WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product server✕
Overview 1,857 matches · 247 in Waratek scope · 87 protected · 169 exploited · 114 CISA KEV · 248 public PoC · 189 EPSS ≥ 0.5
1,857matches 247in Waratek scope13.3% 87protected4.7% 169exploited9.1% 114CISA KEV6.1% 248public PoC13.4% 189EPSS ≥ 0.510.2%
Protected by Waratek 89 4.8% Rule in development 0 0.0% Mitigation candidate 16 0.9% No exploit published 142 7.6% Outside Waratek scope 73 3.9% Not applicable 1,537 82.8% Withdrawn CVE 0 0.0%
Critical 1,857 100.0% High 0 0.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 87 4.7% partly blocked 2 0.1% not blocked 1,767 95.2% not established 1 0.1% unrecorded 0 0.0%
Exploited 169 9.1% Working exploit published 79 4.3% Proof of concept only 107 5.8% Forecast only 22 1.2% No public exploit 1,480 79.7%
split by peak 334 / year
Not applicable: 1,537Outside Waratek scope: 73No exploit published: 142Mitigation candidate: 16Protected by Waratek: 89 Critical: 1,857 not established: 1not blocked: 1,767partly blocked: 2blocked by ARMR today: 87 No public exploit: 1,480Forecast only: 22Proof of concept only: 107Working exploit published: 79Exploited: 169
19961 Not applicable1 Critical1 not blocked1 No public exploit1 19970 19980 19990 20000 20012 Not applicable2 Critical2 not blocked2 Working exploit published1 No public exploit1 20022 Not applicable2 Critical2 not blocked2 Working exploit published1 No public exploit1 20032 Not applicable2 Critical2 not blocked2 Working exploit published1 No public exploit1 20042 Not applicable2 Critical2 not blocked2 No public exploit2 20052 No exploit published1 Not applicable1 Critical2 not blocked2 No public exploit2 20060 20072 Not applicable2 Critical2 not blocked2 Exploited1 Working exploit published1 20084 Not applicable4 Critical4 not blocked4 Exploited1 No public exploit3 20096 Not applicable6 Critical6 not blocked6 Exploited1 No public exploit5 20105 Not applicable5 Critical5 not blocked5 Working exploit published2 No public exploit3 20113 Outside Waratek scope1 Not applicable2 Critical3 not blocked3 Exploited1 Working exploit published1 Forecast only1 20127 Outside Waratek scope3 Not applicable4 Critical7 not blocked7 Exploited4 Working exploit published1 No public exploit2 20138 Outside Waratek scope1 Not applicable7 Critical8 not blocked8 Exploited2 No public exploit6 201413 Not applicable13 Critical13 not blocked13 Exploited6 No public exploit7 201515 Protected by Waratek1 No exploit published1 Outside Waratek scope2 Not applicable11 Critical15 blocked by ARMR today1 not blocked14 Exploited9 No public exploit6 201671 Protected by Waratek4 No exploit published8 Outside Waratek scope1 Not applicable58 Critical71 blocked by ARMR today4 not blocked67 Exploited8 Working exploit published5 Forecast only2 No public exploit56 2017134 Protected by Waratek6 Mitigation candidate2 No exploit published9 Outside Waratek scope16 Not applicable101 Critical134 blocked by ARMR today6 not blocked128 Exploited7 Working exploit published16 Proof of concept only1 Forecast only1 No public exploit109 2018239 Protected by Waratek15 No exploit published9 Outside Waratek scope15 Not applicable200 Critical239 blocked by ARMR today14 partly blocked1 not blocked224 Exploited3 Working exploit published16 Proof of concept only5 Forecast only3 No public exploit212 2019164 Protected by Waratek11 Mitigation candidate1 No exploit published12 Outside Waratek scope12 Not applicable128 Critical164 blocked by ARMR today11 not blocked153 Exploited10 Working exploit published4 Proof of concept only6 Forecast only4 No public exploit140 2020141 Protected by Waratek16 Mitigation candidate3 No exploit published9 Outside Waratek scope5 Not applicable108 Critical141 blocked by ARMR today16 not blocked125 Exploited23 Working exploit published8 Proof of concept only2 Forecast only1 No public exploit107 2021150 Protected by Waratek10 No exploit published11 Outside Waratek scope7 Not applicable122 Critical150 blocked by ARMR today10 not blocked140 Exploited21 Working exploit published5 Proof of concept only5 Forecast only4 No public exploit115 2022162 Protected by Waratek8 No exploit published4 Outside Waratek scope4 Not applicable146 Critical162 blocked by ARMR today8 not blocked154 Exploited12 Working exploit published2 Proof of concept only11 Forecast only2 No public exploit135 2023154 Protected by Waratek1 Mitigation candidate5 No exploit published6 Outside Waratek scope2 Not applicable140 Critical154 blocked by ARMR today1 not blocked152 not established1 Exploited16 Working exploit published2 Proof of concept only23 Forecast only4 No public exploit109 2024111 Protected by Waratek3 Mitigation candidate1 No exploit published7 Not applicable100 Critical111 blocked by ARMR today2 partly blocked1 not blocked108 Exploited11 Working exploit published5 Proof of concept only18 No public exploit77 2025123 Protected by Waratek6 Mitigation candidate3 No exploit published3 Not applicable111 Critical123 blocked by ARMR today6 not blocked117 Exploited13 Working exploit published4 Proof of concept only21 No public exploit85 2026334 Protected by Waratek8 Mitigation candidate1 No exploit published62 Outside Waratek scope4 Not applicable259 Critical334 blocked by ARMR today8 not blocked326 Exploited20 Working exploit published4 Proof of concept only15 No public exploit295
19961999200220052008201120142017202020232026
1,857 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 1 of 19 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-111497 Critical 2026-10-22 Outside Waratek scope Exploited A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
CVE-2026-91323 Critical 2026-10-20 No exploit published No public exploit Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-87347 Critical 2026-10-20 Not applicable No public exploit Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HTTP Server. While the vulnerability is in Oracle HTTP Server, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle HTTP Server accessible data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server accessible data. CVSS 3.1 Base Score 9.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N).
CVE-2026-87302 Critical 2026-10-20 No exploit published No public exploit Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebLogic Server accessible data as well as unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).
CVE-2026-83399 Critical 2026-10-20 No exploit published No public exploit Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-110447 Critical 2026-10-14 Not applicable Exploited Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't running (e.g., the product was recently restarted). The vulnerability is not present in standalone Collabora Online servers; only this deployment with CODE Server is affected.
CVE-2026-97816 Critical 2026-10-13 Not applicable No public exploit Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
CVE-2026-97815 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVE-2026-97814 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
CVE-2026-97805 Critical 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-96934 Critical 2026-10-13 Not applicable No public exploit Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-96924 Critical 2026-10-13 Not applicable No public exploit Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.
CVE-2026-96909 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.
CVE-2026-96864 Critical 2026-10-13 Not applicable No public exploit Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-96320 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-96252 Critical 2026-10-13 Not applicable No public exploit Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-96219 Critical 2026-10-13 Not applicable No public exploit Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.
CVE-2026-96113 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-96096 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
CVE-2026-95695 Critical 2026-10-13 No exploit published No public exploit IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization.
CVE-2026-93909 Critical 2026-10-13 No exploit published No public exploit IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2.0 feature is enabled.
CVE-2026-93895 Critical 2026-10-13 No exploit published No public exploit IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.
CVE-2026-88102 Critical 2026-10-13 Not applicable No public exploit Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
CVE-2026-85928 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-85818 Critical 2026-10-13 Not applicable No public exploit Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-85814 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-85809 Critical 2026-10-13 Not applicable No public exploit Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVE-2026-85806 Critical 2026-10-13 Not applicable No public exploit Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
CVE-2026-85792 Critical 2026-10-13 Not applicable No public exploit Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVE-2026-84015 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network.
CVE-2026-83935 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.
CVE-2026-83910 Critical 2026-10-13 Not applicable No public exploit Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
CVE-2026-83888 Critical 2026-10-13 Not applicable No public exploit Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-83869 Critical 2026-10-13 Not applicable No public exploit Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-83789 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-83782 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
CVE-2026-83780 Critical 2026-10-13 Not applicable No public exploit Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-83770 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
CVE-2026-83748 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVE-2026-83693 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVE-2026-83578 Critical 2026-10-13 Not applicable No public exploit Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.
CVE-2026-83523 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.
CVE-2026-83519 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVE-2026-83517 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-70275 Critical 2026-10-13 Not applicable No public exploit Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-70262 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-70157 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.
CVE-2026-70153 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-70147 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-70024 Critical 2026-10-13 Not applicable No public exploit Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.
CVE-2026-69886 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-69883 Critical 2026-10-13 Not applicable No public exploit Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVE-2026-69705 Critical 2026-10-13 Not applicable No public exploit Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVE-2026-69639 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
CVE-2026-69634 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVE-2026-105723 Critical 2026-10-13 Not applicable No public exploit Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-105010 Critical 2026-10-13 Not applicable No public exploit Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-105008 Critical 2026-10-13 Not applicable No public exploit No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-102210 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
CVE-2026-100222 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
CVE-2026-100219 Critical 2026-10-13 Not applicable No public exploit Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
CVE-2026-100202 Critical 2026-10-13 Not applicable No public exploit Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
CVE-2026-106486 Critical 2026-10-06 Not applicable No public exploit Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder-backend-module-bitbucket-cloud and 0.2.25 in @backstage/plugin-scaffolder-backend-module-bitbucket-server, the Bitbucket pull-request Scaffolder actions did not sufficiently validate filesystem paths. An authenticated user who can execute an eligible template and influence an allowed Bitbucket repository could affect paths outside the expected working area, potentially compromising backend confidentiality, integrity, or availability. This issue is fixed in @backstage/plugin-scaffolder-backend-module-bitbucket-cloud 0.3.10 and @backstage/plugin-scaffolder-backend-module-bitbucket-server 0.2.25.
CVE-2026-21589 Critical 2026-10-05 Not applicable Exploited This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible and Fisheye. This Arbitrary File Access vulnerability allows an unauthenticated attacker to access specific files within the web application root directory in affected versions. Exploitation requires prior knowledge of the target file's exact name and path; this vulnerability does not allow attackers to enumerate or list directory contents. In some configurations, there may be some sensitive files that make this highly severe. This vulnerability allows an unauthenticated remote attacker to access specific files within the web application root directory in affected versions. The vulnerability must be addressed for affected versions of: -- Bitbucket Data Center, introduced in version >= 4.6.0, fix versions: 9.4.26, 10.2.8, 10.5.1 -- Confluence Data Center, introduced in version >= 5.10.0, fix versions 9.2.26, 10.2.19 -- Crowd Data Center, introduced in version >= 2.11.0, fix versions 6.3.7, 7.0.3, 7.1.7, 7.2.4 -- Jira Software Data Center, introduced in version >= 7.1.0, fix versions 9.12.40, 10.3.26, 11.3.12 -- Jira Service Management Data Center, introduced in version >= 3.1.0, fix versions 5.12.40, 10.3.26, 11.3.12 -- Bamboo Data Center >= 7.0.1, fix versions 10.2.24, 12.1.12 -- Crucible, fix versions 4.9.15 -- Fisheye, fix version 4.9.15 -- Exploitation requires prior knowledge of the target file's exact name and path. The vulnerability does not include the capability to enumerate or list directory contents.
CVE-2026-59797 Critical 2026-10-01 Not applicable No public exploit Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.
CVE-2026-57941 Critical 2026-10-01 Not applicable No public exploit Use After Free vulnerability in Apache HTTP Server's mod_http2 via shared session->bbtmp re-entrancy This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.
CVE-2026-56154 Critical 2026-10-01 Not applicable No public exploit Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.
CVE-2026-86934 Critical 2026-09-23 Not applicable No public exploit An authorization bypass vulnerability in the FileMaker Server Web Publishing Engine allowed requests containing an extended privilege header to bypass the disabled Custom Web Publishing with XML setting and access the XML Web Publishing interface. This vulnerability is addressed in FileMaker Server version 26.0.3.
CVE-2026-86930 Critical 2026-09-23 Not applicable No public exploit An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process memory during thumbnail generation in FileMaker WebDirect. This vulnerability is addressed in FileMaker Server version 26.0.3.
CVE-2026-67404 Critical 2026-09-23 Not applicable No public exploit RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, When no CA bundle is available, ssl_options/1 falls back to [{verify, verify_none}] with no warning. An attacker in a man-in-the-middle position can forge the JWKS response, which leads the broker to accept arbitrary JWTs. Preconditions include The OAuth2 plugin must be in use with no cacertfile configured and the OS CA bundle empty or unreadable (for example, in a minimal container), and the attacker must hold a network man-in-the-middle position.. This issue is fixed in versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0.
CVE-2026-67231 Critical 2026-09-23 Not applicable No public exploit RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verify_fun that overrides {bad_cert, unknown_ca} / {bad_cert, selfsigned_peer} when the presented cert "matches" a whitelisted one. The match key is extract_issuer_id/1 → public_key:pkix_issuer_id/2 → {IssuerName, SerialNumber} , both fields are taken verbatim from the presented certificate body and contain no public-key, SKI, fingerprint or signature material. is_whitelisted/1 is a pure ets:member lookup; the stored full DER is used only for list/0 display and is never compared against the presented cert. cacerts is [], so the whitelisted cert is never used as a trust anchor for path validation either. TLS client-authentication bypass: an attacker who knows the issuer DN + serial of any whitelisted certificate can connect with a forged self-signed cert. Preconditions include rabbitmq_trust_store plugin enabled and used as the TLS verify_fun Attacker knows or can guess the {Issuer, Serial} of at least one whitelisted cert (non-secret; exposed via CLI/logs/any cert copy). This issue is fixed in versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0.
CVE-2026-77987 Critical 2026-09-22 Not applicable No public exploit A server-side request forgery (SSRF) vulnerability was identified in the notebook viewer of GitHub Enterprise Server. The notebook viewer validated the scheme and host of a user-supplied URL but did not validate the port, allowing requests to be directed to internal services listening on other ports of the same appliance. Response bodies were not returned to the requester, but response timing acted as an oracle that allowed instance secrets to be extracted character by character. An extracted secret could then be used in a separate interaction with an internal service to obtain remote code execution on the appliance. Exploitation required network access to the instance and was unauthenticated when private mode was disabled, or required any authenticated user when private mode was enabled. This vulnerability affected GitHub Enterprise Server versions 3.17 through 3.22 and was fixed in versions 3.22.1, 3.21.6, 3.20.8, 3.19.12, 3.18.15, and 3.17.21. This vulnerability was reported through the GitHub Bug Bounty program.
CVE-2026-81478 Critical 2026-09-17 Not applicable No public exploit Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-81476 Critical 2026-09-17 Not applicable No public exploit Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
CVE-2026-81475 Critical 2026-09-17 Not applicable No public exploit Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
CVE-2026-81440 Critical 2026-09-17 Not applicable No public exploit Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-54617 Critical 2026-09-17 Outside Waratek scope Working exploit published GravitLauncher is an open-source Minecraft launcher based on sashok724's v3. Prior to 5.7.12, an unauthenticated remote actor can send a raw HTTP request target without a leading slash to the default LaunchServer file server on port 9274. FileServerHandler.channelRead0 in components/launchserver/src/main/java/pro/gravit/launchserver/socket/handlers/fileserver/FileServerHandler.java strips the first request-target character and resolves the remaining path against updatesDir without re-normalizing and verifying containment. This leaves parent-directory components in a no-leading-slash request and allows reading any file accessible to the LaunchServer process, including .keys/ecdsa_id, .keys/legacySalt, and LaunchServer.json. Disclosure of those files can expose signing keys, refresh-token material, and database credentials, enabling forged administrative access tokens and full authentication bypass. A normalizing L7 proxy may block the primary request form, but direct exposure and L4/TCP proxies remain affected, and netty.fileServerEnabled is enabled by default. This issue is fixed in 5.7.12.
CVE-2026-83462 Critical 2026-09-15 No exploit published No public exploit Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Mobile Application Server. Successful attacks of this vulnerability can result in takeover of Oracle Mobile Application Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-83038 Critical 2026-09-15 No exploit published No public exploit Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: TopLink Integration). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
CVE-2026-83021 Critical 2026-09-15 No exploit published No public exploit Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).
CVE-2026-70757 Critical 2026-09-15 No exploit published No public exploit Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-70756 Critical 2026-09-15 No exploit published No public exploit Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-70748 Critical 2026-09-15 No exploit published No public exploit Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-46495 Critical 2026-09-15 No exploit published No public exploit OpenDJ is an LDAPv3 compliant directory service. Prior to 5.1.1, the JMX RMI connector in opendj-server-legacy/src/main/java/org/opends/server/protocols/jmx/RmiConnector.java processes attacker-controlled credential objects before authentication without a restrictive jmx.remote.rmi.server.credentials.filter.pattern, and RmiAuthenticator.authenticate in opendj-server-legacy/src/main/java/org/opends/server/protocols/jmx/RmiAuthenticator.java accepts an unconstrained Object array rather than a two-element String[]. When the JMX Connection Handler is enabled and its TCP listener is reachable, an unauthenticated remote attacker can submit a crafted serialized Java object and achieve code execution in the OpenDJ server process. The handler is disabled by default, and successful exploitation depends on the runtime classpath and Java version; remote code execution was demonstrated against OpenDJ 4.4.15 on JDK 11 with Jackson 2.12.6.1. This issue is fixed in 5.1.1.
CVE-2026-12985 Critical 2026-09-14 Not applicable No public exploit Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7 Mattermost failed to validate Dynamic Client Registration redirect URIs by URL component (matching glob patterns against the raw URI string instead) which allows a remote unauthenticated attacker to register an OAuth client with an attacker-controlled callback host that bypasses the configured redirect URI allowlist via a crafted redirect URI that places an allowlisted host/path suffix inside the query string.. Mattermost Advisory ID: MMSA-2026-00700
CVE-2026-78445 Critical 2026-09-08 Not applicable No public exploit Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-77493 Critical 2026-09-08 Not applicable No public exploit Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2026-73025 Critical 2026-09-08 Not applicable No public exploit Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-73010 Critical 2026-09-08 Not applicable No public exploit Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
CVE-2026-73009 Critical 2026-09-08 Not applicable No public exploit Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
CVE-2026-72983 Critical 2026-09-08 Not applicable No public exploit Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.
CVE-2026-72982 Critical 2026-09-08 Not applicable No public exploit Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
CVE-2026-72979 Critical 2026-09-08 Not applicable No public exploit Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-72950 Critical 2026-09-08 Not applicable No public exploit Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVE-2026-70296 Critical 2026-09-08 Not applicable No public exploit Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-69910 Critical 2026-09-08 Not applicable No public exploit Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.
CVE-2026-69845 Critical 2026-09-08 Not applicable No public exploit Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-69829 Critical 2026-09-08 Not applicable No public exploit Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
CVE-2026-69824 Critical 2026-09-08 Not applicable No public exploit Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network.
CVE-2026-69819 Critical 2026-09-08 Not applicable No public exploit Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
‹ prev page 1 of 19 next ›