Actively-exploited vulnerabilities

Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS c

Arista VeloCloud Orchestrator SQL Injection Vulnerability

Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker to call other plugins' functions and supply their own parameters.

A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to pla

Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Plex-Token value can include a full URL in the 'protocol' parameter and force the Plex server to POST to the attacker's chosen destination.

Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The preference TranscoderH264Options is appended verbatim to x264's option string on every transcode. At startup, all .so file

SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.

Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter.

Fortinet Multiple Products Path Traversal Vulnerability

BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible and Fisheye. This Arbitrary File Access vulnerability

Ahsay AhsayCBS Command Injection Vulnerability

Cisco Secure Email Gateway Relative Path Traversal Vulnerability

Palo Alto Networks PAN-OS Code Injection Vulnerability

Ahsay AhsayCBS Improper Authentication Vulnerability

Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

Microsoft Windows Command Injection Vulnerability

Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. sequence in an image upload parameter.

Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. The attacker can filter users by columns that contain sensitive information and infer a value from API

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Zammad GmbH Zammad Improper Privilege Management Vulnerability

Zammad GmbH Zammad Session Fixation Vulnerability

Fortinet FortiMail Path Traversal Vulnerability

Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability

Apple Multiple Products Out-of-Bounds Write Vulnerability

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Citrix NetScaler Improper Input Validation Vulnerability

Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability

WordPress Core Remote File Inclusion Vulnerability

Microsoft SharePoint Code Injection Vulnerability

WSO2 Multiple Products Path Traversal Vulnerability

Adobe Commerce and Magento Incorrect Authorization Vulnerability