Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Critical9.2Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and Oct…CVE-2026-110447 · Collabora · Collabora Online - Built-in CODE Server · CVE.org · NIST NVDOct 13, 2026
Critical9.8Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Samsung Open Source QA-Board allows : OS Command Injection.CVE-2026-110392 · CVE.org · NIST NVDOct 13, 2026
Critical9.4OpenSpug File Transfer transfer os command injectionCVE-2026-108540 · OpenSpug · Spug · CIRCL Vulnerability LookupOct 11, 2026
High7.8SonicWall SMA1000 Appliances OS Command Injection VulnerabilityCVE-2026-83549 · SonicWall · SMA1000 Appliances · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 9.9%Sep 1, 2026
High8.9Zimbra Collaboration Suite (ZCS) OS Command Injection VulnerabilityCVE-2026-73570 · Synacor · Zimbra Collaboration Suite (ZCS) · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 71.7%Aug 13, 2026
Critical10.0Arista VeloCloud Orchestrator On-Prem OS Command Injection VulnerabilityCVE-2026-16812 · Arista · VeloCloud Orchestrator · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 1.0%Jul 27, 2026
Critical10.0Kestra OSS OS Command Injection VulnerabilityCVE-2026-49869 · Kestra · Kestra OSS · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 2.1%Jun 26, 2026
Critical9.8Fortinet FortiSandbox OS Command Injection VulnerabilityCVE-2026-25089 · Fortinet · FortiSandbox · CISA KEV · CVE.org · FIRST EPSS · fortinetKEVEPSS 76.1%Jun 9, 2026
Critical10.0Ivanti Sentry OS Command Injection VulnerabilityCVE-2026-10520 · Ivanti · Sentry · CISA KEV · CVE.org · FIRST EPSS · ivantiKEVEPSS 99.9%Jun 9, 2026
High8.7BerriAI LiteLLM Command Injection VulnerabilityCVE-2026-42271 · BerriAI · LiteLLM · CISA KEV · CVE.org · FIRST EPSS · redhatKEVEPSS 92.6%May 7, 2026
Critical9.8Fortinet FortiSandbox OS Command Injection VulnerabilityCVE-2026-39808 · Fortinet · FortiSandbox · CISA KEV · CVE.org · FIRST EPSS · fortinetKEVEPSS 47.4%Apr 14, 2026
High8.8Apache ActiveMQ Improper Input Validation VulnerabilityCVE-2026-34197 · Apache · ActiveMQ · CISA KEV · CVE.org · FIRST EPSS · apacheKEVEPSS 15.5%Apr 7, 2026
Critical9.3Lantronix EDS5000 Code Injection VulnerabilityCVE-2025-67038 · Lantronix · EDS5000 · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 20.0%Mar 11, 2026
High8.7Soliton Systems K.K FileZen OS Command Injection VulnerabilityCVE-2026-25108 · Soliton Systems K.K · FileZen · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 5.2%Feb 12, 2026
Critical9.9BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection VulnerabilityCVE-2026-1731 · BeyondTrust · Remote Support (RS) and Privileged Remote Access (PRA) · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 91.7%Feb 6, 2026
Critical9.8Array Networks ArrayOS AG OS Command Injection VulnerabilityCVE-2025-66644 · Array Networks · ArrayOS AG · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 3.4%Dec 5, 2025
High7.2Fortinet FortiWeb OS Command Injection VulnerabilityCVE-2025-58034 · Fortinet · FortiWeb · CISA KEV · CVE.org · FIRST EPSS · fortinetKEVEPSS 55.6%Nov 18, 2025
High8.6Sangoma FreePBX OS Command Injection VulnerabilityCVE-2025-64328 · Sangoma · FreePBX · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 84.6%Nov 6, 2025
Critical9.8React Native Community CLI OS Command Injection VulnerabilityCVE-2025-11953 · React Native Community · CLI · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 94.0%Nov 3, 2025
Critical9.0CWP Control Web Panel OS Command Injection VulnerabilityCVE-2025-48703 · CWP · Control Web Panel · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 99.7%Sep 19, 2025
High8.6TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection VulnerabilityCVE-2025-9377 · tp-link · tl-wr841n firmware · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 37.7%Aug 29, 2025
Critical9.4N-able N-Central Command Injection VulnerabilityCVE-2025-8876 · n-able · n-central · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 3.4%Aug 13, 2025
Critical9.8Trend Micro Apex One OS Command Injection VulnerabilityCVE-2025-54948 · trendmicro · apex one · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 23.9%Aug 5, 2025
High8.6Broadcom Brocade Fabric OS Code Injection VulnerabilityCVE-2025-1976 · broadcom · fabric operating system · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 0.7%Apr 23, 2025
Critical9.3Edimax IC-7100 IP Camera OS Command Injection VulnerabilityCVE-2025-1316 · edimax · ic-7100 firmware · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 74.5%Mar 4, 2025