Struts | CVSS: 9.8 (CRITICAL) | EPSS: 0.85101 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Unsafe deserialization in Apache OFBiz | Affected: Apache Software Foundation / Apache OFBiz | CVSS: 9.8 (CRITICAL) | EPSS: 0.81079 | Used in malware: unknown | Not yet in CISA KEV: True

Unsafe deserialization in Apache OFBiz


KEVIntel entry: The insufficient input path validation of certain parameter in the web service of SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30,... | Affected: SAP SE / SAP NetWeaver AS JAVA (LM Configuration Wizard) | CVSS: 5.3 (MEDIUM) | EPSS: 0.28312 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Supported versions... | Affected: Oracle Corporation / PeopleSoft Enterprise PeopleTools | CVSS: 9.8 (CRITICAL) | EPSS: 0.00717 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: UpdraftPlus: WP Backup & Migration Plugin <= 1.26.4 - Unauthenticated Authentication Bypass via UpdraftCentral udrpc | Affected: davidanderson / UpdraftPlus: WP Backup & Migration Plugin | CVSS: 8.1 (HIGH) | EPSS: 0.01252 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Case Theme User <= 1.0.3 - Authentication Bypass via Social Login | Affected: Case-Themes / Case Theme User | CVSS: 9.8 (CRITICAL) | EPSS: 0.00714 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Langflow - Path Traversal Arbitrary File Write via upload_user_file | Affected: langflow-ai / langflow | CVSS: 8.8 (HIGH) | EPSS: 0.02289 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to... | Affected: ivanti / Sentry | CVSS: 10.0 (CRITICAL) | EPSS: 0.59524 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | EPSS: 0.00713 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a... | Affected: Ubiquiti Inc / UniFi OS Server, UDM, UDM-Pro, UDM-SE, UDM-Pro-Max, UDM-Beast, EFG, UDW, UDR, UDR7, UDR-5G, Express 7, UNVR, UNVR-Pro, UNVR-Instant, UNVR-G2, UNVR-G2-Pro, ENVR, ENVR-Core, UNAS-2, UNAS-4, UNAS-Pro, UNAS-Pro-4, UNAS-Pro-8, UCKP, UCK, UCK-Enterprise, UCG-Ultra, UCG-Max, UCG-Fiber, UCG-Industrial | CVSS: 10.0 (CRITICAL) | EPSS: 0.04509 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the... | Affected: Ubiquiti Inc / UniFi OS Server, Express, UDM, UDM-Pro, UDM-SE, UDM-Pro-Max, UDM-Beast, EFG, UDW, UDR, UDR7, UDR-5G, Express 7, UNVR, UNVR-Pro, UNVR-Instant, UNVR-G2, UNVR-G2-Pro, ENVR, ENVR-Core, UNAS-2, UNAS-4, UNAS-Pro, UNAS-Pro-4, UNAS-Pro-8, UCKP, UCK, UCK-Enterprise, UCG-Ultra, UCG-Max, UCG-Fiber, UCG-Industrial | CVSS: 10.0 (CRITICAL) | EPSS: 0.00623 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized... | Affected: Ubiquiti Inc / UniFi OS Server, UDM, UDM-Pro, UDM-SE, UDM-Pro-Max, UDM-Beast, EFG, UDW, UDR, UDR7, UDR-5G, Express 7, UNVR, UNVR-Pro, UNVR-Instant, UNVR-G2, UNVR-G2-Pro, ENVR, ENVR-Core, UNAS-2, UNAS-4, UNAS-Pro, UNAS-Pro-4, UNAS-Pro-8, UCKP, UCK, UCK-Enterprise, UCG-Ultra, UCG-Max, UCG-Fiber, UCG-Industrial | CVSS: 10.0 (CRITICAL) | EPSS: 0.00565 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: LiteLLM: Authenticated command execution via MCP stdio test endpoints | Affected: BerriAI / litellm | CVSS: 8.7 (HIGH) | EPSS: 0.53701 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: User Authentication Bypass in VPN Remote Access and Mobile Access | Affected: checkpoint / Quantum Security Gateway, Spark Firewalls | CVSS: 9.3 (CRITICAL) | EPSS: 0.41152 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: UDP Technology/Geutebrück camera devices: command injection leading to RCE | Affected: Geutebrück / E2 Series, Encoder G-Code | CVSS: 7.2 (HIGH) | EPSS: 0.94622 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Traccar Unauthenticated Local File Inclusion on Windows - Leakage of Traccar Config File | Affected: traccar / traccar | CVSS: 8.7 (HIGH) | EPSS: 0.01214 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Ditty < 3.1.58 - Unauthenticated SSRF | Affected: Unknown / Ditty | CVSS: 8.6 (HIGH) | EPSS: 0.16399 | Used in malware: unknown | Not yet in CISA KEV: True

Ditty < 3.1.58 - Unauthenticated SSRF


KEVIntel entry: WP Job Portal < 2.0.6 - Unauthenticated SQLi | Affected: Unknown / WP Job Portal | CVSS: 9.8 (CRITICAL) | EPSS: 0.03122 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Slider Future <= 1.0.5 - Unauthenticated Arbitrary File Upload | Affected: franchidesign / Slider Future | CVSS: 9.8 (CRITICAL) | EPSS: 0.03177 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Patreon WordPress < 1.7.0 - Unauthenticated Local File Disclosure | Affected: Unknown / Patreon WordPress | CVSS: 7.5 (HIGH) | EPSS: 0.05879 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote... | Affected: Schneider Electric / SpaceLogic C-Bus Home Controller | CVSS: 8.8 (HIGH) | EPSS: 0.71084 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API... | Affected: Grafana Labs / Grafana | CVSS: 7.5 (HIGH) | EPSS: 0.83042 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: WebIQ 2.15.9 Runtime on Windows - Directory Traversal Vulnerability | Affected: Smart HMI / WebIQ | CVSS: 9.3 (CRITICAL) | EPSS: 0.1166 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: MasterSAM Star Gate 11 is vulnerable to directory traversal via /adama/adama/downloadService. An attacker can exploit this vulnerability by... | Affected: MasterSAM / Star Gate 11 | CVSS: 6.5 (MEDIUM) | EPSS: 0.03012 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability. The URL parsing functionality in the cgi-bin endpoint of the router... | Affected: Netgear / RAX43 | CVSS: 8.8 (HIGH) | EPSS: 0.02177 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: SAS/Intrnet 9.4 build 1520 and earlier allows Local File Inclusion. The samples library (included by default) in the appstart.sas file, allows... | Affected: SAS Institute Inc. / SAS/Intrnet | CVSS: 7.5 (HIGH) | EPSS: 0.07845 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A Server-Side Request Forgery (SSRF) affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1. | Affected: Rocket.Chat / Rocket.Chat | CVSS: 8.6 (HIGH) | EPSS: 0.03201 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Yaws 1.91 allows Unauthenticated Remote File Disclosure via HTTP Directory Traversal with /%5C../ to port 8080. NOTE: this CVE is only about use of... | Affected: Yaws / Yaws | CVSS: 7.5 (HIGH) | EPSS: 0.81028 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: IBAX go-ibax rowsInfo sql injection | Affected: IBAX / go-ibax | CVSS: 6.3 (MEDIUM) | EPSS: 0.30082 | Used in malware: unknown | Not yet in CISA KEV: True

IBAX go-ibax rowsInfo sql injection


KEVIntel entry: Cuppa CMS v1.0 was discovered to contain a local file inclusion (LFI) vulnerability via the component /templates/default/html/windows/right.php. | Affected: Cuppa CMS / Cuppa CMS | CVSS: 7.5 (HIGH) | EPSS: 0.02955 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An unauthenticated remote code execution vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker... | Affected: Motorola / Binatone Hubble Cameras | CVSS: 8.8 (HIGH) | EPSS: 0.59893 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter. | Affected: Appspace / Appspace 6.2.4 | CVSS: 9.8 (CRITICAL) | EPSS: 0.60404 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Admin Word Count Column <= 2.2 - Unauthenticated Arbitrary File Read | Affected: Unknown / Admin Word Count Column | CVSS: 9.8 (CRITICAL) | EPSS: 0.20846 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Modern Events Calendar Lite <= 6.3.0 - Unauthenticated SQL Injection | Affected: webnus / Modern Events Calendar Lite | CVSS: 5.9 (MEDIUM) | EPSS: 0.00354 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The ejs (aka Embedded JavaScript templates) package 3.1.6 for Node.js allows server-side template injection in settings[view... | Affected: mde / ejs | CVSS: 9.8 (CRITICAL) | EPSS: 0.30623 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An OS Command Injection vulnerability exists in the ping.php script functionality of Advantech R-SeeNet v 2.4.12 (20.10.2020). A specially crafted... | Affected: Advantech / R-SeeNet | CVSS: 9.8 (CRITICAL) | EPSS: 0.69631 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability | Affected: SolarWinds / Serv-U | CVSS: 7.5 (HIGH) | EPSS: 0.01054 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass | Affected: Arista Networks / EOS | CVSS: 6.9 (MEDIUM) | EPSS: 0.00378 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Everest Forms Pro <= 1.9.12 - Unauthenticated Remote Code Execution via Calculation Field | Affected: WPEverest / Everest Forms Pro | CVSS: 9.8 (CRITICAL) | EPSS: 0.04756 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability | Affected: Cisco / Cisco Catalyst SD-WAN Controller, Cisco Catalyst SD-WAN Manager | CVSS: 7.8 (HIGH) | EPSS: 0.00952 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: pictureproxy.php in the dirk1983 mm1.ltd source code f9f4bbc allows SSRF via the url parameter. NOTE: the references section has an archived copy... | Affected: dirk1983 / mm1.ltd source code | CVSS: 5.8 (MEDIUM) | EPSS: 0.40637 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: WordPress WP01 plugin <= 2.6.2 - Arbitrary File Download Vulnerability | Affected: WP01 / WP01 | CVSS: 7.5 (HIGH) | EPSS: 0.02584 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: OneDev vulnerable to arbitrary file reading for unauthenticated user | Affected: theonedev / onedev | CVSS: 8.7 (HIGH) | EPSS: 0.24822 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: WhatsUp Gold GetStatisticalMonitorList SQL Injection Authentication Bypass Vulnerability | Affected: Progress Software Corporation / WhatsUp Gold | CVSS: 9.8 (CRITICAL) | EPSS: 0.14886 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue. This vulnerability allows any unauthenticated... | Affected: Grafana / Grafana | CVSS: 8.2 (HIGH) | EPSS: 0.99856 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data. This was... | Affected: Comfy-Org / ComfyUI-Manager | CVSS: 7.5 (HIGH) | EPSS: 0.01361 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Path traversal in Icinga Web 2 | Affected: Icinga / icingaweb2 | CVSS: 7.5 (HIGH) | EPSS: 0.89378 | Used in malware: unknown | Not yet in CISA KEV: True

Path traversal in Icinga Web 2


KEVIntel entry: The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerable to... | Affected: wpexpertsio / POST SMTP – The #1 WordPress SMTP Plugin with Advanced Email Logging and Delivery Failure Notifications | CVSS: 9.8 (CRITICAL) | EPSS: 0.90339 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows sessionid information disclosure via an... | Affected: SecurePoint / UTM | CVSS: 7.5 (HIGH) | EPSS: 0.03888 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Mirasvit Cache Warmer for Magento < 1.11.12 PHP Object Injection | Affected: Mirasvit / Full Page Cache Warmer for Magento 2 | CVSS: 9.3 (CRITICAL) | EPSS: 0.01502 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers' methods when running on PHP... | Affected: vBulletin / vBulletin | CVSS: 10.0 (CRITICAL) | EPSS: 0.69649 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Kirki 6.0.0 - 6.0.6 - Unauthenticated Privilege Escalation via 'handle_forgot_password' | Affected: themeum / Kirki – Freeform Page Builder, Website Builder & Customizer | CVSS: 9.8 (CRITICAL) | EPSS: 0.00623 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Path Traversal: '\..\filename' in mlflow/mlflow | Affected: mlflow / mlflow/mlflow | CVSS: 7.5 (HIGH) | EPSS: 0.89716 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Cryptocurrency Widgets Pack < 2.0 - Unauthenticated SQLi | Affected: Unknown / Cryptocurrency Widgets Pack | CVSS: 9.8 (CRITICAL) | EPSS: 0.04756 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution | Affected: rclone / rclone | CVSS: 9.2 (CRITICAL) | EPSS: 0.35437 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: N-central unauthenticated sessionID generation | Affected: N-able / N-central | CVSS: 6.9 (MEDIUM) | EPSS: 0.36673 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain... | Affected: Linux / kernel | CVSS: 7.8 (HIGH) | EPSS: 0.05495 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of... | Affected: Google / Android | CVSS: 8.4 (HIGH) | EPSS: 0.0015 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Netlogon Remote Code Execution Vulnerability | Affected: Microsoft / Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 9.8 (CRITICAL) | EPSS: 0.43788 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are... | Affected: Oracle Corporation / WebLogic Server | CVSS: 7.5 (HIGH) | EPSS: 0.48244 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari... | Affected: Apple / macOS, iOS and iPadOS, Safari | CVSS: 8.8 (HIGH) | EPSS: 0.03817 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6,... | Affected: Apple / Safari, iOS and iPadOS, macOS, tvOS, visionOS, watchOS | CVSS: 8.8 (HIGH) | EPSS: 0.01428 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Drupal core - Highly critical - SQL injection - SA-CORE-2026-004 | Affected: Drupal / Drupal core | CVSS: 9.8 (CRITICAL) | EPSS: 0.33665 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is... | Affected: LiteSpeed Technologies / cPanel Plugin, WHM Plugin | CVSS: 10.0 (CRITICAL) | EPSS: 0.01233 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE | Affected: Langflow / Langflow | CVSS: 9.4 (CRITICAL) | EPSS: 0.25153 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the... | Affected: Trend Micro, Inc. / TrendAI Apex One, TrendAI Apex One as a Service | CVSS: 6.7 (MEDIUM) | EPSS: 0.01112 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Defender Denial of Service Vulnerability | Affected: Microsoft / Microsoft Defender Antimalware Platform | CVSS: 4.0 (MEDIUM) | EPSS: 0.025 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Defender Elevation of Privilege Vulnerability | Affected: Microsoft / Microsoft Malware Protection Engine | CVSS: 7.8 (HIGH) | EPSS: 0.01172 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: CtrlPanel: Unauthenticated RCE using installer script | Affected: Ctrlpanel-gg / panel | CVSS: 10.0 (CRITICAL) | EPSS: 0.00858 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Microsoft Exchange Server Spoofing Vulnerability | Affected: Microsoft / Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server Subscription Edition RTM | CVSS: 8.1 (HIGH) | EPSS: 0.02509 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: LiteLLM: SQL injection in Proxy API key verification | Affected: BerriAI / litellm | CVSS: 9.3 (CRITICAL) | EPSS: 0.93107 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user... | Affected: Ivanti / Endpoint Manager Mobile | CVSS: 7.2 (HIGH) | EPSS: 0.20188 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May... | Affected: Postorius project / Postorius | CVSS: 7.2 (HIGH) | EPSS: 0.00237 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal | Affected: Palo Alto Networks / Cloud NGFW, PAN-OS, Prisma Access | CVSS: 9.3 (CRITICAL) | EPSS: 0.3176 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: crypto: algif_aead - Revert to operating out-of-place | Affected: Linux / Linux | CVSS: 7.8 (HIGH) | EPSS: 0.94016 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Shell Spoofing Vulnerability | Affected: Microsoft / Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows 11 Version 25H2, Windows 11 version 26H1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 4.3 (MEDIUM) | EPSS: 0.19985 | Used in malware: unknown | Not yet in CISA KEV: False

Windows Shell Spoofing Vulnerability


KEVIntel entry: Improper limitation of a pathname to a restricted directory (“path traversal”) | Affected: ConnectWise / ScreenConnect | CVSS: 8.4 (HIGH) | EPSS: 0.87624 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to... | Affected: Samsung Electronics / MagicINFO 9 Server | CVSS: 8.8 (HIGH) | EPSS: 0.91941 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote... | Affected: D-Link / DIR-823X | CVSS: 7.2 (HIGH) | EPSS: 0.3515 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a... | Affected: SimpleHelp / SimpleHelp remote support software | CVSS: 7.2 (HIGH) | EPSS: 0.07549 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive... | Affected: SimpleHelp / SimpleHelp remote support software | CVSS: 9.9 (CRITICAL) | EPSS: 0.09328 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass | Affected: marimo-team / marimo | CVSS: 9.3 (CRITICAL) | EPSS: 0.95645 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Defender Elevation of Privilege Vulnerability | Affected: Microsoft / Microsoft Defender Antimalware Platform | CVSS: 7.8 (HIGH) | EPSS: 0.06216 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch... | Affected: Quest / KACE Systems Management Appliance | CVSS: 10.0 (CRITICAL) | EPSS: 0.02417 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability | Affected: Cisco / Cisco Catalyst SD-WAN Manager | CVSS: 7.5 (HIGH) | EPSS: 0.046 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication... | Affected: PaperCut / NG | CVSS: 7.5 (HIGH) | EPSS: 0.7842 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected... | Affected: Cisco / Cisco Catalyst SD-WAN Manager | CVSS: 6.5 (MEDIUM) | EPSS: 0.08965 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Kentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCE | Affected: Kentico / Xperience | CVSS: 7.2 (HIGH) | EPSS: 0.03809 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability | Affected: Cisco / Cisco Catalyst SD-WAN Manager | CVSS: 5.4 (MEDIUM) | EPSS: 0.0613 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0 and 10.0 and 10.1. A Cross-Site Scripting (XSS) vulnerability in the Zimbra... | Affected: Zimbra / Zimbra Collaboration (ZCS) | CVSS: 6.1 (MEDIUM) | EPSS: 0.01761 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft SharePoint Server Spoofing Vulnerability | Affected: Microsoft / Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition | CVSS: 6.5 (MEDIUM) | EPSS: 0.24172 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321) | Affected: Adobe / Acrobat Reader | CVSS: 8.6 (HIGH) | EPSS: 0.07086 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Exchange Server Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft Exchange Server 2019 Cumulative Update 12, Microsoft Exchange Server 2019 Cumulative Update 11, Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2016 Cumulative Update 23 | CVSS: 8.8 (HIGH) | EPSS: 0.62104 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Windows Common Log File System Driver Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 11 version 22H3, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 23H2, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | EPSS: 0.12184 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Host Process for Windows Tasks Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 11 Version 24H2, Windows 11 Version 25H2, Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 7.8 (HIGH) | EPSS: 0.04601 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an... | Affected: Adobe / Adobe Acrobat and Reader | CVSS: 7.8 (HIGH) | EPSS: 0.48441 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution. | Affected: Ivanti / Endpoint Manager Mobile | CVSS: 9.8 (CRITICAL) | EPSS: 0.82002 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: TrueConf Client Update Integrity Verification Bypass | Affected: TrueConf / TrueConf Client | CVSS: 7.8 (HIGH) | EPSS: 0.0575 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | EPSS: 0.05492 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: BigIP APM Vulnerability | Affected: F5 / BIG-IP | CVSS: 9.3 (CRITICAL) | EPSS: 0.02246 | Used in malware: unknown | Not yet in CISA KEV: False

BigIP APM Vulnerability


KEVIntel entry: Trivy ecosystem supply chain briefly compromised | Affected: aquasecurity, BerriAI, team-telnyx / setup-trivy, trivy-action, trivy, LiteLLM, telnyx | CVSS: 9.4 (CRITICAL) | EPSS: 0.60368 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint | Affected: langflow-ai / langflow | CVSS: 9.3 (CRITICAL) | EPSS: 0.98412 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS... | Affected: Apple / iOS and iPadOS, macOS, tvOS, visionOS, watchOS | CVSS: 7.8 (HIGH) | EPSS: 0.00348 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Livewire vulnerable to remote command execution during property update hydration | Affected: livewire / livewire | CVSS: 9.2 (CRITICAL) | EPSS: 0.9203 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS... | Affected: Apple / iOS and iPadOS, macOS, tvOS, visionOS, watchOS | CVSS: 5.5 (MEDIUM) | EPSS: 0.00401 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Craft CMS Allows Remote Code Execution | Affected: craftcms / cms | CVSS: 10.0 (CRITICAL) | EPSS: 0.99734 | Used in malware: unknown | Not yet in CISA KEV: False

Craft CMS Allows Remote Code Execution


KEVIntel entry: Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability | Affected: Cisco / Cisco Secure Firewall Management Center (FMC) | CVSS: 10.0 (CRITICAL) | EPSS: 0.27551 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Zimbra Collaboration (ZCS) 10 before 10.0.18 and 10.1 before 10.1.13 allows Classic UI stored XSS via Cascading Style Sheets (CSS) @import... | Affected: Zimbra / Collaboration | CVSS: 7.2 (HIGH) | EPSS: 0.12009 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft SharePoint Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition | CVSS: 9.8 (CRITICAL) | EPSS: 0.31109 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie. | Affected: wftpserver / Wing FTP Server | CVSS: 4.3 (MEDIUM) | EPSS: 0.56366 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | EPSS: 0.01629 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | EPSS: 0.02082 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: n8n Vulnerable to Remote Code Execution via Expression Injection | Affected: n8n-io / n8n | CVSS: 9.9 (CRITICAL) | EPSS: 0.98011 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco IOS-XR NCS 5500 and NCS 5700 Egress Packet Network Interfaces Aligner Interrupt Denial of Service Vulnerability | Affected: Cisco / Cisco IOS XR Software | CVSS: 6.8 (MEDIUM) | EPSS: 0.00318 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored... | Affected: Ivanti / Endpoint Manager | CVSS: 8.6 (HIGH) | EPSS: 0.81089 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability | Affected: SolarWinds / Web Help Desk | CVSS: 9.8 (CRITICAL) | EPSS: 0.88527 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37... | Affected: VMware / Workspace ONE UEM | CVSS: 7.5 (HIGH) | EPSS: 0.97713 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers... | Affected: Rockwell Automation / Studio 5000 Logix Designer, RSLogix 5000 | CVSS: 9.8 (CRITICAL) | EPSS: 0.25455 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.8.7. An... | Affected: Apple / iOS and iPadOS | CVSS: 7.8 (HIGH) | EPSS: 0.0141 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and... | Affected: Apple / watchOS, iOS and iPadOS, macOS | CVSS: 7.8 (HIGH) | EPSS: 0.07617 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series... | Affected: Hikvision / DS-2CD2xx2F-I Series, DS-2CD2xx0F-I Series, DS-2CD2xx2FWD Series, DS-2CD4x2xFWD Series, DS-2CD4xx5 Series, DS-2DFx Series, DS-2CD63xx Series | CVSS: 9.8 (CRITICAL) | EPSS: 0.99998 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Integer Overflow or Wraparound in Graphics | Affected: Qualcomm, Inc. / Snapdragon | CVSS: 7.8 (HIGH) | EPSS: 0.01068 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: VMware Aria Operations command injection vulnerability | Affected: VMware / VMware Aria Operations, VMware Cloud Foundation Operations, Telco Cloud Platform, Telco Cloud Infrastructure | CVSS: 8.1 (HIGH) | EPSS: 0.17424 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco Nexus 3600-R and 9500-R Series Switching Platforms Layer 2 Loop Denial of Service Vulnerability | Affected: Cisco / Cisco NX-OS Software | CVSS: 7.4 (HIGH) | EPSS: 0.00156 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | Affected: Cisco / Cisco Catalyst SD-WAN Manager | CVSS: 10.0 (CRITICAL) | EPSS: 0.48158 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco SD-WAN Software Privilege Escalation Vulnerability | Affected: Cisco / Cisco Catalyst SD-WAN, Cisco Catalyst SD-WAN Manager, Cisco SD-WAN vContainer, Cisco SD-WAN vEdge Cloud, Cisco SD-WAN vEdge Router | CVSS: 7.8 (HIGH) | EPSS: 0.12475 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: FileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is enabled, a logged-in user may send a specially... | Affected: Soliton Systems K.K. / FileZen | CVSS: 8.7 (HIGH) | EPSS: 0.04974 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS) vulnerability via the animate tag in an SVG document. | Affected: Roundcube / Webmail | CVSS: 7.2 (HIGH) | EPSS: 0.19769 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the _from parameter in a URL is... | Affected: Roundcube / Webmail | CVSS: 9.9 (CRITICAL) | EPSS: 0.89163 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. This is considered critical as... | Affected: Dell / RecoverPoint for Virtual Machines | CVSS: 10.0 (CRITICAL) | EPSS: 0.13131 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versions... | Affected: GitLab / GitLab | CVSS: 6.8 (MEDIUM) | EPSS: 0.53372 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | EPSS: 0.2202 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: TeamT5 ThreatSonar Anti-Ransomware - Arbitrary File Upload | Affected: TeamT5 / ThreatSonar Anti-Ransomware | CVSS: 7.2 (HIGH) | EPSS: 0.01807 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) | Affected: BeyondTrust / Remote Support(RS) & Privileged Remote Access(PRA) | CVSS: 9.9 (CRITICAL) | EPSS: 0.86091 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification | Affected: notepad-plus-plus / notepad-plus-plus | CVSS: 7.7 (HIGH) | EPSS: 0.01268 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Configuration Manager Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft Configuration Manager | CVSS: 9.8 (CRITICAL) | EPSS: 0.60661 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: SolarWinds Web Help Desk Security Control Bypass Vulnerability | Affected: SolarWinds / Web Help Desk | CVSS: 8.1 (HIGH) | EPSS: 0.81624 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS... | Affected: Apple / iOS and iPadOS, macOS, tvOS, visionOS, watchOS | CVSS: 7.8 (HIGH) | EPSS: 0.01319 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Shell Security Feature Bypass Vulnerability | Affected: Microsoft / Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows 11 Version 25H2, Windows 11 version 26H1, Windows 11 Version 26H1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 8.8 (HIGH) | EPSS: 0.25835 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Desktop Window Manager Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows 11 Version 25H2, Windows 11 version 26H1, Windows 11 Version 26H1, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 7.8 (HIGH) | EPSS: 0.0242 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Remote Desktop Services Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows 11 Version 25H2, Windows 11 version 26H1, Windows 11 Version 26H1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 7.8 (HIGH) | EPSS: 0.03846 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Remote Access Connection Manager Denial of Service Vulnerability | Affected: Microsoft / Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows 11 Version 25H2, Windows 11 version 26H1, Windows 11 Version 26H1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 6.2 (MEDIUM) | EPSS: 0.04956 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: MSHTML Framework Security Feature Bypass Vulnerability | Affected: Microsoft / Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows 11 Version 25H2, Windows 11 version 26H1, Windows 11 Version 26H1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 8.8 (HIGH) | EPSS: 0.15384 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Word Security Feature Bypass Vulnerability | Affected: Microsoft / Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024 | CVSS: 7.8 (HIGH) | EPSS: 0.01517 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API | Affected: SmarterTools / SmarterMail | CVSS: 9.3 (CRITICAL) | EPSS: 0.87693 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Fortinet FortiOS through 7.6.6 allows attackers to decrypt LDAP credentials stored in device configuration files, as exploited in the wild from... | Affected: Fortinet / FortiOS | CVSS: 3.2 (LOW) | EPSS: 0.00094 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests | CVSS: 9.8 (CRITICAL) | EPSS: 0.61938 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: FreePBX Administration GUI is Vulnerable to Authenticated Command Injection | Affected: FreePBX / filestore | CVSS: 8.6 (HIGH) | EPSS: 0.84052 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability | Affected: SolarWinds / Web Help Desk | CVSS: 9.8 (CRITICAL) | EPSS: 0.8413 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before... | Affected: GitLab / GitLab | CVSS: 6.8 (MEDIUM) | EPSS: 0.30496 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Control. | Affected: Sangoma / FreePBX | CVSS: 9.8 (CRITICAL) | EPSS: 0.35791 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: NixOs Odoo database and filestore publicly accessible with default odoo configuration | Affected: NixOS / nixpkgs | CVSS: 9.1 (CRITICAL) | EPSS: 0.1008 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution. | Affected: Ivanti / Endpoint Manager Mobile | CVSS: 9.8 (CRITICAL) | EPSS: 0.81231 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5,... | Affected: Fortinet / FortiWeb, FortiNAC-F, FortiOS, FortiAnalyzer, FortiProxy, FortiManager | CVSS: 9.4 (CRITICAL) | EPSS: 0.55125 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable. | Affected: GNU / Inetutils | CVSS: 9.8 (CRITICAL) | EPSS: 0.98871 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Office Security Feature Bypass Vulnerability | Affected: Microsoft / Microsoft 365 Apps for Enterprise, Microsoft Office 2016, Microsoft Office 2019, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024 | CVSS: 7.8 (HIGH) | EPSS: 0.72152 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API | Affected: SmarterTools / SmarterMail | CVSS: 9.3 (CRITICAL) | EPSS: 0.96268 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise... | Affected: The Linux Foundation / kernel | CVSS: 7.8 (HIGH) | EPSS: 0.14806 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Upload Arbitrary Files | Affected: SmarterTools / SmarterMail | CVSS: 10.0 (CRITICAL) | EPSS: 0.85457 | Used in malware: yes | Not yet in CISA KEV: False

Upload Arbitrary Files


KEVIntel entry: vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to... | Affected: VMware / vCenter Server | CVSS: 9.8 (CRITICAL) | EPSS: 0.22377 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package... | Affected: prettier / eslint-config-prettier | CVSS: 7.5 (HIGH) | EPSS: 0.04105 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query | Affected: vitejs / vite | CVSS: 5.3 (MEDIUM) | EPSS: 0.59585 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Versa Concerto Actuator Authentication Bypass Information Leak | Affected: Versa / Concerto | CVSS: 9.2 (CRITICAL) | EPSS: 0.83381 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco Unified Communications Products Remote Code Execution Vulnerability | Affected: Cisco / Cisco Unified Communications Manager, Cisco Unified Communications Manager IM and Presence Service, Cisco Unity Connection | CVSS: 8.2 (HIGH) | EPSS: 0.04307 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Desktop Window Manager Information Disclosure Vulnerability | Affected: Microsoft / Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows 11 Version 25H2, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 5.5 (MEDIUM) | EPSS: 0.05028 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key is the name of a Java class,... | Affected: Alibaba / Fastjson | CVSS: 10.0 (CRITICAL) | EPSS: 0.00571 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A remote code execution issue exists in HPE OneView. | Affected: Hewlett Packard Enterprise (HPE) / HPE OneView | CVSS: 10.0 (CRITICAL) | EPSS: 0.89733 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: D-Link DSL/DIR/DNS Authentication Bypass via DNS Configuration Endpoint | Affected: D-Link / DSL-2640B, DSL-2740R, DSL-2780B, DSL-526B, DSL-2640T, DSL-500, DSL-500G, DSL-502G, DIR-905L, DIR-600, DIR-608, DIR-610, DIR-611, DIR-615, DNS-320, DNS-325, DNS-345 | CVSS: 9.3 (CRITICAL) | EPSS: 0.00964 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Zlib compressed protocol header length confusion may allow memory read | Affected: MongoDB Inc. / MongoDB Server | CVSS: 8.7 (HIGH) | EPSS: 0.83007 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. NOTE: This vulnerability only affects products that are no... | Affected: Digiever / DS-2105 Pro | CVSS: 8.8 (HIGH) | EPSS: 0.96285 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: WatchGuard Firebox iked Out of Bounds Write Vulnerability | Affected: WatchGuard / Fireware OS | CVSS: 9.3 (CRITICAL) | EPSS: 0.17469 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC). | Affected: SonicWall / SMA1000 | CVSS: 6.6 (MEDIUM) | EPSS: 0.0191 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: "UNSUPPORTED WHEN ASSIGNED" Certain versions of the ASUS Live Update client were distributed with unauthorized modifications introduced... | Affected: ASUS / live update | CVSS: 9.3 (CRITICAL) | EPSS: 0.01084 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2... | Affected: Apple / Safari, iOS and iPadOS, macOS, tvOS, visionOS, watchOS | CVSS: 8.8 (HIGH) | EPSS: 0.07997 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability | Affected: Cisco / Cisco Secure Email, Cisco Secure Email and Web Manager | CVSS: 10.0 (CRITICAL) | EPSS: 0.2906 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS... | Affected: Fortinet / FortiSwitchManager, FortiOS, FortiProxy | CVSS: 9.1 (CRITICAL) | EPSS: 0.63476 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Gladinet CentreStack and TrioFox Hard Coded AES Keys | Affected: Gladinet / CentreStack and TrioFox | CVSS: 7.1 (HIGH) | EPSS: 0.50949 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | EPSS: 0.22216 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially... | Affected: Sierra Wireless / Sierra Wireless | CVSS: 8.8 (HIGH) | EPSS: 0.28056 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: File overwrite in file update API in Gogs | Affected: Gogs / Gogs | CVSS: 8.7 (HIGH) | EPSS: 0.7694 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows 11 Version 25H2, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 7.8 (HIGH) | EPSS: 0.02342 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability | Affected: RARLAB / WinRAR | CVSS: 7.8 (HIGH) | EPSS: 0.81491 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisioning due to a logic error... | Affected: Google / Android | CVSS: 5.5 (MEDIUM) | EPSS: 0.00231 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In multiple locations, there is a possible way to launch activities from the background due to a permissions bypass. This could lead to local... | Affected: Google / Android | CVSS: 7.8 (HIGH) | EPSS: 0.00215 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main, | Affected: D-Link / Go-RT-AC750 | CVSS: 9.8 (CRITICAL) | EPSS: 0.57037 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Array Networks ArrayOS AG before 9.4.5.9 allows command injection, as exploited in the wild in August through December 2025. | Affected: Array Networks / ArrayOS AG | CVSS: 7.2 (HIGH) | EPSS: 0.03046 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files... | Affected: OpenPLC / ScadaBR | CVSS: 8.8 (HIGH) | EPSS: 0.39356 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via system_settings.shtm. | Affected: OpenPLC / ScadaBR | CVSS: 5.4 (MEDIUM) | EPSS: 0.4805 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices).  Supported versions that are affected are... | Affected: Oracle Corporation / Identity Manager | CVSS: 9.8 (CRITICAL) | EPSS: 0.88312 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | EPSS: 0.04835 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet... | Affected: Fortinet / FortiWeb | CVSS: 7.2 (HIGH) | EPSS: 0.54376 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9,... | Affected: Fortinet / FortiWeb | CVSS: 9.8 (CRITICAL) | EPSS: 0.89526 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Kernel Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows 11 Version 25H2, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 7.0 (HIGH) | EPSS: 0.061 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: WatchGuard Firebox iked Out of Bounds Write Vulnerability | Affected: WatchGuard / Fireware OS | CVSS: 9.3 (CRITICAL) | EPSS: 0.8637 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after... | Affected: TrioFox / TrioFox | CVSS: 9.1 (CRITICAL) | EPSS: 0.90355 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code. | Affected: Samsung Mobile / Samsung Mobile Devices | CVSS: 8.8 (HIGH) | EPSS: 0.11606 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: SmartBI RMIServlet Unrestricted File Upload RCE | Affected: Guangzhou Smart Software Co., Ltd. / SmartBI | CVSS: 9.2 (CRITICAL) | EPSS: 0.00485 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability | Affected: Microsoft / Windows | CVSS: 4.6 (MEDIUM) | EPSS: 0.63102 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell metacharacters in the... | Affected: centos-webpanel / CentOS Web Panel | CVSS: 9.0 (CRITICAL) | EPSS: 0.99589 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Gladinet CentreStack and TrioFox Local File Inclusion Flaw | Affected: Gladinet / CentreStack and TrioFox | CVSS: 7.5 (HIGH) | EPSS: 0.92094 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Huijietong Cloud Video Platform fileDownload Arbitrary File Read | Affected: Huijietong / Cloud Video Platform | CVSS: 8.7 (HIGH) | EPSS: 0.00418 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A critical severity vulnerability has been identified in the ALPR Manager role of Security Center that could allow attackers to gain administrative... | Affected: Genetec Inc. / Genetec Security Center | CVSS: 9.8 (CRITICAL) | EPSS: 0.00302 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) | Affected: VMware / VCF operations, VMware tools, VMware Aria Operations, VMware Cloud Foundation, VMware Telco Cloud Platform, VMware Telco Cloud Infrastructure | CVSS: 7.8 (HIGH) | EPSS: 0.07606 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Seeyon Zhiyuan OA Web Application System < 7.0 SP1 Authentication Bypass | Affected: Seeyon / Zhiyuan OA Web Application System | CVSS: 9.3 (CRITICAL) | EPSS: 0.00551 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Mingyu Operations and Maintenance Audit and Risk Control System xmlrpc.sock SSRF | Affected: Anheng Information (Hangzhou DBAPP Security Information Technology Co., Ltd.) / Mingyu Operations and Maintenance Audit and Risk Control System | CVSS: 9.3 (CRITICAL) | EPSS: 0.00338 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 | Affected: Dassault Systèmes / DELMIA Apriso | CVSS: 8.0 (HIGH) | EPSS: 0.75306 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Server Update Service (WSUS) Remote Code Execution Vulnerability | Affected: Microsoft / Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 9.8 (CRITICAL) | EPSS: 0.99962 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Adobe Commerce | Improper Input Validation (CWE-20) | Affected: Adobe / Adobe Commerce | CVSS: 9.1 (CRITICAL) | EPSS: 0.96742 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests,... | Affected: MOTEX Inc. / Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) | CVSS: 9.3 (CRITICAL) | EPSS: 0.02689 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2024-08-01 allows execution of a command within $( ) in... | Affected: Hikvision / CSMP iSecure Center | CVSS: 8.3 (HIGH) | EPSS: 0.16093 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: AMTT HiBOS Command Injection RCE via server_ping.php | Affected: Anmei Century (Beijing) Technology Co., Ltd. / Hotel Broadband Operation System (HiBOS) | CVSS: 10.0 (CRITICAL) | EPSS: 0.06562 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2023-06-25 allows file upload via /center/api/files directory... | Affected: Hikvision / CSMP iSecure Center | CVSS: 8.3 (HIGH) | EPSS: 0.01072 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Windows SMB Client Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 8.8 (HIGH) | EPSS: 0.64315 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication Bypass | Affected: Kentico / Xperience | CVSS: 9.8 (CRITICAL) | EPSS: 0.57992 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypass | Affected: Kentico / Xperience | CVSS: 9.8 (CRITICAL) | EPSS: 0.91284 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5,... | Affected: Apple / macOS, tvOS, Safari, watchOS, iOS and iPadOS | CVSS: 8.8 (HIGH) | EPSS: 0.02879 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: GeoVision Command Injection RCE via /PictureCatch.cgi | Affected: GeoVision Inc. / GV-BX1500, GV-MFD1501, GeoVision embedded IP devices | CVSS: 10.0 (CRITICAL) | EPSS: 0.01318 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Appointments <= 2.2.1 - Unauthenticated PHP Object Injection | Affected: wpmudev / Appointments | CVSS: 9.8 (CRITICAL) | EPSS: 0.0067 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Flickr Gallery <= 1.5.2 - Unauthenticated PHP Object Injection | Affected: Dan Coulter / Flickr Gallery | CVSS: 9.8 (CRITICAL) | EPSS: 0.0067 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI).  Supported versions that are affected are... | Affected: Oracle Corporation / Oracle Configurator | CVSS: 7.5 (HIGH) | EPSS: 0.97582 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Adobe Experience Manager | Incorrect Authorization (CWE-863) | Affected: Adobe / Adobe Experience Manager | CVSS: 10.0 (CRITICAL) | EPSS: 0.89824 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: WordPress Plugin is-human <= v1.4.2 Eval Injection RCE | Affected: is-human WordPress Plugin / is-human WordPress Plugin | CVSS: 9.3 (CRITICAL) | EPSS: 0.00436 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Velociraptor priviledge escalation via UpdateConfig artifact | Affected: Rapid7 / Velociraptor | CVSS: 5.5 (MEDIUM) | EPSS: 0.00963 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows 11 Version 25H2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 7.8 (HIGH) | EPSS: 0.02615 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a... | Affected: IGEL Technology / IGEL OS | CVSS: 4.6 (MEDIUM) | EPSS: 0.03528 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Agere Modem Driver Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows 11 Version 25H2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 7.8 (HIGH) | EPSS: 0.05793 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with the... | Affected: Sky Co., LTD. / SKYSEA Client View | CVSS: 9.8 (CRITICAL) | EPSS: 0.1938 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Grafana path traversal | Affected: grafana / grafana | CVSS: 7.5 (HIGH) | EPSS: 0.88849 | Used in malware: unknown | Not yet in CISA KEV: False

Grafana path traversal


KEVIntel entry: An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A stored cross-site scripting (XSS) vulnerability exists in the... | Affected: Zimbra / Zimbra Collaboration (ZCS) | CVSS: 5.4 (MEDIUM) | EPSS: 0.04241 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Common Log File System Driver Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | EPSS: 0.03072 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE | Affected: Linux / Linux Kernel | CVSS: 8.3 (HIGH) | EPSS: 0.78684 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers... | Affected: GNU / Bash | CVSS: 8.8 (HIGH) | EPSS: 0.99621 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code. | Affected: Samsung Mobile / Samsung Mobile Devices | CVSS: 8.8 (HIGH) | EPSS: 0.01435 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code execution. An unauthenticated... | Affected: Jenkins / Jenkins | CVSS: 9.8 (CRITICAL) | EPSS: 0.99686 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Arbitrary Command Injection in Smartbedded MeteoBridge | Affected: Smartbedded / MeteoBridge | CVSS: 8.7 (HIGH) | EPSS: 0.93864 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before... | Affected: Juniper Networks / ScreenOS | CVSS: 9.8 (CRITICAL) | EPSS: 0.614 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. For ESG 5.0 a fix has been released in... | Affected: Libraesva / Email Security Gateway | CVSS: 6.1 (MEDIUM) | EPSS: 0.01929 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the... | Affected: Cisco / IOS, Cisco IOS XE Software, Cisco IOS XE Catalyst SD-WAN | CVSS: 7.7 (HIGH) | EPSS: 0.37613 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot... | Affected: Sudo project / Sudo | CVSS: 9.3 (CRITICAL) | EPSS: 0.48008 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: SSRF in adminer | Affected: vrana / adminer | CVSS: 7.2 (HIGH) | EPSS: 0.90461 | Used in malware: unknown | Not yet in CISA KEV: False

SSRF in adminer


KEVIntel entry: Deserialization Vulnerability in GoAnywhere MFT's License Servlet | Affected: Fortra / GoAnywhere MFT | CVSS: 10.0 (CRITICAL) | EPSS: 0.99614 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense... | Affected: Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software | CVSS: 9.9 (CRITICAL) | EPSS: 0.29197 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTD... | Affected: Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software | CVSS: 6.5 (MEDIUM) | EPSS: 0.83681 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML... | Affected: Google / Chrome | CVSS: 9.8 (CRITICAL) | EPSS: 0.05299 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: General Bytes Crypto Application Server (CAS) Unauthenticated Creation of Admin Account via Default-installation/First-admin Page | Affected: General Bytes / Crypto Application Server (CAS) | CVSS: 9.3 (CRITICAL) | EPSS: 0.00806 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 | Affected: Dassault Systèmes / DELMIA Apriso | CVSS: 9.0 (CRITICAL) | EPSS: 0.88429 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Sitecore Products ViewState Deserialization Vulnerability | Affected: Sitecore / Experience Manager (XM), Experience Platform (XP) | CVSS: 9.0 (CRITICAL) | EPSS: 0.26308 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free. This could lead to... | Affected: Google / Android | CVSS: 8.8 (HIGH) | EPSS: 0.00545 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() | Affected: Linux / Linux | CVSS: 7.4 (HIGH) | EPSS: 0.0187 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Authenticated RCE via Parental Control command injection | Affected: TP-Link Systems Inc. / Archer C7(EU) V2, TL-WR841N/ND(MS) V9 | CVSS: 8.6 (HIGH) | EPSS: 0.11747 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability | Affected: TP-Link / TL-WR841N | CVSS: 6.5 (MEDIUM) | EPSS: 0.1745 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a... | Affected: TP-Link / TL-WA855RE | CVSS: 8.8 (HIGH) | EPSS: 0.20689 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE | Affected: FreePBX / endpoint | CVSS: 10.0 (CRITICAL) | EPSS: 0.8736 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp Business for iOS v2.25.21.78,... | Affected: Facebook / WhatsApp Desktop for Mac, WhatsApp Business for iOS, WhatsApp for iOS | CVSS: 5.4 (MEDIUM) | EPSS: 0.04116 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: SQL Injection vulnerability exists in the sortKey parameter of the GET /api/v1/wanted/cutoff API endpoint in readarr 0.4.15.2787. The endpoint... | Affected: Readarr / Readarr | CVSS: 8.3 (HIGH) | EPSS: 0.00322 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service | Affected: NetScaler / ADC, Gateway | CVSS: 9.2 (CRITICAL) | EPSS: 0.18973 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Limited remote code execution with privilege of a NetworkService Account access | Affected: Citrix Session Recording / Citrix Session Recording | CVSS: 5.1 (MEDIUM) | EPSS: 0.14736 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Git allows arbitrary code execution through broken config quoting | Affected: git / git | CVSS: 8.0 (HIGH) | EPSS: 0.02775 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Privilege escalation to NetworkService Account access | Affected: Citrix / Citrix Session Recording | CVSS: 5.1 (MEDIUM) | EPSS: 0.01388 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and... | Affected: Apple / iOS and iPadOS, iPadOS, macOS | CVSS: 10.0 (CRITICAL) | EPSS: 0.19972 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Insecure Deserialization Vulnerability | Affected: N-able / N-central | CVSS: 9.4 (CRITICAL) | EPSS: 0.01582 | Used in malware: unknown | Not yet in CISA KEV: False

Insecure Deserialization Vulnerability


KEVIntel entry: Command Injection Vulnerability | Affected: N-able / N-central | CVSS: 9.4 (CRITICAL) | EPSS: 0.03171 | Used in malware: unknown | Not yet in CISA KEV: False

Command Injection Vulnerability


KEVIntel entry: A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code... | Affected: Trend Micro, Inc. / Trend Micro Apex One | CVSS: 9.4 (CRITICAL) | EPSS: 0.20253 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote... | Affected: Microsoft / Internet Explorer | CVSS: 8.8 (HIGH) | EPSS: 0.8593 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted... | Affected: Microsoft / Excel | CVSS: 8.8 (HIGH) | EPSS: 0.42139 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Path traversal vulnerability in WinRAR | Affected: win.rar GmbH / WinRAR | CVSS: 8.4 (HIGH) | EPSS: 0.81348 | Used in malware: unknown | Not yet in CISA KEV: False

Path traversal vulnerability in WinRAR


KEVIntel entry: An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticated /config/getuser endpoint... | Affected: D-Link / DCS-2530L, DCS-2670L | CVSS: 7.5 (HIGH) | EPSS: 0.97901 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. cgi-bin/ddns_enc.cgi allows authenticated... | Affected: D-Link / DCS-2530L, DCS-2670L | CVSS: 8.8 (HIGH) | EPSS: 0.52717 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Data Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated attacker to execute OS level commands on the... | Affected: D-Link / DNR-322L | CVSS: 8.8 (HIGH) | EPSS: 0.31328 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Hangzhou Shunwang Rentdrv2 before 2024-12-24 allows local users to terminate EDR processes and possibly have unspecified other impact via... | Affected: Hangzhou Shunwang / Rentdrv2 | CVSS: 3.2 (LOW) | EPSS: 0.00165 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Kloxo < 6.1.12 Unauthenticated SQL Injection RCE | Affected: LXCenter / Kloxo | CVSS: 10.0 (CRITICAL) | EPSS: 0.00667 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is... | Affected: TeleMessage / archiving backend | CVSS: 1.9 (LOW) | EPSS: 0.00396 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to... | Affected: Samsung Electronics / MagicINFO 9 Server | CVSS: 9.8 (CRITICAL) | EPSS: 0.23198 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Insecure Deserialization in SAP NetWeaver (Visual Composer development server) | Affected: SAP_SE / SAP NetWeaver (Visual Composer development server) | CVSS: 9.1 (CRITICAL) | EPSS: 0.10847 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions,... | Affected: Fortinet / FortiNDR, FortiCamera, FortiRecorder, FortiVoice, FortiMail | CVSS: 9.8 (CRITICAL) | EPSS: 0.30128 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco ISE API Unauthenticated Remote Code Execution Vulnerability | Affected: Cisco / Cisco Identity Services Engine Software, Cisco ISE Passive Identity Connector | CVSS: 10.0 (CRITICAL) | EPSS: 0.65098 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF | Affected: PaperCut / PaperCut NG/MF | CVSS: 8.4 (HIGH) | EPSS: 0.2946 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco ISE API Unauthenticated Remote Code Execution Vulnerability | Affected: Cisco / Cisco Identity Services Engine Software | CVSS: 10.0 (CRITICAL) | EPSS: 0.96732 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft SharePoint Server Spoofing Vulnerability | Affected: Microsoft / Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition | CVSS: 6.5 (MEDIUM) | EPSS: 0.99879 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Microsoft SharePoint Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019 | CVSS: 8.8 (HIGH) | EPSS: 0.99907 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | EPSS: 0.09524 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection | Affected: SysAid / SysAid On-Prem | CVSS: 9.3 (CRITICAL) | EPSS: 0.55177 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection | Affected: SysAid / SysAid On-Prem | CVSS: 9.3 (CRITICAL) | EPSS: 0.72971 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft SharePoint Server Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition | CVSS: 9.8 (CRITICAL) | EPSS: 0.99977 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used, mishandles AS2 validation and consequently allows remote... | Affected: CrushFTP / CrushFTP | CVSS: 9.0 (CRITICAL) | EPSS: 0.92034 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: LILIN DVR Arbitrary File Read via net_html.cgi | Affected: Merit LILIN / DVR Firmware | CVSS: 8.7 (HIGH) | EPSS: 0.01149 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: LILIN DVR RCE via Malicious FTP/NTP Configuration | Affected: Merit LILIN / DVR Firmware | CVSS: 8.7 (HIGH) | EPSS: 0.01077 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) vulnerable to IAM Authenticator Bypass via Mis-configured Network Device | Affected: cyberark / conjur | CVSS: 9.1 (CRITICAL) | EPSS: 0.01156 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary Lua code into... | Affected: wftpserver / Wing FTP Server | CVSS: 10.0 (CRITICAL) | EPSS: 0.95343 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command... | Affected: PHPMailer / PHPMailer | CVSS: 9.8 (CRITICAL) | EPSS: 0.99714 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted... | Affected: Rails / https://github.com/rails/rails | CVSS: 7.5 (HIGH) | EPSS: 0.98507 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows... | Affected: Zimbra / Zimbra Collaboration Suite | CVSS: 7.5 (HIGH) | EPSS: 0.80906 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: fastping.c in MRLG (aka Multi-Router Looking Glass) before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruption. | Affected: MRLG / Multi-Router Looking Glass | CVSS: 9.8 (CRITICAL) | EPSS: 0.26572 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page.... | Affected: Google / Chrome | CVSS: 8.1 (HIGH) | EPSS: 0.06564 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploited in... | Affected: TeleMessage / service | CVSS: 5.3 (MEDIUM) | EPSS: 0.07857 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which... | Affected: TeleMessage / service | CVSS: 4.0 (MEDIUM) | EPSS: 0.00366 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Memory overflow vulnerability leading to unintended control flow and Denial of Service | Affected: NetScaler / ADC, Gateway | CVSS: 9.2 (CRITICAL) | EPSS: 0.09756 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The TeleMessage service through 2025-05-05 relies on the client side (e.g., the TM SGNL app) to do MD5 hashing, and then accepts the hash as the... | Affected: TeleMessage / service | CVSS: 4.3 (MEDIUM) | EPSS: 0.00233 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal | Affected: D-Link / DIR-859 | CVSS: 5.3 (MEDIUM) | EPSS: 0.82714 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Hikka vulnerable to RCE through dangling web interface | Affected: hikariatama / Hikka | CVSS: 10.0 (CRITICAL) | EPSS: 0.00619 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Redfish Authentication Bypass | Affected: AMI / MegaRAC-SPx | CVSS: 10.0 (CRITICAL) | EPSS: 0.61202 | Used in malware: unknown | Not yet in CISA KEV: False

Redfish Authentication Bypass


KEVIntel entry: Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacker with access to the backup... | Affected: Fortinet / FortiGate | CVSS: 6.5 (MEDIUM) | EPSS: 0.05352 | Used in malware: yes | Not yet in CISA KEV: False