Browse / CVEs

The CVE library

Known vulnerabilities in real products, each with the request that confirms it. Match them to the technologies a target runs, then check before you report.

See every CVE on the map

Recently listed as exploited, with a check

1. Barracuda Email Security Gateway - Authentication BypassCVE-2026-116606 · listed 2026-11-10 · used by ransomware
   CVSS 9.38.9% likely
2. SSHole - OpenSSH/musl Password Auth BypassCVE-2026-123158 · listed 2026-11-09 · used by ransomware
   18.9% likely
3. GitLab CE/EE < 19.2.8 / 19.3.5 / 19.4.2 - Unauthenticated RCE via Onigmo Integer OverflowCVE-2026-97229 · listed 2026-10-29 · used by ransomware
   CVSS 1069.3% likely
4. Node.js Brotli Request-Body Integer Overflow (node2shell) - Remote Code ExecutionCVE-2026-111497 · listed 2026-10-27 · used by ransomware
   CVSS 9.882.6% likely
5. PHP2Shell (CVE-2026-109618/CVE-2026-109619) - Active Crash DetectionCVE-2026-109618 · listed 2026-10-26 · used by ransomware
   CVSS 9.2100% likely
6. PHP 8.2 < 8.2.35, 8.3 < 8.3.36, 8.4 < 8.4.27, 8.5 < 8.5.12 - Use-After-Free Remote Code ExecutionCVE-2026-109619 · listed 2026-10-26 · used by ransomware
   CVSS 9.2100% likely
7. Collabora Built-in CODE Server < 26.4.303 - OS Command InjectionCVE-2026-110447 · listed 2026-10-23 · used by ransomware
   CVSS 9.273.3% likely
8. Plex Media Server < 1.43.3.10861 - Unauthenticated SSRF via Companion Protocol (plex2shell)CVE-2026-96652 · listed 2026-10-20 · used by ransomware
   CVSS 4.311.9% likely
9. Plex Media Server < 1.43.3.10861 - SSRF via TranscoderCVE-2026-96655 · listed 2026-10-20 · used by ransomware
   CVSS 5.310.7% likely
10. BeyondTrust Remote Support <= 26.2.3 - Origin Validation File UploadCVE-2026-102764 · listed 2026-10-16 · used by ransomware
    CVSS 9.379.5% likely
11. Atlassian Jira/Confluence/Bitbucket - Pre-Auth Arbitrary File ReadCVE-2026-21589 · listed 2026-10-15 · used by ransomware
    CVSS 9.899.7% likely
12. AhsayCBS - JSON API Authentication BypassCVE-2026-105133 · listed 2026-10-14 · used by ransomware
    CVSS 7.384.5% likely
13. AhsayCBS <= 10.3.4 - Unauthenticated RCECVE-2026-105134 · listed 2026-10-14 · used by ransomware
    CVSS 1081.8% likely
14. Ivanti Connect Secure <= 22.8R2.4 - Authentication Bypass via X-DSCGI-PATH HeaderCVE-2026-104935 · listed 2026-10-13 · used by ransomware
    CVSS 1088.9% likely
15. ProFTPd - Remote Code ExecutionCVE-2015-3306 · listed 2026-10-08 · used by ransomware
    CVSS 1099.5% likely
16. Apache S2-032 Struts - Remote Code ExecutionCVE-2016-3081 · listed 2026-10-08 · used by ransomware
    CVSS 8.196.9% likely
17. Zammad 6.3.0-6.5.4 - Session Hijacking & Remote Code ExecutionCVE-2026-102489 · listed 2026-10-02 · used by ransomware
    CVSS 9.849.9% likely
18. WordPress Core - PHP Template Path TraversalCVE-2026-87902 · listed 2026-09-25 · used by ransomware
    CVSS 9.295.8% likely
19. Adobe Commerce/Magento - Customer Session Identity SwitchCVE-2026-71362 · listed 2026-09-24 · used by ransomware
    CVSS 9.191.7% likely
20. Check Point Security Management - Unauthenticated Directory Traversal to RCECVE-2026-93616 · listed 2026-09-22 · used by ransomware
    CVSS 9.891.6% likely
21. Cisco Identity Services Engine - ise-kong API Gateway Authentication BypassCVE-2026-76460 · listed 2026-09-16 · used by ransomware
    CVSS 1075.6% likely
22. GitLab CE/EE <=19.1.7/19.2.5/19.3.1 - Arbitrary File ReadCVE-2026-85706 · listed 2026-09-11 · used by ransomware
    CVSS 1097.4% likely
23. JFrog Artifactory - Anonymous Token Disclosure via Trailing Slash Auth BypassCVE-2026-42018 · listed 2026-09-11 · used by ransomware
    CVSS 7.510% likely
24. JFrog Artifactory - Unauthenticated Admin Token Minting via Token Scope BypassCVE-2026-42016 · listed 2026-09-11 · used by ransomware
    CVSS 8.88.6% likely
25. Cisco Secure Firewall Management Center - Authentication BypassCVE-2026-20079 · listed 2026-09-09 · used by ransomware
    CVSS 1088.7% likely
26. Adobe Commerce/Magento <= 2.4.9 - StyleSmuggler Unauthenticated RCE via SSTICVE-2026-75650 · listed 2026-09-08 · used by ransomware
    CVSS 1099.4% likely
27. N-able N-central <2026.3.1.14 - Pre-Authentication Remote Code ExecutionCVE-2026-86218 · listed 2026-09-08 · used by ransomware
    CVSS 1015.4% likely
28. Starlette - Improper Validation of Unsafe Equivalence in InputCVE-2026-48710 · listed 2026-09-02 · used by ransomware
    CVSS 6.570.3% likely
29. Sangoma Switchvox < 8.4.0.2 - Unauthenticated SQL InjectionCVE-2026-9586 · listed 2026-09-02 · used by ransomware
    CVSS 9.819% likely
30. JFrog Artifactory Access Blank Join Key Authentication BypassCVE-2026-82329 · listed 2026-09-02 · used by ransomware
    CVSS 9.814.4% likely
31. SonicWall SMA1000 WorkPlace - Unauthenticated SSRF to CouchDBCVE-2026-83548 · listed 2026-09-02 · used by ransomware
    CVSS 108% likely
32. PaperCut NG/MF <=26.0.4 - Unauthenticated ConfigEditor Access via Tapestry Complex-DirectCVE-2026-81578 · listed 2026-08-31 · used by ransomware
    CVSS 9.884.7% likely
33. OwnCloud - WebDAV API Authentication BypassCVE-2023-49105 · listed 2026-08-27 · used by ransomware
    CVSS 9.843.2% likely
34. Gitea <= 1.27.0 - Pre-Auth Remote Code ExecutionCVE-2026-60004 · listed 2026-08-25 · used by ransomware
    CVSS 9.824% likely
35. Zimbra Collaboration Suite < 10.1.20 - OS Command InjectionCVE-2026-73570 · listed 2026-08-21 · used by ransomware
    CVSS 8.976.6% likely
36. MLflow Webhook SSRF - Unauthenticated Full-Read via Redirect BypassCVE-2026-64849 · listed 2026-08-19 · used by ransomware
    CVSS 9.310% likely
37. Microsoft SharePoint Server - JWT Authentication BypassCVE-2026-55040 · listed 2026-08-18 · used by ransomware
    CVSS 9.169.5% likely
38. Ray < 2.52.0 - Remote Code ExecutionCVE-2025-62593 · listed 2026-08-17 · used by ransomware
    CVSS 9.860.2% likely
39. Metabase - Unauthenticated SQL InjectionCVE-2026-72898 · listed 2026-08-11 · used by ransomware
    CVSS 1098.2% likely
40. Progress ADC LoadMaster - Command InjectionCVE-2026-8037 · listed 2026-08-07 · used by ransomware
    99.8% likely

Products with the most checks

• xwiki31
• mlflow20
• microweber19
• rukovoditel19
• gitlab16
• learnpress16
• ofbiz16
• struts16
• rconfig15
• domainmod14
• tomcat14
• coldfusion13
• cuppacms13
• weblogic server13
• nagios xi12
• langflow11
• geoserver10
• grafana10
• osticket10
• siyuan10
• wordpress10
• xstream10
• connect secure9
• fortios9
• gradio9
• http server9
• jira9
• netsweeper9
• pan-os9
• vbulletin9

Use these checks only on systems you are authorised to test. Where the data comes from