|
CVE-2026-0322: Authenticated RCE in PAN-OS
|
|
0
|
10
|
October 14, 2026
|
|
CVE pending: pre-auth format-string bug in tac_plus (Shrubbery Networks)
|
|
0
|
53
|
September 23, 2026
|
|
CVE-2026-87902: Wordpress LFI, RCE again
|
|
3
|
30
|
September 23, 2026
|
|
CVE-2026-85102 / CVE-2026-85103: Check Point Security Gateway RCE in Remote and Site-to-Side VPN
|
|
0
|
16
|
September 10, 2026
|
|
CVE-2026-65643: Privilege Escalation in CPanel/WHM Domain Parking and Addon Domain Modules
|
|
1
|
34
|
August 30, 2026
|
|
Log4j2 Allowlist Bypass Could Allow for RCE
|
|
6
|
87
|
August 26, 2026
|
|
CVE-2026-61511 - vBulletin RCE (Your 2000s car forum is in danger!)
|
|
3
|
66
|
August 12, 2026
|
|
CVE-2026-63077: Critical Unauth RCE in JetBrains TeamCity via Deserialization of Untrusted Data
|
|
0
|
28
|
August 10, 2026
|
|
CVE-2026-64638: XSS2Shell Does What It Says; Patch WordPress Now
|
|
0
|
42
|
August 8, 2026
|
|
CVE-2026-66066: KindaRails2Shell: RCE in Rails via Active Storage
|
|
0
|
35
|
August 1, 2026
|
|
CVE-2026-63030 and CVE-2026-60137: WP2Shell: Pre-Auth RCE in WordPress EITW
|
|
7
|
112
|
July 19, 2026
|
|
CVE-2026-20253: Critical RCE in Splunk Enterprise EITW
|
|
0
|
33
|
June 26, 2026
|
|
Critical RCE in Gogs GHSA-qf6p-p7ww-cwr9
|
|
1
|
54
|
June 10, 2026
|
|
CVE-2026-45829: ChromaDB Pre-Auth RCE
|
|
2
|
48
|
May 19, 2026
|
|
CVE-2026-0300 - 9.3 CVSS EITW - PAN-OS: Unauthenticated user initiated Buffer Overflow... (Captive Portal)
|
|
0
|
129
|
May 6, 2026
|
|
CVE-2026-23918: Apache HTTP Server: http2: double free and possible RCE on early reset
|
|
0
|
46
|
May 6, 2026
|