KEVIntel entry: A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux... | Affected: Linux / Linux kernel | CVSS: 7.8 (HIGH) | EPSS: 0.0788 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: This issue was addressed with improved checks. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and... | Affected: Apple / iOS and iPadOS, iPadOS, macOS, visionOS, watchOS | CVSS: 4.2 (MEDIUM) | EPSS: 0.01009 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component... | Affected: TP-Link / TL-WR940N, TL-WR841N, TL-WR740N | CVSS: 8.8 (HIGH) | EPSS: 0.42568 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Internet Shortcut Files Remote Code Execution Vulnerability | Affected: Microsoft / Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 8.8 (HIGH) | EPSS: 0.81558 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Remote code execution in Wazuh server | Affected: wazuh / wazuh | CVSS: 9.9 (CRITICAL) | EPSS: 0.92579 | Used in malware: unknown | Not yet in CISA KEV: False

Remote code execution in Wazuh server


KEVIntel entry: Erlang/OTP SSH Vulnerable to Pre-Authentication RCE | Affected: erlang / otp | CVSS: 10.0 (CRITICAL) | EPSS: 0.97673 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a... | Affected: Roundcube / Roundcube Webmail | CVSS: 9.3 (CRITICAL) | EPSS: 0.82853 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | EPSS: 0.06463 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use After Free in Graphics | Affected: Qualcomm, Inc. / Snapdragon | CVSS: 7.5 (HIGH) | EPSS: 0.00802 | Used in malware: unknown | Not yet in CISA KEV: False

Use After Free in Graphics


KEVIntel entry: Incorrect Authorization in Graphics Windows | Affected: Qualcomm, Inc. / Snapdragon | CVSS: 8.6 (HIGH) | EPSS: 0.00361 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Incorrect Authorization in Graphics | Affected: Qualcomm, Inc. / Snapdragon | CVSS: 8.6 (HIGH) | EPSS: 0.00665 | Used in malware: unknown | Not yet in CISA KEV: False

Incorrect Authorization in Graphics


KEVIntel entry: ScreenConnect Exposure to ASP.NET ViewState Code Injection | Affected: ConnectWise / ScreenConnect | CVSS: 8.1 (HIGH) | EPSS: 0.03348 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Craft CMS stores user-provided content in session files | Affected: Craft / CMS | CVSS: 6.9 (MEDIUM) | EPSS: 0.01119 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: RCE when PHP `register_argc_argv` config setting is enabled in craftcms/cms | Affected: craftcms / cms | CVSS: 9.3 (CRITICAL) | EPSS: 0.97446 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelist... | Affected: ASUS / RT-AX55 | CVSS: 8.8 (HIGH) | EPSS: 0.3239 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | Affected: Cisco / Cisco Catalyst SD-WAN Controller, Cisco Catalyst SD-WAN Manager | CVSS: 10.0 (CRITICAL) | EPSS: 0.77902 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans | Affected: Apache Software Foundation / Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ | CVSS: 8.8 (HIGH) | EPSS: 0.87048 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unintended dynamic code execution leads to remote code execution by network attackers | CVSS: 9.8 (CRITICAL) | EPSS: 0.1742 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Versions of the package jsonpath-plus before 10.3.0 are vulnerable to Remote Code Execution (RCE) due to improper input sanitization. An attacker... | Affected: JSONPath-Plus / jsonpath-plus | CVSS: 9.3 (CRITICAL) | EPSS: 0.10087 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread | Affected: NetScaler / ADC, Gateway | CVSS: 9.3 (CRITICAL) | EPSS: 0.99897 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: NETGEAR DGN setup.cgi OS Command Injection | Affected: NETGEAR / DGN1000 | CVSS: 9.8 (CRITICAL) | EPSS: 0.2911 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Insufficient input validation leading to memory overread | Affected: NetScaler / ADC, Gateway | CVSS: 9.3 (CRITICAL) | EPSS: 0.83996 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including... | Affected: Meta / react-server-dom-webpack, react-server-dom-turbopack, react-server-dom-parcel | CVSS: 10.0 (CRITICAL) | EPSS: 0.99562 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: WebPros cPanel and WHM Authentication Bypass via Login Flow | Affected: WebPros / cPanel, WP Squared, WHM | CVSS: 9.3 (CRITICAL) | EPSS: 0.90543 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) 10.0 and 10.1 because of improper... | Affected: Zimbra / Zimbra Collaboration (ZCS) | CVSS: 8.8 (HIGH) | EPSS: 0.31769 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities | Affected: Palo Alto Networks / Cloud NGFW, PAN-OS, Prisma Access | CVSS: 7.8 (HIGH) | EPSS: 0.18583 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: GeoServer is vulnerable to an Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature | Affected: geoserver / geoserver | CVSS: 8.2 (HIGH) | EPSS: 0.66753 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration).  Supported versions... | Affected: Oracle Corporation / Oracle Concurrent Processing | CVSS: 9.8 (CRITICAL) | EPSS: 0.99722 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute... | Affected: Fortinet / FortiClientEMS | CVSS: 9.8 (CRITICAL) | EPSS: 0.88505 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiWeb... | Affected: Fortinet / FortiWeb | CVSS: 9.8 (CRITICAL) | EPSS: 0.9671 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an... | Affected: Fortinet / FortiClientEMS | CVSS: 9.8 (CRITICAL) | EPSS: 0.94085 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled. | Affected: Zimbra / Zimbra Collaboration Suite | CVSS: 9.8 (CRITICAL) | EPSS: 0.85416 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 | Affected: Dassault Systèmes / DELMIA Apriso | CVSS: 9.1 (CRITICAL) | EPSS: 0.69174 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Linksys Routers E/WAG/WAP/WES/WET/WRT-Series | Affected: Linksys / E4200, E3200, E3000, E2500 v1/v2, E2100L v1, E2000, E1550, E1500 v1, E1200 v1, E1000 v1, E900 v1 | CVSS: 10.0 (CRITICAL) | EPSS: 0.85373 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A supply chain attack compromised the official installation packages of DAEMON Tools Lite (Windows versions 12.5.0.2421 through 12.5.0.2434),... | Affected: AVB Disc Soft / DAEMON Tools Lite | CVSS: 9.3 (CRITICAL) | EPSS: 0.00754 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Compromised Nx Console version 18.95.0 | Affected: nrwl / nx-console | CVSS: 9.3 (CRITICAL) | EPSS: 0.00952 | Used in malware: yes | Not yet in CISA KEV: False

Compromised Nx Console version 18.95.0


KEVIntel entry: Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys | Affected: @tanstack / arktype-adapter, eslint-plugin-router, eslint-plugin-start, history, nitro-v2-vite-plugin, react-router, react-router-devtools, react-router-ssr-query, react-start, react-start-client, react-start-rsc, react-start-server, router-cli, router-core, router-devtools, router-devtools-core, router-generator, router-plugin, router-ssr-query-core, router-utils, outer-vite-plugin, solid-router, solid-router-devtools, solid-router-ssr-query, solid-start, solid-start-client, solid-start-server, start-client-core, start-fn-stubs, start-plugin-core, start-server-core, start-static-server-functions, start-storage-context, valibot-adapter, virtual-file-routes, vue-router, vue-router-devtools, vue-router-ssr-query, vue-start, vue-start-client, vue-start-server, zod-adapter | CVSS: 9.6 (CRITICAL) | EPSS: 0.01601 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Vulnerability in avatar_uploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or sanitize the file path. | Affected: Robbin Zhao / avatar_uploader | CVSS: 7.5 (HIGH) | EPSS: 0.56924 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Order Listener for WooCommerce < 3.2.2 - Unauthenticated SQLi | Affected: Unknown / Order Listener for WooCommerce – Play Sounds Instantly on New Orders | CVSS: 9.8 (CRITICAL) | EPSS: 0.09792 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Daily Prayer Time < 2022.03.01 - Unauthenticated SQLi | Affected: Unknown / Daily Prayer Time | CVSS: 9.8 (CRITICAL) | EPSS: 0.09214 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to... | Affected: Dogtag PKI / Dogtag Certificate System | CVSS: 7.5 (HIGH) | EPSS: 0.85323 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: KnowledgeDeliver deployments before February 24, 2026 use a static ASP.NET/IIS machineKey value | Affected: Digital Knowledge / KnowledgeDeliver | CVSS: 9.1 (CRITICAL) | EPSS: 0.0081 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: D-Link DSL-2730U/2750U/2750E Path Traversal Arbitrary File Read | Affected: D-Link / DSL-2730U, DSL-2750U, DSL-2750E | CVSS: 8.7 (HIGH) | EPSS: 0.0059 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: BYTEVALUE Intelligent Flow Control Router Command Injection | Affected: BYTEVALUE (Luoyang Baiwei Intelligent Technology Co., Ltd.) / Flow Control Router | CVSS: 9.3 (CRITICAL) | EPSS: 0.01932 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: NGINX ngx_http_rewrite_module vulnerability | Affected: F5 / NGINX Plus, NGINX Open Source | CVSS: 9.2 (CRITICAL) | EPSS: 0.14453 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: IQrouter through 3.3.1, when unconfigured, has multiple remote code execution vulnerabilities in the web-panel because of Bash Shell Metacharacter... | Affected: Evenroute / IQrouter | CVSS: 9.8 (CRITICAL) | EPSS: 0.00719 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Tenda AC1206 setMacFilterCfg formSetMacFilterCfg stack-based overflow | Affected: Tenda / AC1206 | CVSS: 8.7 (HIGH) | EPSS: 0.01703 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow execution | Affected: MervinPraison / PraisonAI | CVSS: 7.3 (HIGH) | EPSS: 0.02138 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Karel IP Phone IP1211 Path Traversal | Affected: Karel / Karel IP Phone IP1211 | CVSS: 8.5 (HIGH) | EPSS: 0.01845 | Used in malware: unknown | Not yet in CISA KEV: True

Karel IP Phone IP1211 Path Traversal


KEVIntel entry: Splunk through 7.0.1 allows information disclosure by appending __raw/services/server/info/server-info?output_mode=json to a query, as demonstrated... | Affected: Splunk / Splunk | CVSS: 5.3 (MEDIUM) | EPSS: 0.92221 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Journyx Unauthenticated XML External Entities Injection | Affected: Journyx / Journyx (jtime) | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: WordPress HT Mega Absolute Addons for Elementor plugin <= 2.2.0 - Unauthenticated Privilege Escalation vulnerability | Affected: HasThemes / HT Mega | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Sitecore XM and XP Hardcoded Credentials | Affected: Sitecore / Experience Manager, Experience Platform | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Improper access control to download file in metersphere | Affected: metersphere / metersphere | CVSS: 8.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry:  Extensive VC Addons for WPBakery page builder < 1.9.1 - Unauthenticated RCE | Affected: Unknown / Extensive VC Addons for WPBakery page builder | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Missing Authorization vulnerability in Melis Platform | Affected: Melis Technology / Melis Platform | CVSS: 9.3 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Breeze Cache <= 2.4.4 - Unauthenticated Arbitrary File Upload via fetch_gravatar_from_remote | Affected: cloudways / Breeze Cache | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The WordPress Automatic Plugin for WordPress is vulnerable to arbitrary options updates in versions up to, and including, 3.53.2. This is due to... | Affected: ValvePress / WordPress Automatic Plugin | CVSS: 9.1 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: LMDeploy Vulnerable to Server-Side Request Forgery (SSRF) via Vision-Language Image Loading | Affected: InternLM / lmdeploy | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the content of internal network... | Affected: Atlassian / Jira | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Winlogon Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows 11 Version 25H2, Windows 11 version 26H1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: ScreenConnect Instance Level Cryptographic Material Exposure | Affected: ConnectWise / ScreenConnect | CVSS: 9.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: .NET Denial of Service Vulnerability | Affected: Microsoft / .NET 10.0, .NET 9.0, Microsoft.Bcl.Memory | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True

.NET Denial of Service Vulnerability


KEVIntel entry: SQL Server Elevation of Privilege Vulnerability | Affected: Microsoft / Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 (CU 31), Microsoft SQL Server 2017 (GDR), Microsoft SQL Server 2019 (CU 32), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2022 (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 23), Microsoft SQL Server 2025 (CU 2), Microsoft SQL Server 2025 for x64-based Systems (GDR) | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText,... | Affected: Joomla / Zh BaiduMap | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A vulnerability exists in the Buffalo Link Station version 1.85-0.01 that allows unauthenticated or guest-level users to enumerate valid usernames... | Affected: Buffalo / Link Station | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Apache ActiveMQ: Jolokia and REST API were not secured with default configuration | Affected: Apache Software Foundation / Apache ActiveMQ | CVSS: 8.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: ShowDoc < 2.8.7 Unauthenticated File Upload Remote Code Execution | Affected: ShowDoc / ShowDoc | CVSS: 9.4 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Nginx UI: Unauthenticated MCP Endpoint Allows Remote Nginx Takeover | Affected: 0xJacky / nginx-ui | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal. | Affected: uWSGI / uWSGI | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability... | Affected: Mozilla / Firefox, Firefox ESR, Thunderbird | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR,... | Affected: Sudo / Sudo | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the... | Affected: OpenSSH / OpenSSH | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Infinite loop in BN_mod_sqrt() reachable when parsing certificates | Affected: OpenSSL / OpenSSL | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4,... | Affected: Fortinet / FortiOS, FortiProxy, FortiSwitchManager, FortiPAM | CVSS: 5.4 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: SQL injection vulnerability in the wp_where function in WeiPHP 5.0. | Affected: WeiPHP / WeiPHP 5.0 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Node-RED-Dashboard before 2.26.2 allows ui_base/js/..%2f directory traversal to read files. | Affected: Node-RED / Node-RED-Dashboard | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Flowise has Remote Code Execution vulnerability | Affected: FlowiseAI / Flowise | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: ZimaOS has Authentication Bypass via System-Level Username | Affected: IceWhaleTech / ZimaOS | CVSS: 9.4 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: whyour qinglong API express.ts protection mechanism | Affected: whyour / qinglong | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Ninja Forms - File Upload <= 3.3.26 - Unauthenticated Arbitrary File Upload | Affected: SaturdayDrive / Ninja Forms - File Uploads | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Unsupervised OS command execution leads to remote code execution by unauthenticated network attackers | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Vite bypasses server.fs.deny when using `?raw??` | Affected: vitejs / vite | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: REC in MCPJam inspector due to HTTP Endpoint exposes | Affected: MCPJam / inspector | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: listmonk: Active sessions remain valid after password reset and password change | Affected: knadh / listmonk | CVSS: 7.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: python-ecdsa: Denial of Service via improper DER length validation in crafted private keys | Affected: tlsfuzzer / python-ecdsa | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to insufficient escaping and parameterization on user... | Affected: davidfcarr / RSVPMaker | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct an SSRF attack on... | Affected: Cisco / Cisco Unified Contact Center Enterprise, Cisco Unified Contact Center Express, Cisco Finesse, Cisco Packaged Contact Center Enterprise | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Race Condition leading to User Session Mixup | Affected: NetScaler / ADC, Gateway | CVSS: 7.7 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Local File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthorized internal files reading [/etc/passwd] and [/etc/shadow]. | Affected: D-Link / DAP-1620 | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: osCommerce 2.3.4.1 Installer Unauthenticated Configuration File Injection PHP Code Execution | Affected: osCommerce / Online Merchant | CVSS: 9.3 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An attacker could send a specifically crafted payload to the XML-RPC invocation script and trigger the unserialize() call on the "what" parameter... | Affected: Revive Adserver / Revive Adserver | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Google XML Sitemap Generator < 2.0.4 - Reflected Cross-Site Scripting | Affected: Unknown / XML Sitemap Generator for Google | CVSS: 6.1 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Critical Remote Code Execution vulnerability reported in Windchill | Affected: PTC / Windchill PDMLink, FlexPLM | CVSS: 9.3 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Directorist < 7.3.1 - Unauthenticated Email Address Disclosure | Affected: Unknown / Directorist – WordPress Business Directory Plugin with Classified Ads Listings | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The Tenda AC1200 V-W15Ev2 V15.11.0.10(1576) router is vulnerable to improper authorization / improper session management that allows the router... | Affected: Tenda / AC1200 V-W15Ev2 | CVSS: 4.9 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Sangfor Operation and Maintenance Management System common.jsp unrestricted upload | Affected: Sangfor / Operation and Maintenance Management System | CVSS: 6.9 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: GeoVision Geowebserver 5.3.3 - Local FIle Inclusion | Affected: Geovision / GeoVision Geowebserver | CVSS: 8.7 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Aquatronica Controller System Complete Information Disclosure | Affected: Aquatronica / Aquatronica Controller System | CVSS: 9.3 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices) and Oracle Web Services Manager... | Affected: Oracle Corporation / Oracle Identity Manager, Oracle Web Services Manager | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: AVTECH IP camera, DVR, and NVR Devices Unauthenticated Command Injection | Affected: AVTECH / IP camera, DVR, and NVR Devices | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and... | Affected: Comtrend / VR-3033 | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root | Affected: Juniper Networks / Junos OS Evolved | CVSS: 9.3 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: D-Link DAR-8000-10 sys1.php os command injection | Affected: D-Link / DAR-8000-10 | CVSS: 6.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: sar2html OS Command Injection | Affected: sar2html / sar2html | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True

sar2html OS Command Injection


KEVIntel entry: telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc... | Affected: GNU / inetutils | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered to contain a SQL injection... | Affected: Nortek / Linear eMerge E3-Series | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do | Affected: ming-soft / MCMS | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: rConfig 3.9.4 and previous versions has unauthenticated compliancepolicies.inc.php SQL injection. Because, by default, nodes' passwords are stored... | Affected: rConfig / rConfig | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to... | Affected: WAVLINK / WN530H4 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: WooCommerce Ultimate Gift Card <= 2.6.0 - Unauthenticated Arbitrary File Upload | Affected: WP Swings / WooCommerce Ultimate Gift Card | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Control iD iDSecure passwordCustom Authentication Bypass | Affected: Control iD / iDSecure | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Contest Gallery < 13.1.0.6 - Missing Access Controls to Unauthenticated SQL injection / Email Address Disclosure | Affected: Unknown / Contest Gallery – Photo Contest Plugin for WordPress | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server. | Affected: Veeam / Backup and Replication | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user. | Affected: Veeam / Backup and Replication | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: D-Link DIR-823G Web Management Interface HNAP1 SetVirtualServerSettings access control | Affected: D-Link / DIR-823G | CVSS: 6.9 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: InPost Gallery < 2.1.4.1 - Unauthenticated LFI to RCE | Affected: Unknown / InPost Gallery | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Registrations for the Events Calendar < 2.7.6 - Unauthenticated SQL Injection | Affected: Unknown / Registrations for the Events Calendar – Event Registration Plugin | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones through 6.4 SP4 (R6.4.0.4006), and the 6970 Conference Unit... | Affected: Mitel / 6800 Series, 6900 Series, 6900w Series SIP Phones, 6970 Conference Unit | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Junos OS: SRX Series and EX Series: J-Web doesn't sufficiently sanitize input to prevent XSS | Affected: Juniper Networks / Junos OS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: TamronOS ping os command injection | Affected: Tamron / TamronOS | CVSS: 6.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True

TamronOS ping os command injection


KEVIntel entry: Dahua EIMS capture_handle.action RCE | Affected: Zhejiang Dahua Technology Co., Ltd. / EIMS | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True

Dahua EIMS capture_handle.action RCE


KEVIntel entry: Employee Records System v1.0 Arbitrary File Upload RCE | Affected: Employee Records System / Employee Records System | CVSS: 9.3 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Landray EIS 2001 through 2006 allows Message/fi_message_receiver.aspx?replyid= SQL injection. | Affected: Landray / EIS | CVSS: 4.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Multiple LDAP injections vulnerabilities exist in SecurEnvoy MFA before 9.4.514 due to improper validation of user-supplied input. An... | Affected: SecurEnvoy / MFA | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Infographic Maker - iList < 4.3.8 - Unauthenticated SQL Injection | Affected: Unknown / Infographic Maker – iList | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Title Experiments Free < 9.0.1 - Unauthenticated SQLi | Affected: Unknown / Title Experiments Free | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Samsung WLAN AP WEA453e < 5.2.4.T1 Unauthenticated RCE via command1 and command2 Parameters | Affected: Samsung Electronics / WLAN AP WEA453e | CVSS: 9.3 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via... | Affected: Jan / Jan v0.4.12 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface. | Affected: Jan / Jan v0.4.12 | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Multiple storage XSS vulnerabilities were discovered on BF-430, BF-431 and BF-450M TCP/IP Converter devices from CHIYU Technology Inc due to a lack... | Affected: CHIYU Technology Inc / BF-430, BF-431, BF-450M TCP/IP Converter | CVSS: 5.4 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An access control issue in the component /login/hostinfo.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensitive information without... | Affected: ipTIME / A2004 | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Sangfor Endpoint Detection and Response OS Command Injection | Affected: Sangfor Technologies Co., Ltd. / Endpoint Detection and Response Platform | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) products. | Affected: Micro Focus / Application Performance Management, Operation Bridge (containerized), Operation Bridge Manager | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Authentication Bypass via URI Manipulation in Multiple WSO2 Products' Management Console Leading to Partial Information Disclosure | Affected: WSO2 / WSO2 Identity Server, WSO2 Enterprise Integrator, WSO2 Universal Gateway, WSO2 Traffic Manager, WSO2 API Manager, WSO2 API Control Plane, WSO2 Identity Server as Key Manager, WSO2 Open Banking AM, WSO2 Open Banking IAM, org.wso2.carbon:org.wso2.carbon.ui | CVSS: 4.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection | Affected: erumfaham / Likes and Dislikes Plugin | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Plenti arbitrary file write vulnerability | Affected: plentico / plenti | CVSS: 8.9 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Business Directory Plugin – Easy Listing Directories for WordPress <= 6.4.2 - Unauthenticated SQL Injection via listingfields Parameter | Affected: strategy11team / Business Directory Plugin – Easy Listing Directories for WordPress | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Semicolon Path Injection on API /api;/config | Affected: Erudika / scoold | CVSS: 8.7 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: TOTOLINK EX1800T V9.1.0cu.2112_B20220316 has a vulnerability in the apcliEncrypType parameter that allows unauthorized execution of arbitrary... | Affected: TOTOLINK / EX1800T | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Arbitrary file read in the `/api/v2/simulation` endpoint in hoverfly (`GHSL-2023-274`) | Affected: SpectoLabs / hoverfly | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Server Proxy... | Affected: Oracle Corporation / Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php. Remote unauthenticated users can... | Affected: PHPGurukul / Hospital Management System | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: WooCommerce Dropshipping < 4.4 - Unauthenticated SQLi | Affected: Unknown / WooCommerce Dropshipping | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Expedition: OS Command Injection Vulnerability | Affected: Palo Alto Networks / Cloud NGFW, Expedition, Panorama, PAN-OS, Prisma Access | CVSS: 7.7 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: LOYTEC LGATE-902 6.3.2 devices allow Directory Traversal. | Affected: LOYTEC / LGATE-902 | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: NSecsoft NSecKrnl process termination privilege escalation | Affected: NSecsoft / NSecKrnl | CVSS: 5.7 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers restart the device remotely through... | Affected: Cisco / Unified IP Conference Station 7937G | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter. | Affected: Cybele Software / Thinfinity VirtualUI | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. The yrange value is written... | Affected: OpenTSDB / OpenTSDB | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling | Affected: n8n-io / n8n | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image ImageURL parameter. | Affected: Emby / Emby Server | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS framework. A... | Affected: VMware / Workspace ONE Access | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: EduSoho < 22.4.7 Arbitrary File Read via classroom-course-statistics | Affected: Hangzhou Kuozhi Network Technology Co., Ltd. / EduSoho | CVSS: 8.7 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: WeiPHP Path Traversal Arbitrary File Read | Affected: Shenzhen Yuanmengyun Technology Co., Ltd. / WeiPHP | CVSS: 8.7 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Leadsec VPN Path Traversal Arbitrary File Read | Affected: Beijing NetGuard Nebula Information Technology Co., Ltd. / Leadsec SSL VPN | CVSS: 8.7 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Fanwei E-Office Unauthenticated File Upload | Affected: Shanghai Fanwei Network Technology / E-Office | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Fusion Builder < 3.6.2 - Unauthenticated SSRF | Affected: Unknown / Fusion Builder | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Dahua Smart Cloud Gateway Registration Management Platform SQL Injection | Affected: Zhejiang Dahua Technology Co., Ltd. / Smart Cloud Gateway Registration Management Platform | CVSS: 8.7 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Weaver E-cology SQL Injection | Affected: Weaver / E-cology | CVSS: 8.7 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True

Weaver E-cology SQL Injection


KEVIntel entry: An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0... | Affected: TP-Link / TL-WR840N, TL-WR841N | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: PHPJabbers Food Delivery Script 3.0 has a SQL injection (SQLi) vulnerability in the "q" parameter of index.php. | Affected: PHPJabbers / Food Delivery Script | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: phpMyFAQ has unauthenticated config backup download via /api/setup/backup | Affected: thorsten / phpMyFAQ | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Unauth Admin Reset Password on AC Smart II | Affected: LG Electronics / AC Smart II | CVSS: 7.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information.

This... | Affected: Cisco / Cisco Smart License Utility | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before... | Affected: Zoho / ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, OpUtils | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: ZenTao Biz < 6.5, Max < 3.0, & Open Source Edition 16.5/16.5beta1 SQL Injection via user-login.html | Affected: Qingdao Esoft Tianchuang Network Technology Co., Ltd. / ZenTao Biz, ZenTao Max, ZenTao Open Source Edition | CVSS: 8.7 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: anji-plus AJ-Report Authentication Bypass | Affected: anji-plus / AJ-Report | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Ruijie Gateway EG & NBR Models v11.1(6)B9P1 - 11.9(4)B12P1 RCE | Affected: Beijing Star-Net Ruijie Network Technology Co., Ltd. / RG-EG1000C, RG-EG2000F, RG-EG2000K, RG-EG2000L, RG-EG2000CE, RG-EG2000SE, RG-EG2000GE, RG-EG2000XE, RG-EG2000UE, RG-EG3000CE, RG-EG3000SE, RG-EG3000GE, RG-EG3000ME, RG-EG3000UE, RG-EG3000XE, RG-EG2100-P, EG3210, EG3220, EG3230, EG3250, NBR108G-P, NBR1000G-E, NBR1300G-E, NBR1700G-E, NBR2100G-E, NBR2500D-E, NBR3000D-E, NBR6120-E, NBR6135-E, NBR6205-E, NBR6210-E, NBR6215-E, NBR800G, NBR950G, NBR1000G-C, NBR2000G-C, NBR3000G-S | CVSS: 9.2 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Changjetong T+ <= 16.x GetStoreWarehouseByStore Deserialization RCE | Affected: Changjetong Information Technology Co., Ltd. / T+ | CVSS: 9.3 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command injection. An unauthenticated attacker on the local... | Affected: D-Link / DSL-2750U | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: FastAdmin lang path traversal | Affected: FastAdmin / FastAdmin | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True

FastAdmin lang path traversal


KEVIntel entry: Yonyou NC BeanShell Command Injection | Affected: Yonyou Co., Ltd. / UFIDA NC | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True

Yonyou NC BeanShell Command Injection


KEVIntel entry: Vacron NVR Remote Command Execution | Affected: Vacron / Network Video Recorder (NVR) | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True

Vacron NVR Remote Command Execution


KEVIntel entry: Shenzhen TVT CCTV-DVR Command Injection | Affected: Shenzhen TVT / CCTV-DVR | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True

Shenzhen TVT CCTV-DVR Command Injection


KEVIntel entry: Ruijie NBR Router Administrative Credential Disclosure | Affected: Ruijie / NBR Router | CVSS: 8.7 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue was discovered in the 3CX Phone System Management Console prior to version 18 Update 3 FINAL. An unauthenticated attacker could abuse... | Affected: 3CX / 3CX Phone System | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The Adning Advertising plugin for WordPress is vulnerable to file deletion via path traversal in versions up to, and including, 1.5.5. This allows... | Affected: tunafish / Adning Advertising | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Ruckus vRioT through 1.5.1.0.21 has an API backdoor that is hardcoded into validate_token.py. An unauthenticated attacker can interact with the... | Affected: Ruckus Wireless / vRioT | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: SibSoft Xfilesharing through 2.5.1 allows cgi-bin/up.cgi arbitrary file upload. This can be combined with CVE-2019-18951 to achieve remote code... | Affected: SibSoft / Xfilesharing | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Parse Server exposes the data schema via GraphQL API | Affected: parse-community / parse-server | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: True Ranker <= 2.2.2 Directory Traversal/Arbitrary File Read | Affected: True Ranker / True Ranker | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: User Enumeration vulnerability in TerraMaster TOS <= 4.2.06 allows remote unauthenticated attackers to identify valid users within the system... | Affected: TerraMaster / TOS | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Currently, all versions of MAGMI are vulnerable to CSRF due to the lack of CSRF tokens. RCE (via phpcli command) is possible in the event that a... | Affected: MAGMI / MAGMI | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue was discovered on Tuoshi/Dionlink LT15D 4G Wi-Fi devices through M7628NNxlSPv2xUI_v1.0.1802.10.08_P4 and LT21B devices through... | Affected: Tuoshi / LT15D 4G Wi-Fi | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Argo CD: Project API Token Exposes Repository Credentials | Affected: argoproj / argo-cd | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows information disclosure of memory contents... | Affected: SecurePoint / UTM | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote attackers to execute arbitrary commands via shell... | Affected: Zhone / zNID GPON 2426A | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id. The vulnerability does not need any... | Affected: PHPSHE / PHPSHE 1.7 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0 through 6.3.7 and version before 6.2.4 may allow an... | Affected: Fortinet / Fortinet FortiWeb | CVSS: 6.1 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An unauthenticated arbitrary file read issue exists in all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the... | Affected: Citrix / ShareFile StorageZones Controller | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry:   Cross-site scripting (XSS) | Affected: Cloud Software Group / Citrix StoreFront | CVSS: 5.4 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True

Cross-site scripting (XSS)


KEVIntel entry: Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sys_config_valid.xgi,... | Affected: Genexis / PLATINUM 4410 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Improper input handling in /Grocery/search_products_itname.php inPuneethReddyHC event-management 1.0 permits SQL injection via the sitem_name POST... | Affected: PuneethReddyHC / event-management | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Unauthenticated Remote Code Execution in Kaseya VSA < v9.5.5 | Affected: Kaseya / VSA | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Authentication Bypass in D-Link D-View 8 | Affected: D-Link / D-View 8 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through... | Affected: Fortinet / FortiWeb | CVSS: 9.1 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Authorization Bypass in Next.js Middleware | Affected: vercel / next.js | CVSS: 9.1 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Cacti allows Arbitrary File Creation leading to RCE | Affected: Cacti / cacti | CVSS: 8.7 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Docker Desktop allows unauthenticated access to Docker Engine API from containers | Affected: Docker / Docker Desktop | CVSS: 9.3 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /homeaction.php cat_id parameter. Using a... | Affected: PuneethReddyHC / online-shopping-system-advanced | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: BadgeOS < 3.7.1.3 - Subscriber+ SQLi | Affected: Unknown / BadgeOS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True

BadgeOS < 3.7.1.3 - Subscriber+ SQLi


KEVIntel entry: Sneeit Framework <= 8.3 - Unauthenticated Remote Code Execution in sneeit_articles_pagination_callback | Affected: Sneeit / Sneeit Framework | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Unauthenticated Remote Code Execution in Roxy-wi | Affected: hap-wi / roxy-wi | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The tree list functionality in the photo gallery application in ASUSTOR ADM 3.1.0.RFQ3 has a SQL injection vulnerability that affects the... | Affected: ASUSTOR / ADM | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Apache Flink directory traversal attack: remote file writing through the REST API | Affected: Apache Software Foundation / Apache Flink | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor 24.12.92 - 51.1.14 - Unauthenticated Privilege Escalation | Affected: kingaddons / King Addons for Elementor – 4,000+ ready Elementor sections, 650+ templates, 70+ FREE widgets for Elementor | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the HTTP Host... | Affected: Netgate / pfSense pfBlockerNG | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Microsoft Windows File Explorer Spoofing Vulnerability | Affected: Microsoft / Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360 before 5401 are vulnerable to access-control... | Affected: Zoho / ["ManageEngine Access Manager Plus", "Password Manager Pro", "PAM360"] | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True

ManageEngine Access Manager Plus
Password Manager Pro
PAM360


KEVIntel entry: HTML2WP <= 1.0.0 - Unauthenticated Arbitrary File Upload | Affected: Unknown / HTML2WP | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: WooCommerce Help Scout < 2.9.1 - Unauthenticated Arbitrary File Upload leading to RCE | Affected: Unknown / WooCommerce Help Scout | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Ruijie RG-UAC nmc_sync.php Command Injection | Affected: Ruijie Networks Co., Ltd. / RG-UAC | CVSS: 9.3 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {"topicurl":"setting/getSanvas"} POST to the... | Affected: TOTOLINK / Realtek SDK based routers | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Ruijie RG-EW1200G Administrator Password set_passwd access control | Affected: Ruijie / RG-EW1200G | CVSS: 6.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Apache OFBiz: Arbitrary file properties reading and SSRF attack | Affected: Apache Software Foundation / Apache OFBiz | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: uDraw < 3.3.3 - Unauthenticated Arbitrary File Access | Affected: Unknown / Web To Print Shop : uDraw | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers to obtain sensitive... | Affected: Cisco / Linksys E4200 | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability | Affected: 7-Zip / 7-Zip | CVSS: 7.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that... | Affected: Anyscale / Ray | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: GeoServer Missing Authorization on REST API Index | Affected: geoserver / geoserver | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: AIX Code Execution | Affected: IBM / AIX, VIOS | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True

AIX Code Execution


KEVIntel entry: A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 drivers used by some Lenovo... | Affected: Lenovo / Dispatcher 3.0 Driver, Dispatcher 3.1 Driver | CVSS: 7.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Squid's URN Handling can lead to Buffer Overflow | Affected: squid-cache / squid | CVSS: 9.3 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Snipe-IT v8.3.4 (build 20218) contains a reflected cross-site scripting (XSS) vulnerability in the CSV Import workflow. When an invalid CSV file is... | Affected: Snipe-IT / Snipe-IT | CVSS: 6.1 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Xibo CMS vulnerable to Remote Code Execution through Zip Slip | Affected: xibosignage / xibo-cms | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Remote Code Execution vulnerability when restoring PLAIN-format SQL dumps in server mode (pgAdmin 4) | Affected: pgadmin.org / pgAdmin 4 | CVSS: 9.1 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip() method is used to restore the HSQLDB database used in SMS. It takes the... | Affected: Keysight Technologies / Tentacle | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The News & Blog Designer Pack – WordPress Blog Plugin — (Blog Post Grid, Blog Post Slider, Blog Post Carousel, Blog Post Ticker, Blog Post... | Affected: infornweb / News & Blog Designer Pack – WordPress Blog Plugin — (Blog Post Grid, Blog Post Slider, Blog Post Carousel, Blog Post Ticker, Blog Post Masonry) | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Advanced Booking Calendar < 1.7.1 - Admin+ SQLi | Affected: Unknown / Advanced Booking Calendar | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: main/inc/ajax/model.ajax.php in Chamilo through 1.11.14 allows SQL Injection via the searchField, filters, or filters2 parameter. | Affected: Chamilo / Chamilo LMS | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A directory traversal vulnerability in HPE Intelligent Management Center (IMC) PLAT 7.3 E0504P02 could allow remote code execution. | Affected: Hewlett Packard Enterprise / Intelligent Management Center | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Dahua Smart Park Integrated Management Platform Front-End Arbitrary File Upload | Affected: Zhejiang Dahua Technology Co., Ltd. / Smart Park Integrated Management Platform | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Elber Communications Equipment Authentication Bypass Using an Alternate Path or Channel | Affected: Elber / Signum DVB-S/S2 IRD, Cleber/3 Broadcast Multi-Purpose Platform, Reble610 M/ODU XPIC IP-ASI-SDH, ESE DVB-S/S2 Satellite Receiver, Wayber Analog/Digital Audio STL | CVSS: 9.3 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: ETQ Reliance CG Authentication Bypass via Trailing Space RCE | Affected: ETQ / Reliance CG (legacy) | CVSS: 9.3 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Sensitive information disclosure | Affected: NetScaler / NetScaler Console | CVSS: 9.4 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True

Sensitive information disclosure


KEVIntel entry: WHMpress <= 6.3-revision-0 - Unauthenticated Local File Inclusion to Arbitrary Options Update | Affected: creativeon / WHMpress - WHMCS WordPress Integration Plugin | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Unauthenticated Arbitrary Command Injection in Evertz SDVN | Affected: Evertz / 3080ipx-10G, MViP-II, cVIP, 7890IXG, CC Access Server, 5782XPS-APP-4E | CVSS: 9.3 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Securden Unified PAM Authentication Bypass | Affected: Securden / Unified PAM | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: SugarCRM PHP Deserialization RCE | Affected: SugarCRM / SugarCRM | CVSS: 9.3 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True

SugarCRM PHP Deserialization RCE


KEVIntel entry: WordPress Eventin plugin <= 4.0.26 - Privilege Escalation Vulnerability | Affected: Arraytics / Eventin | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Hoverfly vulnerable to remote code execution at `/api/v2/hoverfly/middleware` endpoint due to insecure middleware implementation | Affected: SpectoLabs / hoverfly | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Arcserve UDP through 9.0.6034 allows authentication bypass. The method getVersionInfo at WebServiceImpl/services/FlashServiceImpl leaks the... | Affected: Arcserve / Arcserve UDP | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An XML External Entity (XEE) vulnerability allows server-side request forgery (SSRF) and potential code execution in Sophos Mobile managed... | Affected: Sophos / Sophos Mobile managed on-premises | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: NextChat vulnerable to Server-Side Request Forgery and Cross-site Scripting | Affected: ChatGPTNextWeb / NextChat | CVSS: 9.1 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: ColumbiaSoft Document Locator WebTools login improper authentication | Affected: ColumbiaSoft / Document Locator | CVSS: 7.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: WooCommerce Checkout Field Manager < 18.0 - Unauthenticated Arbitrary File Upload | Affected: Unknown / WooCommerce Checkout Field Manager | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Arbitrary File Upload Vulnerability | Affected: Cisco / Cisco Small Business RV Series Router Firmware | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Woo Product Table < 3.1.2 - Unauthenticated Arbitrary Function Call | Affected: Unknown / Product Table for WooCommerce (wooproducttable) | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: WP Video Gallery <= 1.7.1 - Unauthenticated SQLi | Affected: Unknown / WP Video Gallery | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Unauthenticated Remote Code Execution in Roxy-WI | Affected: hap-wi / roxy-wi | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: MapSVG < 6.2.20 - Unauthenticated SQLi | Affected: Unknown / MapSVG | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True

MapSVG < 6.2.20 - Unauthenticated SQLi


KEVIntel entry: Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Dairy Farm Shop Management System v1.0 allows... | Affected: Dairy Farm / Shop Management System | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Apache ShenYu Admin bypass JWT authentication | Affected: Apache Software Foundation / Apache ShenYu Admin | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: LumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated blind XXE via an API request to PageControllerXml.jsp. One can send a... | Affected: Lumis / LumisXP | CVSS: 9.1 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Bestbooks <= 2.6.3 - Unauthenticated SQLi | Affected: Unknown / Bestbooks | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An unauthenticated SQL Injection vulnerability in Rosario Student Information System (aka rosariosis) before 8.1.1 allows remote attackers to... | Affected: Rosario Student Information System / rosariosis | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr_server/device/getThumbnail. | Affected: LG / SuperSign CMS | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: JetBrains TeamCity Plugin before 2020.2.85695 SSRF. Vulnerability that could potentially expose user credentials. | Affected: JetBrains / TeamCity Plugin | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: In bta_hf_client_cb_init of bta_hf_client_main.cc, there is a possible remote code execution due to a use after free. This could lead to remote... | Affected: Google / Android | CVSS: 8.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Four-Faith Industrial Router adjust_sys_time OS Command Injection | Affected: Four-Faith / F3x24, F3x36 | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autologin.cgi... | Affected: Teltonika / RUT9XX routers | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: WP Freeio <= 1.2.21 - Unauthenticated Privilege Escalation | Affected: ApusTheme / WP Freeio | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow remote attackers to... | Affected: Guangzhou / 1GE ONU V2801RW and V2804RGW | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Apache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled | Affected: Apache Software Foundation / Apache Tomcat | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: SPH Engineering UgCS 5.13.0 is vulnerable to Arbitary code execution. | Affected: SPH Engineering / UgCS | CVSS: 8.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Openssh: regresshion - race condition in ssh allows rce/dos | Affected: , Red Hat / , Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat OpenShift Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.15, Red Hat OpenShift Container Platform 4.16, Red Hat Ceph Storage 5, Red Hat Ceph Storage 6, Red Hat Ceph Storage 7, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Incorrect access control in the kernel driver of ThreatFire System Monitor v4.7.0.53 allows attackers to escalate privileges and execute arbitrary... | Affected: ThreatFire / ThreatFire System Monitor | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Chef Automate compliance service SQL Injection Vulnerability | Affected: Progress Software / Chef Automate | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain... | Affected: SonicWall / SMA100 | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a remote authenticated attacker to... | Affected: SonicWall / SMA100 | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service... | Affected: SonicWall / SMA100 | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.4 through 7.2.12... | Affected: Fortinet / FortiOS | CVSS: 4.0 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check in the sidepanel of a page intentionally accessible to users... | Affected: Jenkins Project / Jenkins | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: SysAid - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | Affected: Sysaid / SysAid | CVSS: 9.1 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: QTS, QuTS hero, QuTScloud | Affected: QNAP Systems Inc. / QTS, QuTS hero, QuTScloud | CVSS: 5.8 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True

QTS, QuTS hero, QuTScloud


KEVIntel entry: Hunk Companion < 1.9.0 - Unauthenticated Plugin Installation | Affected: Unknown / Hunk Companion | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Hunk Companion <= 1.8.4 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation | Affected: themehunk / Hunk Companion | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: GutenKit <= 2.1.0 - Unauthenticated Arbitrary File Upload | Affected: ataurr / GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: 5VTechnologies Blue Angel Software Suite OS Command Injection | Affected: 5VTechnologies / Blue Angel Software Suite | CVSS: 7.7 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Adobe Experience Manager (MS) | Deserialization of Untrusted Data (CWE-502) | Affected: Adobe / Adobe Experience Manager (MS) | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: ICTBroadcast <= 7.4 Unauthenticated Session Cookie RCE | Affected: ICT Innovations / ICTBroadcast | CVSS: 9.3 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Redis Lua Use-After-Free may lead to remote code execution | Affected: redis / redis | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to... | Affected: OpenBSD / OpenSSH | CVSS: 3.6 (LOW) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: OS Command Injection vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x | Affected: Dassault Systèmes / Station Launcher App in 3DEXPERIENCE platform | CVSS: 9.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: FatPipe software allows privilege escalation | Affected: FatPipe / WARP, IPVPN, MPVPN | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Service Finder Bookings <= 6.0 - Authentication Bypass via User Switch Cookie | Affected: aonetheme / Service Finder Bookings | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: mojoPortal <=2.9.0.1 is vulnerable to Directory Traversal via BetterImageGallery API Controller - ImageHandler Action. An attacker can exploit this... | Affected: mojoPortal / mojoPortal | CVSS: 6.5 (MEDIUM) | EPSS: 0.08944 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: CSRF exists on D-Link DIR-868L devices, leading to (for example) a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the... | Affected: D-Link / DIR-868L | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client debug bundles features of... | Affected: Cisco / Cisco IOS XE Software | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: ksmbd: fix use-after-free in session logoff | Affected: Linux / Linux | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Libblockdev: lpe from allow_active to root in libblockdev via udisks | Affected: , Red Hat / , Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support | CVSS: 7.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Stirling-PDF SSRF vulnerability on /api/v1/convert/markdown/pdf | Affected: Stirling-Tools / Stirling-PDF | CVSS: 8.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails... | Affected: WordPress / Simple File List | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Server-Side Request Forgery (SSRF) in gradio-app/gradio | Affected: gradio-app / gradio-app/gradio | CVSS: 8.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Linksys RE7000 v2.0.9, v2.0.11, and v2.0.15 have a command execution vulnerability in the "AccessControlList" parameter of the access control... | Affected: Linksys / RE7000 | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: OpenAPI Generator Online - Arbitrary File Read/Delete | Affected: OpenAPITools / openapi-generator | CVSS: 8.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Viessmann Vitogate 300 Web Management Interface vitogate.cgi isValidUser hard-coded password | Affected: Viessmann / Vitogate 300 | CVSS: 6.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Arbitrary Local File Read via Component Method Invocation in gradio-app/gradio | Affected: gradio-app / gradio-app/gradio | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Hongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the ip-address (aka Destination) field to the tools.cgi ping... | Affected: Hongdian / H8922 | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Unity Runtime before 2025-10-02 on Android, Windows, macOS, and Linux allows argument injection that can result in loading of library code from an... | Affected: Unity3D / Unity Editor | CVSS: 7.4 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenticated NoSQL injection,... | Affected: Rocket.Chat / Rocket.Chat server | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly restrict... | Affected: Buffalo / WSR-2533DHPL2, WSR-2533DHP3 | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Jenkins Git Parameter Plugin 439.vb_0e46ca_14534 and earlier does not validate that the Git parameter value submitted to the build matches one of... | Affected: Jenkins Project / Jenkins Git Parameter Plugin | CVSS: 8.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: This vulnerability allows remote attackers to bypass authentication on affected installations of Commvault CommCell 11.22.22. Authentication is not... | Affected: Commvault / CommCell | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Artica Web Proxy 4.30.000000 allows an authenticated remote attacker to inject commands via the service-cmds parameter in cyrus.php. These commands... | Affected: Artica / Artica Web Proxy | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. It contains an execute_cmd.cgi feature (that is not... | Affected: D-Link / DSL-2888A | CVSS: 8.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A PHP object injection bug in profile.php in qcubed (all versions including 3.1.1) unserializes the untrusted data of the POST-variable... | Affected: qcubed / qcubed | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: /web/Lib/Action/IndexAction.class.php in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 allows remote attackers to execute arbitrary... | Affected: D-Link / Central WiFi Manager CWM(100) | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename parameter. | Affected: Endress+Hauser / WirelessHART Fieldgate SWG70 | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD)... | Affected: Cisco / IOS, Cisco IOS XR Software, Cisco Adaptive Security Appliance (ASA) Software, Cisco IOS XE Software, Cisco Firepower Threat Defense Software | CVSS: 9.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Supermicro BMC firmware update validation bypass | Affected: SMCI / MBD-X12STW | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: SMC BMC Firmware Image Authentication Design Issue | Affected: SMCI / MBD-X12DPG-OA6 | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Supermicro BMC firmware update validation bypass | Affected: SMCI / X13SEM-F | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A Server-Side Request Forgery (SSRF) in JGM Pandoc v3.6.4 allows attackers to gain access to and compromise the whole infrastructure via injecting... | Affected: JGM / Pandoc | CVSS: 3.7 (LOW) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device... | Affected: Cisco / IOS, Cisco IOS XE Software | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a reflected... | Affected: Cisco / Cisco IOS XE Software | CVSS: 6.1 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check... | Affected: Ubuntu / Linux kernel | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: IWS - Geo Form Fields <= 1.0 - Unauthenticated SQLi | Affected: Unknown / IWS | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A Command injection vulnerability in RaspAP 2.8.0 thru 2.8.7 allows unauthenticated attackers to execute arbitrary commands via the cfg_id... | Affected: RaspAP / RaspAP | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Fontsy <= 1.8.6 - Multiple Unauthenticated SQLi | Affected: Unknown / Fontsy | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php | Affected: SolarView / SolarView Compact | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: @nestjs/devtools-integration's CSRF to Sandbox Escape Allows for RCE against JS Developers | Affected: nestjs / nest | CVSS: 9.4 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: VR Calendar < 2.3.2 - Unauthenticated Arbitrary Function Call | Affected: Unknown / VR Calendar | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to remote code execution via a... | Affected: TP-Link / TL-WR840N EU v5 router | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Narnoo Distributor <= 2.5.1 - Unauthenticated LFI to Arbitrary File Read / RCE | Affected: Unknown / Narnoo Distributor | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: WAVLINK WN535K2/WN535K3 os command injection | Affected: WAVLINK / WN535K2, WN535K3 | CVSS: 8.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Roxy-WI Vulnerable to Unauthenticated Remote Code Execution via ssl_cert Upload | Affected: hap-wi / roxy-wi | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices. wan.htm can be accessed directly without authentication, which can... | Affected: D-Link / DIR-600M | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: On Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to 1 provides administrator access. | Affected: Zyxel / NBG2105 | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web interface of the HDMI switcher is accessed... | Affected: Crestron / HD-MD4X2-4K-E | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Improper Access Control in Gurock TestRail versions < 7.2.0.3014 resulted in sensitive information exposure. A threat actor can access the... | Affected: Gurock / TestRail | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Howyar UEFI Application "Reloader"  (32-bit and 64-bit)  is vulnerable to execution of unsigned software in a hardcoded path. | Affected: Radix, Greenware Technologies, Howyar Technologies, SANFONG, CES Taiwan, SignalComputer / SmartRecovery, GreenGuard, SysReturn (32-bit and 64-bit), SANFONG EZ-Back System, CES NeoImpact, HDD King | CVSS: 8.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: DNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user input | Affected: dnnsoftware / Dnn.Platform | CVSS: 8.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue was discovered in GFI Kerio Control 9.2.5 through 9.4.5. The dest GET parameter passed to the /nonauth/addCertException.cs and... | Affected: GFI / Kerio Control | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Code Injection vulnerability in SAP S/4HANA (Private Cloud or On-Premise) | Affected: SAP_SE / SAP S/4HANA (Private Cloud or On-Premise) | CVSS: 9.9 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: XXE in SmartDeviceServer in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to read arbitrary files on the server. | Affected: Ivanti / Avalanche | CVSS: 8.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: IBM Maximo Asset Management 7.6.0.1 and 7.6.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote... | Affected: IBM / Maximo Asset Management | CVSS: 8.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A security vulnerability in HPE Smart Update Manager (SUM) prior to version 8.5.6 could allow remote unauthorized access. Hewlett Packard... | Affected: Hewlett Packard Enterprise / Smart Update Manager (SUM) | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The /rest/issueNav/1/issueTable resource in Jira before version 8.3.2 allows remote attackers to enumerate usernames via an incorrect authorisation... | Affected: Atlassian / Jira | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Improper access control on the NetScaler Management Interface | Affected: NetScaler / ADC, Gateway | CVSS: 8.7 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service | Affected: NetScaler / ADC, Gateway | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2. | Affected: Hewlett Packard / LinuxKI | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes. | Affected: CrushFTP / CrushFTP | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Microchip Technology (Microsemi) SyncServer S650 was discovered to contain a command injection vulnerability. | Affected: Microchip Technology / SyncServer S650 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Applications using both `spring-cloud-netflix-hystrix-dashboard` and `spring-boot-starter-thymeleaf` expose a way to execute code submitted within... | Affected: VMware / Spring Cloud Netflix Hystrix Dashboard | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Music Station | Affected: QNAP Systems Inc. / Music Station | CVSS: 4.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True

Music Station


KEVIntel entry: Command Injection in AVTech AVM1203 (IP Camera) | Affected: AVTech / AVM1203 (IP Camera) | CVSS: 8.7 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerability via webmail/calendar/minimizer/index.php?style=..%5c directory... | Affected: IceWarp / IceWarp Mail Server | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: web_shell_cmd.gch on ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests, as demonstrated... | Affected: ZTE / F460 and F660 cable modems | CVSS: 10.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.10 and below, and 7.0.10... | Affected: Fortinet / FortiWeb | CVSS: 7.7 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: command injection vulnerability in Helpdesk | Affected: QNAP Systems Inc. / Helpdesk | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: TVT DVR TD-2104TS-CL queryDevInfo information disclosure | Affected: TVT / DVR TD-2104TS-CL, DVR TD-2108TS-HP, Provision-ISR DVR SH-4050A5-5L(MM), AVISION DVR AV108T | CVSS: 6.9 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiSIEM version... | Affected: Fortinet / FortiSIEM | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A potential vulnerability was reported in the Lenovo 510 FHD and Performance FHD web cameras that could allow an attacker with physical access to... | Affected: Lenovo / 510 FHD Webcam, Performance FHD Webcam | CVSS: 7.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, and Dell EMC Integrated Data Protection Appliance 2.0 and 2.1, is... | Affected: Dell EMC / Avamar, Integrated Data Protection Appliance | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that... | Affected: Oracle / GlassFish Server Open Source Edition | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The CachingResourceDownloadRewriteRule class in Jira before version 7.13.4, and from version 8.0.0 before version 8.0.4, and from version 8.1.0... | Affected: Atlassian / Jira | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code... | Affected: Trend Micro, Inc. / Trend Micro Apex One | CVSS: 9.4 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Cewolf in Zoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated XXE attack that leads to Remote Code Execution. | Affected: Zoho / ManageEngine ADAudit Plus | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: GeoTools, GeoServer, and GeoNetwork XML External Entity (XXE) Processing Vulnerability in XSD schema handling | Affected: geoserver / geoserver | CVSS: 9.9 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator privileges through SQL... | Affected: Artica / Web Proxy | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121. A... | Affected: Open Automation Software / OAS Platform | CVSS: 9.4 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: On Netis DL4323 devices, any user role can view sensitive information, such as a user password or the FTP password, via the form2saveConf.cgi page. | Affected: Netis / DL4323 | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Versa Concerto Authentication Bypass File Write Remote Code Execution | Affected: Versa / Concerto | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Insufficient access control in /api/external/7.0/system.System.get_infos in Seagate NAS OS version 4.3.15.1 allows attackers to obtain information... | Affected: Seagate / NAS OS | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327... | Affected: Netis / Wifi6 Router NX10, Wifi 11AC Router NC65, Wifi 11AC Router NC63, Wifi 11AC Router NC21, Wifi Router MW5360 | CVSS: 2.7 (LOW) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely... | Affected: Becon / DATAGerry | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: ModelDB Local File Include | Affected: vertaai / vertaai/modeldb | CVSS: 8.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True

ModelDB Local File Include


KEVIntel entry: Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.3 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation | Affected: Bearsthemes / Alone – Charity Multipurpose Non-profit WordPress Theme | CVSS: 9.8 (CRITICAL) | EPSS: 0.47809 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: KubeView through 0.1.31 allows attackers to obtain control of a Kubernetes cluster because api/scrape/kube-system does not require authentication,... | Affected: KubeView / KubeView | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download sensitive information via the action name parameter to... | Affected: Smart Office / Smart Office Web | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file of the... | Affected: Intelbras / Switch SG 2404 MR | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users.... | Affected: VMware / Workspace ONE Access, Identity Manager, vRealize Automation | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Kyocera Net View Address Book Exposure | Affected: Kyocera / Multifunction Printer Net Viewer | CVSS: 8.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True

Kyocera Net View Address Book Exposure


KEVIntel entry: Flowise Authentication Bypass | Affected: FlowiseAI / Flowise | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True

Flowise Authentication Bypass


KEVIntel entry: In Thruk Monitoring through 2.46.3, the login field of the login form is vulnerable to reflected XSS. This vulnerability can be exploited by... | Affected: Thruk / Thruk Monitoring | CVSS: 6.1 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: RevPi Webstatus application is vulnerable to an authentication bypass | Affected: Kunbus / Revolution Pi webstatus | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated... | Affected: MagnusSolution / magnusbilling | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell... | Affected: Viessmann / Vitogate 300 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: When using the StreamGenerator, the code parse a user-provided XML. A specially crafted XML, including external system entities, could be used to... | Affected: Apache / Cocoon | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and... | Affected: Fortinet / FortiWLM | CVSS: 9.6 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availability and integrity of the... | Affected: SAP SE / SCIMono | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they allow .. directory traversal and do not ensure... | Affected: Lightdash / Lightdash | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: PluginServlet.java in Ignite Realtime Openfire through 4.4.2 does not ensure that retrieved files are located under the Openfire home directory,... | Affected: Ignite Realtime / Openfire | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Microsoft SharePoint Server Spoofing Vulnerability | Affected: Microsoft / Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True